Hackers exploit React RSC CVE-2025-55182 to plant crypto drainers
Cybersecurity nonprofit Security Alliance (SEAL) reported a rise in attempts to implant “crypto drainer” scripts on websites by exploiting a vulnerability in the open-source JavaScript library React. React, widely used for building web application interfaces, disclosed on Dec. 3 that a white hat researcher, Lachlan Davidson, identified a flaw enabling unauthenticated remote code execution, potentially allowing attackers to inject and execute arbitrary code.
SEAL said malicious actors have been leveraging the issue, tracked as CVE-2025-55182, to surreptitiously insert wallet-draining code on cryptocurrency-related sites. The organization warned that the campaign is not limited to Web3 protocols and that all websites should examine their front-end code for unexpected or suspicious assets. It also advised users to be cautious when approving any permit signatures, which are commonly used by drainers to trick victims into authorizing harmful transactions.
Source: Security Alliance
Websites flagged for phishing should review code
According to SEAL, impacted websites may be unexpectedly flagged as potential phishing risks. It recommended scanning infrastructure for CVE-2025-55182, verifying that front-end code is not loading assets from unfamiliar hosts, checking for obfuscated JavaScript in loaded scripts, and confirming that wallet prompts display the correct recipient details before any signature is approved. SEAL added that projects blocked by security tools should assess their code for hidden drainers before requesting removal of phishing warnings.
React issues patch for the flaw
The React team released a fix for CVE-2025-55182 on Dec. 3 and urged immediate upgrades for projects using react-server-dom-webpack, react-server-dom-parcel, and react-server-dom-turbopack. The team noted that applications whose React code does not use a server, or do not rely on a framework, bundler, or bundler plugin supporting React Server Components, are not affected by this vulnerability.
Stay informed, read the latest news right now!
Disclaimer
The content on TrustsCrypto.com is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency markets are highly volatile, always do your own research before making decisions.
Some content may be assisted by AI and reviewed by our editorial team, but accuracy is not guaranteed. TrustsCrypto.com is not responsible for any losses resulting from the use of information provided.
