Adform Script Manipulation Endangers Crypto Users

Attackers have altered a JavaScript file from the advertising technology company Adform to rewrite crypto wallet addresses on customer websites. The incident was discovered on July 27, 2026, when Adform noticed the malicious code change and took immediate action. The modification of the script allowed the attackers to manipulate the wallet addresses of users copying Bitcoin from affected websites. Adform promptly informed the affected customers and removed the harmful code from its servers.

Initial investigations suggest that a wide range of websites utilizing Adform's advertising services may be affected. The exact number of impacted users is currently unclear; however, it is estimated that several thousand websites could be involved in the incident. Adform has reported the incidents to the relevant authorities to initiate a comprehensive investigation. The company's security department is working closely with law enforcement to clarify the circumstances of the attack. The manipulation of crypto wallet addresses poses a significant risk to users conducting transactions on the affected websites.

Experts advise verifying wallet addresses before copying them and taking additional security measures. The vulnerability could also impact trust in advertising technology, particularly regarding the security of online transactions. Adform has already announced plans to review and potentially strengthen its security protocols. The incidents raise questions about the overall security of advertising technologies commonly used in digital advertising. The industry is under pressure to enhance its security standards to prevent similar incidents in the future.

Adform has emphasized that user security is a top priority and that all necessary steps will be taken to ensure the integrity of its services. A full clarification of the incident is expected to hold those responsible accountable. Investigations are still ongoing, and Adform plans to provide further information about the incident in the coming days. Users who were active on affected websites on July 27, 2026, should immediately verify their wallet addresses.