According to CoinMeta, on August 14th, the Singapore Police Force and the Cybersecurity Agency jointly issued a warning that a cryptocurrency scam using fake job recruitment as a tactic had resulted in losses of approximately $11.8 million. Scammers pretended to be cryptocurrency companies recruiting staff, communicated with victims through emails with forged domain names, and induced them to download malware on their devices under the pretext of technical programming tests. This malware stole the victims' session tokens, bypassed multiple layers of authentication to invade their Bitbucket code repositories, then tampered with automated deployment instructions, remotely accessed internal servers, and ultimately circumvented the transaction approval mechanism to complete the transfer of cryptocurrencies.