Hack history / 2025 / Hack or exploit
React
Hack or exploit on Dec 3, 2025 · Remote Code Execution Vulnerability
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
According to Finance Feeds, hackers exploited a vulnerability in the React JavaScript library to inject code into websites that steals funds from cryptocurrency wallets, primarily targeting cryptocurrency platforms. On December 3, the React team released a patch for CVE-2025-55182, a vulnerability that allowed unauthenticated code to execute on remote computers. The React team strongly advised all affected modules to upgrade immediately to prevent further exploitation.
Details
- Date
- Dec 3, 2025
- Kind
- Hack or exploit
- Method
- Remote Code Execution Vulnerability
- How in
- Smart contract bug
- Target
- not stated
- Chains
- not stated
Reported by
Cite this page
SwanBluechip, "React hack, Dec 3, 2025: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htf85caef7c6/ (data as of 2026-10-31).