Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites

Hackers compromised a JavaScript file from Adform, altering it to change cryptocurrency wallet addresses on customer sites. The modified script acted as a browser-side tool to rewrite these addresses. Adform discovered the issue on July 27, 2026, and subsequently removed the malicious code and notified affected clients. The company also reported the incident to authorities. Visitors to affected sites on July 27 who copied a Bitcoin address may have been impacted. The alteration of wallet addresses could potentially redirect cryptocurrency transactions.