SlowMist Flags Udesk Script Code That Can Change Crypto Deposit Addresses

SlowMist identified code in Udesk scripts that can collect data and change crypto deposit addresses, creating a risk that users send funds to a different address than intended.

The payload can change the address shown on a page and the value copied to a clipboard. That places the behavior at two points in a deposit process: what a user sees and what may be used to direct a transfer. A transfer using an altered address risks going to a destination other than the one the user meant to use.

SlowMist's findings say the data collection extends beyond three site-specific targeting rules. The payload also combines that data collection with address manipulation. Crypto deposit addresses designate a transfer destination, so altering either the displayed or copied value can affect where funds are sent. The reported behavior creates separate exposure to data collection and the risk of misdirected deposits.