GitLab uncovers Bittensor theft campaign via PyPI

This post details the discovery and analysis of a cryptocurrency theft campaign targeting the Bittensor ecosystem through typosquatted Python packages on PyPI. It highlights the use of modified staking functionality for fund theft, including a hardcoded destination wallet and silent execution via `prompt=False` and `transfer_all=True`. A multi-hop money laundering network is traced, and the typosquatting strategy (missing characters, truncation, version mimicking) is explained. The post emphasizes GitLab's automated package monitoring system and proactive security research in protecting the software supply chain.