A newly discovered vulnerability in Anthropic's Claude Code, identified as CVE-2025-64755, has been exploited by hackers to target cryptocurrency users. According to a report shared by SlowMist security researcher 23pds, the vulnerability allows for privilege escalation and command execution without user authorization. Researcher Adam Chester highlighted the issue, which is similar to a previous vulnerability in the Cursor tool. A proof-of-concept for the exploit has been released, raising concerns about potential attacks on encrypted users.