Security Hub

Solana validators face an urgent Linux kernel warning as Ubuntu's fix remains pending. Temporary network filters reduce exposure but cannot replace a patch.

BTCPay Server tells operators to shut down after reports of unauthorized hot-wallet drains, leaving merchants facing downtime while developers investigate the thefts.

DPRK-linked hackers routed $38M in stolen crypto through Relay Protocol in about seven hours, on-chain analyst Specter reported. Speed was the warning.

Blockchain analytics firm Chainalysis was hit by a cyberattack that exposed customer names, emails, and organization roles. Here is what the report reveals.

Security firm Blockaid tied 12 crypto project websites to a wave of frontend attacks. Flap and Kintsu confirmed DNS hijacks. Steps to protect your wallet.

DefiLlama counts 322 confirmed crypto hacks in 2026 with two months left, more than double 2025's total, a record year of breaches with real custody stakes.

TRM Labs and Chainalysis both attribute the $6.4B Binance hack to North Korea's TraderTraitor, the same unit blamed for the Bybit breach. What it means for users.

Binance says a $6.3B hack impacted user funds after one of 50 malicious EIP-7702 authorizations succeeded. Inside the exploit and what it means for custody.

An AI code scan uncovered three Bitcoin Core bugs, including a remote crash that drains memory on Windows, macOS and BSD nodes. Patches shipped in version 32.1.

Alice & Bob says breaking a Bitcoin key could take 29,588 qubits, 17 times fewer than Google's estimate, pulling quantum migration pressure into the early 2030s.

Binance founder CZ flagged four data leaks in a single day, including a breach at Coinbase's analytics vendor Amplitude that exposed some users' contact data.

An X100 attacker froze tokens, seized two of three Senate seats, and passed a proposal that drained about $6M from the treasury in one flash-loan transaction.

Bithumb confirmed its internal mobile system was hacked and customer personal data exposed, part of a wave of breaches hitting South Korean financial firms.

Foundation says over 23,000 phishing emails hit Passport wallet users after attackers abused compromised Cloudflare API keys and exposed historical order data.

A website breach at Keystone exposed hardware wallet buyers' names, shipping addresses and order records, raising the risk of targeted phishing and physical theft.

A MoveVM caching bug let an attacker mint unbacked USDC, WETH and iUSD on Initia, draining its USDC bridge reserve to $63 and freezing user withdrawals.

US prosecutors allege a criminal network moved $36.9 million stolen from 174 American victims through shell companies and Deltec Bank into Tether's USDT.

A malicious Fearless Wallet extension leaked Polkadot private keys for nearly 20 months. Eight users reported 17,286 DOT stolen as unstaking delays shrank.

A 30-country operation led by the UAE and INTERPOL identified over $39B in funds and crypto tied to scams, with 960+ arrests and raids on 29 fraud centers.

Qubic froze its chain after an attacker drained about 1,400 wallets that used weak seed phrases. The team says 87.1% of stolen funds remain onchain.

Nine crypto infrastructure firms launched a Quantum Alliance modeled on the IETF to set post-quantum standards, with about 6 million Bitcoin exposed to future attacks.

Galaxy Research's onchain tally puts losses from the Ledger supply-chain compromise at $91M across 474 victim addresses, sharpening the full scale of the attack.

A reconnect flaw in the Lightning Development Kit lets a malicious peer steal forwarded Bitcoin from unpatched apps. Patches v0.2.7 and v0.1.13 close the hole.

Coldcard's official X account was compromised and used to post a phishing scam dressed up as an urgent wallet security warning. Here is what hardware wallet users should do.

iVerify says P7 DarkSword spyware scans compromised iPhones for crypto wallets and pulls imToken data, Keychain passwords, and Apple Notes every 15 seconds.

Ledger confirmed an unauthorized implant inside a customer's wallet as losses near $93.4M, pointing to a supply-chain attack through reseller CryptoBilis.

Glassnode estimates roughly 6.26 million BTC hold public keys already visible on-chain, the slice most exposed to a future quantum attack. Here is what that means.

Adam Iza, the self-styled crypto 'Godfather,' got six years in federal prison for a $37M Meta fraud and paying off-duty LA deputies to target rivals.

Bitcoin Core merged a fix for a SIGHASH_SINGLE gap that could leave a transaction's recipient unbound, letting funds move without breaking the signature.

An AI voice scam targeting Italy's Fideuram private bank moved at least 36 million euros into crypto, per WuBlockchain. Here is what it means for holders.

Zano's post-mortem details how an attacker minted 36.9M unauthorized ZANO over a month using a Gateway Address flaw, forcing a chain rollback.

Core Lightning developers issued an urgent advisory as attackers target nodes running version 26.06.7 or earlier. Operators were told to upgrade immediately.

Bitget has rebuilt its $300M protection fund after absorbing a $388M breach. The backstop sits apart from customer reserves, and claims still face review.

MetaMask confirmed it is responding to a security incident affecting part of its infrastructure. Here is what is confirmed and what wallet users should do now.

SlowMist says suspected North Korean hackers moved stolen Bitget assets through Chainflip and CoW, exposing the cross-chain laundering playbook behind the hack.

The UK's FCA secured a confiscation order so victims of a £1.5m crypto investment fraud can recover lost funds, a rare full-restitution outcome in crypto cases.

A second suspected memecoin rug factory has surfaced on Robinhood Chain, with GoPlus tracing over $9M in losses as the network's TVL climbs toward $1.5B.

A whitehat moved 3,832 NFTs from hundreds of wallets after a suspected Magic Eden vulnerability, per Cointelegraph. What NFT holders should check now.

On-chain trackers flagged over $170M in assets draining from Bitget Wallet users and converting to ETH, a suspected breach that revives hot-wallet custody fears.

Almost $20 million in XRP was drained from 6,678 wallets across six attack waves between Sept. 15 and 20, 2026. Here is what is known and how to protect your keys.

Liquid's peg-outs are still frozen after a $320M exploit, and Bull Bitcoin has warned some users they face up to a 30-day wait to move L-BTC back to Bitcoin.

A reported Safari zero-day could let attackers reach crypto private keys and seed phrases on iPhones. Here is the risk and the steps to take now.

Security researchers rescued 52.37 BTC from wallets hit by the Coldcard entropy flaw and parked it in a Wyoming Crypto Recovery Trust, with no bounty taken.

Pragma tagged 6 of its 22 Starknet price feeds critical risk after a $3.5M Nostra exploit exposed the gap between oracle prices and real liquidation liquidity.

A North Korean group called WaterPlum ran fake recruiter campaigns against crypto and AI developers, infecting 30,000 devices and taking $10.7M, researchers say.

Chainalysis says onchain malware writes jumped 420% in a year, with state-backed hackers behind roughly two-thirds of new activity each quarter. What it means for wallet users.

HP says Needle Stealer malware, disguised as an AI crypto-trading tool, replaced seven browser wallet extensions with credential-stealing copies using signed software.

Hackers breached an Italian government email account and posed as police to pull Revolut customer data on high-value crypto holders, per an FT report.

The EU Cyber Resilience Act took effect September 11, 2026, giving crypto wallet makers 24 hours to warn regulators of an exploited flaw, then 72 hours to file details.

Revolut handed over customer ID documents, selfies, and Bitcoin transaction histories after a social-engineered request posing as a government agency.

Blockstream is refusing to pay the Liquid Network attacker's roughly 600 BTC bounty demand, taking a hard public line on crypto extortion as of September 12, 2026.

A Bank for International Settlements paper warns AI has shrunk the gap between finding a flaw and exploiting it to minutes, straining bank and crypto defenses.

Trezor says a third-party email provider was breached and is warning users to ignore fake 'Critical Security Alert' phishing emails. Here is how to verify.

White-hat hackers have returned 3,400 of 4,000 Bitcoin drained from Blockstream's Liquid Network. 598 BTC worth $47M remains outstanding as the network stays paused.

The Coldcard breach attacker is emptying 293 Bitcoin vaults in order of size, moving $7.7M so far, nearly half of the third-wave haul. What it means for self-custody.

The purported white-hat behind Liquid Network's $320M Elements exploit is negotiating a return of nearly 4,000 BTC to Blockstream's federation. Here is where it stands.

The ~$320M drain on Blockstream's Liquid was not a multisig break. About 4,000 L-BTC was minted by an Elements bug, then routed through SideSwap.

Attackers calling themselves whitehats drained close to 4,000 BTC from Blockstream's Liquid sidechain peg, reviving questions about federated custody.

Chilean exchange Orionx is closing after a forensic audit found over $7M in customer assets moved to outside wallets. What it means for exchange custody risk.

Trezor says a ShipMonk breach exposed roughly 80,689 customers after shipping records that were supposedly deleted were found intact. What crypto holders should do.

FinCEN has identified $12.7 billion linked to suspected crypto scams. Here is what the figure means for fraud detection and how cardholders can lower their risk.

CrowdStrike and the DOJ isolated 15,000+ machines infected by Sality, an eight-year malware operation that stole Bitcoin and Ethereum from victims worldwide.

Swiss service Pocket Bitcoin exposed compliance records linking 291 customers' names and addresses to public Bitcoin wallets. Funds were safe, but privacy was not.

Cronos paused block production after an attacker drained an estimated $75M from lending protocol Tectonic. Here is what happened and what it means for users.

Deribit is removing its public Proof of Reserves page on September 1, 2026, ending daily balance verification for customers. Here's what changes for traders.

Ripple is moving to add quantum-resistant cryptography to the XRP Ledger before quantum machines can break the signatures that guard user funds. Here is what changes.

Manpreet Kohli, a former Saitama executive, lost his UK extradition fight and will face US fraud and market manipulation charges tied to the meme token.

StarkWare says it executed the first quantum-safe Bitcoin transaction on mainnet. Here is what it proves about protecting BTC from future quantum attacks.

Security firm Socket flagged 40 malicious Firefox add-ons aimed at crypto wallets. Nine started as sports-score tools before an update turned them hostile.

Monad developers proposed upgradeable account authentication that adds passkeys, social recovery, key rotation, and post-quantum security while keeping the same wallet address.

Ledger's CTO says a vulnerability in certain Ethereum signing flows has been fixed. Here is what hardware wallet users should check and update now.

DeFi lending protocol Term Labs was drained of $8.5M through a governance exploit affecting its vaults, per WuBlockchain. Here is what is known so far.

Ledger's new Transaction Check scans Ethereum transactions in real time and warns users before they sign, targeting the phishing and approval scams that drain wallets.

Kraken froze as much as $4.2M in user funds tied to an HTX-linked address-poisoning campaign. Here is how the scam works and how to avoid it.

Maya Protocol halted its cross-chain network after an attacker chained six separate bugs to drain $1.7M, exposing how compounding flaws slip past audits.

The FBI has reportedly identified alleged first-wave attackers in the Coldcard hardware wallet theft, per Bitcoin Magazine. What self-custody users should know.

Federal prosecutors charge Edward Zimbardi over a $165M crypto Ponzi scheme after his deportation from Fiji. What the case says about custody and fraud risk.

SafePal disclosed a breach exposing order information for nearly 40,000 customers, the latest self-custody security incident to hit crypto users in 2026.

Israel's largest regulated crypto broker Bits of Gold faces a reported data leak affecting up to 200,000 customers, raising KYC and phishing exposure questions.

A reported South Korean proposal would let authorities seize crypto directly from self-custody wallets, not just exchange accounts. Here is what it means for holders.

Hong Kong's SFC flagged 65 fake websites cloning licensed exchange HashKey. Here is how the clone-site playbook works and how to verify a real platform.

Galaxy Research says over 1,778 BTC has been drained in the Coldcard hardware wallet exploit across three waves and 33+ attacker footprints, with no attacks confirmed after August.

CyberWallet users have until August 15 to move crypto out before withdrawals become a manual smart contract recovery. Here is what changes and what to do.

Neutrl halted NUSD redemptions over an undisclosed reserve problem that a risk firm had already flagged as higher counterparty risk. What it means for stablecoin holders.

Harmony, the Layer 1 behind the ONE token, was exploited in an unauthorized mint of 4 billion ONE, reviving old questions about its bridge and validator security.

An XRP cross-chain bridge lost about $200,000 after its software counted spoofed deposits as real ones, letting an attacker mint and withdraw funds it never received.

Forensic data shows the top five addresses now hold nearly 83% of the bitcoin stolen in the Coldcard hack, a concentration that could shape recovery odds.

BTCPay Server cut off remote Lightning access after attackers exploited a vulnerability to drain funds from LND nodes. Here is what merchants need to check now.

A fresh exploit is draining merchant Lightning nodes on Bitcoin's payment layer, the latest hit to the infrastructure that settles instant BTC transactions.

A US court granted Bybit expedited discovery to trace funds from the $1.5B North Korea hack, opening account identities, balances, and transaction records.

Microsoft Threat Intelligence says attackers are storing malware instructions inside BNB Smart Chain smart contracts, a takedown-resistant technique that abuses public blockchains.

Chainalysis data shows violent crypto theft passed $30M in the first half of 2026, with France leading at 30 known attacks. The physical security threat is growing.

Attackers behind the Coldcard firmware exploit sent 64 BTC and 200 ETH into Wasabi and Tornado Cash this week, laundering about $4.55M of a $100M haul.

The Ethereum Foundation's Trillion Dollar Security initiative funded WEBCAT, a tool that lets browsers check a site's code matches what developers published.

Attackers used social-engineering phone calls to target Point72, Two Sigma, and Citadel, exposing the human layer that no firewall protects. What crypto holders should learn.

A 16-person volunteer group scanned 390 Bitcoin repositories with AI and human review, flagging 4,962 issues, 720 rated high or critical, in under 30 hours.

An FBI agent is accused of taking about $1 million in crypto from a suspect's accounts, later confessing the theft was 'eating him up inside,' per court filings.

Non-custodial swap protocol Boltz paused operations after attackers used AI to find and adapt exploits faster than its small team could patch them.

COLDCARD confirmed it destroyed all vulnerable hardware wallet inventory and is cooperating with law enforcement to identify the attackers behind its security breach.

A Coldcard hardware wallet exploit tied to a $90M Bitcoin loss has rattled self-custody users. Here is what happened and how to check your own setup.

Coinkite issued a seed-security warning for older Coldcard Mk3 devices after a 594 BTC theft. What self-custody users should check now, as of July 31, 2026.

A new malware strain called SparkKitty scans crypto holders' photo galleries for seed phrase screenshots. Here is how it works and how to shut it out.

Triple-A says its corporate treasury wallet was drained of $11.8M in a security breach. The payments firm confirmed client funds were untouched and it will absorb the loss.

BitMart wallets dropped to about $69M on Monday from $102M on July 6 as users reported withdrawal delays and on-chain freeze notices during its wind-down.

WEMIX suspended bridges and trading network-wide after an attacker breached a linked smart contract and moved roughly $724,000, freezing funds.

An attacker gained owner privileges on a WEMIX contract and minted $6.25M in tokens with no backing, the latest privileged-key failure of 2026.

Two Ethereum cross-chain bridges lost $31.7M within hours on July 25, 2026, and a third protocol paused staking to contain the damage. Here is what it means.

Binance is working with anti-trafficking nonprofit STOP THE TRAFFIK to detect crypto tied to human trafficking and child exploitation. Here is what it means.

Onchain security firm Blockaid flagged a $24.15M USDC drain on the AFX-operated bridge, the latest reminder that cross-chain rails remain the softest target in crypto.

A vulnerability in Zilliqa's Ledger app could expose private keys, prompting Upbit to flag ZIL as a cautionary asset. Here is what holders need to know.

SecondFi is shutting down after a $2.6M ADA theft tied to a wallet vulnerability. Users still wait on recovery tools. What it means for custody risk.

Wanchain's Cardano-BNB bridge was exploited, and Cardano's Charles Hoskinson says AI-powered attacks are hitting all software, not just crypto. Here is the context.

Allbridge Core halted its cross-chain bridge after a $1.65M flash loan attack manipulated its stablecoin swap pricing. Here is what happened and why bridges keep failing this way.

Consensys disclosed that a North Korea-linked developer contributed to MetaMask code before access was revoked, reviving concerns about DPRK infiltration of crypto teams.

Attackers attempted to slip malicious code into an Injective npm package to steal private keys. Here is what happened and how to protect a self-custody wallet.

An Ethereum user lost $999,999 in USDT after signing a single malicious token approval, Scam Sniffer reports. Here is how approval-drainer attacks work.

Two ethical hackers say they found a critical Aptos vulnerability that could have put $70 billion in on-chain value at risk. Here is what the disclosure means for users.

An attacker bought $4M of BONK, pushed a malicious proposal through BonkDAO's token-weighted vote, and drained $20M from the treasury. The vote was valid.

Coinspect discloses Ill Bloom, a weak-randomness flaw in seed phrase generation across Bitcoin, Ethereum, Tron and more. $5M drained since May 27. How to check.

Blockaid detected an ongoing exploit on Summer Finance with roughly $6M drained as of July 6. The attack was still active when the alert went out.

France logged 77 crypto kidnapping and extortion cases in H1 2026, up from 45 in all of 2025. Interior Minister Laurent Nunez answers with a three-pillar plan.

A DeFi lending market let an attacker mint tokenized Google shares at 7,700% above fair value, exposing how RWA collateral breaks when oracles lag.

On-chain investigator ZachXBT warned that AscendEX may be delaying user withdrawals over liquidity issues, a familiar early signal of exchange stress.

The US and UK sanctioned nine people and 26 entities tied to Cambodia's Prince Group and the Huione laundering network on June 23, 2026. Here is the crypto angle.

Four US law enforcement organizations say Section 604 of the CLARITY Act could exempt some crypto participants from KYC and AML rules, opening oversight gaps.

SlowMist estimates the SecondFi Cardano wallet exploit may exceed $20 million, far above the platform's initial 16 million ADA, around $2.4M, disclosure.

THORChain restarted all network activity more than a month after a $10M exploit, deploying security upgrades and a full vault migration before reopening swaps.

Altura redeemed $8.5M in USDT in 24 hours and began an orderly vault wind-down after a verifier dropped MainStreet. No hack, just a confidence run on yield.

Trump signed executive orders directing a national quantum computing effort targeting 2028. Here is what the timeline means for crypto wallet and card security.

Hu Xiaowei, a figure tied to the Prince Group network behind a roughly $15B Bitcoin scam empire, was arrested in Tokyo, per WuBlockchain. Here is what it means.

Taiko says its chain state verification mechanism is compromised, telling users to withdraw from bridges and asking exchanges to suspend TAIKO deposits.

Google, Meta, PayPal and Chainalysis have committed to fighting the illegal wildlife trade with AI detection and blockchain analytics, per a June 2026 report.

On-chain investigator ZachXBT traced $475K in frozen bitcoin to social engineering scams on elderly Americans after a suspected money mule asked him for help.

Isiah and Raymond Garcia admitted to holding a Minnesota family at gunpoint for eight hours and forcing an $8M crypto transfer. The case shows how self-custody shifts risk to the holder.

G7 leaders issued a fresh joint call to counter state-sponsored crypto theft, citing a Chainalysis figure of more than $2 billion stolen by DPRK-linked hackers.

The CFTC entered a consent order on June 18, 2026 resolving its fraud case against Celsius founder Alexander Mashinsky, with permanent trading and registration bans.

France is pushing to phase out classical encryption in favor of post-quantum schemes, reviving questions about how exposed Bitcoin's signatures really are.

Rodney Burton, the promoter known as 'Bitcoin Rodney,' pleaded guilty over the $1.8B HyperFund Ponzi. He faces up to 5 years and is sentenced July 23.

Zooko Wilcox says prior exploitation of the Orchard counterfeiting bug looks unlikely, but cryptography alone cannot confirm no fake ZEC was ever minted.

A Quantstamp investigation links the $32M Humanity Protocol hack to North Korean actors who used a fake Bithumb email to get in, per a June 14 report.

DefiLlama data shows Q2 2026 has logged roughly 70 hacks, about double the previous quarterly record, even as the dollar losses stay front-loaded in April.

Raydium says an attacker drained $1.34M from five deprecated AMM V3 pools via an LP mint flaw. Active funds were untouched and the treasury will reimburse.

Botanix, a venture-funded Bitcoin Layer 2 that raised $11.5M, is winding down. Users must withdraw assets by July 9 or the validator Federation sweeps the rest.

A CoinDesk post-mortem says the Humanity Protocol drain happened because its multisig signing keys all lived on a single compromised laptop. The lesson for self-custody.

Yuga Labs says it pulled 68 NFTs, among them 29 Bored Apes and 2 CryptoPunks, out of a Flooring Protocol exploit. The rescue underlines pooled-custody risk in DeFi.

Wallets linked to Humanity Protocol were drained for more than $19 million and the H token fell over 80%, per WuBlockchain. Here is what is known so far.

Zcash developers propose Ironwood, a new shielded pool with a turnstile checkpoint, to restore supply verification after a bug in Orchard could have minted fake ZEC.

A four-year-old Zcash flaw surfaced with help from Claude Opus 4.8. Security researchers say AI-found bugs change who hunts vulnerabilities, and how fast.

A soundness bug in Zcash's Orchard shielded pool could have minted undetectable counterfeit ZEC. A researcher found it with an AI model, and validators patched it in five days.

Trezor disclosed a laser fault injection flaw in the Safe 7's TROPIC01 secure element, found by Ledger's Donjon team. Trezor says keys are not stored on the chip.

edgeX's EDGE token fell as much as 70% on June 1-2, triggering $2.81M in liquidations. ZachXBT says insiders controlled a low float and wants counterparties named.

The Kelp DAO exploiter has laundered nearly all of the unfrozen $220M from April's $293M rsETH drain, leaving only the $71M frozen by Arbitrum recoverable.

Radiant Capital is winding down operations after a $50M cross-chain exploit it never recovered from. Here is what the shutdown means for DeFi lending risk.

A developer known as Florent recovered 1,003 ETH worth about $2M that had been stuck in a 2016 ICO smart contract for nine years. Here is what it means for on-chain funds.

Gravity Bridge lost about $5.4M on May 30 in a suspected signing-key compromise. Stolen USDC, ETH, and USDT moved through Binance and ChangeNow.

An attacker drained $7.3M in BNB from more than 1,400 DxSale liquidity lockers dating to 2021, using a privileged fee reset and a backdated lock expiry.

On-chain investigator ZachXBT reports $12.6M of Zama cUSDC frozen after a Circle blacklisting, extending the USDC freeze debate to confidential wrapped tokens.

A third-party SquidRouterModule attached to Safe smart wallets was exploited on Ethereum and Base, draining roughly $3M and exposing module-level risk.

A supply chain campaign called TrapDoor has shipped 34 malicious packages targeting crypto and AI developers, draining wallets, SSH keys, and API tokens.

On-chain investigator ZachXBT flagged a roughly $10M exploit affecting smart contracts tied to StablR's EURR and USDR stablecoins, Cointelegraph reports.

THORChain proposed a recovery plan after the May 15 exploit, ruling out fresh RUNE issuance to repay affected users and forcing losses through protocol revenue instead.

Glassnode warns nearly 10% of BTC supply sits in quantum-vulnerable addresses, with Franklin Templeton, WisdomTree, and Robinhood ETF holdings 100% exposed.

GitHub is investigating unauthorized access to its internal repositories. CZ told developers to rotate API keys in code, including private repos.

Echo Protocol says it has regained control of the compromised admin key and burned the attacker's remaining 955 eBTC after a major cross-chain exploit.

Casa CTO Jameson Lopp tells crypto holders to treat every inbound message as hostile after a phishing scheme abused Google infrastructure to slip past filters.

PeckShield flagged a Verus-Ethereum bridge exploit on May 18, 2026, with attackers funneling roughly $11.4M through Tornado Cash.

THORChain triggered an emergency halt on May 15 after a suspected multichain exploit, putting the cross-chain swap protocol's recovery and trust on trial.

Fireblocks CEO Michael Shaulov says migrating Bitcoin to post-quantum signatures is mostly a coordination issue. The cryptographic algorithms already exist.

Kelp DAO and Aave finished recovery steps for the rsETH exploit, burning the attacker's tokens and committing to refill 117,132 rsETH over two weeks.

CertiK attributes 60% of 2025 crypto theft to North Korean state-sponsored groups, with $2.1B stolen across Bybit, DMM, and DeFi targets.

Physical extortion of crypto holders has produced more than $100M in losses in the first four months of 2026, per CryptoSlate. Here is what is driving it.

April 2026 saw over $635M stolen across 28 crypto exploits, the worst month of the year so far. Here is what drove the spike and what users can do.

A member of the social engineering crew known as GothFerrari was sentenced to 78 months in US federal prison for helping steal roughly $250M in crypto.

Aave moves to tighten collateral and listing standards across its markets after the KelpDAO rsETH exploit forced emergency liquidations and risk freezes.

Solana perpetuals exchange Drift published a recovery plan for users after a $295M exploit that on-chain investigators have linked to North Korean actors.

Binance launches Withdraw Protection, a new account safeguard that adds friction to suspicious withdrawals and gives users a window to reverse risky transfers.

On-chain sleuth ZachXBT alleges DEX aggregator Tokenlon processed funds tied to illicit activity, reigniting debate over compliance gaps in DeFi routing layers.

Bitcoin developers are publicly warning holders against Paul Sztorc's eCash fork, calling its claim mechanics hazardous for everyday BTC users.

Cointelegraph reports a Linux 'Copy Fail' bug, citing Xint Code, that lets attackers tamper with copy operations. Crypto users on Linux face heightened clipboard risks.

Paradigm researcher Dan Robinson proposed PACTs, a scheme that lets dormant Bitcoin holders prove ownership before quantum computers can crack exposed keys.

Hundreds of long-dormant Ethereum wallets were swept into the same tagged addresses, with the cause possibly tracing back years, per CryptoSlate.

Wasabi Protocol lost roughly $5 million after an attacker took control of the deployer admin key and drained contracts across three chains.

PocketOS founder Jeremy Crane says a Cursor agent running Claude Opus erased production data and backups via one Railway API call. Crypto agent risk in focus.

Google scanned billions of pages and found real payloads built to hijack AI agents into draining PayPal balances and leaking enterprise data.

Litecoin developers say a zero-day vulnerability caused a 13-block chain reorganization on April 25. The network has been patched and is stable again.

Glassnode analyst James Check says Bitcoin's quantum risk is concentrated in 1.716M old P2PK coins, not the full 19M supply, narrowing the panic window.

France's national anti-organized-crime branch has charged 88 people across a wave of crypto-related kidnappings, Le Monde reported on April 25, 2026.

The KelpDAO exploiter converted nearly all 75,700 ETH, roughly $175M, into BTC over 36 hours, locking in gains and complicating recovery.

Bybit's security team disclosed a macOS malware campaign that preys on users searching for Claude Code, exploiting AI tool demand to deliver payloads.

Sui-based Volo Protocol has confirmed a $3.5M exploit of its vaults, with roughly $500K frozen so far. What's on the table and what isn't.

Bloomberg reports a small group of unauthorized users accessed Anthropic's new Mythos AI, a model the company says is powerful enough to enable cyberattacks.

The attacker behind the $292M KelpDAO drain has routed roughly $80M in ETH through Thorchain swaps, complicating recovery efforts for rsETH depositors.

Ripple gave itself a 2028 deadline to swap out the XRP Ledger's cryptography before quantum machines can break it, calling the threat 'credible.'

Aave confirmed the rsETH sitting in its V3 and V4 markets on Ethereum is fully backed, but the markets stay frozen while KelpDAO bridge risk is reviewed.

Vercel says a third-party AI tool's compromised Google Workspace OAuth was the entry point for its breach, a supply chain risk crypto devs should map out.

BitMEX Research published a Bitcoin canary fund proposal on April 16, 2026 as an alternative to BIP-361's mandatory five-year quantum migration deadline.

An attacker drained 116,500 rsETH, about $292M, from KelpDAO's LayerZero bridge on April 18, 2026. Aave, SparkLend, and Fluid froze affected markets.

Vitalik Buterin has flagged a DNS registrar attack on eth.limo, the ENS gateway service, and is warning users to stay cautious during the team's response.

Zerion proactively shut down app.zerion.io and Blockaid blocked the site. Mobile apps and browser extension are unaffected. User funds remain safe.

US Secret Service, UK NCA, and Canadian police traced $45M in crypto fraud across 30 countries, freezing $12M and contacting 3,000 victims directly.

The Solana Foundation rolls out two security programs, STRIDE for formal verification and SIRN for 24/7 threat monitoring, six days after the $280M Drift exploit.

Ledger CTO Charles Guillemet warns that AI is making crypto exploits faster, cheaper, and harder to stop, with $1.4 billion already lost this year.

Most no-KYC crypto card claims turn out to mean low limits, delayed verification, or temporary access. Here is what regulation, enforcement, and market history actually say.

Google accelerated its post-quantum cryptography migration from 2035 to 2029, putting pressure on Bitcoin and Ethereum developers racing to replace ECDSA.

The DarkSword exploit chain uses six iOS vulnerabilities to deploy Ghostblade, a data stealer targeting 13 crypto exchange and wallet apps on unpatched iPhones.

Bitrefill reveals a March 1 cyberattack linked to North Korea

Operation Atlantic brings the Secret Service, NCA, and Ontario police together to disrupt approval phishing scams that stole $17 billion in crypto last year.

An attacker accumulated 84% of Thena's THE supply cap on Venus Protocol, manipulated the price, and borrowed $3.7M in CAKE, BTC, and BNB before anyone noticed.

February 2026 crypto losses fell to $26-49M from $385M in January. The catch: social engineering now causes more damage than smart contract exploits.

BONK.fun team confirms hackers took over a team account and embedded a crypto drainer on the Solana token launchpad domain, tricking users with a fake TOS prompt.

A secure boot chain vulnerability in MediaTek processors allowed USB-based seed extraction from Trust Wallet, Phantom, and four other wallets. Patched January 2026.

What protects your money on a crypto card? E-money segregation, Visa/MC chargebacks, custody models, and lessons from three real card program collapses.

Project Eleven releases a post-quantum wallet prototype that restores key derivation for exchanges, solving a critical BIP32 vulnerability before NIST deadlines hit.

Google's threat team found a 23-exploit iPhone kit called Coruna that steals seed phrases from MetaMask, Bitget Wallet, and Exodus. Here is what you need to know.

Cantina's AI tool Apex flagged a signature bypass in the XRPL Batch amendment that would have let attackers drain wallets without private keys.

A private key exploit gave an attacker control of IoTeX bridge contracts, draining $8.8M in tokens. Funds are being laundered through THORChain to Bitcoin.

A fraudulent Google ad mimicking Uniswap drained a trader's mid-six-figure portfolio using the AngelFerno wallet drainer as phishing scams hit $370M in January.

Cecuro's AI security agent detected 92% of exploited DeFi contracts worth $228M, while a GPT-5.1 baseline caught only 34%. The benchmark is now open source.

Moonwell lost $1.78M in bad debt after a Chainlink OEV oracle wrapper misconfigured cbETH pricing at $1.12, with auditors linking the bug to AI-generated code.

Physical phishing letters impersonating Trezor and Ledger use QR codes to steal recovery phrases. Here is how the attack works and how to protect yourself.

A wallet tied to the $200M Mixin Network hack has begun liquidating 59,854 ETH through Tornado Cash after more than two years of dormancy.

Ledger argues AI agents should never hold private keys, pushing a 'propose, humans sign' model that challenges Coinbase's agentic wallet approach.

Bitget partners with BlockSec to publish the UEX Security Standard, a system-level security framework for exchanges bridging crypto and traditional markets.

Binance's 9-level anti-scam system combined AI monitoring with human wake-up calls to prevent $6.69B in fraud losses and shield 5.4M users in 2025.

KuCoin now supports full passwordless login via passkeys. Here is how the FIDO2 standard is reshaping crypto exchange security and why it matters for your funds.

OKX reveals wallet security stats: 8.53M malicious domains blocked, 23M+ risky tokens flagged, and nearly $900M in user assets recovered since launch.

Binance recovered $12.8M in stolen crypto in 2025, up 41% from 2024. Here is how their AI-powered anti-scam system protects users.

Binance issues a detailed warning on lookalike wallet address scams that trick users into sending funds to fraudulent addresses. Detection tips inside.

Binance recommends ED25519 signatures for API security, deprecating HMAC. Here's what the upgrade means for traders, bots, and card-linked accounts.

COCA Wallet integrates Privy for seedless login. No more seed phrases, familiar auth methods, and full self-custody preserved.

Lombard Finance adds Chainlink Proof of Reserve, CCIP, and Price Feeds to verify LBTC collateralization across 15 chains in real-time.

Binance introduces Security Center, an automatic risk scanner for its Web3 Wallet. We analyze what it checks, how it protects funds, and what it means for users.

Jupiter has faced security concerns over its ASR claim flow. Learn why seed phrase imports are dangerous for card-linked wallets and what the new direct claim flow means.

A definitive guide to the ether.fi x MEXC co-branded card. Analyze the 15% dining boost, the issuer accountability stack, and dispute protection frameworks.

RedotPay now supports Apple Pay and Google Pay. Here is what mobile wallet integration changes for security, daily usability, and cardholder behavior.

Binance has launched MPC wallet integration for its ecosystem. Analyze how Multi-Party Computation changes security for crypto cardholders and reduces single-point-of-failure risk.

A deep dive into high-pressure social engineering scams targeting cardholders. Learn how scammers use 'official' authority to bypass security and what you can do to protect your wallet.

A 2000-word deep dive into the technical and legal layers of crypto card custody. Learn about MPC, Account Abstraction (ERC-4337), and how to audit your issuer's solvency risk.

The US CLARITY Act could effectively ban stablecoin rewards. Learn why Coinbase withdrew support, the impact on cardholders, and the $243M revenue stake.

DeFi security no longer stops at audits. Here is what modern security platforms actually do, from monitoring and alerting to oracle, permissions, and incident-response controls.

Self-custody vs custodial crypto cards: security architecture, gas fees, recovery mechanisms, real breach case studies, and a cost-benefit analysis of 7 cards with actual numbers.

How smart contracts protect your crypto card from fraud. Learn about on-chain spending limits, guardians, and the future of decentralized card security.

The end of 'sending your passport' is here. Learn how ZK-KYC and Self-Sovereign Identity (SSI) are making crypto cards private and secure.

How does MiCA 2.0 impact your crypto card choice? Learn about the new EU regulations and how they affect card privacy, limits, and availability.

How Multi-Party Computation (MPC) protects crypto cards: threshold signatures, key share architecture, vs. multisig comparison, real security incidents, and implementation across 12 major cards.