Featured topic
18 articles
The Security Alliance logged 70 incidents between 13-20 October, with Ledger hardware wallets sold by Malaysian reseller CryptoBilis responsible for the single largest loss category at $9.3 million.
An internal OpenAI model drew funds from a wallet derived from a publicly known seed phrase to deploy smart contracts on the Sepolia testnet, a report published October 15 reveals, without disclosing the move to the user who had assigned the task.
M-CERT warned French maritime operators including the ports of Marseille and La Rochelle of attacks by NoName057(16), a pro-Russian hacktivist group that pays crowdsourced volunteers in TON cryptocurrency, months after a Europol crackdown.
More than a month after an attacker exploited a flaw in Blockstream's Elements software, Liquid Network's bitcoin peg-outs remain suspended, with roughly 603 BTC still missing from the reserve backing L-BTC.
CryptoBilis, Ledger's suspended Southeast Asian reseller, secretly changed hands in March, as Mt. Gox's Mark Karpelès finds an LTE spy module hidden inside a Ledger device shipped from Malaysia.
Singapore-based fintech Based says an unauthorized party accessed an internal dashboard managing its Visa card program, potentially exposing identity documents of some cardholders. Funds and card details remain safe, the company says.
A Manhattan jury found Jonathan Spalletta guilty of computer fraud and money laundering after he drained roughly $55 million from the DeFi protocol Uranium Finance in April 2021, later spending part of the proceeds on rare trading cards and collectibles.
A breach of Denmark's central population registry, disclosed weeks after the country launched its AltID wallet, has reopened questions over how centralised data stores underpin Europe's digital identity and tax-reporting ambitions for crypto.
Blockchain sleuth ZachXBT says he deployed roughly $3.5 million of his own funds to infiltrate a Chinese money-laundering network suspected of serving North Korea's Lazarus group, helping identify addresses tied to the $1.5 billion Bybit theft.
Near Intents says all funds stolen in a cross-chain exploit have been returned, less than two days after its CEO publicly identified the attacker and set a deadline for restitution.
On-chain investigator ZachXBT has published evidence pointing to Chinese intermediaries moving funds from the $387.5 million Bitget hack through THORChain on behalf of suspected North Korean attackers, while the protocol has declined Bitget's request to block flagged addresses.
Bitget has frozen withdrawals after confirming a $351.6 million theft from its hot and warm wallets, with CEO Gracy Chen citing preliminary evidence linking the attack to a North Korean hacking group.
South Korean wallet maker D'CENT says 6,678 accounts were drained of 11.75 million XRP between September 15 and 20, with stolen funds routed through THORChain, NEAR Intents and Binance.
Security researchers have parked 52.37 BTC seized from the July Coldcard firmware exploit into a newly formed Wyoming statutory trust, part of an effort to return stolen funds to holders whose wallets were drained by a predictable seed-generation flaw.
French exchange Paymium has told customers their personal data was exposed after a breach at email provider Brevo, the same incident that triggered a phishing campaign against Trezor users.
A group calling itself "iamnotavillain" claims to have obtained data on 680 Revolut customers by hijacking the certified email account of an Italian prefecture, demanding 6,000 XMR in ransom. Revolut denies any system breach.
Hackers withdrew $320 million in Bitcoin from Liquid but returned about $270 million after claiming to have acted as “white hats”.
Hackers have published stolen data belonging to the City of Berlin on the darknet after a bitcoin ransom deadline passed without payment.