Featured topic
26 articles
Predict.fun, the prediction market integrated into Binance Wallet, has confirmed unauthorized transfers from user wallets totalling 397,708 USDT, with a suspected breach of its API documentation site now under investigation.
Keystone disclosed unauthorized access to its website on October 24, joining Ledger, Trezor, SafePal, COLDCARD and BitBox as hardware wallet brands hit by security incidents this year.
Electrum released version 4.8.3 to fix a high-severity flaw that let malicious servers trick users into redirecting Bitcoin payments through Replace-By-Fee. A similar issue surfaced the same day in Cake Wallet.
Cloudflare's Matthew Prince says attack attempts against two critical PHP vulnerabilities, dubbed PHP2Shell, exploded after patches were released on 21 October, though evidence shows exploitation began days earlier.
Cloud development platform Railway confirmed an attacker accessed and decrypted customer environment variables, freezing deployments as researchers link the incident to hundreds of suspicious blockchain transactions.
Amazon's MadPot honeypot network recorded exploitation attempts against the critical PHP2Shell flaw four days before official patches were issued, a gap that security teams are now treating as a blind spot in their incident timelines.
Charles Guillemet says critical bugs in PHP, Node.js and compromised TLS certificates have left hundreds of thousands of servers exposed, though Bitcoin's core protocol is unaffected.
A weakness in seed phrase generation allowed an attacker to empty 1,404 Qubic wallets of 2.94 trillion QUBIC tokens in under two hours, echoing the entropy flaw previously reported in Coldcard hardware wallets.
A US court order allowed Microsoft and Health-ISAC to seize domains tied to three phishing-as-a-service operations that targeted more than 75,000 organisations and accepted stablecoin and crypto payments.
Security firm SlowMist warns of a phishing campaign impersonating Ledger firmware updates, capitalising on fears sparked by an $86 million theft tied to compromised devices sold by reseller CryptoBilis.
Hardware wallets with hidden chips capable of reading recovery phrases have now surfaced in the newer Ledger Flex model, undermining Ledger's claim that the tampering was confined to a single Southeast Asian reseller.
An amendment to France's 2027 budget bill would force holders of self-custody crypto wallets worth over €100,000 to declare them, as the country records a sharp rise in physical attacks tied to digital assets.
A user who bought a Ledger wallet at a Mediamarkt store reported finding a hidden spy component inside, extending a supply-chain attack previously tied only to an Asian reseller.
Coldcard's official X account posted and quickly deleted a phishing link in the early hours of October 11. The bitcoin hardware wallet maker says its offline 2FA and credentials show no sign of compromise, but it is investigating possible unauthorised access at the platform level.
Analytics firm Onchain Lens has publicly called on Binance to audit and freeze accounts tied to funds stolen from buyers of a Ledger-authorized reseller, after 430.2 ETH moved through Tornado Cash.
Tibane Labs, including former Mt. Gox CEO Mark Karpelès, says it has identified three generations of covert hardware implants in Ledger Nano X devices capable of capturing and transmitting recovery phrases, as Ledger investigates fund losses tied to a Southeast Asian distributor.
Ledger has asked reseller CryptoBillis to halt sales after reports that funds were drained from hardware wallets purchased through it, with an on-chain analyst estimating losses near $86 million.
Ethereum co-founder Vitalik Buterin has responded to warnings from researcher Justin Drake about artificial intelligence threatening the cryptographic schemes securing Bitcoin, Ethereum and other networks, pointing to lattice-based systems as the area of greatest near-term concern.
Guardia Civil and Policía Nacional, working with EUROPOL, DEA and Portuguese police, arrested 27 people and seized 1.3 million USDT alongside cash, vehicles, boats and firearms in a cross-border operation targeting a drug trafficking and money laundering network.
The House Oversight Committee has asked Hyperliquid, Crypto.com and PredictIt operator Aristotle Exchange to hand over user-verification and trading-surveillance records, following a leveraged short position that turned a profit of more than $150 million around Donald Trump's tariff announcement.