Topic: #hacks
-
Drift exploiter moves $61M in ETH to Tornado Cash, still holds $194M
A wallet tied to the April 1 Drift Protocol hack sent about $61 million in Ether to Tornado Cash on Tuesday, Lookonchain said, while Arkham data showed the exploiter's addresses still held roughly $194 million.
-
Ledger confirms wallet implant as suspected theft estimates reach $93.2 million
Ledger confirmed an unauthorized hardware implant in one affected customer's wallet. Bitquery counts about $93.2 million in suspected thefts, and Ledger's own documentation says Genuine Check can't detect spying implants if the secure element is intact.
-
iVerify says new DarkSword iPhone spyware variant scans phones for crypto wallets
Security firm iVerify disclosed P7 DarkSword, an iPhone spyware variant with functions that search for wallet apps and collect imToken-related data. The firm reported no confirmed crypto theft or losses.
-
Crypto trader Frogman says two wallets drained of about $4M during TOKEN2049
Crypto trader Frogman said two of his wallets were compromised while he attended TOKEN2049 in Singapore, with approximately $4 million in digital assets taken, according to Crypto Briefing.
-
Drift Protocol opens DFX redemptions at about one cent per USDT of verified loss
Drift Protocol opened DFX claims and redemptions on Oct. 1. Its launch rate was about 0.0104 USDT per token from a roughly 3.1 million USDT pool, which CryptoSlate calculates at near 1% of verified losses.
-
THORChain and NEAR Intents split over blocking Bitget hack funds
THORChain refused Bitget's request to block addresses tied to its Sept. 24 hack, while rival NEAR Intents stopped $503,000 in linked flows, Cointelegraph Magazine reported, reopening a debate over permissionless design.
-
Crypto hacks top $2.68 billion in 2026 as five incidents drive 59% of losses
Crypto firms and users have lost nearly $2.7 billion to security incidents in 2026, according to CertiK data reported by CryptoSlate. September was the costliest month, and five incidents account for almost 59% of the total.
-
Crypto hack losses hit $768M in September, led by $388M Bitget breach, CertiK says
Crypto lost more than $766 million to hacks in September, according to PeckShield and CertiK, with a $388 million Bitget breach and a $320 million Liquid Network exploit making up most of the total.
-
Bitget says BTC withdrawals are open after $387.5M hot wallet breach
Bitget said it opened BTC withdrawals on the Bitcoin network on Sept. 28. It's the first stage of a phased reopening after a hot wallet breach the exchange now estimates at approximately $387.5 million.
-
Bitget Resumes Bitcoin Withdrawals After $387.5M Breach Disclosure
Bitget restarted Bitcoin withdrawals four days after a $387.5 million breach, with CEO Gracy Chen disclosing that attackers exploited third-party vulnerabilities to steal internal credentials. The exchange's cold wallets and user balances remained unaffected.
-
Bitget $387.5M breach: Sygnum shields institutions while retail freezes
Bitget's $387.5 million breach on September 24 triggered a withdrawal freeze, but Sygnum's Swiss bank custody service let institutional clients trade with collateral held off-exchange—a protection unavailable to retail traders.
-
DeFi Audits Miss 72% of Attack Vectors, $885M Study Reveals
A preprint by ack3-affiliated researchers examining 135 DeFi incidents in H1 2026 found that 72.1% of losses in audited protocols came from attack paths never covered by their security reviews, raising questions about what an audit actually guarantees.
-
NES Token Recovery Splits Holders Across Exchanges After $286M Exploit
NES token returned to trading on Binance Alpha and Kraken on September 10 after a security incident on August 24. The exchanges use different eligibility rules and snapshots for swaps and refunds, leaving some holders with unequal recovery outcomes.
-
Liquid recovers 3,400 BTC as hacker returns $47 million in partial restitution
Bitcoin's Liquid sidechain recovered 3,400 BTC into its federation wallet on September 7 after a reserve drain, though attackers retained roughly 598.5 BTC worth $47 million. Blockstream's status page still listed an active security incident and major outage the following morning.
-
USENIX study identifies 65,340 risky crypto addresses with $574.8M in losses
Researchers at USENIX Security '26 identified 65,340 risky addresses across Ethereum and BNB Smart Chain, with $574.8 million in associated losses. Two active attack vectors account for $15.7 million of the total.
-
Crypto hacks hit record 207 in H1 2026, but smart contracts aren't the main target
The first half of 2026 saw 207 separate crypto hacks—the most in any six-month period—yet total losses fell to $972 million, less than half of H1 2025's $2.3 billion, as attackers increasingly target infrastructure and operational systems rather than smart-contract code.
-
Zcash Orchard exploit reveals cryptographic supply integrity gap
A security researcher at Shielded Labs discovered a critical exploit in Zcash's Orchard protocol using AI on May 29, which could have generated unlimited counterfeit ZEC. Zcash executed emergency forks within days, but the privacy design makes proving the supply was never tampered with cryptographically difficult.