Topic: #security
-
Coldcard investigating how phishing link appeared on its official X account
Bitcoin-only hardware wallet maker Coldcard said a phishing link appeared Sunday on its official X account and that it's investigating how the since-deleted post was published.
-
Ledger probes CryptoBilis wallet loss reports; Bitcoin insurer Meanwhile raises $37.5M
Ledger told Southeast Asian reseller CryptoBilis to pause sales while it investigates reported wallet losses. Bitcoin life insurer Meanwhile raised $37.5 million, and ESMA opened a review of tokenized collateral.
-
XRP Ledger patches 2015-era bug that could have created new XRP from nothing
A flaw in the XRP Ledger's payment system, believed to date to 2015, could have let an attacker create new XRP without paying for it, according to a security report. RippleX said it found no evidence of exploitation.
-
Ledger theft-linked wallet swaps 14.7M USDT to USDD, beyond Tether's freeze reach
A wallet tied to thefts from Ledger hardware wallet users swapped roughly 14.7 million USDT into USDD on October 9, according to on-chain investigators, moving the funds outside Tether's freeze controls.
-
Dragonfly's Qureshi calls 'bunker mode' doomerism, pitches cryptographic recovery plan
Dragonfly's Haseeb Qureshi called Justin Drake's "bunker mode" warning "cryptographic doomerism," saying fresh-address migration won't protect users if AI breaks signatures, and urged proactive blockchain measures.
-
DWF Labs units sue BitGo for $114M in London over alleged token lock-up breach
Two DWF Labs subsidiaries have sued BitGo in London's High Court, alleging the custodian sold discounted FF and ESPORTS tokens before a lock-up ended and seeking $114 million, the FT reported.
-
London SIM-swap fraudster jailed for 2.5 years for role in almost £200,000 crypto theft
Ajay Shinjin, 25, was jailed for two and a half years for his role in a SIM-swap fraud that stole almost £200,000 (about $265,000) in crypto, City of London Police said.
-
U.S. government wallets move $1 billion in Bitfinex-hack bitcoin, no exchange deposit
Wallets linked to the U.S. government moved 12,267 bitcoin worth about $1.01 billion on Thursday, Arkham data shows, sending the coins to unlabeled addresses rather than an exchange, CoinDesk reported.
-
Europol urges crypto industry to start quantum-resistant wallet upgrades now
Europol's Oct. 7 report urges crypto developers, wallet providers and users to start a phased move to quantum-resistant cryptography, warning that the migration could take years even though the threat doesn't exist yet.
-
Binance's CZ responds to Vitalik Buterin's AI security warning, U.Today reports
Binance founder Changpeng Zhao responded to Vitalik Buterin's warning about AI-enhanced risks to crypto security, U.Today reported. Neither founder has announced a partnership or any plan to work together.
-
CrowdStrike says South Korean bank hacker likely operated from China
CrowdStrike assessed that a Chinese-speaking hacker it didn't tie to any organized group likely ran attacks on South Korean banks from China, using AI tools including ARTEX and Claude, Crypto Briefing reported.
-
Europol says quantum computing won't break Bitcoin but flags exposed wallets
Europol's EC3 said on October 7 that cryptocurrencies won't collapse due to quantum computing, but estimated 6 to 6.9 million BTC sit in addresses with already-exposed public keys.
-
Vitalik Buterin sees 'good chance' AI compromises lattice cryptography within two years
Ethereum co-founder Vitalik Buterin said there's a "good chance" AI-driven math advances compromise lattice-based cryptography within two years, Crypto Briefing reported, naming ML-DSA and FHE as at risk.
-
Ethereum's Justin Drake urges crypto 'bunker mode' over AI risk to ECDSA
Ethereum researcher Justin Drake said in an X post that AI advances could eventually make it possible to break ECDSA, the algorithm securing crypto wallets, and recommended a gradual move of assets to fresh addresses.
-
Ethereum researcher Justin Drake warns AI could break crypto signatures before quantum
Ethereum Foundation researcher Justin Drake urged the industry to calmly plan for "bunker mode," moving funds to fresh addresses, saying AI might crack ECDSA signatures before quantum computers do.
-
Ethereum Foundation's Justin Drake proposes 'bunker mode', warning AI could break ECDSA
Ethereum Foundation researcher Justin Drake urged crypto holders on X to move assets to fresh addresses, warning AI could break ECDSA 'months not years' before quantum computers, Crypto Briefing reported.
-
Crypto trader Frogman says two wallets drained of about $4M during TOKEN2049
Crypto trader Frogman said two of his wallets were compromised while he attended TOKEN2049 in Singapore, with approximately $4 million in digital assets taken, according to Crypto Briefing.
-
CertiK Intel3D report says AI agents can trace stolen crypto, humans stay accountable
CertiK's Intel3D report argues autonomous AI agents can trace stolen crypto across chains and pause vulnerable contracts, while insisting every agent has a human owner accountable for its decisions.
-
Drift Protocol opens DFX redemptions at about one cent per USDT of verified loss
Drift Protocol opened DFX claims and redemptions on Oct. 1. Its launch rate was about 0.0104 USDT per token from a roughly 3.1 million USDT pool, which CryptoSlate calculates at near 1% of verified losses.
-
THORChain and NEAR Intents split over blocking Bitget hack funds
THORChain refused Bitget's request to block addresses tied to its Sept. 24 hack, while rival NEAR Intents stopped $503,000 in linked flows, Cointelegraph Magazine reported, reopening a debate over permissionless design.
-
bitFlyer adds 48-hour crypto transfer hold for users verified within 90 days
Japanese exchange bitFlyer said that from October 15, 2026, users who completed KYC less than 90 days earlier will face a 48-hour restriction on sending crypto bought with new yen deposits off the platform.
-
Aave founder says v3 unaffected after third-party adapter exploit drains $305K
An attacker drained about $305,000 from two Safe multisig wallets through a third-party adapter built on Aave, according to SlowMist. Aave founder Stani Kulechov said on X that Aave v3 itself was unaffected.
-
Zano exploiter minted 36.9M unauthorized ZANO before month-long chain rollback
Zano's post-mortem says an attacker used a Gateway Address bug to create 36.9 million ZANO in two mints on Aug. 29 and Sept. 25, then fUSD. The coins couldn't be told apart from real ZANO, which is why the team rolled the chain back.
-
NEAR Intents says it identified $3.8M exploiter, sets 48-hour return deadline
NEAR Intents GM Alex Shevchenko said on X that the protocol had identified the person behind Thursday's $3.8 million breach and gave them 48 hours to return the funds under "responsible disclosure."