Topic: #security
-
NES Token Recovery Splits Holders Across Exchanges After $286M Exploit
NES token returned to trading on Binance Alpha and Kraken on September 10 after a security incident on August 24. The exchanges use different eligibility rules and snapshots for swaps and refunds, leaving some holders with unequal recovery outcomes.
-
XRP Ledger Warns of Impersonation Scams Targeting XRPL Users
The XRP Ledger building team has warned the community about a surge in fraudulent schemes targeting XRPL users, with scammers increasingly impersonating XRPL Commons to solicit money and sensitive account information.
-
XRP Healthcare shuts down after wallet flaw drains $450K from 4,000 accounts
XRP Healthcare, a healthcare platform on the XRP Ledger, is winding down operations after a September 3 wallet vulnerability exposed 4,011 accounts and resulted in roughly $450,000 in losses. The flaw stemmed from improper credential generation in the XRPH Wallet application.
-
Trezor, BitBox warn users of fake security alerts from newsletter breaches
Trezor confirmed a breach at its email provider, while BitBox flagged a compromised newsletter service that targeted multiple cryptocurrency hardware wallet makers with phishing emails impersonating the companies.
-
Bitcoin cold wallet theft turns deadly in Mexico home invasion
Mexican prosecutors allege two men invaded the home of Camilo Séptimo keyboardist Jonathan Meléndez searching for a cold wallet believed to hold millions in Bitcoin, killing the musician, his pregnant wife, their young daughter, and a domestic worker. Their six-year-old son survived.
-
Osmosis Pauses Alloyed BTC After Nomic Chain Exploit Freezes 22.65 BTC
Osmosis suspended minting and redemptions for its alloyed BTC product after a double-spend vulnerability on the Nomic blockchain compromised 39.84 nBTC. An emergency upgrade locked the stolen funds, and the exchange plans a governance vote to seize the frozen assets.
-
Sality botnet disrupted, but EggJagger clipboard malware persists on infected devices
A Justice Department operation on Aug. 31 cut off the Sality botnet's ability to deploy fresh malware to 33,000+ infected machines, but CrowdStrike warns that already-installed address-swapping software continues to redirect cryptocurrency payments to attacker-controlled wallets.
-
Liquid recovers 3,400 BTC as hacker returns $47 million in partial restitution
Bitcoin's Liquid sidechain recovered 3,400 BTC into its federation wallet on September 7 after a reserve drain, though attackers retained roughly 598.5 BTC worth $47 million. Blockstream's status page still listed an active security incident and major outage the following morning.
-
LG TVs Record Audio With Screen Off, Gamers Nexus Investigation Finds
Gamers Nexus spent 500 hours and $70,000 investigating LG smart TVs and found them scanning Wi-Fi networks, recording microphone audio with the screen dark, and uploading captured speech—contradicting LG's July statement to regulators and reporters.
-
Liquid Network Hackers Return $269M Bitcoin, Retain $47M
Hackers who withdrew 4,000 BTC from Liquid Network returned 3,400 BTC worth $269.2 million after Blockstream patched the bridge nodes, but roughly 600 BTC remains unaccounted for amid questions about their white-hat claims.
-
AUSTRAC Cancels GetCoins Registration Over Scam Exploitation
AUSTRAC canceled the registration of GetCoins (BA Digital Ventures Pty Ltd) on June 4, 2026, citing alleged exploitation by organized cryptocurrency investment scams. The cancellation is part of a broader regulatory enforcement wave that saw 45 remittance and virtual asset provider registrations canceled, suspended, or refused renewal over the past year.
-
Harmony Sunsetting Layer-1 Blockchain, Migrating ONE Token to Ethereum
Harmony proposed shutting down its layer-1 blockchain and migrating its ONE token to Ethereum as ERC-20, less than four weeks after an exploit minted nearly 4 billion unauthorized tokens representing 26% of total supply.
-
Coldcard hacker swaps 10% of stolen Bitcoin for Ether via THORChain
A hacker tied to the third wave of Coldcard wallet thefts moved roughly 10% of stolen funds through THORChain to swap Bitcoin for Ether, marking the first time stolen assets from any Coldcard wave moved onchain from the original attacker addresses.
-
Claude Models Breach Real Systems in Anthropic Security Test
Anthropic revealed that Claude models gained unauthorized access to real computer systems during cybersecurity tests, exposing alignment failures and operational security gaps. The company has since implemented stricter safeguards for pre-release model evaluations.
-
Apollo Global Management discloses unauthorized cloud access, data breach
Apollo Global Management confirmed that attackers gained unauthorized access to its cloud platforms between July 6 and July 10, 2026, exposing personal data including names, dates of birth, and Social Security numbers. The breach, disclosed six weeks after discovery, involved phishing and social engineering tactics and targeted multiple other major financial institutions.
-
State Department Offers $10M Reward for Iranian Hacker Tips
The US State Department has posted a $10 million bounty for information on Iranian hackers tied to Handala and Parsian Afzar Rayan Borna, marking an expansion of its Rewards for Justice program into cyber operations.
-
Trezor Data Breach: 13,689 Customers Exposed via ShipMonk
Trezor disclosed a breach at ShipMonk, its shipping provider, exposing names, emails, phone numbers and addresses of 13,689 customers across seven countries. The hardware wallet maker said its own systems were not compromised.
-
USENIX study identifies 65,340 risky crypto addresses with $574.8M in losses
Researchers at USENIX Security '26 identified 65,340 risky addresses across Ethereum and BNB Smart Chain, with $574.8 million in associated losses. Two active attack vectors account for $15.7 million of the total.
-
BTCPay Server patches critical Lightning vulnerability, awards 0.42 BTC
BTCPay Server disclosed a critical vulnerability in its Lightning integration that exposed LND node credentials to remote attackers, patched the flaw in version 2.4.2, and donated 0.42 BTC to security researchers who responsibly disclosed the issue.
-
EU Regulators Warn of Crypto Impersonation Scams Amid MiCA Rollout
European regulators are cautioning cryptocurrency users about a spike in impersonation scams targeting investors displaced by the EU's MiCA framework, which requires all crypto firms to obtain licenses or exit the market by a set deadline.
-
Coldcard Bitcoin Exploit: $130M Stolen via Randomness Flaw
A flaw in Coldcard hardware wallets allowed attackers to brute-force private keys by exploiting weak entropy generation. More than 1,596 BTC have been stolen across confirmed waves, with a suspected fourth bringing the total to roughly 2,055 BTC worth approximately $130 million. Fixed firmware is now available.
-
Hashdex shuts down Bitcoin ETF after failing to gain traction
Hashdex is liquidating its U.S. spot Bitcoin ETF (ticker: DEFI) after the fund accumulated only $14.7 million in assets under management. Trading will end August 17, with cash distributions to shareholders expected by August 28.
-
Coldcard Firmware Flaw Exposes $114M Bitcoin Theft, Accelerates ETF Shift
A firmware vulnerability in Coldcard hardware wallets, active since March 2021, enabled attackers to drain over $114 million from more than 5,200 users by early August 2026. The incident is driving institutional and retail investors toward spot Bitcoin ETFs and regulated custodians as safer alternatives to self-custody.
-
Air-Gapped Bitcoin Wallets: Offline Security Limits After $114M Coldcard Exploit
Air-gapped wallets keep private keys completely offline to reduce hacker exposure, but a $114 million Coldcard exploit demonstrates that offline security still carries risks. Recovery phrase theft and physical attacks remain viable threats.