Topic: #security
-
Coldcard firmware exploit drives bitcoin holders back to exchanges
A firmware vulnerability in Coldcard hardware wallets triggered $70–$90 million in losses and prompted retail bitcoin holders to move smaller balances onto centralized exchanges for safety, marking a sharp reversal from the self-custody migration that followed the FTX collapse.
-
Former BNB Chain Employee Deploys ASTEROID Token, Exits With $638K
A former BNB Chain employee deployed the ASTEROID token, acquired 79.67% of the supply for $10,000, and sold 718.8 million tokens for $628,000–$638,000 before the token crashed 50% in 20 minutes. BNB Chain initiated legal action and denied any affiliation.
-
XRP Ledger 3.2.1 fixes manifest flood affecting nodes
XRP Ledger developers released a major software update to address a manifest flood that impacted nodes on Friday, July 31. The upgrade restricts how nodes handle validator manifests to prevent similar incidents.
-
1,082 BTC stolen from Coldcard wallets via weak seed generation
Galaxy Research mapped a 41-minute attack on July 30 that drained 1,082.65 BTC from 1,196 Coldcard wallets by exploiting weak seed generation. The attacker never accessed the devices themselves—instead, they recreated private keys offline by brute-forcing roughly four billion possibilities.
-
Block Discloses Critical Coldcard Vulnerabilities Affecting Bitcoin Hardware Wallets
Block disclosed two critical security flaws in Coldcard hardware wallets (Mk2, Mk3, Mk4, Q, Mk5) that allowed remote theft of Bitcoin. Researchers identified over 1,082 BTC potentially stolen and warned the attack campaign remains active.
-
$972M Crypto Hacks Shift to Keys and Governance Over Code Bugs
Crypto has lost roughly $972 million to hacks in 2026, but most theft now flows through compromised signing keys and governance exploits rather than smart contract vulnerabilities, according to Immunefi's analysis of five years of breach data.
-
Claude AI Discovers Faster Attacks on HAWK and AES Cryptography
Anthropic's Claude AI model identified improved attacks against multiple cryptographic algorithms, including HAWK and AES, in a demonstration of how frontier AI can uncover mathematical weaknesses that escaped human review. The company published findings after following responsible disclosure procedures.
-
Apple kept fake Sparrow Wallet app on App Store after $875K theft report
A federal lawsuit filed in July alleges Apple failed to remove a fraudulent bitcoin wallet app from its App Store despite a customer reporting an $875,000 theft, resulting in a second user losing roughly $840,000.
-
SparkKitty malware infiltrates App Store and Google Play, targets crypto wallets
Security researchers have detailed how SparkKitty malware, first discovered in June 2025, spread through Apple and Google's official app stores by disguising itself as legitimate cryptocurrency and messaging apps, then scanned device photos for wallet recovery phrases.
-
Quantum threat to crypto isn't cryptography—it's governance speed
As quantum computing milestones accelerate, cryptography experts argue Bitcoin and decentralized blockchains face a unique vulnerability: the inability to achieve consensus fast enough to deploy quantum-resistant defenses before a cryptographically relevant quantum computer emerges.
-
AI Chatbots Amplifying Russian Propaganda, NewsGuard Audit Finds
A March 2025 audit by NewsGuard revealed that leading AI chatbots repeated false narratives from the Pravda network about 33% of the time, with seven models directly citing Pravda-affiliated sites. The discovery has prompted European officials to flag risks ahead of upcoming elections.
-
Crypto home invasions surge 20-fold in H1 2026, CertiK reports $124M losses
CertiK's H1 2026 wrench-attack report documents a 20-fold surge in crypto-related home invasions, with 52 verified incidents and $124.1 million in losses and ransom demands. Europe and France account for the majority of recorded cases.
-
North Korea arrests elite hackers for stealing regime funds via crypto
According to Daily NK, North Korean authorities arrested a group of elite state-trained hackers accused of stealing and laundering the regime's own funds through cryptocurrency. The report cites an anonymous source inside Pyongyang and cannot be independently verified.
-
Robinhood CEO's X account hacked to promote fake $VLAD memecoin
Vlad Tenev's X account was compromised Thursday and used to promote Vladhood ($VLAD), a fake memecoin falsely claiming Robinhood app listing. The incident highlighted rising memecoin activity on Robinhood's newly launched blockchain, which has attracted $700 million in assets.
-
Wrench Attacks on Crypto Holders Surge to $124M in Six Months
CertiK documented 52 wrench attacks in the first half of 2026, a 33% increase from a year earlier, with recorded losses climbing nearly 12-fold to $124.1 million. Home invasions now account for 41% of incidents, and France represents roughly 64% of global cases.
-
Airbnb CEO Brian Chesky's X Account Hacked, Posts Crypto Thread
Brian Chesky's X account was compromised earlier this week and used to publish a lengthy thread praising real-world asset tokenization. Chesky responded with a lighthearted remark, though some social media users questioned whether the account had actually been hacked.
-
Ostium halts trading after oracle exploit drains $23.7M USDC
Ostium halted all trading on July 15 after a compromised oracle signer key allowed an attacker to fabricate price data and drain up to $23.7 million from its liquidity vault, highlighting critical gaps in DeFi protocol security beyond smart contract audits.
-
Bonzo Lend exploited for $9M via oracle signature flaw on Hedera
A wallet exploited a flaw in Bonzo Lend's price oracle verifier, submitting a signature with zero values that the system mistakenly validated. The exploit allowed $9.05 million in unauthorized borrowing against 250 SAUCE tokens worth only a few dollars, forcing the protocol to pause all withdrawals.
-
Ethereum AI discovers validator bug, but humans must verify findings
The Ethereum Foundation deployed AI agents to hunt for bugs in validator software and discovered a remotely triggerable crash (CVE-2026-34219). But most of the work went into separating genuine vulnerabilities from confident-sounding false positives.
-
Ethereum trader loses $1M to phishing token approval scam
A crypto user lost nearly $1 million in USDT after signing a malicious token approval on Ethereum. The incident highlights approval phishing as a dominant attack vector in 2025, when onchain scams pulled in at least $14 billion.
-
Ctrl Wallet shutting down August 3 after June security exploit
Ctrl Wallet announced it will cease all operations on August 3, 2026, weeks after a June 23 security exploit affecting Cardano wallets. Users have until then to withdraw assets or export their recovery phrases to compatible wallet providers.
-
Solana's Bonk DAO Loses $20M in Governance Attack
BonkDAO, the decentralized organization behind the Solana-based Bonk meme coin, suffered a $20 million treasury drain through a malicious governance proposal. More than 4.4 trillion BONK tokens were stolen in the exploit, and law enforcement has been notified.
-
Summer.fi pauses Lazy Summer vaults after $6M flash loan exploit
DeFi protocol Summer.fi halted its Lazy Summer yield vaults after a flash loan attack drained approximately $6 million from the Ethereum platform. The protocol's SUMR token fell over 18% following the exploit.
-
Ill Bloom Vulnerability Drains $5M From Thousands of Crypto Wallets
Coinspect identified a critical vulnerability affecting thousands of wallets across Bitcoin, Ethereum, Polygon, and other chains. The "Ill Bloom" exploit stems from weak recovery phrase generation in certain software wallets, with at least $5 million drained since May 27.