Security

Coinkite's security update requires user-generated randomness for new seeds and patches critical vulnerability that let attackers reconstruct weak keys from 8,600+ addresses.

A breach of Coldcard hardware wallets hit 7,300 Bitcoin addresses across three attack waves, with other major protocols and bridges also targeted in the month's second-worst security toll of 2026.

OpenAI's opt-in macOS screen-capture feature for its Codex agent stores memories unencrypted and sends data to company servers, echoing Microsoft's battered Recall rollout.

On-chain losses hit $247.4 million in July, led by a Coldcard hardware wallet breach topping $100 million and attacks on multiple DeFi protocols and bridges.

A firmware bug in Coldcard hardware wallets let attackers drain funds from over 5,200 addresses starting July 30, with total losses now exceeding initial estimates.

An Aug. 9 attack stripped more than $8 million from Coinsbuy wallets, with 79 percent of stolen funds routed through FixedFloat and ChangeNOW.

A critical payment-validation vulnerability in the open-source Bitcoin processor allows invoice manipulation, forcing administrators to install version 2.4.2 or shut down immediately.

The open-source Bitcoin payment processor is urging all operators to immediately update to version 2.4.2 or take servers offline to block an active exploit draining funds

Hackers exploited a firmware defect in Coldcard hardware wallets, draining an estimated $130 million in Bitcoin; manufacturer Coinkite cannot verify the total due to its privacy-first design.

Coinkite will publish a technical post-mortem on a Coldcard firmware vulnerability as outside researchers estimate customer losses at $130 million.

The 1TS initiative grants Freedom of the Press Foundation funding to develop an open-source tool that verifies website code against what developers originally published.

Jeanine John Taele, 38, was found with a concealed firearm and armor-piercing ammunition after photographing security at the Rancho Palos Verdes course ahead of Trump's arrival

The non-custodial swap service halted operations indefinitely after months of automated, AI-driven probing outpaced its small development team's ability to patch vulnerabilities.

The hardware wallet maker urged users to migrate funds from devices running specific firmware versions, as researchers separately tracked a 594.48 BTC theft worth $38 million.

Blockaid detected the theft from AFX, a third-party protocol on Arbitrum, while Offchain Labs confirmed its native bridge was not compromised.

The massive exploit reveals vulnerabilities in liquid restaking protocols, forcing a shift toward institutional-grade security and investor protection

Kraken discontinues support for LayerZero-based assets, re-evaluating cross-chain security after the Kelp DAO breach drained $292 million in April

Post-quantum cryptography solutions exist, but coordinating simultaneous migration across entire Bitcoin network presents massive logistical challenge

A serious security incident involving an armed individual at the White House Correspondents' Dinner has ignited concerns over presidential protection and could reshape the legislative agenda.

A Bitcoin holder lost 5.92 BTC after downloading a malicious Ledger application, highlighting vulnerabilities in digital asset security

Despite $52 million in exploit losses reported by PeckShield for March, on-chain metrics and institutional capital flows indicate a maturing crypto market increasingly compartmentalizing security incidents rather than succumbing to systemic fear.

A critical vulnerability in Zcash's legacy node software, now patched, could have enabled attackers to drain substantial ZEC from a deprecated shielded pool, highlighting ongoing protocol security challenges.