security

Crypto lending markets recovered to $56 billion in total value locked since July, prompting leading protocols to adopt holistic security frameworks against cross-chain risks following the $290 million Kelp DAO exploit.

Tether and Circle froze $1.79 billion in USDT and USDC following suspicious outflows from Binance hot wallets during a platform investigation

The Oct. 29 incident surpasses Bybit's $1.5 billion February 2025 breach as the largest reported cryptocurrency theft by dollar value

On-chain data shows stablecoin issuers deployed blacklist functions following suspicious movements from exchange hot wallets, exposing structural centralization risks.

Supply chain attack on hardware wallets purchased locally has compromised at least two users; Ledger halts regional reseller sales

Lending markets have rebounded since July after Q2 outflows, with Aave, Spark, and others implementing cross-chain risk audits following the Kelp DAO exploit.

Third-party analytics vendor compromise exposed customer contact data, but Coinbase confirms no breach of its own infrastructure or user funds

Crypto lending has rebounded 55% since July, but protocols are hardening defenses against cascading failures across bridges, oracles, and wrapper tokens.

Q2 outflows of $11.33 billion, triggered by the Kelp DAO exploit, prompt protocols to scrutinize cross-chain collateral and external dependencies.

The Layer-1 network resumed processing after an attacker drained QU tokens from 1,404 accounts using predictable wallet seeds from insecure web wallet software.

Starknet analysis identifies massive Bitcoin trove in addresses with exposed public keys as quantum computing threat accelerates.

The lending sector has recovered sharply since July, but major platforms are overhauling security frameworks after the Kelp DAO exploit revealed systemic vulnerabilities across bridges and collateral dependencies.

Pascal Gauthier says improved disclosure would not have prevented losses from tampered hardware wallets, dismissing the former Mt. Gox CEO's critique.

The former Mt. Gox CEO said Ledger received reports of compromised hardware wallets but issued no public alerts to users.

Lending protocols are overhauling security frameworks to address risks beyond smart contracts following the $290 million Kelp DAO hack in April.

Stolen assets from the Ledger incident moved into Tron's USDD stablecoin, bypassing Tether's freeze mechanisms through decentralized swaps.

Institutional ETF inflows accelerate amid bull market, but security incidents reached $768.5 million in September alone—the worst month of 2026.

Theft and financial fraud linked to stolen phones have become a major security concern for Brazilians ahead of Sunday's presidential election

Bitget and Liquid Network attacks accounted for over 92 percent of losses, leaving $495.8 million unrecovered.

Apple released iOS 26.7.1 and other updates to address CVE-2026-86950, a vulnerability actively used in sophisticated attacks against specific individuals.

The upgrade allows protocols to add custom security checks for cross-chain transfers, addressing single-verifier vulnerabilities that led to the $292 million DeFi hack.

The exchange transferred $169 million in Bitcoin from its Protection Fund to operational hot wallets ahead of phased withdrawal reopenings after a $387.5 million security incident

Stale token approvals from Magic Eden's discontinued EVM marketplace enabled an exploit of Limit Break's Payment Processor V2, forcing a whitehat rescue of over 23,000 NFTs.

Scammers deployed nine identical YouTube tutorials, tricking 224 victims into deploying 234 malicious smart contracts that executed token-draining code at compile time.

The deal integrates OpenZeppelin's smart contract auditing into S&P Global's risk framework, covering $37 trillion in stablecoin and tokenized fund volume.

The cross-chain liquidity protocol halted its native Bitcoin routes after an attacker exploited its BridgeV2 contract on BNB Chain, minting 46.1 billion syBTC with no backing.

Israel's political spectrum is defined primarily by positions on Palestinian statehood, territorial control, and security — a contrast to Western democracies where left-right divisions center on economic and social policy

A Sept. 6 exploit drained $320 million in Bitcoin from Liquid; attackers returned 85 percent but retained 598.5 BTC, raising questions about whether the recovery was legitimate.

Ethereum co-founder Vitalik Buterin dismissed angel investor Liron Shapira's prediction that AI could halve Bitcoin's price by breaking SHA-256, citing decades of cryptographic scrutiny and asymmetric computational costs favoring defenders.

Hardware wallet breach accounting for at least $100 million in stolen Bitcoin pushed July to the second-worst month of 2026 for crypto losses.

The chain froze block production Aug. 31 following a routine security review; developers are investigating before restart.

A rounding vulnerability in Balancer's non-pausable V1 contracts allows full LP drainage, leaving users responsible for withdrawing their own capital before attackers strike.

The Layer-1 identity chain stopped processing transactions Aug. 31 following a routine developer review, with no confirmed exploit or timeline for resumption

A hardware wallet breach affecting 7,300 wallets made July the second-worst month for stolen digital assets in 2026, trailing only April's $644 million

The hardware wallet breach affected 7,300 wallets and accounted for over $100 million of July's total stolen assets, the second-worst month for losses this year.

Coinkite's security update requires user-generated randomness for new seeds and patches critical vulnerability that let attackers reconstruct weak keys from 8,600+ addresses.

A breach of Coldcard hardware wallets hit 7,300 Bitcoin addresses across three attack waves, with other major protocols and bridges also targeted in the month's second-worst security toll of 2026.

OpenAI's opt-in macOS screen-capture feature for its Codex agent stores memories unencrypted and sends data to company servers, echoing Microsoft's battered Recall rollout.

On-chain losses hit $247.4 million in July, led by a Coldcard hardware wallet breach topping $100 million and attacks on multiple DeFi protocols and bridges.

A firmware bug in Coldcard hardware wallets let attackers drain funds from over 5,200 addresses starting July 30, with total losses now exceeding initial estimates.

An Aug. 9 attack stripped more than $8 million from Coinsbuy wallets, with 79 percent of stolen funds routed through FixedFloat and ChangeNOW.

A critical payment-validation vulnerability in the open-source Bitcoin processor allows invoice manipulation, forcing administrators to install version 2.4.2 or shut down immediately.

The open-source Bitcoin payment processor is urging all operators to immediately update to version 2.4.2 or take servers offline to block an active exploit draining funds

Hackers exploited a firmware defect in Coldcard hardware wallets, draining an estimated $130 million in Bitcoin; manufacturer Coinkite cannot verify the total due to its privacy-first design.

Coinkite will publish a technical post-mortem on a Coldcard firmware vulnerability as outside researchers estimate customer losses at $130 million.

The 1TS initiative grants Freedom of the Press Foundation funding to develop an open-source tool that verifies website code against what developers originally published.

Jeanine John Taele, 38, was found with a concealed firearm and armor-piercing ammunition after photographing security at the Rancho Palos Verdes course ahead of Trump's arrival

The non-custodial swap service halted operations indefinitely after months of automated, AI-driven probing outpaced its small development team's ability to patch vulnerabilities.

The hardware wallet maker urged users to migrate funds from devices running specific firmware versions, as researchers separately tracked a 594.48 BTC theft worth $38 million.

Blockaid detected the theft from AFX, a third-party protocol on Arbitrum, while Offchain Labs confirmed its native bridge was not compromised.