13 articles
The fake alert claimed an STM32 entropy flaw in about one in four devices, a lure that lands harder six weeks after a real entropy bug drained 594 bitcoin from Coldcard wallets. BitBox users received near-identical mail the same day.
Cosmos Labs cleared the underflow in April after testers could not reproduce it on live configurations. The fix finally shipped on 19 August, under a release note that named nothing, and validators had twenty hours.
Avici's card-issuing partner Rain traced the theft to an outdated version of its Solana contract. The attacker registered himself as an administrator on 1,685 collateral accounts; every one of them will be refunded in full.
The upgrade also lifts testnet throughput from 1,237 to 2,324 transactions per second and tightens the rules on how validator keys are retired.
The third sweep, spanning Friday to Saturday, split roughly 208 BTC across 293 separate P2WSH vaults — a shape change that made it far harder to trace than the first two.
An attacker minted roughly 1,000 unbacked eBTC worth $76.7 million on Echo Protocol's Monad deployment by compromising a single admin key, though the realised loss was around $816,000 after the team regained control and burned the remaining tokens.
Binance launched Withdraw Protection on May 4, letting users freeze their account against on-chain withdrawals for up to seven days. A stricter lockdown mode disables early unlocking entirely. The feature exists because verified physical coercion attacks against crypto holders rose 75 per cent last year.
A vulnerability in Litecoin's MimbleWimble Extension Block allowed attackers to forge invalid peg-out transactions and attempt double-spends, triggering the deepest chain reorganisation in the network's history. GitHub commits show developers had a fix weeks before the exploit landed.
Crypto protocols have lost $606 million to exploits in the first 18 days of April, driven by two enormous bridge attacks attributed to North Korea's Lazarus Group, making it the worst month for crypto security since the Bybit breach in February 2025.
The hardware wallet maker appointed Ian Rogers as its first 'Chief Human Agency Officer' and unveiled a phased AI security roadmap — a bet that autonomous crypto agents will need physical hardware to keep humans in the loop.
The foundation's new subsidy programme covers up to 30 per cent of audit costs for any Ethereum mainnet team, with more than 20 firms including Certora, Quantstamp and Spearbit ready to take on the work.
The 2025 Nobel laureate and Qolab co-founder warns that elliptic curve cryptography — the backbone of Bitcoin's security — is among the easiest targets for a sufficiently powerful quantum computer, giving the network a five-to-ten-year window to prepare.
The NiceHash mining marketplace suffered a major security breach in December 2017, with attackers stealing approximately 4,700 bitcoins worth $64 million through a sophisticated spear phishing attack that compromised company systems.
