Hacks, exploits and how to stay safe.
It has been 35 days since an attacker exploited a vulnerability in the Liquid Network’s Elements software, draining nearly 4,000 BTC from the protocol, and although 3,400 BTC has since been recovered, redemptions of LBTC for actual bitcoin remain suspended as an independent external security audit of Elements v23.3.4 is underway
Bitcoin-only hardware wallet Coldcard said an unauthorized phishing link appeared Sunday on its official X account, which the company said it has used offline two-factor authentication with tightly restricted access since 2017
CoinDesk’s review of transaction records found that 2,746 ZEC entered Ironwood, Zcash’s newest shielded pool, in three transfers between 08:15 and 08:46 UTC
A crypto scam courier was sentenced after Alabama officers arrested him in a sting involving a supposed $300,000 payment. The case also details how an older resident kept sending money to strangers despite authorities’ intervention
The Chinese government has released a two-hour, three-part series, designed to expose more of the public to the horrors occurring via pig butchering scams on the southern border
Local reports indicated that the gang held the unidentified foreigner at gunpoint, restrained him, and forced him to transfer the cryptocurrency to the wallet of one of the perpetrators, who sold it immediately. The attackers also took cash and three luxury watches from the victim
An Ohio woman recovered her entire loss after a fake Microsoft support call directed her to send money through a crypto ATM. The case illustrates how computer warnings can become payment demands that move cash into fraudsters’ digital wallets
A crypto-only dark web marketplace has brought its co-founder decades in federal prison and an agreement to surrender digital assets and real estate. The case involved drug trafficking, concealed payments, and vendor ratings for hiding shipments
The five-day burst pushed monthly income to its highest since March 2025 while wallet growth barely moved
A joint French-U.S. law enforcement operation shut down a platform selling stolen intimate images of women and underage girls. Authorities also seized over $783,000 in crypto assets, including bitcoin
Cardano wallet firm SecondFi finally launched a recovery portal for victims of the neo-finance platform’s $21 million hack, but will only pay roughly $8 for every unrecoverable NFT taken
A legacy MakerDAO auction-keeper contract has been exploited for over $500,000, with the exploit reaching back to Black Thursday in 2020
A Manhattan federal jury convicted cybersecurity consultant Jonathan Spalletta on Wednesday of computer fraud and money laundering over the 2021 Uranium Finance attacks. Inner City Press, reporting from the courthouse, said jurors returned guilty verdicts on both counts after beginning deliberations Tuesday afternoon. Prosecutors accused Spalletta of draining roughly $53.3 million, laundering millions through…
Members of Donald Trump’s close staff are among 3,615 Trump Mobile customers whose data was leaked last week by ransomware group BYOD
Investors face rising scams built on personal trust and borrowed authority as regulators across six continents participate in World Investor Week. The SEC’s new warning highlights relationship investment fraud and impersonation, including increasingly convincing artificial intelligence (AI)-assisted deception
On-chain data providers have confirmed that a large amount of assets were stolen from a vault on the Base network. Here's what's known
A $6 million crypto vault was drained on Base on Oct. 4, yet the strangest part may be who owned it. Nobody publicly knows. Security firms traced about 1,783 wstETH out of the vault, while onchain records point to an anonymous seven-signer Safe. Base itself wasn’t hacked, Aave’s core contracts haven’t been blamed, and the vault’s owner still hasn’t come forward
Does Clippy have a meme coin? No, but followers of Microsoft’s X account might have thought so on Thursday when the tech giant’s access was hijacked to promote an unauthorized crypto token
Aave founder Stani Kulechov said Aave v3 was unaffected by an exploit that drained roughly $305,000 from two Safe multisig wallets through a third-party adapter built on top of the lending protocol
Researchers traced a $459,000 wallet drain to an address that previously funded 27 trades through the same bot, raising questions about how its private keys escaped
“We have identified you, sir,” NEAR Intents general manager Alex Shevchenko said in an X post on Friday, as he shared three different wallet addresses to receive Bitcoin, BNB and Solana
Reviewed by Reviewed by Jibin Mathew George Updated 11:42 EDT October 1, 2026 Share Share Share Back to Top NEAR Intents temporarily stopped its services after discovering a security flaw that caused an estimated $3.8 million loss
Crypto suffered its worst month of the year for hacks and exploits in September, with two blockchain security firms estimating losses at more than $766 million
SlowMist traced the earliest logged malicious activity linked to Bitget’s $388 million theft to Aug. 31, when an attacker exploited a zero-day vulnerability affecting a third-party security product
Crypto and stock headlines in one email — when the desk moves.
