Security news
-
Sigma Prime Releases High-Priority Lighthouse Security Update
Vulnerability details will follow once operators have had time to upgrade. The release introduces no breaking changes.... Read the full story at The Defiant
-
Fireworks Says Breach Exposed Billing Data, Datasets and Incomplete Model Weights
The company disabled self-service dataset transfers for batch inference and dataset-based training, while reporting no detected impact to its Inference service or Training SDK.... Read the full story at The Defiant
-
North Korean hackers create memecoins to launder funds from Binance hack: Elliptic
The blockchain firm traced stolen funds through six new tokens on NEAR, where hackers used liquidity pools to obscure transfers between wallets.
-
Attackers Exploit Alpine SSH Password-Bypass Flaw
GreyNoise reports successful exploitation, while Previdian logged 20 attempts. Alpine operators need to patch and restart SSH, or disable password authentication.... Read the full story at The Defiant
-
Binance Hack Launderers Mint Elon Musk and Animal Meme Coins to Move Stolen Crypto
Elliptic says the hackers are minting their own worthless tokens—complete with cartoon animal and Elon Musk logos—and routing stolen funds through liquidity pools to break the trail.
-
Mercado Bitcoin begins post-hack reopening without a timeline for withdrawals
Customers can view their pre-hack balances as access returns in phases. The exchange has yet to say when withdrawals will resume.
-
North Korea launders Binance funds with Elon Musk memecoin, report
North Korea-linked hackers who stole $6.4 billion from the world's biggest crypto exchange Binance are reportedly laundering the stolen funds using TRON, Solana, and NEAR-based memecoins. Crypto security analysts at Elliptic claim to have linked around $430,000 worth of NEAR to the creation of six...
-
North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot
Bitcoin Magazine North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot North Korean launderers are creating their own worthless meme coins and pushing stolen Binance funds through them so the coins never move directly from one wallet to another, blockchain analytics firm Elliptic...
-
Nvidia Board Opens Huang Investigation as CEO Admits Infidelity
Independent directors will oversee the review with outside counsel's help. The board backed Huang and said it had no reason to believe national security or company secrets were compromised.... Read the full story at The Defiant
-
BlackRock: Security Fears Are Driving Bitcoin Whales Into IBIT
Bitcoin Magazine BlackRock: Security Fears Are Driving Bitcoin Whales Into IBIT Large bitcoin holders are swapping coins they guard themselves for shares of BlackRock's iShares Bitcoin Trust (IBIT) at a record pace, the firm's head of digital assets said Monday, as kidnappings and hacks push...
-
Binance hack launderers mint homemade Elon Musk, animal memecoins to move stolen funds: Elliptic
Elliptic says the extra swaps slow investigators down, but the stolen funds remain traceable onchain.
-
North Korean hackers are creating memecoins to wash loot from $6.3 billion Binance hack
North Korean hackers used six homemade memecoins to launder 117,000 NEAR, worth about $430,000, from the $6.3 billion Binance hack, Elliptic says.
-
Analysts see no broader ‘contagion’ from $6.3B Binance hack
Binance’s pledge to cover all user losses helped contain the fallout from the $6.3 billion hack, analysts said.
-
Mercado Bitcoin Begins View-Only Reopening After Hack
The exchange says it is replacing stolen assets with company funds, while payments and trading will return in later phases.... Read the full story at The Defiant
-
The $2.85B Binance hackers lost shows why the UK needs stablecoin freeze rules
The Binance hack proved stablecoin freezes work. Now the UK should make clear freeze rules a condition of listing coins.
-
PeckShield Flags $45.3 Million ETH Long With Possible UXLink Exploit Link
A later dashboard snapshot showed about $44 million in ETH exposure and an unrealized loss of roughly $652,000.... Read the full story at The Defiant
-
Ankr Ethereum Bridge Loses More Than $303,000 in Five-Transaction Exploit
The contract remained unpaused after withdrawals referencing a small Optimism deposit that had already been redeemed.... Read the full story at The Defiant
-
Binance Says 335.9 Million-Record Breach Claim Is Likely a Scam
The exchange cites inconsistencies in a listing seeking $900,000 for purported identity documents, credentials and private keys.... Read the full story at The Defiant
-
Solana moves to scrap the transaction feature used in the $270 million Drift hack
A draft proposal would end the 'durable nonces' feature no earlier than May 5, 2027, forcing custodians that sign offline to rebuild how they move coins.
-
SlowMist Flags 'Cracked TradingView Premium' as Wallet-Data Malware
The Windows sample uses Telegram and Steam to rotate command servers. SlowMist's alert gives no confirmed thefts or victim count.... Read the full story at The Defiant
-
tBTC bridge partially resumes as $120M Aave reserve remains frozen
Threshold halted its tBTC bridge on Oct. 30 as operators addressed a critical Linux kernel vulnerability that could allow attackers to execute code on unpatched servers.
-
Web3Auth says it frontran hackers by moving $5.6 million out of exposed Keplr wallets
Web3Auth's communications also referred to an "original attacker," suggesting some funds were stolen, but did not elaborate.
-
This Bitcoin Developer’s Idea Would Make Quantum Attacks a Losing Bet
Cory Fields wants future quantum attackers to post Bitcoin as collateral before touching vulnerable wallets, giving prepared owners a chance to recover their coins and collect a potentially costly penalty.
-
Keplr Confirms Web3Auth Recovery Addresses After Wallet Breach
The list includes the destination of a six-account Cosmos Hub batch that tokenized 2,265.59 staked ATOM.... Read the full story at The Defiant
-
Cosmos Batch Moves 2,266 Staked ATOM From Six Accounts
One delegator reported theft, while Web3Auth says some apparent wallet drains are protective recovery transfers.... Read the full story at The Defiant
-
Binance CFO steps down nine days after record hack; co-CEO says transition was planned six months ago
Co-CEO Yi He said Ng is departing to pursue a new venture, under a transition plan put in place over the past six months.
-
Gnosis Pay breach exposes card numbers, home addresses and linked crypto wallets
One user said the exposed data tied his home address and card number to every crypto wallet linked to his account, raising the risk of targeted scams.
-
Gnosis Pay breach exposes card details, personal data and crypto wallet information
The crypto debit card provider said customer funds remained safe despite the exposure of sensitive financial and personal information.
-
Binance hack is ‘cyber war,’ TRM Labs executive says
TRM Labs executive Ari Redbord called for governments to take offensive action against North Korean hackers following the record $6.3 billion Binance theft.
-
Gnosis Pay data breach exposes customer info; funds unaffected
Gnosis Pay disclosed a data breach after unauthorized access to its legacy debit card system on Nov. 3. Customer funds were not affected.