Security news
-
Tech giants rush to block 8 eMudhra certs that could enable fake sites
A private key generation flaw allowed anyone to guess them and forge HTTPS certificates for any website.
-
A company that vouches for websites had secret keys so weak that 8 of them were cracked
Eight secret keys at eMudhra, an Indian firm that vouches for websites, were compromised. Browsers and software makers are rushing out fixes.
-
Qubic restarts blockchain, opens recovery claims after $1.4M hack
The network’s validators approved a recovery plan and opened claims until May 1, 2027.
-
Liquid Network Announces Final Stages of Recovery Following Massive Hack
Bitcoin Magazine Liquid Network Announces Final Stages of Recovery Following Massive Hack The Liquid Network on Tuesday said that things were up and running again, over one month after hackers stole 4,000 bitcoin, worth about $320 million at the time, from the network’s federation wallet before...
-
Wallet Linked to Drift Exploit Sends $61 Million in Ethereum to Tornado Cash
The North Korea-linked attacker behind April's $295 million Drift heist pushed 25,700 ETH through the mixer in two hours, and still controls roughly $198 million more.
-
Issuer Blacklists Recovered Nothing in 60 Crypto Exploits, Blockaid Finds
Victims got back $9.8 million of the $1.18 billion traced between January and August, and every dollar frozen or returned came through governance or validator action... Read the full story at The Defiant
-
Drift exploiter sends $61M ETH to Tornado Cash, holds $194M
The April 1 hack caused about $295 million in losses and was later attributed to a North Korean threat group in a Mandiant investigation.
-
Bitget plans Thai crypto exchange acquisition weeks after $388M hack
The proposed acquisition would give Bitget a route into Thailand’s crypto market through a locally licensed operator.
-
Recovering Private Keys in Just 6 Connections: Qubic Wallet May Have Leaked Most of Its Private…
Recovering Private Keys in Just 6 Connections: Qubic Wallet May Have Leaked Most of Its Private Keys Background On October 18, Qubic disclosed in an official announcement that attackers had exploited insufficient randomness in certain wallets to access and transfer approximately 2.94 trillion QU...
-
Mastercard Brings Its Fraud-Fighting Tools to Stablecoin Payments
Unveiled at Money20/20, the API-based tool combines payment and blockchain intelligence to flag fraud, scams and sanctions exposure before funds move on-chain.
-
THORChain Targets Rujira Restart With v3.21 Exploit Fix
The upgrade targets block 28,366,100 around Oct. 23, while Rujira plans to request a conditional 24-hour liquidation grace period for borrowers.... Read the full story at The Defiant
-
Threat Intelligence | Analysis of the DarkSword Trojan Backend and iOS Attack Chain
Background On March 18, 2026, Google Threat Intelligence Group published a report titled “The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors,” focusing on the spread of the DarkSword exploit chain among multiple threat groups. This chain targets iPhones running iOS...
-
Zcash Developer Zakura Proposes Fix to Stop Quantum Computers Linking Shielded Swaps
Zakura says a single published Zcash address could let a future quantum attacker link every payment a wallet has ever received.
-
Qubic freezes chain after attacker drains 1.4K wallets with weak seeds
Qubic says 87.1% of the stolen funds remain onchain and the rest were frozen at crypto exchange MEXC, as network validators prepare to vote on a recovery plan.
-
Cysic suspends bridge after attacker mints tokens and moves $727,000 to Ethereum
The attacker, after minting 10 million CYS, managed to bridge about $727,000 in proceeds to Ethereum through Mayan, deBridge and SWFT's Bridgers.
-
Qubic Halts Network After $1.3 Million Wallet Drain
Qubic says 87.1% of the drained QU remains immobilized on its network, while MEXC froze the account receiving the rest.... Read the full story at The Defiant
-
Bitcoin ETFs Shed Nearly $1 Billion in Two Weeks as Uptober Stays Red
Bitcoin ETFs lost a net $228.6 million this week, following a $681.1 million drain the week before and pushing October deep into the red.
-
Crypto audits give investors false sense of security as Q3 hacks cost $1.18 billion, Hacken says
The security firm found that 77% of third-quarter losses involved compromised suppliers, delayed fixes or systems outside the latest security reviews.
-
Crypto exchanges Binance, Coinbase join West Africa scam sweep that flagged $11 million
Private-sector partners flagged $11 million in funds that could be frozen, while officials reported cryptocurrency seizures without disclosing their value.
-
Poetic Justice: Scammer Lost $5M in Bitcoin After Being Targeted by Ledger Thieves
Bitcoin Magazine Poetic Justice: Scammer Lost $5M in Bitcoin After Being Targeted by Ledger Thieves Call it poetic justice: one of the biggest victims of last week’s Ledger theft happened to be a scammer themself, according to blockchain analysts, and lost nearly $5 million in bitcoin. In a post...
-
Phishing scammers capitalise on Ledger panic with fake firmware update
Phishing scammers are capitalizing on the recent $86 million Ledger spyware scandal with a new “firmware update” phishing campaign. Blockchain security firm SlowMist flagged the scam, sharing screenshots of an email which urges the recipient to connect their hardware wallet to “protect your device...
-
Karpelès Reports Ledger Implants in Devices From Two More Resellers
Ledger says German stock inspections found no tampering and it has not verified a drain tied to a device bought outside Southeast Asia. Its authenticity check cannot detect the added hardware.... Read the full story at The Defiant
-
NEAR Intents Postmortem Links $3.8 Million Exploit to Deposit Bug
The protocol removed deposit notifications after another critical bug report and says all affected users were made whole.... Read the full story at The Defiant
-
Three Canadian Armed Forces Members Charged in Kidnapping of Crypto Exchange Owner
Police seized guns, silencers and more than 2,000 rounds of ammunition, nearly all of it allegedly stolen from the Canadian military.
-
Scammer Lost $4.8M in Bitcoin to Tampered Ledger Wallets: Chainalysis
The funds came from a task scam that paid people to fake product sales and reviews, then demanded deposits before releasing their pay.
-
Quantum Alliance forms amid warnings 6.4 million bitcoin face future quantum threat
Nine crypto companies launched the Quantum Alliance to jointly prepare for quantum attacks, but they disagree on when the threat will arrive and whether vulnerable BTC should be frozen.
-
Scammer gets scammed in Ledger spy-chip exploit, loses almost $5 million in bitcoin
Chainalysis says a fraudster who tricked people through fake online jobs became one of the biggest victims of the compromised hardware wallets.
-
Pirate Chain Says Exploit Created 39.8 Million ARRR
The network remains operational, but users have been asked not to move funds while developers work on recovery.... Read the full story at The Defiant
-
Brooklyn DA Pulls the Plug on Crypto Scam Network
Bitcoin Magazine Brooklyn DA Pulls the Plug on Crypto Scam Network The Brooklyn District Attorney’s office has dismantled the online backbone of a multinational cryptocurrency scam that drained tens of millions of dollars from Russian-speaking victims across the U.S. Working with the FBI,...
-
Scammer loses $4.8M stored on tampered Ledgers: Asia Express
A scammer reportedly lost $4.8M of stolen money after storing the funds on tampered Ledgers. Bitcoin and Ether ETFs launch trading in Thailand and South Korea blocks 27 exchanges.