Security news
-
Ledger roasted over $849 device launch after $86M hack
Ledger has been accused of failing to “read the room” after the company unveiled its new $849 Atom wallet device just days after falling victim to an $86 million draining hack which led to it suspending multiple resellers. Users on X have called Ledger’s Atom announcement the “worst timing ever,”...
-
Ledger Was Hacked — Who Do You Trust With Your Keys Now?
The Defiant Livestream | Wednesday, Oct. 14, 1:00pm ET Up to $93M drained from more than 300 wallets, and the software was never touched. Ledger confirmed a physical implant inside signers sold through reseller CryptoBilis, reading recovery phrases off the screen at setup and sending them out...
-
FBI helps smash crypto scam targeting Russian speakers in Brooklyn
The FBI has helped take down a crypto scam network that targeted Russian-speaking individuals living in the US and likely stole tens of millions of dollars. The operation, described as “one of the biggest operational cyber disruptions undertaken by a local prosecutor’s office,” was led by Brooklyn...
-
Brooklyn Prosecutors Take Down 112 Servers Behind Crypto Scam Targeting Russian Speakers
The scammers also ran a fake recovery service, contacting victims weeks later with promises to get their stolen crypto back.
-
Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B
Compromised suppliers, developer tools and infrastructure components outside security audits drove about 77% of the quarter’s total losses, according to Hacken.
-
Bank of America hit with $1.2B fine after missing ‘Chinese money laundering’
Bank of America has been fined a total of $1.2 billion dollars by the Office of the Comptroller of the Currency (OCC) and the Financial Crimes Enforcement Network (FinCEN) after admitting failures of its Bank Secrecy Act (BSA) and anti-money laundering (AML) compliance program resulting in over $5...
-
US authorities dismantle crypto scam network that stole tens of millions
Brooklyn prosecutors and the FBI seized 112 servers and shut down 241 websites linked to investment scams that targeted Russian-speaking Americans.
-
UNCX Vesting Pool Exploited for About $86,000, Blockaid Says
The identified transaction took five different tokens, while the affected Ethereum contract still held about $3.25 million in assets.... Read the full story at The Defiant
-
Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain
European electronics chain MediaMarkt Saturn has also halted Ledger sales after a customer in Germany reported finding an implant.
-
Ledger Asks Resellers to Halt Sales in Seven Asian Markets
The hardware-wallet maker says confirmed incidents remain confined to Southeast Asia, with no indication its systems or direct sales channel were compromised.... Read the full story at The Defiant
-
FBI Reports $17 Billion Scam-Center Tally as West Africa Raids Net 28 Arrests
DOJ says a coordinated enforcement week removed more than 3.7 million online accounts, pages and groups and identified over $11 million in potentially freezable funds.... Read the full story at The Defiant
-
Trezor Shrinks Reseller Network After Hardware Wallet Supply-Chain Incidents
CryptoBilis is already off Trezor’s seller list. The company says the wider reduction is preventive and that it has no evidence its devices were compromised.... Read the full story at The Defiant
-
Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Ledger says the hidden chip reads the 24-word phrase off the screen during setup, leaving the Secure Element and its software untouched.
-
Ledger says 'spy' chip inside CryptoBilis Ledger devices transmitted wallet keys over mobile network
The hardware-wallet maker gave its first public account of how a covert component in devices sold by CryptoBilis could steal users’ master keys without changing Ledger’s software.
-
Autheo’s THEO Plunges 92% After Suspected Bridge Exploit on Base
Autheo urged users not to buy, sell or bridge THEO after a 19 million-token mint and subsequent sales on Base.... Read the full story at The Defiant
-
XRPL branded ‘cheap’ for paying infinite XRP exploiter just $250K
Crypto sleuth ZachXBT says the XRP Ledger Foundation (XRPL) can potentially look forward to losing upwards of $100 million next time it's hacked after the company paid a whitehat hacker just $250,000 for uncovering and reporting an infinte supply XRP bug. ZachXBT claimed XRPL “cheaply” paid the...
-
Ledger Says All Confirmed Cases in Suspected $87M Drain Tied to Reseller CryptoBilis
The wallet manufacturer said its own systems and direct sales are unaffected, and that the reseller has stopped selling hardware wallets.
-
XRP Ledger’s Payment Engine Had a Counterfeiting Bug Hiding Since 2015
An integer overflow in the payment engine, dormant since 2015, could have let an attacker mint spendable XRP beyond the token’s total supply.
-
Ledger spyware scare spreads beyond Southeast Asia
More examples of Ledger wallets being tampered with and fitted with physical spyware have allegedly been identified across Asia, Europe, and South America. Ledger users who bought hardware wallets from Malaysia-based reseller CryptoBilis were drained of over $86 million last week. Former Mt. Gox...
-
Bitquery Says $10 Million Frozen in CryptoBilis-Linked Wallet Drains
The firm's $93.2 million loss estimate spans six chains, while Ledger's latest update offers no repayment plan for affected buyers.... Read the full story at The Defiant
-
UK Freezes $12M London Penthouse of Alleged Prince Group Finance Chief
Thet Li is accused of running the finances of a scam empire tied to $14 billion in Bitcoin the U.S. has moved to seize.
-
CZ Alleges Hackers Bought CryptoBilis as Ledger Probes Wallet Drains
The reseller’s former founders say they handed over operations in March and that their acquisition agreement delayed a public announcement until mid-October.... Read the full story at The Defiant
-
XRP Ledger patches decade-old bug that could have minted trillions of XRP
An overflow bug in the XRP Ledger's payment engine could have let an attacker mint about 18 trillion spendable XRP in one transaction.
-
XRP Ledger Discloses Decade-Old Bug That Could Mint Trillions
The flaw was fixed in xrpld 3.4.1 on Sept. 25. Developers found no evidence it was exploited on a public network.... Read the full story at The Defiant
-
Coldcard says it’s investigating how phishing link appeared on its X account
Company advised users not to visit or interact with the link in question and said it will share any further verified updates.
-
COLDCARD Warns of Phishing Post on Its Official X Account
The company says it found no matching login record. A researcher found the fake migration site was built to collect wallet recovery phrases.... Read the full story at The Defiant
-
American Express fined $350M for decade of suspected money laundering
American Express National Bank processed approximately $13 billion in suspected trade-based money laundering (TBML) between June 2014 and May 2025, including through accounts associated with bank insiders, the Office of the Comptroller of the Currency (OCC) found . The OCC and American Express...
-
Ledger says Southeast Asia reseller linked to $86M draining
Ledger users in Southeast Asia who purchased their wallets from a reseller named CryptoBilis have reportedly been drained for over $80 million so far in an ongoing hack. Crypto analysts Specter and Tanuki42 first noted reports of Ledger users losing funds. They traced the addresses and came up with...
-
Ostium Proposes Equity Stakes For Hacked Liquidity Providers
Stage 2 pairs a pro-rata claim on recovered funds and half of Ostium's opening fees with an optional equity allocation priced at the company's next round. The percentages are still unset, and holders have until Oct. 30 to elect.... Read the full story at The Defiant
-
Bitcoin consolidates near $82.5K as crypto weathers Ledger theft reports
Bitcoin and crypto markets eyed a recovery from Thursday’s drop despite concerns of another hardware wallet exploit.