Crypto security covers the failures, attacks and deceptive practices that can put digital assets at risk: compromised exchange wallets, smart-contract exploits, governance attacks, flash-loan manipulation, phishing, scams and privacy breaches. The consequences often extend beyond the protocol first affected. Stolen USDC may be swapped for ETH, an exchange may suspend withdrawals after hot-wallet outflows, or a governance proposal may redirect a DAO treasury. For holders of BTC, ETH, SOL and stablecoins such as USDT and USDC, understanding the attack path is essential to judging whether an incident threatens one platform, connected protocols or the wider market.
Zipp tracks incidents from the first on-chain alert through confirmation, containment and recovery. Coverage examines transaction trails, attacker methods, disputed loss estimates, withdrawal status, token approvals, bridge and oracle dependencies, validator or admin-key controls, and any reimbursement or recovery plan. Recent reporting has followed the Ostium and Summer Finance exploits, the BONK DAO treasury attack, suspicious AscendEX hot-wallet movements and KelpDAO activity involving Chainlink CCIP. The desk also covers audits, disclosure practices and longer-term risks such as quantum computing, as well as sanctions enforcement, exchange exposure and blockchain tracing around Iran-linked CoinEx flows. We distinguish verified losses from funds merely moved or placed at risk, identify the evidence behind researchers’ claims, and monitor whether stolen assets are bridged, mixed, frozen or converted into assets including ETH. Privacy belongs to the same beat: readers need to know what transaction data is public, how analytics firms connect wallets, and where surveillance, compliance and user protection intersect.
When JPMorgan, BofA, Morgan Stanley, and Wells Fargo all flag the same unauthorized AI agents, the agent-security debate just left the lab and entered the four most defended perimeters in US finance.
Two critical PHP flaws patched on October 21 are already being actively exploited, putting visitors of unpatched WordPress and Magento sites at risk of credential theft.
Two unpatched PHP flaws give attackers a direct path to server file systems, putting crypto exchanges and web-based wallets in the crosshairs until patches are deployed.
The 61,800 BTC are already off the market via the UK seizure. The hard question is who actually gets the coins, with 102,000 victims, a UK ruling clearing the legal path, and a six-month window for…
The activation block is now locked in, giving node operators and wallet developers a concrete deadline to coordinate compatibility before the upgrade goes live.
Support has recovered to 31 of 35 validators, above the 29-vote threshold, but the patch must complete a fresh 14-day approval countdown.
The warning extends beyond crypto: compromised websites could expose visitors' login details or put their devices at risk.
Confirmed attacks after an early leak put unpatched websites at risk, making prompt patching and caution around unfamiliar sites especially important.
The order puts a striking price on alleged privacy-related deception and adds to the legal and regulatory risks investors track around major technology platforms.
The administration says it has halted about $833 million tied to overseas scams and seized 503 fraudulent websites, putting enforcement results at the center of its cybercrime message.
A White House-level enforcement push against crypto fraud would mark the sharpest federal escalation of consumer protection in the sector since the FTX collapse, with implications for exchanges,…
Zcash's Sprout shutdown creates a hard migration deadline, while the temporary removal of 60% of block fees from circulation changes near-term issuance dynamics.
Browser makers blocked the certificates, but software that fails to check revocations may still accept forged ones, leaving a wider security concern beyond web browsers.
The transfers move a large tranche of the exploit proceeds beyond direct wallet visibility, while Drift users’ recovery claims remain tied to funds entering the Recovery Pool.
The promised access is bait: installing the software can expose passwords and money, turning fan demand for the unreleased game into a theft risk.
The dispute highlights why institutional adoption depends on custody systems that let boards verify control, approvals and asset balances without relying on one intermediary.
A decade-old cold wallet tied to a reported 6,000 $BTC drug-deal forfeiture has come back to life, depositing $41.52M into Coinbase Prime after years of silence.
The account highlights the downside of rapid-fire meme-coin speculation, where repeated trading losses can turn a volatile market into a gambling bankroll.
The findings put Hyperliquid-linked FXMR under scrutiny after more than $20M in inflows were traced to ransomware, exploits and social engineering attacks.
The transfer leaves $195M in ETH still held by the exploiter, keeping a large pool of stolen funds in play.
A hack is a broad term for unauthorized access or theft, including compromised keys, accounts and infrastructure. A smart-contract exploit specifically abuses faulty code, economic design or permissions in an on-chain application, sometimes without breaching its servers.
Check whether the figure is supported by identifiable on-chain transactions, a statement from the affected project and independent analysis. Large wallet movements are not automatically losses; funds may be relocated, quarantined or counted more than once.
Stablecoin issuers may be able to freeze tokens at specific addresses, while native assets such as ETH generally do not have an issuer-controlled freeze function. Swapping does not make funds untraceable, and exchanges, bridges or other services may still block them.
No. An audit reviews a defined codebase and scope at a particular stage, but it cannot guarantee that every bug, governance weakness, key-management failure or later upgrade is secure. Readers should check the audit scope, unresolved findings and whether deployed code matches the reviewed version.
WatcherGuru
WuBlockchain
Crypto News
CoinDesk
CoinTelegraph
CZ Binance
CryptoSlate
Lookonchain