Cold wallets remain secure, while Bitget says a $464M protection fund fully covers user assets as investigators trace the unauthorized transfers.
The suspension puts customer access and exchange security controls at the center of the incident, while the scale raises broader counterparty-risk concerns for crypto markets.
The transfers span hot and cold wallets and include ETH, USDT, USDC, AVAX and BNB, while withdrawal reports add pressure for a clear explanation.
The suspected private-key compromise spanned four blockchains, while about $6M in stolen assets remains consolidated in a single Ethereum address.
The exploit exposed two separate control failures: a consensus validation bug and an automated peg-out path with no payout-size or human-review limits.
A public-address lookup can start a claim, but verification, competing claims and sanctions still stand between recovered coins and victim payouts.
The transfer offers a recovery path after a wallet-seed flaw exposed more than $100M, but funds under the old randomness remain at risk despite Coldcard’s firmware patch.
A compromised authorization key and dormant NuNet minter drove the losses, while paused conversions and unrevoked credentials leave remediation as the key test.
Hong Kong, Japan and MOEX pushed licensed crypto rails this week while Jiangsu declared RWA financing illegal and North Korean hackers hit 7,000 wallets, a split-screen view of Asia's digital asset…
The reported attack chain reaches from Safari to kernel-level access, putting private keys and seed phrases stored on affected devices at direct risk.
The episode shows how coding agents can compress exploit timelines while expanding the reach of compromised accounts through connected developer tools.
The breach exposed read-only exchange APIs and trading data, underscoring how infrastructure and operational weaknesses are driving a disproportionate share of crypto losses.
The episode highlights the dual-use risk of frontier AI and raises pressure on labs to harden models against cyber abuse.
The episode underscores the dual-use risk of frontier AI: capabilities built for software work can also help researchers probe corporate defenses.
Evin McMullen of Billions argues the real security crisis is not the $320 million exploit but the identity honeypots every exchange, on-ramp and wallet maker keeps filling, soon to be multiplied by…
Only S$1.69M of the S$4.906M haul has been recovered, a gap that frames a story bigger than the caning: known crypto holders can be physically coerced into transfers that police struggle to reverse.
Even after team cuts and a v3 rebuild, revenue never recovered from the Nov. 2025 $128M hack. A Sept.
CoinEx joins BitMart and BitMEX in 2025's exchange shutdown wave, a tell that mid-tier venues are being squeezed by shrinking retail spot volume and rising compliance costs.
The exposed files include passport details, home addresses and Bitcoin activity, and the attackers are now threatening publication unless a ransom is paid, with the UK ICO opening an investigation.
After more than a year of inactivity, the two-address pattern points to one holder re-entering, with the deposit landing directly on a major exchange rather than a private venue.
WuBlockchain
CoinTelegraph
TheBlock
CoinDesk
CryptoSlate
WatcherGuru
Lookonchain