Microsoft's threat team linked the campaign to a hacking group it tracks as CryptoBandits, which uses poisoned USB sticks to seed malware that rewrites browser extensions for wallet theft.
Full-RBF is already network policy, so the old opt-in flag is now dead weight that tags which wallet broadcast a transaction. The harder problem is agreeing on a common default to replace it.
A flaw in Taiko bridge's source-signal proof validation is the likely root cause, per Blockaid. With block production frozen and a withdrawal advisory in place, every bridged dollar is now a…
Stratum V1 job templates are readable in cleartext on many GEO downlinks, turning every mining pool that pipes work over satellite into a passive target.
The wind-down is the second protocol hit in the depegging of Main Street's msUSD, and it underlines how thin stablecoin liquidity can collapse into bank-run behavior in a weekend.
The Layer-2's bridge proof mechanism was compromised, putting more than $1M already drained and every remaining bridged position at risk until Taiko confirms a fix.
Taiko, an Ethereum layer-2 rollup, lost roughly $1.7M to an exploit, with the attacker already moving $189K in TKO to MEXC while still sitting on $1.52M in ETH.
The promotion was off-platform by design — staged on near-identical lookalike pages — so the trades were never real bets and never touched Polymarket's settlement engine, leaving the question of…
The fraud piggy-backed on the ZKsync brand to deceive global crypto users, and on-chain tracing tied 120+ transactions to U.S.-sanctioned entities.
A four-year telecom KYC retention window would bundle names, IDs, and service history onto phone numbers that already unlock exchange and wallet recovery — and the FCC's own filing asks whether that…
The same bot that once consumed 7% of Ethereum gas in a single day lost its working capital to an attacker who exploited a careless token approval — a reminder that MEV profit is one phishing-style…
The bot credited with ~70% of Ethereum's sandwich attacks lost more to its own approval logic than the typical sandwich victim loses in a year — a cautionary flip for machine-speed traders on both…
The attacker converted the full haul to ETH and routed 1,000 of it through Tornado Cash within hours — a textbook MEV-operator exit and a reminder that the bots eating Ethereum's mempool aren't…
The attack exploited automated approval logic rather than a smart-contract bug — a reminder that the infrastructure built to extract MEV is itself becoming a high-value target.
The 30% exposure of AlphaUSDC Delta V2 to the frozen market turns a single collateral venue's liquidity crisis into a broader DeFi contagion test, with $8M in USDC already deployed and a…
Encrypted balances hid the shortfall for a week — the real cost is the absent monitoring layer and a $770K recovery window Axelar has declined to act on.
The swap into USDC and a centralized exchange is a classic laundering pivot — but the on-chain trail makes this one traceable, not invisible.
Kaspersky traces thousands of malicious Steam Workshop downloads posing as animated wallpapers — the payload is Lumma and Vidar infostealers that drain browser data, logins and wallet seed phrases.
The statement is enforcement signalling rather than a new case, but it lands as the FBI publicly re-elevates crypto fraud as a priority under a new director.
The drawdown is the easy headline; the more interesting signal is the conviction — a KOL whose on-chain net worth has fallen from $67M to $11M hasn't trimmed a single position.
CryptoSlate
CoinDesk
TheBlock
WuBlockchain
Lookonchain
WatcherGuru