JaredFromSubway MEV bot loses $7.5M in approval exploit
The attack exploited automated approval logic rather than a smart-contract bug — a reminder that the infrastructure built to extract MEV is itself becoming a high-value target.
The attack exploited automated approval logic rather than a smart-contract bug — a reminder that the infrastructure built to extract MEV is itself becoming a high-value target.
The 30% exposure of AlphaUSDC Delta V2 to the frozen market turns a single collateral venue's liquidity crisis into a broader DeFi contagion test, with $8M in USDC already deployed and a…
Encrypted balances hid the shortfall for a week — the real cost is the absent monitoring layer and a $770K recovery window Axelar has declined to act on.
The swap into USDC and a centralized exchange is a classic laundering pivot — but the on-chain trail makes this one traceable, not invisible.
Kaspersky traces thousands of malicious Steam Workshop downloads posing as animated wallpapers — the payload is Lumma and Vidar infostealers that drain browser data, logins and wallet seed phrases.
The statement is enforcement signalling rather than a new case, but it lands as the FBI publicly re-elevates crypto fraud as a priority under a new director.
The drawdown is the easy headline; the more interesting signal is the conviction — a KOL whose on-chain net worth has fallen from $67M to $11M hasn't trimmed a single position.
The Garcia brothers held a Minnesota family at gunpoint for over eight hours to steal more than $8M in crypto — now they face up to 20 years each and full restitution.
The peg slippage is the macro signal: even a microcap preferred-like instrument from a balance-sheet BTC proxy is repricing risk-off, while the clipper campaign is the on-device reminder that…
CryptoBandits shows a quiet escalation: clipboard hijacking plus live address-swapping during a copy-paste transfer turns a single USB plug-in into a full wallet drain, with Tor-based exfiltration to…
Extreme fear reading and a 56% BTC dominance signal a risk-off flush; altcoin breadth is fragile even as a handful of small caps print 30-95% intraday spikes.
The threat spreads offline via USB and .lnk shortcuts, then runs bundled Tor to reach a hidden-service C2 — clipboard swap plus seed-phrase theft is the actual loss vector, not just an address swap.
A decade after the most consequential smart-contract breach in crypto history, the Ethereum ecosystem has channelled the lesson into a $130 million security fund — a direct institutional response to…
The Aztec Foundation says the breached product is a four-year-old immutable stage 2 rollup with no ties to current network contracts or the AZTEC token — but a related validation flaw just drained…
The $74.68M deposit lands as a capitulation signal: a wallet of this size absorbing an $11M-plus loss to exit suggests conviction in further downside, not a tactical rebalance.
The contradiction cuts to the heart of stablecoin governance: when an issuer can freeze funds, who decides whose funds get frozen, and on what timeline?
The $1.8B scheme ran 2020-2022 on fake 0.5%-1% daily mining returns — and lands one week after the FBI reported record $11.4B in crypto fraud losses for 2025.
The on-chain trail is live: a known exploit wallet converted stablecoin proceeds into ETH at $1,764 average and is actively mixing through Tornado Cash, making recovery increasingly unlikely.
Crypto's biggest hacks are no longer coming from smart-contract bugs — they're coming from operational and human…
India moved to ban Pavel Durov's Telegram platform this week, sending GRAM and the broader Indian crypto market into a…