SafePal flaw exposes data of nearly 40K customers
The incident separates wallet-control risk from privacy risk: private keys and seed phrases were not compromised, but customer-data protection is under scrutiny.
The incident separates wallet-control risk from privacy risk: private keys and seed phrases were not compromised, but customer-data protection is under scrutiny.
The proposal filter will shape Ethereum's infrastructure priorities, with user autonomy and resistance to transaction censorship at stake.
A founder in the middle of his own federal money-laundering trial accusing AI platforms of arming Pyongyang is a story about the messenger as much as the message.
Up to 10 million EU users were forced to find new platforms after July 1, and the gap between the 1,700 unlicensed venues that shut and the 323 MiCA-authorized firms is exactly where social engineers…
Private keys and seed phrases are untouched, but names, physical addresses and contact details are now in the wild, giving attackers a clean phishing dataset that will linger well past the patch.
The scam fits a pattern: crypto security nonprofit SEAL blocked 356 malicious Google ad URLs in April alone, several impersonating Hyperliquid.
The 678K records include names, addresses and emails but not crypto ownership flags, giving criminals a wealth-target directory to cross-reference against on-chain footprints and prior leaks.
The week crystallised the gap between institutional pull-in and project-level weakness: a $1.8B Mastercard stablecoin deal and Fidelity's staking push landed while over 100 projects folded and a…
The hardest question is what happens to coins left in old wallets, turning a security upgrade into a years-long governance fight.
The breach is digital, but the downstream risk is physical: name-and-address leaks now translate directly into wrench-attack targeting for known crypto holders.
A 29 Fear reading and Boltz's shutdown after AI-assisted attacks add to a defensive backdrop, while the SEC delay keeps tokenized-securities progress in focus.
The case puts identity checks at the center of crypto security, where fundraising, recruiting and partnerships can become attack surfaces.
Delio halted withdrawals in June 2023 and was declared bankrupt in November 2024, putting accountability for high-return crypto deposit platforms at the center of the case.
The unresolved cause broadens the security question beyond one dormant wallet, putting old keys and wallet tooling under scrutiny for Ethereum users.
The breach puts customer privacy and third-party data handling in focus, while Trezor says its systems and devices remain secure.
Wallets and firmware stay intact, but the leaked phone numbers and home addresses give phishing crews exactly what they need to mail counterfeit devices and run home-targeted extortion.
Beneath the $1 pin, $1.5B in leveraged longs piled in since August while spot volume thinned to $885M daily. A break below support risks a cascade; upside needs CLARITY Act news to justify it.
Developers say the flaw was patched before any known exploit, but the market selloff lays bare how quickly trust collapses around a privacy coin when the integrity of its hidden supply is questioned.
The mistake is absurd, but the pattern isn't: a 2024 French tax-office breach turned crypto holders into fixed targets. Chainalysis counts at least 30 wrench attacks in France in H1 2026 alone.
Yepbit has no Australian Financial Services Licence and is not registered on AUSTRAC's VASP register, yet it told trapped investors that ASIC itself had frozen their money.