Nearly 1,200 addresses and 1,000 BTC later, the incident has crossed from isolated phishing to a coordinated drain, putting self-custody users on notice about supply-chain risk in hardware wallets.
The layoffs hit hardest on employees two months out from multi-million-dollar token payouts, raising fresh questions about how memecoin platforms value and compensate the teams behind them.
Binance data shows spot bids keep arriving while leveraged positioning rewrites how BTC tops and troughs form, leaving any single crash harder to read in advance.
Nearly 600 BTC were stolen from a flaw in Coldcard's firmware that let attackers reconstruct wallet seeds, reopening the case that institutional products like BlackRock's IBIT now make more sense for…
The protocol fix is live and verifiable, but ZEC still trades below the $500 area Ironwood was supposed to put back on the map, leaving the supply repair in technical hands and the price repair in…
A three-year gap between Coldcard's final Mk3 firmware and the advisory turns dormant cold-storage wallets into a maintenance liability, with one signature and no passphrase as the worst-case custody…
The $38M theft from a single compromised wallet makes this the largest hardware-wallet supply-chain attack on record, with Coldcard pointing users straight at a firmware load-bearing weakness.
Crypto sat out the sharpest equity rebound of the year, with BTC holding $64,300 even as a $38M Coldcard wallet exploit swept 594 bitcoin off-chain without moving the tape.
The single-signature wallets swept had been dormant for years, but the underlying firmware bug has been live since March 2021, with paper wallet keys and seed-splitting masks exposed too.
Roughly 500 wallet addresses were drained in a pattern tied to a Mk3 firmware bug, putting the total stolen above $35M and forcing Coinkite to flag every device that ever generated a seed on 4.0.1 or…
The model's breakouts happened inside controlled tests, but Anthropic is publishing the incidents now to push the broader industry toward tighter isolation between red-team sandboxes and live…
The letters mimic official IRS correspondence and direct recipients to a "Digital Asset Compliance Portal" that does not exist, part of a broader wave of social-engineering attempts targeting crypto…
The designation escalates a decade-long standoff: Durov refused to hand over encryption keys in 2017, Telegram was banned in Russia until 2020, and Moscow is now using its terrorism list to retaliate.
The confirmed take is 3.4M XRP from a one-week scam site, but Seoul police believe the real haul could approach $20M as investigators trace flows from blogs, Wikipedia and YouTube funnels.
The A$54.6M penalty ask lands one day after France arrested Pavel Durov on terrorism-related charges, putting Telegram under simultaneous legal pressure across multiple jurisdictions.
The detention lands on top of tax-evasion charges and a regional mining ban that has already pushed BitRiver's parent into insolvency proceedings.
Seoul's Metropolitan Police Agency tracked 3.4 million XRP on-chain and froze suspects' wallets within three days, but the market barely flinched.
If the contracts weren't touched, the question is how the keys, servers, or operational layer were, and whether LP recovery hinges on a counterparty the protocol doesn't control.
Across 425 studied hacks from 2021 to 2025, 54.6% of value lost in the 2024-2025 window traced back to centralized exchange compromises, with audits proving necessary but no longer sufficient.
Roughly 5% of Orchard's shielded supply migrated within 24 hours, but most of Zcash's private coins are temporarily stranded in a now-closed pool as holders, wallets, and exchanges move at their own…
TheBlock
CoinTelegraph
CryptoSlate
CoinDesk
Crypto News