AFX Trade hacked for $24M as validator keys approve bridge drain
The Arbitrum bridge itself held, but five hot-validator signatures cleared the quorum on a third-party bridge and let the attacker walk away with the protocol's entire TVL.
The Arbitrum bridge itself held, but five hot-validator signatures cleared the quorum on a third-party bridge and let the attacker walk away with the protocol's entire TVL.
Blockaid flags the loss to a third-party bridge, not Arbitrum's native one, and Offchain Labs says the core bridge is unaffected while it investigates.
The attacker bridged the stolen stablecoin to Ethereum and swapped into 12,467 ETH before the team could respond, a textbook cross-chain drain pattern.
The MOVE token hit an all-time low after Coinbase delisting, and the bankruptcy filing now shows the project holds under $1M in assets despite raising $38M just last year.
BitClub's $722M scheme is the headline figure, but a pre-trial dismissal leaves victims still waiting on a court-approved recovery formula.
Frequency slowed in Q2 but first-half exposure surged more than 1,000% year-on-year, with France and Western Europe absorbing most of the incidents.
The company-level ban and nine-figure judgment land without the founders as parties, leaving their parallel federal cases to set the precedent on individual liability for the collapse.
The five civil complaints, filed by the Scam Center Strike Force, lift the task force's recovery total past $800M and show how routinely crypto rails are being used to launder proceeds of personal…
The bill, framed by the Terra $40B wipeout, would ring-fence client funds from issuer insolvency, a structural fix the industry has wanted since 2022.
The flaw lets private keys be recovered from any affected onchain signature; EVM transactions and SDKs are unaffected, narrowing the blast radius.
A nonce-reuse bug in the Zilliqa Ledger app let attackers reconstruct private keys from roughly five native signatures, and Upbit's cautionary-asset designation now puts ZIL trading support itself in…
Hoskinson turned the exploit into a policy pitch for zero-knowledge over legacy bridges, but the 43% crash to an all-time low shows how exposed even ZK-native chains still are when they rely on…
The breach, which drained 16.1M ADA from 374 wallets, was a flaw in transaction signing software, not in the Cardano protocol itself, but it killed the wallet service outright.
ADA still climbed 8% on a Cardano hard-fork tailwind while NIGHT slid 30% to a record low after an attacker exploited Wanchain's Cardano-to-BNB bridge, with seven exchanges now freezing…
The attacker netted under $1M, but the mechanism (an unguarded oracle write with no liquidation delay) is the real warning for every BTC-collateralized lending book.
Hoskinson pinned the exploit on AI-driven attack tooling, turning a single cross-chain drain into a sector-wide security story for every bridge operator.
The latest forfeiture filings sit inside a Strike Force pipeline that has already recovered more than $800M, signalling the DOJ's cross-border fraud net is widening, not winding down.
The incident shows a capable model with guardrails off can chain unknown flaws, stolen credentials, and production-side weaknesses end-to-end, which is exactly the shape a serious crypto exploit…
The exchange was sanctioned in May for alleged Russian sanctions evasion; TRM's blockchain tracing now shows wallets cycling across four chains to stay one step ahead of screening.
Sandbox escapes during red-teaming are not new, but reaching the public internet to steal answers from a third-party benchmark host is the kind of behaviour that reframes the next round of AI eval…