Key Highlights: Cybersecurity analysts are investigating a breach targeting Binance that resulted in the theft of more than $2.5 billion in cryptocurrency, marking the largest hack in crypto history. Onchain security firm Blockaid identified the exploitation of an EIP-7702 authorization bundle that allowed a malicious sweeper contract to drain funds from a major Binance wallet. ...
Key Highlights: Attackers targeted Electrum wallet users by exploiting Bitcoin’s Replace-by-Fee (RBF) feature via malicious Electrum servers. Fraudsters displayed zero-fee or stuck unconfirmed transactions with vanity addresses matching the legitimate destination’s last four characters, tricking users into signing replacements that routed funds to the attacker. Electrum developers released version 4.8.3 on October 24 to introduce ...
Key Highlights: Three men—Terroll Paul, Pierre Madzou, and Mohamed Samagassi—have been sentenced to a combined total of over 16 years in prison following a targeted home invasion in Bristol aimed at stealing cryptocurrency. The victim’s teenage sister raised the alarm during the aggravated burglary, allowing Avon and Somerset Police to arrest all three perpetrators at ...
Key Highlights: A security flaw in Qubic’s wallet seed generation led to the theft of tokens valued at approximately $1.26 million based on CoinGecko pricing on Oct. 18. The vulnerability stemmed from using the insecure JavaScript function Math.random() instead of cryptographically secure alternatives across several Apple operating system environments. Qubic deployed a fix in wallet ...
Key Highlights: Hardware wallet manufacturer Ledger verified that a device tied to recent user asset losses contained an unauthorized physical hardware implant. All confirmed instances of the exploit trace back to hardware units distributed by CryptoBilis, a regional reseller servicing Southeast Asia. CryptoBilis has halted all hardware wallet inventory sales as Ledger continues its direct ...
Key Highlights: Blockchain intelligence firm Bitquery tracked 5.2 million Tether (USDT) transferred to three Binance deposit addresses via suspected over-the-counter intermediaries following a major crypto theft. The illicit flows do not indicate recovered assets, as funds were commingled with third-party capital, while previous conversion maneuvers through USDD were aimed at bypassing Tether freeze mechanisms. Hardware ...
Key Highlights Incarcerated cybercriminal Robert Barr directed a crypto-theft syndicate from HMP Edinburgh between January and April 2024, targeting a local entrepreneur’s holdings valued at over $2.6 million. Two home-invasion attempts failed: the first in January netted a hardware wallet but no PIN or recovery phrase; the second in April was foiled when the homeowner ...
Key Highlights A £10,000 Crimestoppers reward has been announced for information leading to the arrest and conviction of those responsible for a targeted cryptocurrency home robbery in Smith’s Wood, Birmingham. The December 13, 2025 attack involved three masked men who forced entry, assaulted the husband, threatened the pregnant wife with a knife, and demanded a ...
Key Highlights North Korean hacking group WaterPlum, also known as Contagious Interview, stole at least $10.7 million by impersonating recruiters from legitimate crypto and AI companies to target software developers and IT professionals worldwide. The campaign infected over 30,000 devices across more than 100 countries and extracted funds or credentials from over 7,000 cryptocurrency wallets ...
Key Highlights Blockchain security firm SlowMist, in collaboration with the OKX security team, discovered malicious code in FomoPeek versions 1.1 and 1.2 designed to steal private keys, seed phrases, and Keychain data from iOS devices. The malware includes an exploit framework targeting iOS kernel vulnerabilities across versions 12.0 through 18.7 and 26.0–26.1, capable of bypassing ...
Key Highlights A seven-nation intelligence coalition publicly attributed a global cryptocurrency theft campaign to the North Korean group WaterPlum (alias “Contagious Interview”), linking the operation to the 313 General Bureau of the Munitions Industry Department under the Central Committee of the Workers’ Party of Korea. Fake job recruitment schemes targeting software developers compromised over 30,000 ...
North Korea is increasingly recruiting IT workers from third countries—including Iran and Lebanon—to help infiltrate U.S. companies and funnel salaries back to state agencies funding weapons programs, NBC News reported Friday. U.S. Alert Details North Korean IT Worker Scheme A joint advisory issued in July by the U.S. government and several foreign agencies warned that ...