India’s Computer Emergency Response Team (CERT-In) has warned that an AI-assisted financial threat actor named CRAFTY FALCON is actively targeting banks, fintech companies, payment service providers, as well as cryptocurrency exchanges, stealing wallet keys and siphoning funds. According to CERT-In, the campaign has continued despite earlier warnings and remediation efforts. Affected entities, including non-banking financial […]
BTCPay Server’s investigation has identified an attack vector targeting instances running version 2.4.1, released on July 23, 2026, or older, following reports of unauthorized attackers sweeping hot wallets. The open-source cryptocurrency payment processor said it has no credible reports of hot wallet drains affecting users running the latest 2.4.7 release. Unauthorized Hot Wallet Sweeps The […]
PeckShield counted 55 major crypto hacks in September, totaling $766.49 million in losses. That is about 462% above August’s $136.3 million, and two incidents account for nearly all of it. Two Breaches Dominate the Month The Bitget incident, at about $387 million, and the Liquid Network theft of about $320 million, of which $285 million […]
THORChain is facing a fresh dispute over its handling of stolen funds after Bitget and security researchers publicly asked the network to block addresses linked to the September 24 exploit. The argument has widened into a fight over whether a permissionless protocol can refuse known stolen assets without compromising the censorship resistance it claims to […]
Bitget says its security systems flagged unauthorized transfers from a portion of its hot wallets at 18:31 UTC on September 24, with roughly $351.6 million in assets affected. The exchange says every dollar of that loss falls under its User Protection Fund, so customers’ balances will stay intact even with withdrawals paused as it reviews […]
CoinEx is preparing to shut down its platform after nearly nine years as the weakness across the crypto market has made operations increasingly difficult. The exchange said the broader industry has seen a significant contraction in trading volume and liquidity. It also cited rising regulatory requirements across major jurisdictions alongside higher compliance costs and operational uncertainties […]
The exploiter linked to the third wave of attacks on Coldcard wallets has now moved 45% of the coins stolen, according to Galaxy Research. The firm said the funds have been transferred either to Ethereum through THORChain or into Coinjoin, in an effort to launder the stolen assets. During Wave 3, the exploiter created 293 […]
Coinkite, the company behind Coldcard, has shipped a firmware update that will not generate a new wallet seed until the owner supplies randomness by hand. That means at least 50 dice rolls, 128 coin flips, or 65 timed key presses, three weeks after a defect in its random number generator opened customer funds to attackers. […]
On August 9, a bridge connecting the XRP Ledger and Coreum (now rebranded as tx) lost close to 200,000 XRP after an attacker tricked its deposit-checking system into treating a wallet-to-wallet transfer as a real deposit. The bridge has since halted, and both the operator and outside researchers have traced the failure to Coreum-side software […]
The first half of 2026 was the most active six months for crypto exploits on record. This is according to a new report from Blockaid, which shows hackers stole $1.1 billion across 212 incidents. Crypto Hacks Top $1.1B in H1 2026 The Blockaid report found that four major incidents involving KelpDAO, Drift, Resolv, and CoW […]