Trezor says another approximately 67,000 U.S. customers had their personal information exposed in the breach at shipping provider ShipMonk, pushing the known number of affected customers from 13,689 to about 80,700. The newly identified records belong to customers who ordered between November 2019 and August 2021. They include names, email addresses, phone numbers, shipping addresses […]
An attacker drained roughly $1.7 million from a legacy Notional Finance V1 contract on September 4 after exploiting a flaw in how the protocol calculated account balances. The stolen funds included about 69,000 DAI and 1.66 million USDC. According to on-chain security researchers, the assets were later converted into ether and sent through Tornado Cash. […]
U.S. and European authorities have disrupted Sality, a peer-to-peer botnet that spent more than two decades infecting computers and, in recent years, redirecting cryptocurrency payments to attacker-controlled wallets. The coordinated action on August 31 involved the U.S. Department of Justice, FBI and Defense Criminal Investigative Service alongside authorities in Bulgaria, Hungary and Romania. The Justice […]
Core DAO is coordinating an emergency hard fork after a small group of validators obtained block rewards above the protocol’s intended issuance, leaving unanswered questions over how much excess CORE was created and whether any of it entered circulation. The project said on September 1 that the issue had been contained and validators it described […]
Thirteen malicious website themes distributed through Packagist have been linked to an iPhone spyware campaign designed to steal cryptocurrency wallet seeds and other sensitive data. The packages were made to look like themes for popular Vietnamese movie and comic streaming platforms. Website operators who installed them could unknowingly expose visitors to malicious code, according to […]
Ontology is keeping its mainnet offline after investigators identified malicious attack activity targeting the network, escalating an emergency pause that began on August 31 over a potential security concern. Block production and on-chain transactions remain suspended while developers and validators respond to the threat. In its September 1 security update, Ontology said its investigation confirmed […]
Wallets tied to North Korea’s Lazarus Group moved more than $30 million in Bitcoin through Hyperliquid over the past three weeks, converting the funds into ether and solana before routing assets across multiple networks and toward centralized exchanges. Lazarus-linked funds move through HyperUnit Arkham analyst Emmett Gallic flagged the activity on August 31. One cluster […]
More Markets’ WFLOW lending reserve was drained on Monday after an attacker exploited the DeFi protocol’s collateral setup on Flow EVM, with security firm Blockaid putting its initial detector impact at roughly $9.3 million. Blockaid said the attacker used an Ankr bonded liquid staking token together with More Markets’ E-Mode borrowing mechanism. About 15.5 million […]
A Balancer V1 liquidity pool has been exploited for roughly $234,000 after a rounding error caused the protocol to accept an extremely small WBTC deposit in exchange for thousands of pool tokens. Blockchain security firm SlowMist said the attacker manipulated conditions in the pool until its WBTC balance became extremely small. The resulting calculation valued […]
Cronos halted its blockchain on Sunday after an exploit hit Tectonic, the network’s largest lending protocol, with on-chain researcher Weilin Li estimating roughly $75 million in affected assets. Tectonic has not confirmed the figure or published a root-cause analysis. Cronos said it had identified an exploit in Tectonic and stopped the network while the incident […]
