Lazarus-Linked Attacks Are Reshaping Crypto Threat Modelling
Two incidents, eighteen days, $575 million, one actor. The playbook is corporate intrusion, and most protocol teams are not defended for it.
Hacks
Liquid Network Discloses $405 Million Federation Wallet Incident
Roughly 4,000 of the 4,200 BTC held in a federation reserve wallet moved out on 7 September. The design question it raises is older than the incident.
DefiLlama delayed app launch over App Store phishing impersonators
DefiLlama delayed the launch of its mobile app while it spent months trying to get Apple to remove phishing apps from its App Store that impersonated the analytics provider, according to the company’s pseudonymous…
Bitcoin ETFs See Inflows as Coldcard Hack Rekindles Custody Debate
US-listed spot Bitcoin exchange-traded funds (ETFs) are attracting fresh capital as a high-profile cryptocurrency custody incident puts renewed focus on digital asset security. Spot Bitcoin ETFs recorded $211.5 million…
Balance Coin Plummets 99% After $915K Exploit
Update July 22 at 4:37 am UTC: The article has been updated to include additional information from Slowmist about the exploit method. Balance Coin, an algorithmic stablecoin designed to maintain a peg to the US dollar…
OkoBot Malware Framework Targets Crypto Investors and Developers
Kaspersky has uncovered a new malware framework targeting cryptocurrency investors. Dubbed “OkoBot,” the malware initiates an infection chain that starts with social engineering tactics such as ClickFix, which tricks…
SEC Wins $5.4M Judgment Against NanoBit Crypto Fraud
The US Securities and Exchange Commission has won its fraud suit against crypto platform NanoBit Limited, nearly two years after the agency accused it of stealing hundreds of thousands of dollars from at least 18…
Jaredfromsubway.eth MEV Bot Drained of $7.5M
One of the most successful MEV bots in crypto, Jaredfromsubway.eth, has been drained for more than $7.5 million, with an attacker exploiting the bot’s automated systems, the same ones that have netted it hundreds of…
Anthropic Audit Finds No Major Zcash Protocol Vulnerabilities
Zcash founder Zooko Wilcox said a security audit by Anthropic's Claude Mythos artificial intelligence model found no serious vulnerabilities in the privacy-preserving cryptocurrency's protocol. Requested by Shielded…
Radiant Capital to Wind Down After $50M North Korea-Linked Hack
Radiant Capital has announced plans to wind down operations after failing to recover from a $50 million exploit that devastated the lending protocol and left it without sufficient funding to continue. Summary Radiant…
White hat unlocks $2M from 2016 Hong Coin ICO
More than 1,003 Ether, worth roughly $2 million, have been recovered from a failed 2016 ICO dubbed Hong Coin after a white hat hacker found a way to unlock funds that had remained trapped in a faulty smart contract for…
Gravity Bridge Halted After $5.4M Drain
Gravity Bridge has lost about $5.4 million following an early Saturday drain that security researchers linked to a possible signing key compromise. Summary Gravity Bridge lost about $5.4 million after security…