SEC Staff Permits State Trust Companies as Qualified Crypto Custodians
Institutional investors gain critical operational clarity as the SEC affirms State Trust Companies satisfy Qualified Custodian requirements for digital assets.
UPCX Payment Platform Suffers $70 Million Admin Key Compromise
A compromised administrative key allowed an attacker to upgrade a critical smart contract, enabling unauthorized fund withdrawals.
Force Bridge Compromised, $3.76 Million Drained by Admin Key Exploit
Compromised private keys enabled an access control bypass on Force Bridge, draining $3.76M and exposing critical cross-chain asset management risks.
Seedify Bridge Exploited, $1.7 Million Lost to Private Key Compromise
A compromised developer private key enabled unauthorized token minting and cross-chain asset draining, highlighting critical bridge security vulnerabilities.
Chrome V8 Engine Vulnerability Exposes User Crypto Wallets to Theft
A critical Type Confusion bug in Chromium's V8 JavaScript engine allows malicious code execution, enabling private key theft and wallet drains.
Yala Stablecoin Protocol Suffers $7.64 Million Key Compromise Exploit
A compromised deployment key enabled an attacker to mint unauthorized tokens and drain significant assets across multiple chains, exposing critical off-chain security lapses.
Truflation Treasury and Personal Wallets Compromised by Malware Attack
Malware compromised Truflation's operational wallets, exposing over $5 million to direct exfiltration and undermining trust in asset security.
DMM Bitcoin Suffers $308 Million Hot Wallet Private Key Compromise
A compromised private key enabled the exfiltration of substantial Bitcoin from DMM Bitcoin's hot wallet, underscoring critical custodial risks.
Chrome V8 Engine Flaw Exposes Crypto Wallets to Private Key Theft
A critical Type Confusion vulnerability in Chromium's V8 JavaScript engine enables remote code execution, directly threatening digital asset private keys and facilitating wallet drains.
