Tangem Hardware Wallets Vulnerable to PIN Brute Force “Tearing Attack”
A physical side-channel vulnerability in Tangem cards enables rapid PIN brute-forcing, directly exposing user assets to theft if physical access is gained.
User Funds Drained by Malicious Uniswap Permit2 Signature
A deceptive Permit2 transaction approval allowed an attacker to siphon $118,000 in user assets, highlighting critical signature verification risks.
Ethereum Wallets Compromised by EIP-7702 Delegator Contract Exploits
EIP-7702's delegator function enables sophisticated phishing, allowing attackers to bypass critical on-chain checks and drain user funds.
Venus Protocol User Funds Drained by Sophisticated Phishing Attack
A malicious transaction approval enabled an attacker to siphon millions from a Venus Protocol user, underscoring critical user-side vulnerability.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
JavaScript Supply Chain Attack Threatens DeFi Ecosystem
A compromised JavaScript package, widely integrated across DeFi, enables transaction hijacking, posing a systemic risk to user funds and operational integrity.
Truflation Suffers $5 Million Loss from Malware Compromising Wallets
A malware attack targeting treasury multisig and personal wallets led to a significant $5 million exfiltration, underscoring critical off-chain security vulnerabilities.
North Korean Hackers Deploy BeaverTail Malware via Fake Crypto Job Offers
A sophisticated social engineering campaign leverages fake job opportunities to distribute advanced malware, directly compromising user credentials and crypto wallets.
Indodax Exchange Transaction System Compromised, $18.2 Million Exfiltrated
A compromised transaction system on a major exchange enabled the exfiltration of $18.2 million, highlighting critical operational security gaps.
Ethereum Whale Loses $6m to Gas-Free Phishing Attack
A critical vulnerability in off-chain approval mechanisms allowed a sophisticated phishing attack to drain $6 million in assets.
Lazarus Group Targets Venus Protocol, $13.5 Million Theft Recovered
A sophisticated phishing attack, attributed to an Advanced Persistent Threat group, attempted to drain $13.5 million from Venus Protocol, highlighting persistent social engineering risks.
THORChain Founder’s Personal Wallets Compromised via Social Engineering
A sophisticated social engineering attack leveraging compromised communication channels drained $1.35 million from a prominent founder's private wallets.
Chrome V8 Engine Vulnerability Exposes Crypto Wallets to Theft
A critical "Type Confusion" bug in Chromium's V8 engine allows remote code execution, enabling attackers to drain crypto wallets via malicious websites.
Chromium Browser Vulnerability Threatens Crypto Wallet Assets
A critical "Type Confusion" bug in Chromium's V8 engine allows remote code execution, exposing private keys and draining crypto wallets.
Investor Loses $6 Million to Phishing-Induced Multicall Transaction
A deceptive link led to an unauthorized multicall transaction, demonstrating how social engineering can bypass user intent and drain digital assets.
Browser Vulnerability Exposes Crypto Wallets to Remote Theft
A critical type confusion vulnerability in Chromium's V8 engine permits remote code execution, directly threatening locally stored digital asset keys.
Chrome V8 Engine Vulnerability Exposes Crypto Wallets to Website Attacks
A critical "Type Confusion" bug in Chrome's V8 engine enables remote code execution, allowing attackers to drain crypto wallets via malicious websites.
Crypto Investor Suffers $6 Million Loss from Phishing Multicall Exploit
A deceptive phishing attack leveraged a malicious link to induce an unsuspecting user into authorizing a multicall transaction, leading to a significant asset drain.
Truflation Wallets Compromised in $5 Million Malware Attack
Malware compromised Truflation's operational security, enabling unauthorized access to treasury and personal funds, highlighting critical risks in key management.
Bitcoin Holder Loses $91 Million to Social Engineering Attack
A sophisticated social engineering campaign exploited an individual's trust, leading to the unauthorized transfer of 783 BTC, underscoring critical user-side vulnerability.
NPM Supply Chain Compromise Threatens JavaScript Crypto Ecosystem
A pervasive supply chain attack on NPM accounts injects malicious code, covertly swapping cryptocurrency addresses during user-approved transactions.
Multi-Sig Wallet Drained via Sophisticated Phishing Attack
A meticulously crafted phishing scheme exploited a multi-signature wallet, leveraging disguised approvals to siphon over $3 million in USDC from an unsuspecting investor.
Multi-Sig Wallet Drained by Sophisticated Phishing Attack
A cunning phishing attack exploited a multi-signature wallet, leading to the unauthorized transfer of assets by disguising malicious approvals.
