End-to-End Minimal Disclosure Cryptography Secures Wallet Privacy and Decentralization
A new SDK for minimal disclosure cryptography and local state verification fundamentally shifts blockchain privacy from the network to the user's wallet.
Bitcoin Investor Suffers $91 Million Loss from Social Engineering Heist
Sophisticated social engineering exploits human vulnerabilities, enabling direct asset theft from even seasoned digital asset holders.
Truflation Treasury and Personal Wallets Compromised by Malware Attack
Malware compromised Truflation's operational wallets, exposing over $5 million to direct exfiltration and undermining trust in asset security.
Address Poisoning Threat Exploits User Error in Crypto Transactions
Exploiting visual similarity in transaction histories, address poisoning manipulates user trust, leading to irreversible asset misdirection and significant financial loss.
UXLINK Exploiter Phished, Loses $48 Million in Arbitrum Token Theft
Even sophisticated attackers are vulnerable to basic phishing, demonstrating persistent risk across the digital asset landscape.
THORChain Founder’s Wallet Drained by Social Engineering Attack
A compromised personal MetaMask wallet, accessed via social engineering, underscores critical user-side private key risk.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
NPM Supply Chain Attack Compromises Crypto Wallets, DeFi Platforms
A supply chain compromise of critical NPM packages enables stealthy transaction hijacking, posing systemic risk to browser-based crypto operations.
Chrome V8 Engine Flaw Exposes User Crypto Wallets to Theft
A critical V8 engine vulnerability in Chromium-based browsers allows remote code execution, directly jeopardizing user private keys and digital assets.
Web3 Wallet Transaction Simulation Spoofing Drains User Funds
Attackers manipulate Web3 wallet transaction previews via time-delay exploits, enabling full wallet drains after user approval, a critical flaw in user-facing security.
Chrome V8 Engine Flaw Enables Crypto Wallet Drains
A critical type confusion vulnerability in Chrome's V8 engine permits arbitrary code execution, directly exposing user crypto assets to theft.
Crypto Developers Targeted by Phishing Malware Campaign
Attackers leverage social engineering to distribute macOS malware, compromising sensitive user data and risking asset theft.
Web3 Ecosystem Endures Billions in Losses from Wallet Compromises and Phishing
The pervasive threat of compromised digital asset custody and social engineering tactics continues to erode capital across decentralized finance.
Crypto Whale Drained via Ethereum Permit Feature Phishing Attack
The exploitation of Ethereum's Permit signature for gasless, off-chain approvals creates a stealthy vector for asset draining, circumventing traditional security alerts.
JavaScript Supply Chain Attack Threatens DeFi Wallet Transactions
A phishing-induced compromise of widely used JavaScript packages exposes a critical supply chain vulnerability, allowing attackers to hijack crypto transactions.
NPM Supply Chain Compromised, Crypto Wallets Targeted by Clipper Malware
A compromised open-source dependency allows silent address substitution, posing a systemic risk to browser-based crypto transactions.
Multi-Sig Wallet Drained via Sophisticated Contract Impersonation Phishing
An advanced phishing vector exploited a multi-signature wallet through disguised malicious approvals, leading to a substantial capital loss.
THORChain Co-Founder Wallet Compromised via Social Engineering
A sophisticated social engineering campaign led to the compromise of a prominent individual's private key, resulting in a seven-figure asset drain.
Multi-Signature Wallet Drained by Sophisticated Phishing Attack Leveraging Disguised Approval
A sophisticated phishing campaign exploited the Safe Multi Send mechanism, allowing attackers to siphon $3M by masking malicious approvals.
Multi-Signature Wallet Drained via Sophisticated Phishing Attack
A meticulously crafted phishing campaign exploited multi-signature wallet approval mechanisms, enabling the unauthorized transfer of significant digital assets.
Multi-Signature Wallet Drained by Sophisticated Phishing Attack
A deceptive phishing attack leveraged fake Etherscan verification and Safe Multi Send to bypass multi-signature wallet security, resulting in significant asset loss.
