Chrome V8 Engine Vulnerability Exposes Crypto Wallets to Website Attacks
A critical "Type Confusion" bug in Chrome's V8 engine enables remote code execution, allowing attackers to drain crypto wallets via malicious websites.
Crypto Investor Suffers $6 Million Loss from Phishing Multicall Exploit
A deceptive phishing attack leveraged a malicious link to induce an unsuspecting user into authorizing a multicall transaction, leading to a significant asset drain.
Crypto Whale Drained via Ethereum Permit Feature Phishing Attack
The exploitation of Ethereum's Permit signature for gasless, off-chain approvals creates a stealthy vector for asset draining, circumventing traditional security alerts.
Truflation Wallets Compromised in $5 Million Malware Attack
Malware compromised Truflation's operational security, enabling unauthorized access to treasury and personal funds, highlighting critical risks in key management.
Tangem Wallet PIN Brute Force Vulnerability Uncovered
A critical vulnerability in Tangem cold wallet cards allows attackers to bypass PIN attempt limits via a "tearing attack," enabling brute force theft.
Shibarium Bridge Exploited, $2.4 Million Drained via Flash Loan Attack
A flash loan vulnerability allowed attackers to compromise Shibarium's validator consensus, draining $2.4 million and exposing critical L2 bridge risks.
Bitcoin Holder Loses $91 Million to Social Engineering Attack
A sophisticated social engineering campaign exploited an individual's trust, leading to the unauthorized transfer of 783 BTC, underscoring critical user-side vulnerability.
U.S. Exchange Breached via Outsourcing Firm Social Engineering
Sophisticated social engineering against third-party vendors exposes exchanges to supply chain attacks, enabling significant asset exfiltration.
ALEX Protocol Suffers $16.18 Million Exploit via Failed Access Controls
A critical vulnerability in the ALEX Protocol's vault system, stemming from failed access controls, allowed an attacker to bypass security mechanisms and drain significant funds.
