1+ week, 22+ hour ago   (390+ words) The larger disclosure implies roughly 80,689 affected customers, though no combined total or row-level overlap check is public. Hardware wallet maker Trezor says a breach at logistics provider ShipMonk exposed contact and order data for another approximately 67,000 U.S. customers after years-old records…...

3+ week, 6+ day ago   (638+ words) Recent incidents involving SafePal, Trezor, Ledger and Coldcard show threats spreading from compromised customer records and targeted phishing to direct Bitcoin losses. SafePal has become the latest hardware-wallet provider to suffer a security incident after an authorization flaw exposed personal…...

21+ hour, 55+ min ago   (568+ words) The attacker used an unauthorized mailbox inside a genuine government domain, allowing the request to clear Revolut’s authentication controls. Affected customers were told Friday that the disclosed information could include passport or driver’s license copies, verification selfies, names, dates of…...

1+ week, 5+ day ago   (462+ words) The Aug. 30 postmortem traces the replay flaw to mismatched serial-number checks and a 105-minute response gap. According to the ICON Foundation, the Aug. 27 ICON replay exploit released 119,866,000 ICX and 531,600 bnUSD from foundation-held assets after two legitimate withdrawal messages were reused…...

2+ week, 4+ day ago   (572+ words) Socket confirmed 40 malicious IDs, and exposed crypto wallet secrets still require migration after the add-ons are removed. Software supply-chain security firm Socket found 40 Firefox add-on identities with confirmed malicious behavior, including draining crypto, including nine that had previously distributed sports-score…...

6+ day, 4+ hour ago   (611+ words) SideSwap says bug-created L-BTC passed a valid peg-out flow, prompting federation signers to release about 3,996 real BTC. Liquid Network was effectively halted after nearly $320 million in Bitcoin left its federation reserve through an abnormal peg-out. The incident began Sept. 6 when…...

2+ week, 4+ day ago   (594+ words) Trail of Bits says the flaw put token supply and about $500,000 of HASH escrow at risk, but no exploitation was confirmed. Trail of Bits disclosed a Provenance Blockchain authorization flaw that it said exposed 82 live mainnet asset accounts to takeover....

1+ day, 18+ hour ago   (1009+ words) The fight over the remaining $46 million is splitting crypto over whether rewarding partial restitution encourages cooperation or invites extortion. Blockstream is refusing to pay the Liquid attacker nearly 600 Bitcoin (roughly $50 million), escalating a dispute over how the crypto industry should…...

6+ day, 2+ hour ago   (804+ words) Vitalik Buterin sees a 60% chance that advanced cryptography becomes cheap enough to reshape Ethereum privacy. On Sept. 6, the Ethereum co-founder said there is a 60% probability that SNARKs, fully homomorphic encryption and indistinguishability obfuscation will eventually operate at less than 10 times…...