16+ hour, 27+ min ago   (1834+ words) An attacker minted billions of unbacked syBTC on the cross-chain bridge Symbiosis and pulled out roughly $336,000. We checked for ourselves on September 12 which routes are still running: the way into the bridge is suspended, the way out is open. Symbiosis…...

3+ day, 7+ hour ago   (1796+ words) An alleged security warning to wallet customers travelled through the manufacturer's genuine sending channel and passed every technical authenticity check. The test that still holds costs you four minutes. This article explains how to recognise a forged security warning when…...

3+ day, 11+ hour ago   (1808+ words) Trezor users received a fake STM32 entropy warning sent from a real Trezor address. Here is what happened and what to do if you clicked. The company confirmed on Wednesday that attackers had gotten into its email infrastructure and used it…...

6+ day, 1+ hour ago   (1809+ words) Compromised private keys overtook smart contract code flaws as the most common attack route for the first time in 2026. What sits behind the shift, and how to check your own setup for its single point of failure. A private key…...

6+ day, 9+ hour ago   (1485+ words) Nearly 4,000 BTC left Liquid Network's federation wallet. The attacker says he is a white hat and is negotiating with Blockstream on-chain. Bitcoin's oldest sidechain just lost almost everything it was holding, and the person who took it is asking politely…...

1+ week, 1+ day ago   (1788+ words) The Swiss Bitcoin service Pocket Bitcoin closed its investigation on September 3, 2026: 5,411 people affected, and for 291 of them the Bitcoin addresses they used along with copies of identity documents. Why this one data pairing has lasting effect, and what you should…...

1+ week, 6+ day ago   (1789+ words) In August 2026 the security firm Socket disclosed two separate campaigns: 40 confirmed malicious Firefox extensions and 19 for Chrome and Edge, all of them from the official marketplaces. Nine of them were harmless sports apps that only turned into wallet thieves through…...

1+ week, 6+ day ago   (1845+ words) On August 30, 2026, the validators of the Cronos chain halted block production after an attacker had emptied the lending market Tectonic via an inflated TONIC price. What is established, why the damage figures diverge, and what you can check if your…...

1+ week, 6+ day ago   (1785+ words) An attack on a card balance contract on Solana took the loaded balance from 1,685 users while their wallets stayed untouched. The case shows why it matters whether your crypto card holds funds as e-money at a licensed institution or in…...

1+ week, 6+ day ago   (1813+ words) An attacker drove the price of the thinly traded MAMO token fortyfold and borrowed $11.03 million against it from the Moonwell lending protocol on Base. Around $9.13 million remains open and falls on depositors who never touched MAMO. Moonwell is a lending…...