Tagged: exploit

October 22, 2026 @ 8:37 am By Omar Faridi  |  

The PHP Foundation has acknowledged that indecision and limited resources led to a structural failure that delayed a fix for a critical security flaw first identified in 2024. The admission came in a detailed statement issued hours after the project released emergency patches for two… Read More

October 21, 2026 @ 9:27 pm By Omar Faridi  |  

Belgian hardware wallet company Ngrave disclosed that attackers compromised a third-party service responsible for delivering push notifications in its LIQUID companion app. The breach allowed the criminals to send authentic-looking security alerts to customers on October 17, 2026. The messages claimed that a user’s portfolio… Read More

October 4, 2026 @ 1:50 pm By Omar Faridi  |  

September 2026 was the worst month of the year for crypto theft, and it was not close. Immunefi reported that about $742 million was lost across 33 hacked entities, enough for the month alone to account for roughly a third of all money stolen in… Read More

October 2, 2026 @ 6:12 pm By Omar Faridi  |  

NEAR Intents suspended its services on October 1, 2026, after identifying a security incident that the team preliminarily linked to roughly $3.8 million in losses. The cross-chain trading protocol said the problem originated in a flaw involving the interaction between its Omni deposit and withdrawal… Read More

October 2, 2026 @ 2:21 pm By Omar Faridi  |  

An attacker who exploited a flaw in Zano’s Gateway Address feature minted roughly 36.9 million unauthorized ZANO before the project reversed about a month of blockchain history, according to a post-mortem released by the team. The disclosure, published Thursday, describes two large minting events. On… Read More

September 30, 2026 @ 12:21 am By Omar Faridi  |  

An on-chain investigator has tied a long run of memecoin launches on Robinhood Chain to what he describes as one repeating extraction operation. On September 27, 2026, the analyst known as Wazz published a thread arguing that the same crew could be linked to 53… Read More

September 28, 2026 @ 6:23 am By Omar Faridi  |  

White-hat researchers moved tens of thousands of NFTs to safety after a long-dormant settlement contract was used to pull tokens from wallets that still carried old marketplace permissions. The issue involved Limit Break’s Payment Processor V2, a contract that once handled on-chain settlement for Magic… Read More

September 28, 2026 @ 1:16 am By Omar Faridi  |  

Bitget’s chief executive has publicly pressed THORChain to stop processing funds tied to last week’s exchange breach, arguing that a protocol’s architecture should not be treated as cover for moving assets already identified as stolen.On September 24, Bitget detected unauthorized outflows from hot and warm… Read More

September 25, 2026 @ 3:41 pm By Omar Faridi  |  

Bitget revealed that a $351.6 million breach was not a private-key theft. According to CEO Gracy Chen, attackers broke into a critical wallet backend, fed forged transfer data into the exchange’s own approval process, and walked funds out of hot and warm wallets as if… Read More

September 24, 2026 @ 3:13 am By Omar Faridi  |  

Ethical researchers appear to have done what many Coldcard victims had hoped for: they reached 52.37 bitcoin before thieves could empty the exposed wallets. Alex Thorn, Galaxy Digital’s (NASDAQ: GLXY) head of firmwide research, said those coins have now been gathered into a single address… Read More

September 23, 2026 @ 5:37 pm By Omar Faridi  |  

An iOS whale-watching app that never asked users for a seed phrase has been tied to nearly $580,000 in stolen cryptocurrency after researchers found it could reach secrets stored by other apps on the same iPhone. Blockchain security firm SlowMist, working with OKX’s security team,… Read More

September 21, 2026 @ 4:18 pm By Omar Faridi  |  

A single on-chain actor appears to have struck two related artificial-intelligence crypto projects within minutes of each other on September 19, 2026, emptying a Fetch.ai conversion contract and inflating NuNet’s token supply in one coordinated burst. Security firms tracking the wallets say the same cluster… Read More

September 16, 2026 @ 9:59 pm By Omar Faridi  |  

Cross-chain protocol Symbiosis has said it reclaimed about 15 bitcoin after a vulnerability in its native Bitcoin Bridge was used on September 11. The team also extended a 20 percent white-hat bounty to the attacker, with a September 13 cutoff for a direct return of… Read More

September 8, 2026 @ 4:01 pm By Omar Faridi  |  

Cronos, the Layer 1 network associated with Crypto.com, has released its official accounting of the August 30 attack on Tectonic. The review confirms that more than $9 million extracted during the incident remains outside the chain’s reach. Validators later rolled the ledger back and reversed… Read More

September 7, 2026 @ 4:25 pm By Omar Faridi  |  

Blockstream’s Liquid Network, a federated Bitcoin sidechain used by exchanges and institutions for faster settlement and confidential transfers, temporarily halted new activity after nearly the entire bitcoin reserve backing its L-BTC token left the federation wallet. On September 6, 2026, two transactions moved approximately 3,998… Read More

September 1, 2026 @ 7:15 pm By Omar Faridi  |  

Cosmos Labs has recently acknowledged that it initially misclassified a critical flaw in Cosmos EVM, the shared software layer that lets Cosmos SDK chains support Ethereum-style applications. That error later enabled attackers to drain assets from six networks between August 20 and August 25, 2026…. Read More

August 31, 2026 @ 8:31 am By Omar Faridi  |  

On August 30, Cronos stopped producing blocks after Tectonic, the network’s main lending market, was emptied through a price-and-borrow sequence rather than a novel contract bug. On-chain researcher Weilin Li first estimated about $66 million in damage, then raised the figure to roughly $75 million… Read More

August 31, 2026 @ 7:38 am By Omar Faridi  |  

Fogo, a Layer 1 blockchain built around the Solana Virtual Machine, temporarily stopped mainnet activity after a security incident involving the project’s foundation. An unknown party gained access to foundation-controlled holdings and moved 400 million FOGO tokens to an external address. The transfer represents about… Read More

August 31, 2026 @ 7:10 am By Omar Faridi  |  

The Cronos blockchain, the layer-1 network closely associated with Crypto.com, stopped producing blocks on Sunday, August 30, 2026, after an exploit hit Tectonic, the chain’s dominant decentralized lending protocol. Validators coordinated a full halt within minutes of detecting the incident, freezing transfers, bridges, and smart… Read More

August 28, 2026 @ 8:27 am By Omar Faridi  |  

Moonwell, a lending protocol on Base, said on August 27, 2026 that it was looking into a problem in its MAMO Core Market and had taken emergency steps to stop new loans. In its official statement, the team said borrow caps for every Core Market… Read More