TrapDoor Supply-Chain Attack Targets Crypto and AI Developers
Security researchers identified a coordinated supply-chain campaign known as TrapDoor that began on May 22, 2026, targeting developer tooling used by cryptocurrency…
Security
Hacks, exploits and security fixes across exchanges, bridges and DeFi protocols, with what happened and how funds moved.
51 stories
StablR Stablecoins Lose Pegs After Multisig Takeover
StablR’s EURR and USDR stablecoins lost their pegs on May 24, 2026, after an attacker exploited a 1-of-3 multisignature setup to seize administrative control of minting…
Missouri Sues CoinFlip Over Alleged Crypto ATM Fraud Failures
Missouri Attorney General Catherine Hanaway filed a lawsuit in late May 2026 against GPD Holdings LLC, the operator of CoinFlip, accusing the company of knowingly…
Ohio Crypto Manager Gets Nine Years for $10M Ponzi Scheme
Rathnakishore Giri, a 31-year-old investment manager from New Albany, Ohio, was sentenced to nine years in federal prison and three years of supervised release for…
THORChain Halts Trading After $10.8M Cross-Chain Exploit
THORChain halted trading and signing across multiple networks on May 15, 2026, after investigators identified a multi-chain exploit that drained more than $10 million in…
CrowdStrike Says North Korea-Linked Crypto Theft Hit $2.02B in 2025
CrowdStrike reported on May 14, 2026, that North Korea-linked cyber actors stole an estimated $2.02 billion in digital assets during 2025, a 51% year-over-year increase…
North Korea-Linked Actors Drove 60% of Crypto Theft in 2025
North Korea-linked actors were responsible for roughly $2.06 billion in cryptocurrency theft in 2025, equal to about 60% of all reported losses that year, according to…
FBI and Indonesian police dismantle W3LL phishing network tied to $20 million in attempted fraud
A joint U.S.-Indonesian operation has dismantled one of the more industrialized phishing services in recent years, cutting off a platform that enabled cybercriminals to…
Attorney says Drift’s April exploit may amount to civil negligence
Drift Protocol’s $270 million to $285 million exploit on April 1, 2026 is now being viewed through a legal lens that could prove as consequential as the technical…
Drift Protocol exploited for $285M; Solana derivatives DEX suspends deposits and withdrawals
Drift Protocol suffered a severe exploit, in an attack that on-chain analysis and security firms estimate drained more than $285 million from the Solana-based perpetuals…
ZachXBT exposes “Fear Network” of fake X accounts using war-themed posts to fuel crypto pump-and-dumps
A new investigation by blockchain sleuth ZachXBT alleges that a coordinated cluster of fake X accounts used war-related fear to drive users into cryptocurrency scams.
OpenClaw developers hit by GitHub phishing campaign promising fake “CLAW” airdrops
OpenClaw’s developer community was hit by a coordinated phishing campaign in mid-March 2026, prompting the project’s creator to issue a public warning on March 19.
Ledger research exposes MediaTek Boot ROM and WebView flaws that enabled Android wallet seed theft
Ledger’s Donjon security team disclosed that it had uncovered a hardware flaw in MediaTek processors, alongside related weaknesses in Android’s WebView, that together…