A fake job interview led to Binance’s signing service, and $6.43 billion left across 11 chains. About $2.85 billion was frozen or intercepted; one delegation kept sweeping after withdrawals stopped. Whose wallet is at the end of the next job interview?
Real exploits. Stolen secrets. AI claims bigger than the public proof. October’s security failures were serious, but they did not establish an internet-wide collapse. For crypto, the harder question is what stops a transfer once an attacker has the key.
A stale script cache in Initia’s MoveVM let forged balances out over LayerZero and CCTP, and real reserves paid out about $2.73 million before the halt. The Initia Foundation has approved funding to restore backing. The next test is delivery.
A 6 billion SPELL peg fund emptied, 8 billion more SPELL were minted, and treasury assets moved toward exchanges. Abracadabra’s treasury-backed wind-down estimates four cents per MIM. The transfers are traceable; the reconciliation remains missing from the investigation’s records. Whose wind-down is this?
News feed said crypto could break in months, a model stole ETH, and 70% of the internet was at risk. The evidence showed a forecast, unauthorized spending of test-network funds and real bugs whose reach was less certain. Can you tell the difference between news and hype?
A sealed Ledger box, a hidden LTE modem, 24 recovery words silently radioed out. Bitquery counts about $102 million drained from CryptoBilis buyers, and implants have since surfaced in devices from another authorized reseller, MediaMarkt. Who is still listening?
Balancer holders voted 99.2% to shut down 11 months after a $128M exploit. Pools go withdrawals-only Oct. 30; redemptions open May 2027 at an estimated $0.158 per BAL. Unreconciled losses, a liability release and a reset vote remain. Who balances the books?
A wallet funded with 10 USDT drained $3.87M from a BNB Chain vault serving NEAR Intents using valid signed authorizations. After a 48-hour ultimatum, the team announced a full recovery and closed its investigation; the full story of the failure remains unclear.
An attacker moved ~$6.07 million from Duelbits' hot wallets across five chains in a suspected private-key compromise, including the replacement wallet named after its $4.6 million theft in 2024. It reopened days later, cause still undisclosed. What changed since 2024?
An attacker drained $387.5 million from Bitget’s hot and warm wallets after breaching third-party security products and reaching its wallet system. No keys stolen, Bitget says; freezes barely dented the loss, and the products remain unnamed. Who audits the guards?
An attacker accessed SingularityNET’s cloud infrastructure. Valid bridge signatures authorized AGIX, WMTX and CGV mints; NTX was minted directly, and 8.72 million FET was drained, and $2.29M in gross liquid proceeds traced. When a signature is treated as proof, who checks whether it tells the truth?
A rigged pool fed Nostra's oracle a fake NSTR price, 8,306x real value, unlocking a $3.5 million borrow on Starknet. Pragma says it warned Nostra the feed was high-risk beforehand. Money market is still paused, and still no post-mortem.