Coldcard hacker moves $7.7 million in BTC, 45% of bitcoin stolen in third attack wave
The attacker has now drained the 11 largest vaults tied to the third wave of Coldcard thefts, Galaxy Research said.
News
Digital asset news
Headlines from publishers with a newsroom and from primary regulators, each linking out to the original. We aggregate and attribute; we never republish an article body.
Coldcard exploiter moves 45% of funds stolen from ‘Wave 3’ attacks, Galaxy says
As of mid-August, Galaxy said it had identified roughly 1,779 BTC stolen from 190 victims and more than 8,600 addresses.
The Block
50 d ago
Security
↗ theblock.co
Harmony proposes shutting down layer 1, migrating ONE to Ethereum
Harmony proposed sunsetting its layer-1 blockchain and migrating ONE to Ethereum, weeks after an exploit led to plans to discard 109,000 transactions.
Bitcoin network used by exchanges hit by $320 million exploit. Hackers claim they're the 'good guys'
Liquid Network, a settlement layer used by exchanges, halted all transactions after losing $320 million worth of bitcoin in a security exploit.
‘White hats’ take 4000 BTC from Liquid, ETFs see best inflows of 2026: Hodler’s Digest
Purported white hat hackers have taken 4000 Bitcoin from the Liquid sidechain in a major security breach. The Bitcoin ETFs see the best three weeks of inflows in 2026.
Trezor Breach Worse Than Reported: Another 67,000 US Customers Exposed
Trezor said that its third party shipping partner, ShipMonk, had not erased customer data.
Bitcoin Magazine
52 d ago
Security
↗ bitcoinmagazine.com
OpenAI Agents Hack German Website to Share Rule-Breaking Tactics: Report
The activity began in May and remained undisclosed until Friday, a day after OpenAI launched Astra and U.S. lawmakers proposed restrictions on advanced AI.
Decrypt
52 d ago
Security
↗ decrypt.co
Trezor says mailing breach leaked 67K more users than first thought
Crypto hardware wallet Trezor says it's "terribly sorry" after discovering its data deletion policy wasn't enforced by its shipping partner.
Protos
52 d ago
Security
↗ protos.com
Trezor says ShipMonk breach affected another 67,000 customers
The newly identified records date from 2019 to 2021 and include names, emails, phone numbers, shipping addresses, and order numbers.
The Block
52 d ago
Security
↗ theblock.co
67,000 More Trezor Customers Exposed as Data Breach Widens
Some records exposed in the breach date to 2019, years beyond the 90-day retention Trezor said its partners had agreed to.
Decrypt
52 d ago
Security
↗ decrypt.co
Trezor says data breach affects another 67K US customers
Trezor said an additional 67,000 US users were affected by its shipping provider’s data breach, opening the path to potential phishing attacks and social engineering…
Cointelegraph
52 d ago
Security
↗ cointelegraph.com
OpenAI Releases GPT-6 Astra: The Closest AI Model Yet to AGI
The model can independently discover and exploit unknown security flaws across hardened systems, triggering a staged rollout and White House review before public access.
Decrypt
53 d ago
Security
↗ decrypt.co
Australia is cracking down on crypto businesses as its strict new regulatory deadline nears
Firms that miss the deadline could breach financial services law from Oct. 1 and face civil or criminal penalties.
CoinDesk
53 d ago
Security
↗ coindesk.com
Coldcard hacker swaps stolen Bitcoin for ETH via THORChain
The third-wave Coldcard exploiter moved about 10% of stolen funds through THORChain as researchers traced the assets to a new Ethereum address.
150 million IDs allegedly stolen — including Pete Hegseth’s
Over 150M US driver's licenses are for sale on the dark web after identity verification firm IDScan.net suffered an apparent data breach.
Protos
54 d ago
Security
↗ protos.com
OpenAI says its new 'Astra' AI can build attacks without human help
Astra is the first OpenAI model to reach its “Critical” cybersecurity threshold, meaning it can find previously unknown vulnerabilities and develop ways to exploit them…
CoinDesk
55 d ago
Security
↗ coindesk.com
Dropbox Security Breach: Hackers Access Accounts Through Authentication Flaw
Attackers reportedly registered Lenovo IDs using victims’ email addresses, allowing them to sign into existing Dropbox accounts without their passwords.
Decrypt
55 d ago
Security
↗ decrypt.co
X Data Breach? Users Are Getting Flooded With Password Reset Emails Nobody Requested
X engineers have acknowledged the issue, but have not confirmed a new data breach of its systems.
Decrypt
55 d ago
Security
↗ decrypt.co
Crypto.com's Cronos Halts Entire Blockchain After $75M Tectonic Exploit
Some $6 million reached Ethereum before validators froze the chain, stranding the rest on a network that still is not producing blocks.
More Markets lending reserve drained for $9.3M: Blockaid
Blockaid said an attacker used an Ankr liquid staking token and E-mode to overborrow from More Markets and drain about $9.3 million in WFLOW from a lending reserve.
Cointelegraph
57 d ago
Security
↗ cointelegraph.com
Cronos halts blockchain after $75 million lending exploit hits lending app Tectonic
An attacker allegedly pushed Tectonic’s thinly traded TONIC token up 100-fold, used it as collateral to borrow real assets and left most funds stranded when Cronos…
Cronos halts network after Tectonic exploit involving estimated $75M
Crypto.com CEO Kris Marszalek said the company’s app and exchange were unaffected by the Tectonic breach and continued operating normally.
Crypto.com-linked Cronos network halts after Tectonic exploit estimated at $75 million
Li says the attacker manipulated the price of Tectonic's illiquid TONIC token before borrowing against the inflated collateral, a Mango Markets-style hack.
A $1.1 million crypto card hack crashed a neobank's token 49%
The exploit caused the neobank's AVICI token to drop 49% from a 24-hour high, hitting a record low before paring some of the losses.
CoinDesk
58 d ago
Security
↗ coindesk.com
Cosmos Labs says it wrongly cleared the bug behind a $5.7 million six-chain hack
MANTRA Chain, which lost $3.6 million, claimed the patch was only released 20 hours before the attack began and did not identify the flaw it fixed.
OneKey reproduces transaction replacement attack on outdated Ledger Ethereum app
OneKey said it reproduced an exploit against an older version of the Ledger app in its lab environment, which Ledger fixed in its Ethereum app 1.22.2, with no user funds…
The Sandbox pledges 1:1 repayment after $700K bridge exploit
Eligible holders on Base and BNB Chain will receive Ethereum-based SAND from the project’s treasury, with claims expected to open within two weeks.
Cointelegraph
60 d ago
Security
↗ cointelegraph.com
Bitcoin Completes First Experimental Quantum-Safe Transaction, Starkware Says
The transaction used Bitcoin’s existing rules to protect funds from a future quantum attack without requiring a network upgrade.
No, Ledger Wasn’t Hacked: Vulnerable Ethereum App Was Patched Before Exploit, Company Says
OneKey demonstrated how an outdated Ethereum app could sign a transaction different from the one shown on a Ledger device, but the wallet maker says the vulnerability…
Moonwell investigates lending market issue on Base as security firms flag multimillion-dollar exploit
Security firms CertiK and PeckShield estimate losses of around $8.7 million after an attacker manipulated the collateral price of MAMO.
The Block
60 d ago
Security
↗ theblock.co
Moonwell’s latest $9M attack marks four incidents in a year
Borrow liquidity on Moonwell has been drained following a well-capitalized attacker’s price manipulation of collateral token MAMO.
Protos
60 d ago
Security
↗ protos.com
Rogue OpenAI Agents Sacrificed Their Own Runs to Hack Hugging Face, Report Finds
Coordinators pressed agents with little budget left into experiments they called "permadeath," METR's investigation found.
Decrypt
60 d ago
Security
↗ decrypt.co
Tokenized Deposits Could Drain $700 Billion From Bank Lending, Dallas Fed Warns
A shift toward faster, more rate-sensitive deposits could push banks into safer assets, constrain lending, and raise borrowing costs, Dallas Fed researchers said.
Decrypt
61 d ago
Security
↗ decrypt.co
Kraken Says ‘Dust Attack’ From Sanctioned HTX Wallet Locked Out Customers
Someone has sent crypto dust from sanctioned HTX to Kraken users.
Hugging Face hack exposes the open-weight AI cybersecurity paradox
Hugging Face relies on open weight Chinese models to defend itself from rogue AI agents. But a lack of safety guardrails makes those models potentially dangerous too.
Cointelegraph
62 d ago
Security
↗ cointelegraph.com
Hugging Face Explores $13 Billion Sale a Month After a Rogue OpenAI Agent Hacked It
The open-source AI hub is fielding buyout interest at nearly triple its 2023 valuation, weeks after a security breach and days after Stripe's OpenRouter deal reset the…
Decrypt
63 d ago
Security
↗ decrypt.co
Nearly 14,000 crypto holders face security risk after data breach
Personal details of people with Trezor hardware wallets stolen by hackers in second ‘cold’ storage attack in two weeks…
Financial Times
74 d ago
Security
↗ ft.com
Scammers pose as watchdogs to exploit EU crypto rule changes
Customers at hundreds of unlicensed exchanges told to withdraw funds, creating openings for fraudsters…
Financial Times
82 d ago
Security
↗ ft.com
01
Where this comes from
Every publisher whose items appear here in the last thirty days, with how many. Press-release wires are blocked outright — a press release is not journalism.
Crypto Briefing963
Cointelegraph483
Crypto news482
Bitcoin430
CoinDesk399
AMBCrypto391
Decrypt340
CryptoSlate270
Benzinga260
The Block242
BeInCrypto231
Coingape228
Bitcoin Magazine212
Cryptonews127
CrowdFundInsider113
Protos106
Invezz95
The Motley Fool87
FXEmpire24
Financial Times11
MarketWatch9
CNBC3
DL News2
Coindesk1