Hack

A hacker turned 25 cents of bitcoin into 46 billion fake BTC tokens on a DeFi bridge
Two software bugs allowed the attacker to create more than 2,000 times Bitcoin’s maximum supply in unbacked syBTC. Symbiosis puts preliminary losses at 9.97 BTC.

How a simple coding mistake let a hacker drain $7.8 million from a crypto wallet
Security firms traced the $7.8 million loss to a helper contract the wallet owner had authorized, not to Safe itself.

Cronos executes controversial blockchain rollback to recover crypto worth $111 million
Validators rolled back nearly two hours of blockchain history to recover user assets. But the attackers still managed to get away with $9.19 million before Cronos halted the network.

CrowdStrike and federal authorities dismantle Russian malware that secretly stole crypto for 8 years
Russia-based Sality watched for copied bitcoin and Ethereum addresses and quietly replaced them with the attacker’s. CrowdStrike and law enforcement have now isolated more than 15,000 infected machines.

Ethereum lending app Term Finance loses $8.5 million after attacker buys voting power
The exploit shows how lightly held voting tokens can become a means of attack when control of a protocol is cheaper than the assets it governs.

Web3 gaming network Sandbox stops Base and BNB chain bridging after exploit
The Sandbox disabled bridging on affected networks to isolate tokens and warned users not to trade SAND on Base and BNB, citing an impact of under 0.01% of supply.

A year after losing $1.46 billion, Bybit says AI helped it save $700 million
The exchange that lost $1.46 billion to North Korean hackers is the first large centralized firm to put numbers on a claim bitcoin developers have been making all month.

BitMart founder dismisses calls for audit as users report blocked funds, unpaid employees
Sheldon Lee said a Chinese-language X account making the claims was hacked. Users want wallets, assets and liabilities disclosed.

Israel’s largest crypto broker Bits of Gold hit by data breach affecting 200,000 customers
Funds and digital assets were not touched, but names, bank account details, and national ID numbers may have been exposed in what the company says was a wider global attack.

MiCA's cleanup is creating a new scam wave across the European Union
Fraudsters impersonating regulators and licensed crypto exchanges to steal funds from users forced to migrate their accounts after the EU's MiCA deadline are on the rise.
