Hack
Ethereum, Solana Wallets Targeted in Massive 'npm' Attack But Just 5 Cents Taken
The credential stealer harvested username, password, and 2FA codes before sending them to a remote host. With full access, the attacker republished every "qix" package with a crypto-focused payload.
Ledger CTO Warns of NPM Supply-Chain Attack Hitting 1B+ Downloads
According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to silently swap crypto wallet addresses in transactions. That means unsuspecting users could send funds directly to the attacker without realizing it.
Sui-Based Yield Protocol Nemo Exploited for $2.4M in USDC
Nemo, a yield protocol on the Sui blockchain, suffered a $2.4 million exploit.
BNB Chain-Based Venus Protocol Drained of $27M on Suspected Contract Compromise
The attack involved updating a contract to a malicious address, affecting tokens like vUSDC and vETH.
YZY Hype Machine Leaves Traders Nursing Millions in Losses on Ye-Linked Token
More than 51,800 addresses lost $1-$1,000, 5,269 are down $1,000-$10,000 and 1,025 shed $10,000-$100,000, Bubblemaps said.
Victim Loses $91M in Bitcoin in Social Engineering Scam: ZachXBT
A fraudster posing as a hardware wallet support agent tricked the target into handing over wallet credentials.
Crypto Hackers Capitalize on ETH Surge, Offloading $72M This Week
Three high-profile exploiters have taken advantage of ether’s rally to liquidate stolen funds, pocketing tens of millions in extra profits.
Turkish Crypto Exchange BtcTurk Witnesses $48M of Suspicious Outflows Amid Hack Fears
Blockchain sleuths flagged suspicious multi-chain transfers from the Turkish exchange, prompting a suspension of deposits and withdrawals.
Coinbase Loses $300K in MEV Exploit After Misstep With 0x Swapper Contract
The bots simply waited for a high-value wallet — like Coinbase’s fee receiver — to mistakenly grant spending rights to an exposed contract, then executed the drain instantly.
Memecoin Launchpad Odin.fun Suffers $7M Liquidity Exploit
Attackers exploited Odin’s liquidity pool by depositing a worthless token like SATOSHI alongside BTC, setting an inflated price ratio in the thin market.
