Hack

A fake Ledger app on the Apple App Store drained $9.5 million in crypto
A malicious Ledger Live clone slipped onto Apple’s App Store, draining millions from dozens of victims across multiple blockchains in a week-long phishing campaign.

Crypto exchange Kraken targeted in extortion attempt but says there was no breach and no client funds at risk
The firm said a criminal group is attempting to extort it over limited insider-related data access incidents affecting about 2,000 accounts. Kraken says it will not pay and is working with law enforcement.

U.S. Treasury to loop in crypto sector on hacker warnings shared with traditional firms
The Department of the Treasury announced it's letting crypto firms sign up for timely information-sharing on cybersecurity threats.

How North Korea's 6-month long secret espionage program has crypto community rethinking security
For years, the DeFi industry has treated security as a technical problem: something that could be solved with better code. But the Drift incident suggests something far more complex: that the real vulnerabilities may lie outside the codebase altogether.

Solana Foundation unveils security overhaul days after $270 million Drift exploit
The program includes 24/7 threat monitoring for protocols with more than $10 million in deposits and a dedicated incident response network of security firms.

AI is making crypto's security problem even worse, Ledger CTO warns
Ledger’s Charles Guillemet says artificial intelligence is making hacks cheaper and faster, forcing a rethink of how crypto systems stay secure.

Circle under fire after $285 million Drift hack over inaction to freeze stolen USDC
Prominent blockchain sleuth ZachXBT alleged faster action by Circle could have limited crypto losses, but freezing asset without legal authorization carries legal risks.

How a Solana feature designed for convenience let attackers drain more than $270 million from Drift
The exploit did not involve a bug in Drift's code. It used "durable nonces," a legitimate Solana transaction feature, to pre-sign administrative transfers weeks before executing them, bypassing the protocol's multisig security in minutes.

North Koreans hackers likely behind $286 million Drift Protocol exploit: Elliptic
The blockchain analytics firm pointed to cross-chain laundering patterns and Solana-specific tracing challenges that mirror prior North Korean state-linked operations.

Galaxy Digital's testnet suffers hack but no client funds or information were compromised
Mike Novogratz’s crypto financial services firm said unauthorized access was limited to a segregated R&D workspace; trading systems and client accounts were unaffected.

