Phishing News

A third-party e-commerce breach exposed order data, enabling phishing attempts without compromising Ledger wallets or self-custody systems.

A security researcher claims Ethereum’s recent network surge could be linked to address poisoning attacks that are exploiting low gas fees on Ethereum.

The apparent shutdown follows years of scrutiny of one of crypto’s largest fraud marketplaces.

Truebit lost $26 million after a smart-contract overflow bug let an attacker mint tokens at near-zero cost, sending the TRU price down 99%.

The $7-million Trust Wallet hack shows why crypto-friendly SMEs are especially vulnerable, highlighting weaknesses in verification, browser extensions and internal controls.

According to SlowMist, attackers are impersonating MetaMask, aiming to steal users’ secret recovery phrases.

Wallet drainer phishing losses dropped sharply in 2025, but security researchers warn activity still rises with market rallies and new attack vectors continue to emerge.

Zhao urged the blockchain industry to adopt new security measures, including scam address blacklist, after an investor lost $50 million to an address poisoning scheme.

Concerns about code vulnerabilities are fading in the crypto space, but more sophisticated scam tactics are emerging as protocol security improves.

Cloudflare found over 5% of global emails were malicious in 2025, peaking near 10% in November, with more than half of them containing deceptive links.

An investor willingly sent his hard-earned Bitcoin retirement fund to a scammer, losing his entire stash after falling for a pig butchering scam despite repeated warnings.

Some users viewed the asset reallocation as an alarming sign of the platform’s ability to blacklist user funds without requiring a governance proposal.

DeFi protocol Balancer is the target of an ongoing exploit, with more than $116 million in staked Ether tokens transferred to a new wallet.

MetaMask has partnered with other major crypto wallet providers to launch a real-time phishing defense network, allowing anyone to “prevent the next major phishing attack.”

Permit-based signatures fuel 2025’s wallet drains, as a $6.5 million DeFi theft shows. This Web3 security tool helps users by focusing on the ‘pre-sign’ moment.