Wallets
Ledger says the viral “hack” was already patched, but two real bugs still needed fixing
The company disputed OneKey’s framing while separately closing two Ethereum signing vulnerabilities.
Oluwapelumi Adejumo 3 min read
Hacks News
Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.
Coverage footprint 3.4%
News sentiment 35 /100
Top Hacks Stories
Hacks
MANTRA Chain is back online, but silent code changes spark developer concerns
MANTRA mainnet is running on v8.4.0, while wallet addresses, transaction hashes, amounts and the attack path remain undisclosed.
Wallets
Crypto users lost at least $5.69 million because their wallet seeds were too predictable
Coinspect says five wallet apps used vulnerable code that sharply reduced the randomness behind recovery phrases.
Latest Hacks News & Analysis
Hacks
Onslaught of AI-found bugs forces Bitcoin’s Core Lightning into a secret 14-day emergency lockdown
Core Lightning is urging node operators to upgrade or go offline as multiple vulnerabilities remain under embargo.
Lightning
How a quiet flaw in Bitcoin’s top scaling network left user funds open to total wipeouts – and the fix arrived later than disclosed
Repository history places the official protection in 0.21.0, leaving earlier standard releases exposed unless separately patched.
Hacks
A zero-balance glitch opened the door for empty wallets to steal admin control of 82 crypto assets
Trail of Bits says the flaw put token supply and about $500,000 of HASH escrow at risk, but no exploitation was confirmed.
Wallets
40 malicious Firefox add-ons targeted crypto wallets, and 9 began as sports-score tools
Socket confirmed 40 malicious IDs, and exposed crypto wallet secrets still require migration after the add-ons are removed.
Hacks
How a 6-day governance delay bypass let an attacker quietly drain $8.5M in ETH and USDC
Withdrawals remain open, but Term Finance has not confirmed the loss or promised to cover any user shortfall.
Wallets
Ledger patched an Ethereum app bug that could show one transaction and sign another
Version 1.22.2 adds two signing-state safeguards to Ethereum, but public physical validation of the alleged substitution path is limited to Flex.
More Hacks News Headlines
Scams
AI scammers no longer need to hack your wallet if they can convince you to use it for them
Hacks
Zilliqa points to hardware wallet flaw discarding entropy to expose crypto keys, enabling 683M ZIL theft
Hacks
Chain shutdown strips BounceBit token utility after authorization flaw exposes 286M tokens
Hacks
