
Malicious worm compromises crypto domains in supply-chain attack
The worm installs the Bun runtime during package setup, then executes malicious code that searches developer environments for exposed secrets using TruffleHog.
Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.

Balancer's exploit met a rare win via StakeWise, while Stream's $93M loss and xUSD depeg expose the breaking points.

As Balancer’s TVL plummets, the DeFi community grapples with restoring trust amidst recurring breaches.

A year after the radiant hack, the thief is peeling funds again. Bridges, DEX hops, then Tornado. Modular deposits, measured timing, and real money still moving.

North Korea stole $2 billion in crypto in 2025. Interpol recovered $439 million. Are attackers hitting a ceiling, or just routing around checkpoints?

A one-year extension converts a date shock into a process drip; compare the remaining stack to monthly ETF intake and hedging capacity before adjusting allocations.

Inside MetaMask/Phantom’s new intel network and how we’ll measure success.