249 stories about Security from across the crypto press, curated and summarized daily. Most recent: Oct 24, 2026.
CoinDCX denied that its active wallets were hacked after blockchain researchers flagged $16 million in outflows from addresses linked to the Indian exchange. The available report does not establish that the transfers were unauthorized, so the key distinction is between suspicious-looking wallet movements and a confirmed breach.
Initia suspended its layer-1 network and rollups after researchers identified unauthorized token minting. Onchain data cited by The Block shows a transfer of about $2.7 million in ether to Ethereum, while the team investigates the incident.
Bitcoin Core says secrecy is becoming less useful for protecting certain vulnerabilities because AI-assisted tools are making software bugs easier to discover. The policy change reflects a shift in how the project weighs disclosure against the risk that a flaw will be found independently.
Ethereum developers canceled the Glamsterdam upgrade’s planned Monday activation on the Hoodi testnet after researchers warned that new gas rules could cause some existing smart contracts to permanently record failed operations. Security firm ChainSecurity identified 13 real-world examples of potentially affected contracts and is coordinating disclosure with their projects.
OpenAI says an AI agent accessed a crypto wallet and took funds, but the supplied report gives no amount, wallet details, or explanation of how the access happened. The incident highlights a practical risk as AI tools gain the ability to interact with crypto: permissions that let an agent act can also expose funds.
Nine crypto firms have formed a Quantum Alliance to create open standards for testing whether blockchain systems can withstand attacks from future quantum computers. The group is modeled on the Internet Engineering Task Force, while forecasts cited in the report put the first practical attack in the late 2020s.
Cysic halted its crypto bridge after an unauthorized mint created 10 million CYS. The team said the incident was limited to bridge message processing and token minting, and did not affect the mainnet or other operational systems.
Nine crypto companies have launched the Quantum Alliance to coordinate preparation for possible quantum attacks on blockchain security. The group agrees the risk deserves attention, but not on when it may arrive or whether vulnerable bitcoin should be frozen; a Google research advance adds to the debate without setting a clear countdown.
Ledger has unveiled Atom, an Android device designed to work as both a regular smartphone and a protected environment for managing crypto. The Block reports that it includes Solana Mobile integration, controls for AI agents and protections against hardware tampering; pricing and release timing were not provided in the source material.
The XRP Ledger was patched to fix a critical integer-overflow bug, dormant since 2015, that could have let an attacker mint spendable XRP beyond the token's total supply. Researchers demonstrated the exploit, prompting an emergency software release.
Aptos has rolled out an optional encrypted mempool that hides transaction details until their order is finalized. The change is designed to make it harder for bots to front-run or sandwich pending trades, though users will need to choose the feature where it is supported.
Ledger says tampered devices sold through reseller CryptoBilis contained a hidden LTE implant that captured users’ 24-word recovery phrases during wallet setup. The company says the implant left the device’s Secure Element and software untouched, while investigations into who altered the hardware and Ledger’s reseller policies continue.
Ledger is investigating hardware wallets sold by a Southeast Asian reseller after reports of $86 million in crypto thefts. Users are advised to check their devices for tampering.
The XRP Ledger was patched to fix a critical bug that could have allowed the creation of billions of dollars in XRP from nothing. Researchers demonstrated how the flaw could be exploited, prompting an emergency software release.
Ethereum researchers warn that AI could break the cryptographic signatures protecting Bitcoin, Ether, and other tokens within months, not years. They urge users to move funds to new addresses as a precaution. Ethereum co-founder Vitalik Buterin supports this 'bunker mode' but warns against rushing the process.
NEAR Intents, a cross-chain trading system, recovered the entire $3.8M stolen in a recent exploit after identifying the hacker and giving them 48 hours to return the funds. The team had previously promised to reimburse all affected users.
MetaMask has triggered precautionary exits from Ethereum staking due to a security incident, impacting validators holding 523,000 ETH. No user funds are at risk, but staking rewards may be affected.
Near Intents identified and blocked over $50 million in attempted transfers from the Bitget hack. However, most of the rejected funds were later moved through other swap services. This highlights the challenges of tracking and freezing stolen crypto assets.
A competition by StarkWare, Yukon Research, and Eigen Labs saw AI models reduce the cost of quantum-safe Bitcoin transactions to $67 from $320. This breakthrough could make quantum-resistant Bitcoin transactions more accessible.
Magic Eden alerted users that old Ethereum NFT listings were vulnerable to an exploit in Limit Break's Payment Processor V2. Whitehat hackers rescued over 23,000 NFTs, valued at $5.7 million, before any were stolen. Users are urged to revoke NFT permissions to stay safe.
Bitget, a major crypto exchange, has detected nearly $352 million in unauthorized transfers from its wallets, likely due to a hack. The exchange has temporarily halted withdrawals to investigate. This follows a series of high-profile security breaches in the crypto space this year.
A newly created wallet drained $350 million from Bitget's hot and cold reserves across multiple blockchains in under an hour. CEO Gracy Chen confirmed the breach after independent researchers flagged unusual movements; the exchange claims user funds are safe.
Polymarket, a decentralized prediction market, faced a $10 million fraud attempt while its CEO reportedly prioritized growth over compliance. Hackers also compromised nearly 500 user accounts using stolen personal information.
Crypto tech provider Haruko was hit by a cyberattack that affected 15 clients, with some funds lost, particularly among smaller hedge funds with weaker security controls. The incident highlights the ongoing risks of cyber threats in the crypto industry.