249 stories about Security from across the crypto press, curated and summarized daily. Most recent: Oct 24, 2026.
Crypto.com's Cronos blockchain was halted after a $75 million exploit. $6 million was moved to Ethereum before validators froze the chain, leaving the rest stranded. The network is currently not producing blocks.
A $1.1 million hack on a crypto-linked debit card caused the neobank AVICI's token to drop 49% in 24 hours. The token hit a record low before partially recovering.
The first Bitcoin transaction using quantum-resistant technology was successfully broadcast. This milestone was achieved without requiring a hard fork, demonstrating a new way to future-proof Bitcoin against quantum computing threats. The Sharknet Foundation presented the breakthrough at Bitcoin Asia.
Researchers using AI found a serious security flaw in the Bitcoin Lightning Network that could let attackers steal funds. Developers are working on fixes, but users should review their security practices immediately.
Moonwell is investigating a potential exploit on its lending platform, with security firms estimating losses of $8.7 million. The incident involves the manipulation of collateral prices for MAMO tokens on the Base network.
StarkWare successfully executed the first Bitcoin transaction resistant to quantum computing threats. However, they warn that Bitcoin still needs a protocol-level upgrade for full protection.
Developers are holding details for two weeks while fixes reach operators, in the second Lightning security emergency this month traced to AI work on Bitcoin code.
A draft Ethereum proposal would let validators deposit with quantum-resistant keys, then permanently stop accepting the key format the network runs on today.
At least 40 fake Firefox extensions impersonating popular wallets like OKX, Rabby, and TronLink have been confirmed as malicious. They harvest recovery phrases from users who type them in, enabling attackers to drain wallets.
BounceBit is shutting down its blockchain and migrating to BNB Chain after a $3 million exploit. The attacker stole 286.5 million BB tokens from nine wallets, prompting the team to halt block production.
Term Finance, an Ethereum-based lending app, lost $8.5 million after an attacker bought enough voting tokens to manipulate the protocol. This highlights a growing risk in decentralized finance where control of a protocol can be cheaper than the assets it manages.
The Sandbox has temporarily stopped bridging tokens between Base and BNB Chain to prevent further damage from an exploit. The incident impacted less than 0.01% of the SAND token supply, and users are advised not to trade SAND on these networks.
The Ethereum Foundation, in collaboration with Yukon and zkSecurity, has launched better.codes, an open research challenge to improve the security of hash-based SNARKs. The challenge formalizes a Proximity Prize problem in Lean and puts its soundness bound on a public leaderboard for anyone to improve.
Coinkite has released a new firmware for its Coldcard hardware wallets, requiring users to add their own randomness when generating wallet seeds. This update follows a $130 million Bitcoin exploit and a three-week security review.
A group of about 20 developers is scanning the Bitcoin ecosystem for AI-discoverable flaws, warning that cheap, powerful AI models have handed attackers unprecedented reach. The team is acting as a red team to find and fix vulnerabilities before they can be exploited.
Several Firefox extensions have been caught stealing crypto wallets and login credentials. Users are advised to remove suspicious extensions immediately and check their accounts for unauthorized access.
Crypto criminals are increasingly using AI to exploit vulnerabilities and hack IT firms. TRM Labs found a 40% rise in AI-powered crypto crimes over the past year. This trend highlights the growing sophistication of cybercriminals in the crypto space.
The MANTRA token fell to a record low of $0.004126 before the blockchain halted due to an exploit. The team confirmed a vulnerability in the network's software was exploited by an attacker.
Coldcard released a firmware update after a $114 million Bitcoin theft. The update fixes bugs unrelated to the exploited flaw and won't recover stolen funds. AI tools helped identify additional issues during the three-week review.
DefiLlama postponed its mobile app launch after discovering fake phishing apps on the Apple Store draining crypto wallets. The founder reported that Apple removed one such app within days of being notified.
The Ethereum Foundation's Trillion Dollar Security initiative has awarded a grant to the Freedom of the Press Foundation to develop WEBCAT, a tool that helps browsers verify website code integrity. The grant amount was not disclosed.
An attacker exploited a flaw in an XRP bridge, creating fake deposits to drain millions. The bug went undetected despite multiple audits, highlighting risks in cross-chain bridges. The attacker withdrew 5 million XRP, worth approximately $2.5 million, from the bridge’s reserves.
Casa CEO Nick Neuman reports 233,000 BTC were moved to safer storage after a Coldcard exploit, with data showing single-key Ledger and Trezor users shifting to multisig and multisig users removing Coldcard devices. This proves the resilience of self-custody solutions.
Ethereum co-founder Vitalik Buterin has outlined a new roadmap focusing on quantum-resistant cryptography, enhanced privacy, and AI-assisted formal verification. This shift aims to future-proof the network against emerging technological threats.