250 stories about Security from across the crypto press, curated and summarized daily. Most recent: Oct 25, 2026.
Coinkite has issued a security warning for Coldcard Mk3 users, advising them to create a strong BIP-39 passphrase and move funds to a new wallet. The warning follows reports of 594 BTC stolen from affected users.
Nearly 1,200 Bitcoin addresses were drained of over 1,000 BTC, worth approximately $70 million, due to a vulnerability in Coldcard hardware wallets. Galaxy Research reports this as one of the largest Bitcoin thefts linked to a hardware flaw.
This year's crypto hacks total $972 million, with most losses coming from stolen keys and governance failures rather than code bugs. Experts warn that audits alone don't guarantee safety, highlighting the need for stronger security practices.
Researchers have proposed a cryptographic method to safeguard Bitcoin and other blockchain wallets against future quantum attacks. This approach ensures compatibility with existing addresses, preventing the need for a hard fork.
Zcash has locked down a $1.7 billion shielded pool after a critical upgrade. The move fixes a four-year-old counterfeiting bug in the Orchard protocol and introduces new withdrawal limits.
Nine major Bitcoin firms, including BlackRock, Coinbase, and Strategy, launched the Bitcoin Security Consortium with a $15 million pledge to support Bitcoin security research and long-term resilience, including quantum readiness.
Coinbase is building a post-quantum custody system and funding Bitcoin's cryptographic upgrades to protect against future quantum computing threats. While the threat is not imminent, quantum computers could one day break Bitcoin's cryptography.
Nine of the biggest institutional names in Bitcoin formed a consortium to fund the developers working to keep the network secure—including from future quantum computers.
A consortium including BlackRock, Coinbase, and Strategy has pledged $15 million to prepare Bitcoin for potential quantum computing threats. The group will fund research and development independently, without influencing Bitcoin's governance or protocol decisions.
The Verus-Ethereum bridge was exploited for the second time in two months, with attackers stealing $7.54 million through the same vulnerability class used in May, according to Blockaid.
Multiple crypto protocols linked to Bitcoin and Ethereum lost $35 million in a series of attacks exploiting weak key management, upgrade powers, and validation checks. The breaches targeted Verus, B² Network, and other cross-chain systems, draining funds without breaking the underlying cryptography.
SecondFi is closing its doors after hackers stole $2.4 million in ADA due to a vulnerability in its transaction signing software. The breach allowed attackers to derive private keys from blockchain data, highlighting critical security risks in Web3.
A critical flaw in the Zilliqa Ledger app allows attackers to reconstruct users' private keys using onchain data. Users are urged to stop using the app until a fix is available.
The Midnight token (NIGHT) rebounded 19% after a hack on the Wanchain bridge briefly sent it to an all-time low. Charles Hoskinson is calling for a revamp of bridge infrastructure, advocating for zero-knowledge technology to prevent such exploits.
The Balance stablecoin lost 99% of its value after an attacker exploited a flaw in its lending system. The attacker manipulated bitcoin prices to drain vaults, pocketing $1 million in a single transaction.
Galaxy Digital is committing up to $5 million to prepare Bitcoin for potential quantum computing threats. Researchers, exchanges, and the U.S. government warn that a quantum attack, dubbed 'Q-Day,' could land as soon as 2030.
NEAR co-founder Illia Polosukhin warns that AI-assisted hacking is advancing faster than traditional code reviews. He advocates for formal verification to secure blockchain code from AI-driven threats.
Allbridge, a cross-chain protocol, has temporarily halted operations following a $1.65 million exploit involving a flash loan. The attacker manipulated pool ratios to withdraw assets at favorable rates before bridging funds.
Zilliqa has asked exchanges to pause ZIL deposits and withdrawals after a suspected theft from an exchange partner's cold wallet. The amount stolen remains undisclosed, but the move highlights ongoing risks in crypto security.
Allbridge, a cross-chain bridge, has temporarily paused operations after a $1.65 million flash loan attack. The attacker exploited Solana stablecoin pools before transferring the funds to Ethereum, according to security firms.
Project Eleven has developed a tool to recover Bitcoin wallets threatened by quantum computers. However, it won't work for Satoshi's 1.1 million coins. The tool runs in just 243 milliseconds on a standard laptop.
Ledger has launched a hardware-backed system called Agent Stack that allows users to deploy AI bots to manage crypto transactions securely. This innovation aims to prevent unauthorized transactions by rogue AI agents.
Project Eleven has proposed a method to help Bitcoin users recover their wallets after a quantum computer breaks the network's cryptographic protections. The plan involves a post-quantum cryptographic proof to verify ownership of wallets.
Ledger is developing AI agents to help manage crypto portfolios, but users must approve all sensitive actions on their hardware devices. This approach aims to balance convenience with security by keeping full control in the user's hands.