Key Highlights FaceStealer attackers use realistic fake video-conferencing platforms to install malware on targets’ computers. The campaign can lead to cryptocurrency theft, account hijacking, stolen communications and software supply-chain attacks. The DOJ separately authorized action involving more than $1.2 billion in assets linked to a Binance theft attributed to North Korean activity. How the FaceStealer ...
Key Highlights US authorities seized cloud infrastructure linked to the FaceStealer campaign in an operation separate from the Binance investigation. Attackers used deepfake videos and pre-recorded footage during video calls to impersonate people trusted by their targets. The campaign allegedly stole more than $400 million in crypto assets over 18 months and targeted cryptocurrency, Web3 ...
Key Highlights: LNbits issued an urgent warning instructing server operators to immediately shut down their instances following a wave of cyberattacks targeting a critical vulnerability. The vulnerability affects all LNbits software versions prior to release 1.7.0, putting users’ funds at direct risk of unauthorized theft. Developers released an emergency patch and warned operators to rotate ...
Key Highlights: An estimated $6.3 billion in digital assets was stolen during the October attack on Binance, marking what could be the largest cryptocurrency theft in history. Bitcoin fell only around 6% in the 10 hours following the incident, displaying significantly greater resilience than during past industry shocks. Credit rating agency Fitch Ratings noted that ...
Key Highlights Blockchain security firm SlowMist has issued a warning regarding a fake, reverse-engineered TradingView software being promoted on social media to spread malware. The campaign, pushed by the X account @cryptotrice since mid-October, lures users with promises to bypass license checks through compromised third-party websites. Victims are urged to immediately disconnect affected devices, transfer ...
Key Highlights: A security vulnerability involving third-party infrastructure provider Web3Auth compromised Keplr wallets created via Google and Apple social logins, leading to over $6 million in traced losses across tens of thousands of wallets. Cosmos Hub suffered the heaviest impact with roughly $3.5 million drained, including about 1.96 million staked ATOM transferred without observing the ...
Key Highlights: A security vulnerability in Web3Auth’s infrastructure compromised thousands of Keplr social-login wallets across Cosmos and Injective, while standard seed phrase and hardware wallets remained entirely unaffected. Blockchain tracking firm Bitquery identified over 51,000 impacted addresses across the Cosmos and Injective networks, whereas initial external theft estimates reached $6.01 million. Web3Auth has strongly contested ...
Key Highlights: Former FBI agent Nicholas Yaroch pleaded guilty to siphoning approximately $2.47 million in digital assets across roughly 100 fraudulent transfers, impacting 35 distinct active investigations over a 20-month span. Court filings confirm the compromised wallets belonged to investigation targets, adversarial nation-state actors, and at least one operational wallet maintained by the bureau itself. ...
Key Highlights: Stablecoin issuers and authorities successfully froze or seized $2.85 billion—roughly 44.3% of the total $6.43 billion stolen from Binance—shortly after the October 29 breach. Blockchain analytics firm Elliptic confirmed that the perpetrators, attributed by the FBI to North Korea’s TraderTraitor group, are patiently routing funds across Tron, Solana, XRP, and THORChain bridges into ...
Key Highlights: Former FBI Supervisory Special Agent Yaroch pleaded guilty to executing around 100 illicit cryptocurrency transfers linked to 35 criminal cases, stealing assets from targets and at least 10 crime victims. Authorities have recovered over $1.12 million in misappropriated funds from the Kraken exchange and the decentralized lending protocol Suilend, alongside a seized Trezor ...
Key Highlights: Binance experienced a sophisticated multi-chain cyberattack orchestrated by North Korean state-sponsored threat group TraderTraitor, executed primarily in a 20-minute window on October 29, 2026. The breach bypassed private key compromise entirely, leveraging social engineering schemes—such as fake job interviews and tampered developer tools—dating back to at least June 2026. Binance committed around $6.34 ...
Key Highlights: Blockchain security firm Hypernative revealed that over $40 million drained from Mercado Bitcoin across at least 10 blockchains in seemingly authorized transfers. On-chain investigator ZachXBT uncovered an ongoing, separate theft targeting an unnamed European Union entity, pushing total estimated losses past $133 million. The European exploitation involved complex cross-chain laundering and Monero conversions, ...