A fake developer, real spies, and US tech trapped: arrested, Vong inadvertently revealed how Pyongyang hacks America without firing a single rocket.
When Kim Jong-un becomes HR at Upwork, GitHub hosts viruses, and AI disguises thieves… the crypto sphere realizes its worst nightmares are already among us.
Crypto hack losses fell sharply in the third quarter of 2025, signaling progress in curbing large-scale exploits. Still, September offered a stark reminder of ongoing risks, logging a record number of million-dollar hacks. While attackers stole less overall, their tactics continued to evolve, with wallets and centralized platforms increasingly targeted over smart contracts.
Malicious actors are at it again, this time targeting the account of a well-known software developer's node package manager (NPM). Investigations revealed that the hackers added malware to popular JavaScript libraries, primarily attacking crypto wallets. However, after launching what industry sleuths describe as the largest supply chain attack in crypto history, the hackers managed to steal only $50 worth of crypto assets.
Software supply-chain attacks are evolving in a disturbing way as cybercriminals use Ethereum smart contracts to hide malicious code within open-source libraries. Research presented by a security firm ReversingLabs shows that hackers now insert command-and-control instructions within blockchain contracts, complicating detection and closure by defenders. This approach signifies the increased complexity of malware distribution and blockchain becoming a tool of cybercrime.
DeFi platform CrediX Finance has disappeared from the web following a $4.5 million exploit that drained its liquidity pools, prompting suspicions of a coordinated exit scam. The incident was first flagged on Monday by blockchain security firms, who found that the attackers gained control of the protocol’s multisig admin and bridge wallets six days prior. Using this access, they minted new tokens, posted them as collateral, and then siphoned liquidity from CrediX’s pools.
The hacker behind the $40 million GMX exploit has begun returning the stolen crypto after accepting a $5 million white hat bounty offered by the GMX team.
In a digital context where threats are multiplying, unfortunately Cointribune is no exception to the rule. For the past few hours, our media has been the target of a phishing attempt directly targeting our audience through our newsletter. It is essential to quickly inform you of the situation and provide…
More than 69,000 Coinbase customers victims of an internal crypto attack. We provide you with all the details in this article!
The world of crypto is set to experience a decisive year, driven by promising innovations and growing threats. Indeed, the potential approval of an ETF based on Solana could mark a significant advancement, providing institutional investors with new access to cryptocurrencies. Meanwhile, the rapid progress of artificial intelligence is redefining trading practices, while similar technologies fuel unprecedented cyberattacks. In this context of upheaval, 2025 stands out as a pivotal year for the industry, where the promises of increased adoption must contend with increasingly complex security risks.
Bitcoin is stagnant, investors are softly dozing. But beware: Trump in January could very well add some spice to this lukewarm crypto soup.
Hackers launch an attack on the Olympics: ransom demanded in cryptocurrency. The Grand Palais and other tourist sites threatened.
The amount of crypto stolen by hackers decreased in 2023, but the number of attacks continues to increase, according to a recent report.
Bitfinex thwarted a $15 billion XRP attack, preventing a major cryptocurrency theft from its vault.
'Web2 is not safe,' comments Curve Finance, which also fell victim to a cryptocurrency hack resulting in a loss of $52 million at the end of July. Balancer, a decentralized finance (DeFi) protocol deployed on Ethereum, has reported a recent attack on its frontend resulting in the loss of $238,000 in cryptocurrencies. Thus, the list of DeFi hacks continues to grow. Let's break it down!
Scammers are stepping up their attacks on MetaMask crypto wallet users. Some are even using official government websites. Aware of the need to protect cryptocurrency investors, MetaMask has reacted quickly. Its security team has implemented sophisticated measures.
“Not your key, not your coin”, cryptocurrency investors keep chanting. In other words, when keys are secure, assets remain safe from any theft or hoarding initiative. However, Ivan Bianco, a Brazilian crypto influencer, inadvertently exposed his private keys. The result: a good part of his cryptocurrency holdings evaporated.
Last Friday, Curve set a deadline for hacker DeFi to return all the stolen money: Sunday August 6 at 8 a.m. UTC. Once this deadline has passed, the team will take drastic measures to hand him over to the appropriate authorities. If the latest news is to be believed, the pirate has returned part of the jackpot. And in the process, he has dared to mock the crypto community by saying that he is "smarter" to evade possible hunts.
A study by Privacy Affairs has revealed that darknet hackers are selling Binance accounts for $410 on the dark web. Accounts on other crypto platforms are being sold for as low as $30 each. Online bank account identification information and credit card details are also being sold.