TokenPost topic
Crypto Security
732 TokenPost stories are tagged Crypto Security. The newest appear first.
Latest Crypto Security stories
- Attackers Borrow 55.2 Million KAVA in Kava Lend Exploit
About 49.2 million KAVA moved to BNB Chain, where most was sold for about $2.09 million in BNB and USDT.
· Technology
- Unocoin Estimates About $200,000 in Losses After Hot Wallet Breach
The Indian exchange says some funds were frozen and it will cover the loss without reducing customer balances. Services remain paused.
· Technology
- Starknet Says Wallet-Key Attack Estimates Fell 26-Fold in Four Years
The estimate concerns quantum computing and the cryptographic protections used for crypto wallet keys.
· Technology
- Pennysia Users Urged to Revoke Approvals After Four-Address Exploit
Swaps were disabled before SlowMist's public warning, according to the on-chain sequence.
· Technology
- BitGo Says Unocoin Signed Transfers With Its Own Keys, Reports No Breach
BitGo said Unocoin’s account was frozen Nov. 6 and the freeze mechanism worked as designed.
· Technology
- Symbiosis Restarts Bitcoin Bridge Beta as Public Audit Report Remains Pending
The beta uses symBTC, backed one-for-one by native Bitcoin (BTC), and will have limited liquidity during testing.
· Technology
- Unocoin Probes Potential Losses After Transactions Bypass BitGo Platform
BitGo froze Unocoin’s corporate account Nov. 6 at the exchange’s request. Unocoin says the freeze is working as intended.
· Technology
- b14g Restores Contract and Reopens Staking After a Withdrawal Fix
Deposits, withdrawals, staking and reward claims are available again after a fix for the zero-amount withdrawal issue was deployed.
· Technology
- Unocoin Says BitGo Freeze Appears Effective Amid Suspected Wallet Backup Exploit
The company is investigating possible use of BitGo’s backup withdrawal mechanism and whether assets or information were exposed.
· Technology
- 慢雾 Warns of Exploit in Pennysia’s Ethereum Settlement Contract
The warning says a contract flaw let an attacker move tokens users had approved but not yet used.
· Technology
- Unocoin Investigates On-Chain Transactions Broadcast Outside BitGo
The exchange says transactions were signed and broadcast on-chain outside BitGo. It has not determined whether crypto assets were lost or the amount of any potential loss.
· Technology
- Revised Trace Links Aave Depositor’s $304,500 Loss to Across Hijack
The trace puts total losses at $401,900 across nine wallets after adding a separate 26.38 Ether (ETH) sweep.
· Technology
- DOJ Gets Court Authority to Seize or Restrict $1.2 Billion in Binance Hack Funds
Tether and Circle froze $2.7 billion tied to the Oct. 29 attack, which the Justice Department attributed to North Korean hackers.
· Regulation
- U.S. Justice Department Freezes or Preserves $2.7 Billion Tied to Binance Theft
The DOJ worked with two stablecoin issuers; the amount is nearly half of more than $6 billion in reported losses.
· Regulation
- Binance Reserve Ratios Exceed 100% After $6.3 Billion Attack Disclosure
The reserve snapshot update followed disclosure of a vulnerability attack.
· Business
- Trezor Identifies Three Compromised Safe 5 Wallets Among 48 Users
The wallets were sold through CryptoBilis and its Tokopedia and Shopee stores from Aug. 20 to Sept. 23, 2026.
· Technology
- Trezor Reports No Implants in Other Resellers’ Devices or Models
The investigation found no implants in other Trezor models, and the three affected Safe 5 devices caused no loss of funds.
· Technology
- Coinkite CEO Ties Coldcard Flaw to About 1,816 BTC in Losses
The flaw affects firmware version 4.1 and later. A firmware update cannot repair seed phrases already created, Novak said.
· Technology
- Unocoin Flags Unusual Transfers From BitGo Wallet as Probe Begins
Unocoin says more than 90% of user crypto is in cold wallets and expects a full server rebuild to take four to five business days.
· Technology
- Bitget-Linked Addresses Move 847.26 Bitcoin (BTC) Into CoinJoin Over Six Days
The addresses moved 1,052.34 BTC in total and still held 959.29 BTC, worth about $71.44 million.
· Technology
- Lorenzo Valente Says Crypto Hacks Cost $26.9 Billion Since 2017
He put on-chain revenue at about $47 billion over the same period, or roughly 57 cents in losses for every dollar earned.
· Technology
- Bitget Wallet Flags 37,000 Weekly Signing Requests for Potential Phishing
The Q3 2026 average was 7.4 times the Q2 figure, but the tally does not measure unique attacks or confirmed financial losses.
· Technology
- Anoma Suspends AnomaPay Verifier, Temporarily Blocking Fund Access
The V2 upgrade is expected to take about two weeks. AnomaPay says deposits will migrate automatically when it is complete.
· Technology
- AnomaPay Pauses Verifier, Leaving Deposited Funds Temporarily Inaccessible
AnomaPay says deposits remain safe. Access is expected to return after a V2 upgrade that should take about two weeks.
· Technology
- Initia Says Exposed Cloud Credentials Fueled Fake Withdrawals Across Five Rollups
The project linked the intrusion to exposed cloud access and said the attacker forged withdrawals involving five rollups.
· Technology
- Initia Confirms Second Exploit in Three Weeks, $3.27M Stolen
About $2.16 million remains frozen after the layer-1 blockchain halted operations. Initia linked the attack to compromised cloud credentials.
· Technology
- LNbits Creator Says Project and Users Suffered Losses in Attacks
Version 1.7.0 addresses a flaw in all earlier releases, but credentials exposed before the update may remain usable.
· Technology
- Arcus Offers $223,000 Bounty for Return of 90% of Withdrawn Funds
The offer sets a Nov. 12 deadline and allows repayment in Ether, wrapped Ether or DAI.
· Technology
- Ethereum Phishing Signature Leads to $303,000 aEthWETH Loss
The loss was reported Nov. 11.
· Technology
- Initia Pledges to Replenish Reserves After $3.27 Million Exploit
About $2.16 million remains on Initia’s paused layer 1, and the network has not set a restoration timeline.
· Technology
- Across Suspends Website and API After Domain Hijacking, Promises Full Compensation
The cross-chain protocol said visitors to a phishing page may have been affected, while users who accessed it before the hijacking and those using API integrations were not.
· Technology
- Across Says Domain Takeover May Have Exposed Users to Phishing
The protocol has taken its front end and API offline and plans to compensate affected users.
· Technology
- AcrossProtocol Warns Users After $294K Loss in Suspected Domain Hack
The cross-chain bridge is investigating and told users to avoid its app, wallet connections and transactions until further notice.
· Technology
- Arcus Reimburses 2.23 Million USDG Taken in Subaccount Exploit
A separate request worth about $3 million was blocked, and withdrawals resumed after Arcus repaired the flaw.
· Technology
- Initia Blames Leaked GCP Key for $3.27 Million Crypto Theft
Another $2.16 million in stolen assets remains on the paused L1, where it cannot be moved.
· Technology
- Across Warns Users to Avoid Its App During Domain Investigation
The protocol told users not to connect wallets or sign transactions or authorizations through the app until further notice.
· Technology
- Google Patches Chrome Zero-Day After Confirming Active Exploitation
The flaw is in Chrome’s XML component. The update fixes eight other vulnerabilities as well.
· Technology
- Initia Halts Layer 1 After $615,000 in Tokens Exit Through Noble
Most transferred assets remain on Initia’s paused Layer 1. Its initial investigation points to a compromised rollup infrastructure key used to forge IBC transfers.
· Technology
- Lookalike Addresses Followed Test Before Early Wallet’s $4.6 Million ETH Transfer
Two lookalike addresses shared the test recipient’s opening and ending characters but differed in between. The wallet sent 2,154.94 ETH to the tested address 38 minutes later.
· Technology
- Kraken Security Director Discusses AI’s Effect on Crypto Hacking
Michael Benich, director of security at Kraken, identified fake job interviews as a way to bypass technical safeguards.
· Technology