TokenPost topic
SECURITY
118 TokenPost stories are tagged SECURITY. The newest appear first.
Latest SECURITY stories
- Binance-Linked Breach Leads Unit to Delay Deposits and Withdrawals
Guardian screening can prevent transfers from completing, and Binance partners have frozen about $3 billion in affected assets.
· Technology
- Reserve Says Binance Attacker Sold Stolen RSR, Sees No DTF Governance Threat
The protocol said it withdrew treasury-provided on-chain liquidity before the sale and that its contracts were unaffected.
· Technology
- Ethereum Proposal Would Tie Security Permissions to Specific Operations
The proposed tokens would be short-lived and revocable, with permissions for tasks such as fund transfers or module installation.
· Technology
- Caldera Freezes ERA Held at Address Tied to Binance Attacker
Caldera added an emergency freeze function to its Ethereum mainnet token contract. Follow-up testing found the address’s ERA could not be transferred.
· Technology
- Anchorage Digital Says Binance Security Event Has Not Affected Firm
Anchorage is monitoring the event and communicating with clients. Assets held by Anchorage Digital Bank and Anchorage Digital Singapore remain independently segregated, secure and fully under the platform’s control.
· Technology
- ZachXBT Comments on Binance Attacker’s Identity
Binance’s preliminary assessment put losses at about $6.3 billion, with about $3 billion frozen. The exchange said it would reimburse users in full.
· Technology
- Binance Pauses Withdrawals as Ripple, World Liberty Financial Freeze Assets
He Yi said withdrawals will remain paused until Binance confirms its security environment is safe. Ripple's freeze was cited as about 200 million, with no denomination specified.
· Technology
- Binance Keeps Withdrawals Paused Until Security Issue Is Resolved
The exchange says customer funds remain safe and withdrawals will resume after the issue is fully resolved.
· Technology
- Binance Pauses Withdrawals During Security Checks, Gives No Restart Time
Binance says customer funds remain safe and withdrawals will resume after the security issue is fully resolved.
· Technology
- Indodax Suspends Deposits and Withdrawals for Security Review
The Indonesian exchange says it has found no unauthorized withdrawals or exposed user data so far. Services will resume after it confirms its systems are secure.
· Technology
- Keystone to Destroy 18,835 Older Devices After Data Breach
The breach involved 25,964 buyer records. Keystone will cut its customer-data retention period from 180 days to 90 days.
· Technology
- Consensys Warns Ethereum Operators of eMudhra Certificate Risk
Default configurations are unaffected, but some Web3Signer deployments need access-control changes.
· Technology
- Anthropic Details Claude Duet’s Safeguards as Browser Testing Continues
Sensitive actions pause for review, while credentials stay outside the model’s reach. Anthropic says testing of the cloud browser and sign-in form remains underway.
· Technology
- Zipcoin Shuts Down After Code Repository Breach
The project offered holders a six-hour sale window and scheduled a sale of its remaining holdings for noon ET Oct. 22 (16:00 UTC).
· Technology
- LidoFinance Launches Guardian Security Council for Lido Lend
Lido Lend contributors are helping develop the feature, which screens assets used as collateral.
· Technology
- Nansen Flags Railway Breach and Urges Users to Rotate Secrets
Nansen said most funds tied to the breach had reached exchange addresses.
· Technology
- Four Swell Upgrade Contracts Remain Outside Multisig Execution Queue.
Spreek flagged a NAV increase of up to 1% per hour without backing assets. The four upgrade contracts have not entered the multisig execution queue.
· Technology
- Railway Urges All Users to Rotate Secrets as Deployments Stay Paused
The pause prevents customers from updating applications with replacement credentials.
· Technology
- Liquid Network Puts Reserve Rebuild Ahead of Bitcoin Peg-Out Restart
Bitcoin and LBTC conversions are being enabled through swap providers in stages, while direct withdrawals from network reserves remain restricted.
· Technology
- DefiLlama and Trueo Add Markets for DeFi Revenue and Exploit Risk
Revenue markets include Hyperliquid, Aave and Uniswap. Other markets cover possible exploits at Aave and Morpho and the size of hacking events.
· Investing
- Bitget Plans to End Service for Some Users After $388 Million Breach
Affected users will receive deadlines and withdrawal instructions; Bitget says funds remain safe and the exchange will keep operating.
· Technology
- Firedancer Offers Double Bug Bounty Rewards Through Nov. 20
Vulnerabilities related to Alpenglow qualify for triple rewards during the program.
· Technology
- Karpelès Says Ledger Received Tampering Reports Since December 2025
He cited Joe Grand’s March 4, 2026, report of a compromised Ledger Nano X bought through Lazada.
· Technology
- Karpelès Says Ledger Received Suspected Implant Reports Before Crisis
Joe Grand said he alerted Ledger on March 4, 2026, after finding an implant in a Nano X he bought through Lazada Thailand in August 2025.
· Technology
- Fee Payments Helped Trace a $103.4 Million Theft Through Zcash
Investigators linked activity across seven blockchains and 530 addresses while Zcash’s shielded transfers concealed sender, amount and recipient details.
· Technology
- Ledger Finds No Tampering in German Retail and Distributor Stock
The security team also said it had received no reports of hardware-related losses in Europe. It is seeking a device shown online for further examination.
· Technology
- Ledger Asks Resellers to Halt Sales in Seven Asian Markets
The hardware-wallet maker said the incidents remain confined to Southeast Asia, with no indication its systems or direct sales channel were compromised.
· Technology
- MediaMarktSaturn Removes Ledger Wallets Amid Tampering Investigation
The retailer pulled Ledger products from stores and online platforms as reports widen beyond the CryptoBilis case in Southeast Asia.
· Technology
- Nansen CEO Predicts AI Agents Will Handle Crypto Trades by 2028
Robinhood has opened more than 150,000 agentic accounts, while failed automated trade attempts highlight growing security risks.
· Technology
- French Crypto Holder Sells All Cryptocurrency After Home Invasion
Lucas sold his digital assets after armed intruders demanded access to his wallet and a later appearance by masked people near a relative’s home prompted further safety concerns.
· Technology
- Ledger Probes $91 Million Crypto Wallet Drain Linked to Reseller Devices
Ledger said confirmed cases involve devices sold by Southeast Asian reseller CryptoBilis, while its systems and direct sales channels remain unaffected.
· Technology
- Papertrade Loses $1.28 Million in First-Day ETH Price Attack
A wallet used Hyperliquid price moves and extreme leverage to profit from Papertrade’s liquidity pool shortly after the platform launched.
· Technology
- Liquid Network Halts Bitcoin Redemptions After Reserve Gap Emerges
An exploit created about 4,000 unbacked Liquid Bitcoin, leaving roughly 602 BTC outstanding after most of the withdrawn reserves were returned.
· Technology
- Ledger Suspends CryptoBilis Sales Amid Investigation Into Estimated $90 Million Loss
The suspected incident would surpass losses from a fake Ledger Live app and the 2023 Connect Kit attack if confirmed.
· Technology
- CZ Says Ledger Theft May Be Limited to One Distributor
The incident may involve counterfeit or tampered devices sold through Southeast Asian distributor CryptoBillis, while Ledger investigates.
· Technology
- Ledger Reports Ongoing User Fund Losses Tied to Southeast Asian Reseller
Users who purchased Ledger products through CryptoBillis are urged to review Ledger’s official updates.
· Technology
- BitBay Loses About $14,000 in Vault Withdrawal Exploit
An attacker exploited a flaw that failed to limit vault payouts when liquidity reached zero, draining funds from the decentralized finance platform.
· Technology
- Ethereum Staking Queue Could Reach $5.04 Billion in Return Scenario
An estimated 565,056 ETH tied to MetaMask-operated validators could add 9.8 days to Ethereum’s entry backlog if deposited again and the existing queue remained unchanged.
· Technology
- U.S. Spot Bitcoin, Ether ETFs Suffer $648 Million in Outflows
Bitcoin ETFs lost $487 million and Ether ETFs lost $161 million on Oct. 7, while a MakerDAO legacy auction contract exploit drained about 200 ETH.
· Investing
- JP Morgan Explores Adding a New Signer for Deep-Vault Assets
The proposed change would add protection for holdings that are not actively traded, but it has not been implemented.
· Business