MEV bot intercepts $7.8M in rsETH after Safe module exploit
A flawed authorized helper module let an attacker extract about 2,900 rsETH before an MEV bot copied the transaction and took the funds.
Crypto Security News — Page 4
Crypto security incidents, investigations, wallet risks and recovery updates, distinguishing confirmed findings from allegations.
Symbiosis recovers 15 BTC after Bitcoin bridge exploit
Symbiosis says it recovered about 15 BTC after an unauthorized syBTC mint, while its native Bitcoin bridge and compensation plan remain unresolved.
Blockstream refuses ransom for 598.5 BTC after Liquid exploit
Blockstream says it will not pay a 10% bounty demanded for Bitcoin still held after the Liquid Network exploit and will pursue recovery with investigators.
Brevo SSO flaw enabled phishing email to 347,000 Trezor subscribers
A cross-organization SSO authorization flaw let an attacker use legitimate email infrastructure to target Trezor subscribers with a fake wallet warning.
Cronos update puts funds outside Tectonic rollback at $9.19 million
New reporting separates funds transferred off Cronos from roughly $111.2 million reversed after the August 30 Tectonic lending exploit.
Jared MEV bot loses $7.5M in reported approval trap
Blockaid described a trap that induced the Ethereum trading bot to authorize attacker-controlled contracts. The loss estimate remained attributed.
New York Judge Delays Hearing On Aave’s Request To Unfreeze $71M In ETH
A New York judge has delayed a decision on Aave’s request to unfreeze $71 million in ETH linked to the Kelp DAO exploit. The court wants more legal clarification before moving forward with the case. Meanwhile, recovery efforts for affected rsETH users continue across the DeFi ecosystem.
Coindcx Launches $11M Anti-Fraud Initiative After Court Clears Founders In Impersonation Case
CoinDCX is investing $11 million to combat crypto fraud after its founders were cleared in an impersonation-related case. The exchange plans to address phishing and fake websites through a new Digital Suraksha Network. The move highlights rising concerns around user safety as India’s crypto market continues to grow.
Solv Protocol offers 10% bounty after $2.7M exploit targets Bitcoin vault
Solv Protocol lost about $2.7 million after a smart contract exploit allowed an attacker to mint tokens and swap them for Bitcoin-pegged assets. The platform has offered a 10% bounty to recover the funds and says affected users will be reimbursed. Security firms are now investigating the breach.
Uniswap founder warns of scam ads after user loses six-figure crypto portfolio
Uniswap’s founder is warning users after a victim lost a six-figure portfolio to a fake search ad posing as the protocol. Sponsored phishing links remain a major threat as crypto scam losses climb again. Users connecting wallets through search results face heightened risk.
Figure Technology hit by data breach after social-engineering attack, customer details exposed
Figure Technology confirmed a data breach after a social-engineering attack, with hackers publishing customer data online. While crypto phishing losses have declined overall, sensitive personal data remains a prime target. The incident lands as Figure expands its public-market presence and tokenized equity ambitions.
Matcha Meta breach traced to SwapNet exploit drains up to $16.8M on Base
Matcha Meta users were urged to revoke approvals after a SwapNet contract exploit drained up to $16.8 million on Base, with security firms tracing the attack to a smart-contract flaw that allowed approved funds to be transferred, highlighting ongoing DeFi risks that are increasingly being exposed with the help of AI tools.
Bitcoin hacker behind historic Bitfinex breach freed early under US sentencing reform
Ilya Lichtenstein, who carried out the 2016 Bitfinex Bitcoin hack, has been released early under the First Step Act after serving just over a year of a five-year sentence. His release comes as Donald Trump signals renewed scrutiny of crypto-related prosecutions, reopening debate around punishment, reform, and accountability in the crypto era.
Trader claims $1 million gain during BROCCOLI714 volatility
Vida reported gains during unusual Binance trading on January 1. Binance told Cointelegraph its initial checks found no indication of a platform breach.
Trust Wallet Faces Insider Questions After $7M Holiday Hack
Trust Wallet will reimburse about $7M lost in a Christmas Day browser extension exploit that was quietly prepared weeks in advance. Investigators say the attack may point to insider access, raising fresh concerns around wallet software security and update controls.
$50M USDT Lost After Wallet Address Spoofing Trick
A crypto user lost nearly $50M in USDT after copying a poisoned wallet address from transaction history. The incident highlights how address spoofing scams exploit habit and speed, not technical flaws.
Could AI Have Saved Mt. Gox? Karpelès Uses Claude AI to Audit 2011 Code, Exposes ‘Critically Insecure’ Design
Former Mt. Gox CEO Mark Karpelès used Claude AI to audit the exchange’s 2011 code, revealing severe security flaws that contributed to its early hacks. While AI could have flagged vulnerabilities, human oversight failures were central to the collapse — a lesson that still echoes in today’s crypto landscape.
Unity patches flaw affecting apps built with its editor
Unity released fixes for CVE-2025-59489 on October 2, 2025. Its advisory did not establish that crypto wallets had been compromised.