Hacks, exploits, scams and the state of crypto security.
Boltz, a non-custodial Bitcoin swap provider, suspended all swaps indefinitely on August 3, 2026, after AI-assisted attackers began finding bugs faster than its small team could patch them.
Seoul police identified a criminal ring that cloned Flare Network's FXRP staking site, planted fake Wikipedia pages and YouTube videos, and drained $8.5M in XRP.
A CFA report estimates Americans lost $80.7B to crypto scams in 2025 — seven times reported losses — but the 2017 methodology behind the figure deserves scrutiny.
Three Bitcoin holders sued Apple after a fake Sparrow Wallet app drained $1.8M — despite the real developer warning Apple for nearly a year before the lawsuit.
Microsoft's MDASH multi-agent system scored 88.45% on CyberGym, outpacing Claude Mythos and GPT-5.5 while claiming half the cost of its prior setup.
Security researchers found 31 vulnerabilities across 15 x402 protocol operators covering 99% of transactions, confirming asset theft and free-shopping exploits.
Garden Finance disabled its app on July 27 after Blockaid detected a $450K USDT drain from its HTLC contracts across Ethereum, Base, Arbitrum, and BNB Chain.
A cumulative $650M in cross-chain bridge exploits during Q2 2026 accelerated a $7 billion migration onto Chainlink's CCIP, per the company's own quarterly review.
North Korea's spy agency arrested former state-trained hackers who drained the central bank and laundered proceeds through crypto — a rare case of Pyongyang turning inward.
Singapore crypto payments firm Triple-A had $9.7M drained from hot wallets across Ethereum, TRON, Solana, and three other chains on July 24–25, 2026.
