Hacks, exploits, scams and the state of crypto security.
A cumulative $650M in cross-chain bridge exploits during Q2 2026 accelerated a $7 billion migration onto Chainlink's CCIP, per the company's own quarterly review.
North Korea's spy agency arrested former state-trained hackers who drained the central bank and laundered proceeds through crypto — a rare case of Pyongyang turning inward.
Singapore crypto payments firm Triple-A had $9.7M drained from hot wallets across Ethereum, TRON, Solana, and three other chains on July 24–25, 2026.
AFX Bridge and Verus lost a combined $31.7M in hours on July 22, while Bitcoin L2 B² Network suspended staking — three DeFi control failures in one day.
Hack VC-backed perp DEX Dango halts trading July 29 and closes its Layer 1 blockchain August 13, less than four months after a mainnet launch hit by a $1.9M exploit.
Thailand's SEC has filed a criminal complaint against Bitkub and two former directors for allegedly concealing a May 2021 cyberattack worth ~$50M. Bitkub denies wrongdoing.
Robinhood confirmed CEO Vlad Tenev's X account was hacked to promote fake 'Vladhood' memecoin — deployed 46 minutes before the post, hacker still collecting fees.
A 2025 UNODC report finds Asia-Pacific scam victims lost up to $114.1B in 2024 as Southeast Asian crime syndicates merge into a unified, crypto-powered criminal economy spanning 80 countries.
An attacker drained ~$24M in USDC from AFX's Arbitrum bridge in a targeted exploit. Arbitrum's native bridge was confirmed unaffected. USDC holds its peg.
A critical nonce bug in the Zilliqa Ledger app lets attackers recover private keys from just five on-chain transactions. ZIL dropped ~10% on the disclosure.
