Hacks, exploits, scams and the state of crypto security.
A critical nonce bug in the Zilliqa Ledger app lets attackers recover private keys from just five on-chain transactions. ZIL dropped ~10% on the disclosure.
Galaxy Digital commits $5 million to developer grants, research, and migration planning to harden Bitcoin against quantum computing threats before Q-Day hits by 2030.
US prosecutors filed five civil forfeiture cases seeking $25M+ in crypto tied to romance and investment scams, with Secret Service tracing funds to Southeast Asian launderers.
Zilliqa has asked exchange partners to pause all ZIL deposits and withdrawals after a suspected cold wallet compromise at an unnamed partner. Amount stolen unknown.
The Ostium OLP vault exploiter has routed 10,540 of 12,080 stolen ETH through Tornado Cash after a $24M Arbitrum hack revised up from $18M, per PeckShield.
Allbridge Core paused its cross-chain bridge after a flash loan attacker manipulated the stablecoin pool exchange rate and drained roughly $1.65 million in a single transaction.
The attacker behind May's $5.87M TrustedVolumes DeFi exploit sent back 1,122.12 ETH (~$2.07M) on July 17 — roughly 35% of stolen funds — with no official statement from the protocol.
Thalha Jubair and Owen Flowers pleaded guilty in a UK court to the 2024 Transport for London hack and a $115M ransomware campaign tied to Scattered Spider.
Thalha Jubair and Owen Flowers sentenced to 5.5 years at Woolwich Crown Court for hacking TfL and roles in Scattered Spider's $115M crypto ransom scheme.
Leaked Suno source code reveals 2 million YouTube clips and 62,000 hours of Pond5 audio scraped for AI training — the most concrete evidence yet of the company's data practices.
