Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.
The incident forced users to confront the part of rollup security that usually stays invisible: whether they can still withdraw when the bridge layer breaks.
Microsoft says the CryptoBandits malware uses USB shortcuts, clipboard monitoring, and Tor to target wallet workflows before funds move.
The FCC’s robocall proposal could turn phone accounts into richer targets for SIM swaps, recovery abuse, and crypto theft.
Attackers used fake markets to turn Jaredfromsubway.eth’s trading approvals into a $7.5 million allowance drain.
Raydium’s legacy exploit shows how legacy DeFi contracts can stay live, forgotten, and vulnerable after protocols move on.
The good news is that bridge hacks and flash-loan attacks are fading; the bad news is that protocol logic bugs are becoming much harder to contain.
The AI-assisted discovery of a critical Orchard flaw shows crypto’s next security crisis may start in the base-layer systems that define valid money.
The transfer revived the bankruptcy overhang while BTC was already under pressure, but the watched threshold is onward routing to exchanges, custodians, liquidity providers, or repayment partners.
Researchers say agents can find vulnerabilities faster, raising pressure on protocols to move beyond point-in-time audits.
