Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.
Investigators reportedly followed Bitcoin-funded gift cards to Uber Eats deliveries, showing both sides of software-mediated wallet risk.
Wallet developers are adding spending limits, approved destinations, and delayed transfers to stop irreversible thefts.
Cardano’s governance model depends on ordinary ADA holders participating, and the SecondFi exploit shows how much that model depends on secure wallet UX.
The malicious proposal shows how token-weighted votes can become a treasury access path when DAO review controls are too thin.
Blockaid estimated about $6 million drained as Summer.fi paused Lazy Summer vaults and investigated the cause.
Edel’s exploit was small, but it hit the next frontier for tokenized equities: credit markets, where 1:1 backing is not enough if wrappers, vaults and exchange rates can be gamed.
DeFiLlama data shows $780.3 million in Q2 known losses as bridges, keys and protocol logic turn security into a live cost of participation.
The incident forced users to confront the part of rollup security that usually stays invisible: whether they can still withdraw when the bridge layer breaks.
Microsoft says the CryptoBandits malware uses USB shortcuts, clipboard monitoring, and Tor to target wallet workflows before funds move.
