Cornell Tech and Yale researchers found AI agents used email codes to raise Circle wallet spending caps. Tests used real USDC; customer losses remain unverified.
CoinDCX confirms a 15.99 million USDT loss from old wallets. Researchers report $2.21 million frozen across nine addresses, but no verified repayment total.
Electrum 4.8.3 patches an exploited Bitcoin wallet flaw. Developers received two incident reports, including one theft; the loss amount remains undisclosed.
CoinDCX says failed transfers from old deposit wallets caused losses it absorbed. Researchers flagged about $16 million; the exchange has not confirmed its loss total.
NGRAVE confirms $2.56 million stolen through fake LIQUID alerts. Bitquery traces 84 wallets, with caveats over attribution and no confirmed recovery total.
Qubic reopened its network and recovery claims after a theft hit 1,404 wallets. Claims close May 1, 2027; first returns are reported, but totals remain undisclosed.
Qubic says weak seeds exposed 1,404 wallets to a 2.94 trillion QU theft. Most tokens remain frozen on-chain; recovery and a network restart are unresolved.
Bitcoin Core merged a PSBT signing safeguard after a bug left payment destinations unprotected. No confirmed theft total or stable fix release was verified.
TRM Labs traced roughly 1,816 Bitcoin, worth about $116 million at its August 5 snapshot, from more than 5,200 addresses in four Coldcard-related attack waves.
A volunteer Bitcoin Red Team says its AI-assisted review scanned 150 repositories and made more than a dozen vulnerability disclosures, without naming affected projects or reporting new thefts.
Galaxy Research's August 4 update put confirmed Coldcard-related thefts at 1,596 BTC from about 7,300 addresses, while a separate suspected fourth wave could lift the estimate further.
Ledger researchers said a $250,000 laboratory laser attack can reset a Tangem card password and steal associated funds, while Tangem says the physical attack is not scalable.
Coldcard says a seed-generation flaw affects legacy and current hardware-wallet models; firmware updates do not repair seeds created before the fix.
Freedom Factory has unveiled the $179 PQ1 hardware wallet, which it says uses post-quantum signing through an ERC-4337 smart account and will ship in Q4 2026.
A London court jailed three men after the Metropolitan Police said they impersonated officers, stole more than £4 million in cryptocurrency from eight victims and laundered the proceeds.
Coinbase will migrate INJ to the Injective EVM network from July 20 to 22, then stop supporting Ethereum ERC-20 INJ deposits and withdrawals.
Coinspect's Ill Bloom disclosure says weak recovery phrase generation exposed thousands of crypto wallets across Bitcoin, Ethereum, Solana and other chains.
Jamf says PamStealer impersonates the Maccy clipboard manager, validates Mac passwords through PAM and reaches Ethereum RPC endpoints.
SecondFi says emergency measures rescued about 129 million ADA after a Cardano wallet-generation flaw, while external drains hit 16 million ADA.
The FBI logged 149,686 crypto-related complaints and more than $9.3 billion in losses in 2024, while fake wallet apps and weak key management keep Ledger and Trezor users exposed.
Circle warns a fake “CircleMetals” release claims USDC gold and silver swaps. Here’s what happened and how to verify links safely.
Step-by-step, developer-tested tutorial on using hashes, key pairs, and digital signatures to understand and secure your own crypto transactions.