Security

BTCPay Server warned operators to disable their self‑hosted Bitcoin payment nodes after reports that attackers were draining hot wallets on versions 2.4.1 and older, while confirming no credible incidents on the latest 2...

A portion of the $6.3 billion stolen from Binance’s hot wallets on Oct. 29, 2026 was moved into three Binance deposit addresses, likely after passing through third‑party exchanges.

Solana developer Anza and the Solana Foundation warned mainnet‑beta validators on Nov. 1 to apply temporary mitigations for CVE‑2026‑98432, a high‑severity Linux kernel flaw not yet patched in Ubuntu.

BTCPay Server has warned users of versions 2.4.1 and earlier to temporarily shut down their payment instances following reports of unauthorized withdrawals from Bitcoin hot wallets.

A recent Sui Foundation design note outlines how on‑chain permissions and atomic transactions can help enforce spending limits and improve safety for AI‑driven financial agents.

A study of 550 public LND nodes flagged in an August security disclosure found 71% were still on affected software release lines as of Oct. 13, despite fixes being available for more than a year.

The open-source Bitcoin payment processor urged merchants to take their servers offline on November 1 while it investigates unauthorized withdrawals, with an attack vector identified in version 2.4.1 and earlier.

Attackers gained admin access to BTCPay Server instances running version 2.4.1 or older and drained hot wallets, the project says, with total losses not yet disclosed.

The world’s largest crypto exchange says withdrawals are stabilizing and 95% of stolen assets have been replenished following a breach linked to a North Korean hacking group.

BTCPay Server says an attack vector affects instances running version 2.4.1 or earlier and urged operators to update, after reports of unauthorized hot wallet withdrawals.

The 19 wallets holding 18,270 stolen BTC have not moved since the theft, but strangers are paying to attach short OP_RETURN messages to them — asking for a cut, or promoting tokens.

Enterprises are adopting tokenization to protect sensitive information while allowing AI agents to access needed data, according to Protegrity’s vice president of customer success and presales.

A one‑block reorganization on Ethereum triggered a refund error in THORChain, leading the protocol to halt swaps on ten networks and unintentionally slowing the laundering of funds stolen from Binance.

Bitwise chief investment officer Matt Hougan argues that a $6.3 billion theft would have crippled Binance ten years ago, but the long‑term trajectory of Bitcoin remains unchanged.

Polymarket detailed a security breach involving a compromised monitoring script that affected its platform on Oct. 29, and outlined a $3.9 million refund plan covering both stolen funds and losses from a trading pause.

Binance resumed withdrawals for 15 blockchain networks following a major hack that stole $6.3 billion. The exchange processed $4.65 billion in withdrawals, received $1 billion in deposits, and saw a net outflow of $3.64 ...

Cardano’s coordinating group Intersect warned pool operators about CVE‑2026‑98432, a high‑severity Linux kernel flaw that could disrupt servers used for block production, affecting roughly 21.5 billion ADA staked across ...

Binance clarified that no cash voucher campaign is active, warned users about phishing scams, and restored withdrawals on 15 networks following a recent theft investigation.

Binance co-founder Changpeng Zhao credited U.S. law enforcement with preventing a deeper market crash following a major security breach.

A one‑block Ethereum reorganization caused a double refund of 10 ETH on Thorchain, triggering an emergency pause that halted cross‑chain swaps on most networks and unintentionally delayed the laundering of funds stolen f...