Security

Researchers must permanently burn 1 SOL, worth about $100, for every bug report submitted to Solana's Firedancer project after a monthlong contest drew 809 reports that yielded only 127 unique findings.

Foundation, a maker of Bitcoin hardware wallets, said it revoked compromised Cloudflare API keys and removed a malicious domain after spam emails were traced to the breach, prompting questions about customer data exposur...

The SEC announced tokenization as a 2027 examination priority, Ireland fined Coinbase €3.25 million for safeguarding failures, a shareholder lawsuit challenged stablecoin competition involving political figures, and the ...

Spanish authorities have identified massive cryptocurrency transfers linked to Arbistar, the fraudulent platform that collapsed in September 2020 after affecting 32,000 investors. Between January and March 2021, wallets ...

Blockchain security firm CertiK identified deposits into Tornado Cash from an address that recently drained about $1.58 million, highlighting a pattern of private‑key compromises followed by mixer usage.

Hardware wallet maker Keystone disclosed that attackers who breached its website stole an authentication key used to verify device authenticity, potentially enabling the creation of counterfeit wallets. The incident also...

The former CFTC chairman wants Congress to revive a constitutional power that would let licensed private firms legally hack back at state-sponsored cybercriminals, though a 2026 White House memorandum took a narrower vie...

Ethereum co-founder Vitalik Buterin endorsed AI model Kimi 3.1's decision to exclude top-end offensive cyber capabilities from its training, arguing the restriction buys time for system defenses to strengthen.

Blink Wallet has begun charging $1 per month on custodial accounts inactive for over 12 months, citing infrastructure and compliance costs. The fee marks another step in the wallet's transition to self-custody offerings....

Vultisig addressed a flaw in its multi-signature wallet that could allow attackers to recover private keys through malicious signing messages. Security researchers at ChainSecurity disclosed the vulnerability, which the ...

A Token2049 Singapore panel featuring MetaMask, Trezor and ChangeNOW examined how AI agents fit into self-custody, with MetaMask's early-access Agent Wallet and its built-in guardrails as the backdrop.

Keystone will destroy nearly 19,000 hardware wallets after attackers obtained a device authentication key during a website breach that also exposed personal information for nearly 26,000 customers.

A hacker exploited a third-party module to drain SOL from wallets tied to a Telegram-based Solana trading bot, with Bloom saying affected users will be fully repaid.

Indian exchange CoinDCX acknowledged a $16 million cryptocurrency loss on October 25, three days after its CEO characterized suspicious wallet transfers as a false alarm. The loss involved deposits that accumulated in co...

Keystone Hardware Wallet will destroy almost 19,000 unshipped devices after an attacker obtained the cryptographic key used to verify genuine Keystone hardware. The company discovered unauthorized access to customer ship...

Bloom Trading suffered a security breach on October 26 that drained approximately 9,408 SOL from 49 wallet addresses belonging to nine users. The company identified a third-party remote code execution vulnerability as th...

A reverse engineering project has revealed that Samsung smart TVs contain functions for microphone monitoring, automatic content recognition, and targeted advertising, raising questions about data collection practices in...

BTCPay Server merged a security fix on October 19 to prevent API keys with broad store permissions from accessing server-wide or account-wide functions. Version 2.4.5, released October 6, remains the latest public releas...

A researcher identified as Killa successfully exploited a critical PHP vulnerability on the Steal My Bitcoin challenge server on October 25, winning the Bitcoin bounty less than three hours after the server configuration...

The cryptocurrency trading bot company said it will compensate nine affected wallets after nearly $1 million in SOL was withdrawn without authorization, though investigators identified 49 potential victims.