Security

A six-figure exploit involving AI systems highlights accountability gaps in autonomous agent payments. Experts say responsibility lies with deploying companies, not AI models, and proper controls require cryptographic ma...

Consumer advocacy group Public Citizen estimates investors lost at least $4.7 billion through Trump family digital asset projects including a memecoin, NFT cards, and World Liberty Financial token since 2022.

A single operator has stolen $9.4 million from 15 Tron users over four weeks using address poisoning attacks, prompting questions about wallet security across blockchain networks.

Bitcoin's Core Lightning project confirmed that AI-generated security reports identified genuine vulnerabilities and urged node operators to install an imminent update promptly or run nodes offline rather than shut them ...

A vulnerability in the CryptoJS library used by at least five wallet applications made recovery phrases predictable, enabling attackers to reconstruct wallet access and steal funds across multiple blockchain networks.

Canopy, an AI-native platform for building onchain applications, has deployed Canopy KMS, a key management system designed to secure high-value signing keys in an isolated enclave before its token generation event.

Core Lightning developers have urged node operators to install new binaries or take nodes offline after receiving multiple AI-generated vulnerability reports, placing technical details under a two-week embargo.

Bitcoin has recorded its first known quantum-resistant transaction on the mainnet, executed without modifying any network consensus rules.

Core Lightning has confirmed multiple vulnerabilities and advised node operators to install an upcoming security update while providing temporary mitigation steps.

Core Lightning developers have confirmed real vulnerabilities in Bitcoin's Lightning Network software following a wave of AI-generated reports, with patches expected within days and a two-week disclosure embargo in place...

An attacker who exploited a Cosmos EVM vulnerability to move $50 million of Nesa tokens off-chain ultimately netted just $60,000 due to severe liquidity issues and extreme slippage.

Federal authorities have disabled two interconnected hacking platforms, QScan and QTRouter, allegedly used by Chinese state-sponsored hackers to target critical U.S. infrastructure and sensitive networks.

Following a major entropy bug discovered in Coldcard wallets, Bitcoin self-custody advocates are increasingly recommending multi-vendor multisignature setups to eliminate single-manufacturer dependency.

An inmate in a Georgia prison has been extradited to Florida to face charges after allegedly running a jury duty scam using a smuggled phone and a crypto ATM.

TxFlow L1 Undergoes Independent Security Audit Road Town, British Virgin Islands — TxFlow announced the completion of an independent security audit conducted by blockchain security firm OpenZeppelin. The review focused o...

A disclosed channel-close flaw in LND could expose entire channel balances in a worst-case scenario, affecting standard releases below version 0.21.0.

CoinMarketCap has received SOC 2 Type 1 and SOC 1 Type 1 attestation reports and maintains ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications, covering its market data and privacy controls.

Following the announcement of Dolly Parton's passing, unauthorised Solana‑based memecoins bearing her name appeared on multiple exchanges, quickly collapsing in value despite high trading volume.

A security flaw on the Provenance Blockchain allowed empty wallets to seize control of 82 live marker accounts, putting token supplies and about $500,000 in escrow at risk.

Software supply-chain security firm Socket has uncovered 40 malicious Firefox add-on identities used to drain cryptocurrency, including nine that initially operated as sports-score tools.