Crypto
Curated coverage and analysis in this editorial area.
Coldcard: 2021 Seed Bug Drains 1,778 BTC; Firmware Fix Released August 20
Coinkite issued corrective firmware on August 20, 2026, after an entropy bug present since March 2021 enabled the theft of over 1,778…
Exposed Directory Reveals Autonomous AI Fleet for Industrial-Scale Crypto Theft
A Chinese-speaking operator orchestrated entire offensive campaigns using multi-vendor AI agents in full-auto mode. A misconfiguration…
Trezor: ShipMonk Exposes 13,689 Customers — Where Physical and Digital Security Collide
Logistics provider ShipMonk notified Trezor of unauthorized access exposing personal data for 13,689 customers. The incident lays bare…
Ill Bloom: 431 Wallets Drained for $3.1M via Insecure PRNG
The Ill Bloom vulnerability exposed 2,114 crypto addresses due to weak pseudorandom number generators. No patch exists: the only defen…
Polymarket Loses $3M in Frontend Supply-Chain Attack
On June 25, 2026, Polymarket lost roughly $3 million after a third-party vendor compromise injected malicious JavaScript into its fron…
Crypto-Clipper: The Fake Reputation Economy Becomes a Weapon
Cybercriminals have weaponized stars, downloads, and reviews to distribute a Rust-based clipper across GitHub, YouTube, and even legit…
Rust Crypto Clipper Campaign Weaponizes Fake Reputation on VirusTotal and GitHub
A threat actor distributed a Rust-based crypto clipper for Windows and macOS by fabricating trust signals across GitHub, SourceForge,…
AudiA6 Takedown: Global Strike Dismantles $900M Crypto-Laundering Pipeline
On June 11, 2026, international authorities arrested two administrators in Georgia and seized infrastructure across four countries, di…
Europol and DOJ Dismantle AudiA6: A Critical Hub for Ransomware Money Laundering Smashed
In a major operation on June 10, 2026, authorities arrested two administrators in Georgia and seized 25 domains and 30+ servers. The A…
JINX-0164: Potential macOS Malware Campaigns Targeting Crypto Developers via LinkedIn
Threat actor JINX-0164 may be targeting cryptocurrency developers through LinkedIn social engineering, potentially utilizing the AUDIO…
PromptMink: North Korean Hackers Weaponize AI to Poison npm Supply Chain
Researchers have uncovered 'PromptMink,' a sophisticated North Korean campaign leveraging code generated by Anthropic's Claude Opus to…
Cybercrime Dubai: US-China Operation Dismantles Crypto Scam Centers
Discover the details of the joint US-China raid against crypto scams in Dubai: 276 arrests and the impact on cybercrime networks.