Security Incidents

According to The Block, LayerZero issued a public apology Friday for its handling of the April 18 exploit that drained $292 million in rsETH from Kelp DAO's cross-chain bridge. The protocol acknowledged it made a mistake by allowing its Decentralized Verifier Network to serve as the sole verifier fo

Crypto security firm CertiK estimates that cryptocurrency holders lost approximately $101 million from wrench attacks during the first four months of 2026, representing a 41% increase in verified incidents compared to the same period in 2025. If the trend continues at this rate, losses could reach s

According to BlockBeats, on May 9, the Linux kernel "Copy Fail" vulnerability was added to CISA's Known Exploited Vulnerabilities (KEV) catalog. The flaw affects major Linux distributions since 2017 and allows attackers with regular user permissions to escalate to root access using

According to BlockBeats, on May 9, Chrome automatically downloaded a multi-gigabyte AI model file (Gemini Nano) to users' devices without explicit consent for local fraud detection, webpage summarization, and AI features. While Google stated that local AI execution enhances privacy and security,

According to CertiK, crypto wrench attacks—physical assaults and extortion targeting cryptocurrency holders—have resulted in approximately $101 million in losses during the first four months of 2026. The firm verified 34 incidents globally, representing a 41% increase compared to the same period in

Wasabi Protocol disclosed a security incident today (May 9) in which attackers exploited a Spring Boot Actuator misconfiguration in its AWS infrastructure to steal private keys controlling EVM smart contracts. The breach resulted in approximately $4.8 million in user funds and $900,000 in protocol r

According to CertiK, crypto wrench attacks have resulted in approximately $101 million in losses during the first four months of 2026, with 34 verified incidents globally representing a 41% increase from the same period in 2025. If the trend continues, the firm estimates hundreds of millions of

According to BusinessWorld, the Philippine central bank warned the public on May 9 against trading with unauthorized virtual asset service providers (VASPs), citing risks of fraud, security breaches, and operational failures that could result in fund loss. The central bank identified additional risk

According to OpenSourceMalware research, North Korean hacking group Lazarus hid second-stage loaders in Git Hooks pre-commit scripts during developer-targeting attacks on May 9. The group used the technique in campaigns including 'Infectious Interview,' where it posed as cryptocurrency and DeFi

According to MARISKS, a Greek maritime risk management company, unidentified individuals impersonating Iranian authorities sent messages to shipping companies on April 21 demanding cryptocurrency payments for safe passage through the Hormuz Strait. The company confirmed these messages are

According to a report by The Straits Times on May 9, Singapore’s National Court judge Wang Qinru made a ruling on May 8 in the case of the defendant, Zhang Rongxuan (35, phonetic transliteration), sentencing him to six years and ten months in prison. Zhang Rongxuan, a former captain in the Naval Diving Unit’s elite diving unit, was found to have, while a friend was out, entered the apartment, photographed the cold wallet seed phrases, and later stole 1.7 million USDT held by the friend. Criminal

According to The Straits Times, a former Singapore naval officer, Zhang Rongxuan (35), was sentenced to 6 years and 10 months in prison for stealing 1.7 million USDT (approximately SGD 2.3 million) from a friend's cold wallet. Zhang, a captain in the Naval Diving Unit, admitted that financial

According to ChainCatcher, a 35-year-old former Singapore Navy captain, Zhang Rongxuan, was sentenced to six years and ten months in prison for stealing 1.7 million USDT (approximately 2.3 million Singapore dollars) from a friend's cold wallet. The defendant, who held the rank of captain in the

On May 9, the Estonian Financial Supervisory Authority (FSA) issued an investor warning regarding BB Trade Estonia OÜ (which operates the Zondacrypto digital asset exchange), stating that Zondacrypto did not publish the whitepaper for the “TeamPL” crypto token on its website, in violation of Article 9(1) of the EU Markets in Crypto-Assets (MiCA) regulatory framework. MiCA Non-Compliance Details and Official FSA Warning from Estonia According to the FSA’s official warning, Zondacrypto did not pub

According to Reuters, British sprinter and former world champion Chijindu Ujah was arrested on suspicion of cryptocurrency fraud and released on bail. Ujah is among 10 people detained by the UK's National Crime Agency; seven were granted bail by magistrates and will appear in court on May 28, all

According to CertiK, cryptocurrency holders lost approximately $101 million from wrench attacks in the first four months of 2026, with 34 verified incidents reported globally—a 41% increase compared to the same period in 2025. Eighty-two percent of these attacks occurred in Europe, with France

According to Beijing Haidian District People's Court, a defendant was recently sentenced to 7 years in prison and fined 70,000 yuan for illegally obtaining over 900 million pieces of personal information through encrypted communication channels. The defendant built a "social engineering database"

Revolut, a fintech platform, confirmed on May 8 that there is a technical issue affecting some cryptocurrency functions. According to a statement on X from Revolut’s official support account, engineers are actively investigating the root cause. Previously, the Revolut app charts briefly showed Bitcoin down as low as $0.019916, and some users simultaneously received push notifications saying BTC had hit a 52-week low. After the incident lasted for several seconds, things returned to normal.

According to LayerZero Labs, the protocol's internal RPC infrastructure suffered attacks from Lazarus Group over the past three weeks, affecting 0.14% of applications and approximately 0.36% of total asset value. External RPC providers also experienced DDoS attacks. Despite these incidents, LayerZer

According to crypto security firm CertiK, victims lost approximately $101 million from crypto wrench attacks—physical assaults and extortion attempts—during the first four months of 2026. CertiK verified 34 incidents globally in this period, representing a 41% increase compared to the same