Hack

Highlights: Socket found TrapDoor malware targeting crypto developers through fake packages on major software registries. The malware tried to steal wallet files, keys, tokens, cloud credentials, and developer secrets. Attackers also tested hidden prompts to abuse AI coding tools inside […]

Highlights: A hacker returned 4,052.4 ETH worth $8.5M after exploiting the Verus-Ethereum Bridge. The Verus-Ethereum Bridge lost $11.6M due to a logic flaw in transaction validation checks. Verus offered the exploiter 1,350 ETH as a bounty to recover the majority […]

Highlights: Echo Protocol suspended cross-chain transactions after a security incident affected its Monad bridge. PeckShield and Lookonchain said the attacker minted 1,000 unauthorized eBTC tokens. Monad CEO Keone Hon said the network stayed safe, with losses near $816,000. Echo Protocol […]

Highlights: Blockaid flagged an active attack on the Verus-Ethereum Bridge, draining roughly $11.58 million. The attacker took tBTC, ETH, and USDC, then swapped everything into 5,402 ETH to obscure the trail. A bridge validation flaw may have let a small […]

Highlights: The ZetaChain exploit has been traced to a missed bug report that later enabled a $334K drain from internal wallets. The gateway design allowed attackers to combine flaws and move funds across multiple chains without additional approvals. The exploit […]

Highlights: DeFi United plans to restore rsETH backing after KelpDAO’s $292 million bridge incident. The recovery aims to resolve attacker-linked positions across Aave and Compound safely. Major crypto firms have pledged support, but some funds still need governance approval. DeFi […]

Highlights: Mantle proposed lending up to 30,000 ETH to Aave after the rsETH exploit. The attacker used fake rsETH collateral to borrow around $190 million in real assets. Bybit CEO Ben Zhou backed the plan, saying crypto firms should support […]

Highlights: Circle faces a proposed class action over its response to the stolen USDC after the Drift hack. Plaintiffs say Circle could have frozen funds earlier as attackers moved assets across networks. Circle previously said it can freeze funds only […]

Highlights: Kraken rejected an extortion attempt after insider-related incidents exposed limited support data from 2,000 accounts. The exchange said its core systems stayed secure, and customer funds were never at risk. Kraken linked the case to insider misuse, not hacking, […]

Highlights: Circle has explained why it failed to freeze stolen USD during the Drift Protocol exploit. The stablecoin issuer argued that freezing assets without legal backing could encourage politically motivated interference. Circle is also pushing for the advancement of the […]

Highlights: ZachXBT and SlowMist flagged the Coinbase Commerce recovery page for seed phrase security risks. Researchers warned cloned pages could exploit users through highly convincing social engineering attacks. Coinbase’s 31 March migration deadline could make seed phrase phishing scams easier […]

Highlights: Bitrefill said a March 1 cyberattack hit hot wallets and 18,500 records. The company linked the breach to Lazarus-style tactics and a compromised employee device. Bitrefill restored services and said attackers mainly targeted funds, not full data. Crypto payments […]