57
42
57
42
42
57
57
42
42
42
42
57
57
57
57
TrueFort raises $13.7M to expand sales, marketing, R&D, customer support and go-to-market activities
57
Hackers Drain $320 Million From Liquid Network, Then Return Most of It
Hackers exploited an Elements bug to drain about 4,000 BTC (~$320M) from Liquid Network's federation wallet, then returned 3,400 BTC after Blockstream patched.
An attacker drained roughly 4,000 of 4,200 BTC (~$320M) from Bitcoin's Liquid Network federation wallet on September 6 by exploiting a bug in Elements, the open-source code powering the sidechain, which allowed unbacked L-BTC tokens that were redeemed for real Bitcoin through SideSwap's authorized peg-out mechanism. The self-described white-hat attackers negotiated publicly via OP_RETURN on-chain messages, demanding the bridge nodes be patched before returning 3,400 BTC (~$262.6M) and keeping about 598 BTC (~$47M). Blockstream confirmed the affected bridge nodes were patched; the network remains paused while federation members complete security work, and experts debate whether the act legally constitutes extortion.
78
57
57
57
57
42
Revolut Confirms Data Breach Through Fake Government Requests
Revolut disclosed customers' IDs, selfies, and financial data to impostors sending fraudulent requests from a legitimate government email domain.
Revolut confirmed an unauthorized third party obtained sensitive customer records by submitting fraudulent information requests from a legitimate government agency email domain with valid domain authentication, which employees fulfilled as standard legal compliance. Exposed data reportedly includes names, dates of birth, addresses, phone numbers, email addresses, occupations, passport and driver's license copies, verification selfies, IBANs, account-opening dates, transaction and withdrawal histories, and Bitcoin wallet references. Revolut says only a 'very limited group of customers' was affected, that systems and funds were untouched, and that it blocked the address and notified the agency, law enforcement, and regulators. Researcher ZachXBT first publicized the breach via Telegram on September 12.
68
57
57
57
42
57
57
57
42
57
57
57
57
60
57
57
42
57