FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers
Senior FBI official stole cryptocurrency from nation-state hackers and victims using his position.
Stories per day · 30 days
2 RSS
Relatedbinance4cryptocurrency2malware2north-korea2polymarket2third-party2agentic1ai-tools1bitcoin1bootrom1btcpay1chainalysis1circle1debugbear1ethereum1exchange-hack1fbi1gta61
29 stories, newest first · one card per story
Stories tagged #crypto
MetaMask says recent attack didn't affect wallet infrastructure
Threat actor diverted 0.385 ETH in staking rewards but no customer keys were compromised.
Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers offer fake GTA 6 early access and mobile versions for crypto payments or malware before the November 19 launch.
Binance loses billions to North Korean hackers
Hackers stole $6.34 billion in cryptocurrency from Binance after months of planning using social engineering and malware.
Binance hackers used fake job interviews and AI tools to steal $6.3B
Attackers stole $6.34 billion from Binance using fake developer tool installations and job interview lures that delivered malware into AI tools; 98% of funds replenished.
Mercado Bitcoin confirms cyberattack after $46M stolen
Hackers stole more than $46 million from Brazil's largest crypto exchange in an incident that suspended deposits and withdrawals.
1
BTCPay Server hot wallet thefts target outdated instances
Attackers drain hot wallets on instances running version 2.4.1 or earlier; update to 2.4.7 urged.
Unpatchable hardware flaws in older iPhones allow crypto seed theft
BootROM and usbliter8 exploits in older iPhones (4S to iPhone 11) enable attackers with physical access to steal recovery phrases despite factory resets and airplane mode.
FBI blames North Korean hackers for $6.3 billion Binance crypto heist
The FBI has attributed the $6.3 billion Binance hack to North Korean Lazarus Group hackers, with $2.85 billion frozen.
Chainalysis data breach via offensive agentic techniques
Attackers accessed customer IDs, names, and emails using offensive agentic techniques; no access to investigation data.
1
Polymarket halts international trading after third-party compromise
Trading on Polymarket.com resumed after nearly an hour; the US platform was not affected and the company promised reimbursement.
1
Polymarket halts trading after third-party compromise, pledges full reimbursement
Users report unauthorized withdrawals and zero balances; the provider, loss totals, and access path remain undisclosed.
1
Binance investigates suspicious transfers of up to $5.8 billion; Tether and Circle freeze stablecoins
No breach is confirmed; the funds' ownership and whether transfers were authorized remain unknown, and stablecoin freezes cannot recover Ether or Bitcoin.
MacSync info-stealing malware hides malicious commands in an iCloud calendar
Kaspersky says a new MacSync macOS infostealer hides commands in an iCloud calendar and steals credentials and wallets.
Duelbits Confirms $7 Million Hot-Wallet Hack, forcing Systems offline
Duelbits confirmed a roughly $7 million hot-wallet theft and took the crypto casino offline.
Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network
Attackers exploited Payy’s Ethereum bridge and drained its full balance, pausing the network.
MacSync under the microscope: new delivery methods and a new payload
MacSync, a crypto/info stealer with a backdoor module, was spotted in the wild in September 2026 with new binary payload delivery methods.
Revolut Customers Targeted with New Wave of Phishing Attacks
Phishers target Revolut customers with smishing and fake video identity checks days after a breach enabled by impersonating Italian law enforcement.
2
Revolut handed customer data to fraudsters using government email account
Revolut handed sensitive KYC data of high-net-worth crypto customers to fraudsters submitting fake emergency data requests from a compromised government email domain.
2
ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability
ZDI discloses a Linux kernel crypto subsystem use-after-free (CVE-2026-31719, CVSS 8.8) letting local low-privileged attackers escalate to root.
Scammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
Third-party breaches at Trezor's email and shipping vendors exposed customer data, fueling phishing campaigns targeting hundreds of thousands of crypto wallet owners.
Trezor warns users of email provider breach, phishing attacks
Trezor says attackers breached its third-party email provider and are phishing customers with fake STM32 entropy vulnerability alerts.
AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
Huntress research shows AD RMS SLC root key is unrotatable and never expires, so its compromise permanently exposes all RMS-protected documents.
5
A hacker stole $340M in a crypto heist, then returned most of it
A hacker exploited a bug to steal about 4,000 BTC (~$340M) from Blockstream's Liquid Network, then returned roughly 3,400 BTC after the bug was fixed.
2