Ethereum is a organization tracked across 50 threat clusters and 324 intelligence report mentions on ThreatCluster. First observed November 3, 2025; most recent activity July 15, 2026.
On May 5, 2026, Ripple announced it will share internal threat intelligence regarding North Korean hackers with Crypto ISAC, aimed at enhancing security across the cryptocurrency industry. This initiative follows a…
On April 18, 2026, Kelp DAO suffered a significant cyberattack attributed to North Korea's Lazarus Group, resulting in the theft of approximately 116,500 rsETH tokens worth $292 million. The attackers exploited a…
In 2025, cryptocurrency thefts have surged significantly, with over $2 billion stolen in just the first half of the year, marking a 17.27% increase compared to 2022. The ByBit hack, attributed to North Korean state…
Kelp DAO experienced a significant security breach on April 16, 2026, resulting in the loss of $292 million due to an exploit in the LayerZero ecosystem. Attackers, believed to be associated with North Korea's Lazarus…
Humanity Protocol has initiated a full token migration and airdrop of a new H token following a $36 million exploit on June 8, 2026. The previous H token has been sunsetted and replaced with a newly audited ERC-20…
On May 15, 2026, THORChain suffered a significant security breach, resulting in the theft of $10.7 million from its Asgard vault. This incident marks the third major hack in five years, with previous breaches totaling…
The Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocurrency theft. This method embeds…
Grinex, a Kyrgyzstan-based cryptocurrency exchange linked to Russia, suspended its operations following a cyberattack that resulted in the theft of over 1 billion rubles (approximately $13 million). The attack, which…
On May 26, 2026, the UK imposed sanctions on 18 entities, including crypto exchanges and banks, linked to the Kremlin-backed A7 network, which allegedly facilitated over $90 billion in financial transactions to support…
Radiant Capital, a decentralized lending protocol, is winding down operations after failing to recover from a $50 million hack attributed to a North Korean state-sponsored group, the Lazarus Group. The exploit occurred…