On April 13, 2026, a vulnerability in the Hyperbridge gateway contract on Ethereum allowed an attacker to mint 1 billion unauthorized Polkadot (DOT) tokens. The exploit was facilitated by forging messages to gain…
Kraken has transitioned to Chainlink's Cross-Chain Interoperability Protocol (CCIP) from LayerZero, following a significant exploit involving Kelp DAO's rsETH token that resulted in a $292 million loss. This decision…
Craig Wilkinson, a disabled U.S. veteran, lost over $170,000 to an online investment scam that began with a fraudulent social media ad. The ad, which appeared to be from a legitimate financial firm, led him to a…
Aptos Labs patched a critical vulnerability in its Move virtual machine that could have exposed up to $70 billion in crypto assets. Discovered by Hexens in February 2026, the flaw allowed attackers to manipulate core…
Decentralized finance (DeFi) has seen a significant reduction in losses, dropping from $2.62 billion in 2022 to $534 million by 2024. However, new vulnerabilities have emerged, particularly in cross-chain deployments,…
On July 1, 2026, CertiK launched CertiK Hunt, an invite-only platform aimed at improving Web3 security by connecting vetted researchers with blockchain projects for ongoing vulnerability testing. This initiative…
Centrifuge has expanded its bug bounty program to include the V3.1 upgrade, offering up to $250,000 for critical vulnerabilities. The program, launched on July 17, 2025, through the Cantina platform, aims to enhance…
Fireblocks disrupted a North Korea-linked job recruitment scam that targeted crypto firms by using fake interviews and assignments to install malware. The hackers impersonated recruiters and conducted interviews via…