Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 17 of 28- 1
International Law Enforcement Seizes Domain of Virtualine Bulletproof Hosting Service
Law enforcement seized the domain of Virtualine, a bulletproof hosting service, with Chainalysis and OverRIPE contributing.
- 2
Liquid Reserve Gap Narrows to 600 BTC After Test Transfer
The Liquid federation's reserve gap has narrowed to 600 BTC after a test transfer, and direct peg-outs stay paused until full backing is restored.
- 3
Bitcoin Wallet Maker Keystone Pulls Devices as Stolen Key Opens Door to Fakes
Attackers obtained Keystone's factory authenticity key, so Keystone pulled devices and 25,964 buyer records were exposed; the company says seeds and private keys were not involved.
- 4
US Charges Six in Alleged Madagascar NFT Wallet-Draining Scheme
The FBI estimates at least $516,695 lost across 74 wallets in an alleged Madagascar NFT drainer scheme using unlimited USDT approvals.
- 5
Predict.fun Pledges Full Refunds for Roughly 400,000 USDT Theft
Predict.fun pledges full refunds for about 400,000 USDT stolen, pointing to a compromised third-party API docs site.
- 6
Myriad Voids 10 Prediction Markets After Admin-Wallet Compromise
Myriad voids 10 prediction markets after an admin-wallet compromise and promises refunds at pre-attack prices.
- 7
Hidden Code in Udesk Chat Script Swaps Crypto Deposit Addresses, SlowMist Says
SlowMist found hidden code in a Udesk chat script that stole login data and rewrote deposit addresses on three trading sites.
- 8
Predict Fun users lose $260K in ‘likely’ ongoing draining incident
Nineteen Predict Fun users lost about $260K in an ongoing draining incident that may grow.
- 9
Paid in bitcoin: can your employer follow what you spend?
Explains how an employer paid in bitcoin can track the wallet's spending through output sizes and known addresses, a real privacy leak.
- 10
Bitcoin Security Expert Jameson Lopp: Cyberattacks on “Exponential” Path
Interview with Jameson Lopp on AI-accelerated bug hunting and the shift to real-time defense in Bitcoin security.
- 11
Multiple high-severity vulnerabilities patched in widely used Bitcoin ecosystem libraries
Multiple high-severity bugs patched in bitcoinjs-lib, bip39, bip32 and tiny-secp256k1, which many wallets and SDKs depend on; check and upgrade.
- 12
Crypto wallet maker Keystone to destroy almost 19,000 devices after security breach
Keystone will destroy nearly 19,000 hardware wallets after a breach exposed 25,964 buyer records, some kept past the deletion policy due to a failed automated tool.
- 13
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
SlowMist found Udesk script malware that can swap displayed and copied crypto deposit addresses, a clipboard-style theft risk.
- 14
Oracle, IBM and Intel Have Opted Out of OKX-ICE Stock Tokens, Venue’s Own Notice Shows
Oracle, IBM and Intel opted out of OKX-ICE stock tokens, per the venue's own notice that flags no audit and no timelock.
- 15
Ethereum Developers Merge Glamsterdam Fix to Keep Validator Deposits Out of Builder Accounts
Ethereum developers merged a Glamsterdam fix keeping pending validator deposits out of builder accounts sharing a key.
- 16
Keystone Halts Web Orders, Will Junk 18,835 Wallets in Stock Over Stolen Authenticity Key
Keystone halts web orders and will discard 18,835 wallets in stock after a stolen authenticity key; 25,964 buyer records were exposed.
- 17
Bloom bot hackers loot $953K faster than you can microwave popcorn
Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets, and says no private keys were accessed.
- 18
Solana bug reports now cost 1 SOL as AI floods security teams with spam
Solana now requires a 1 SOL burn per bug report after AI-generated spam flooded security teams, with 809 reports in one contest.
- 19
Ethereum fixes Glamsterdam bug that could have sent staking deposits to builders
Ethereum developers fixed a Glamsterdam bug that could have sent staking deposits to builders, after initially rejecting the change.
- 20
Keystone breach deepens: Hackers stole key used to verify wallets as genuine
Keystone's breach has expanded: hackers also stole a key that could let counterfeit wallets pass authenticity checks, a serious hardware wallet security issue.
- 21
Keystone Breach Widens as Attacker Grabs Its Device Authentication Key
Keystone's breach widened as an attacker took its device authentication key; it will destroy 18,835 devices and cannot rule out fakes sold after Oct. 20.
- 22
Keystone to destroy almost 19,000 wallets after device key leak
Keystone will destroy almost 19,000 hardware wallets after a device key leak, raising phishing and impersonation risks for owners.
- 23
Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
- 24
India’s CoinDCX Confirms $16 Million Loss Days After CEO Called It a ‘False Alarm’
CoinDCX confirms a $16M loss from wallets it retired after a prior hack, bringing total losses near $60M.
- 25
Proposed quantum-safe chain design stores just 96 bytes per transaction on-chain
Proposed quantum-safe chain design storing 96 bytes per transaction on-chain; technical detail is limited in the snippet.
- 26
Keystone to Destroy 18,835 Wallets After Device-Authentication Key Theft
Keystone will destroy 18,835 wallets after a device-authentication key theft, and owners of old-key devices need extra checks.
- 27
PHP flaw shows AI ‘vulnerability apocalypse’ is on schedule: Immunefi CEO
Immunefi's CEO says the PHP flaw shows AI-driven vulnerability discovery is arriving, with smaller sites slow to patch.
- 28
X100 Exploiter Sends 420.8 ETH to Tornado Cash
The X100 exploiter sent 420.8 ETH to Tornado Cash, while about 1,602 ETH remains in four holding wallets.
- 29
Nexus Mutual vs. Firelight: Who Files Claims and Gets Paid
Compares claim mechanics for Nexus Mutual direct cover and Kraken's Firelight arrangement, which caps cover at $100,000 per depositor address.
- 30
Researcher Cracks 'Steal My Bitcoin' Challenge With PHP Exploit
A researcher cracked a 'Steal My Bitcoin' challenge via a PHP exploit, and the operator had to pay out after the server held the wrong wallet key.