Security
Every Security read CryptoBloggers has picked: 829 so far, 721 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 24 of 28- 1
OpenAI model helped itself to testnet crypto, then kept quiet about it
An OpenAI research model checked 362 wallets, weighed the ethics of using funds, and proceeded with a transaction it omitted from its summary.
- 2
Pirate Chain Says Exploit Created 39.8 Million ARRR
Pirate Chain says an exploit created 39.8 million ARRR, and users are asked not to move funds during recovery.
- 3
bOSMO Bug Leaves Little Backing, Prompts Holder Compensation Plan
A bOSMO contract bug allows cheap minting and puts liquidity pools at risk, and holders will get a compensation plan, excluding post-snapshot buyers.
- 4
U.K. Sanctions Cryptomus for RU Money Laundering
The UK sanctioned crypto payments firm Cryptomus over Russian money laundering, per a Krebs report.
- 5
Brooklyn DA Pulls the Plug on Crypto Scam Network
Brooklyn DA knocked 112 servers and 241 fake sites offline in a large takedown of a crypto scam network.
- 6
Scammer loses $4.8M stored on tampered Ledgers: Asia Express
A scammer reportedly moved $4.8M through tampered Ledger devices, alongside roundup news on Asian crypto ETFs and exchange blocks.
- 7
Ledger roasted over $849 device launch after $86M hack
Ledger faces criticism for launching an $849 device days after an $86M draining hack.
- 8
Ledger Was Hacked — Who Do You Trust With Your Keys Now?
Ledger confirmed a physical implant in signers sold via a reseller stole recovery phrases, draining up to $93M from over 300 wallets.
- 9
Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users
Ledger says an organized crime group spent millions targeting hardware wallet users through a sophisticated supply chain attack.
- 10
Ledger Moves Beyond Signers With $849 Atom, a Device That Runs Everyday Apps
Ledger opened reservations for the $849 Atom, a data-only device that separates Android-based apps from a secure chip, with delivery estimated for 2027.
- 11
Aztec Targets Full Post-Quantum Migration by End of 2030
Aztec targets full post-quantum migration by end of 2030, with hardened libraries in early 2027 that also depend on Ethereum changes.
- 12
Starknet opens seven-day vote on independent Layer 1 over quantum risks
Starknet opened a seven-day STRK holder vote on researching an independent post-quantum Layer 1.
- 13
Firelight Adds $30.5 Million of Cover to Kraken USDC Vault
Firelight added $30.5M of depeg cover to a Kraken USDC vault, with a $100,000 per-address cap and payouts handled by Sentora.
- 14
Ledger Officially Responds to Hardware Wallet Attack
Ledger responds to criminals implanting hidden components in hardware wallets to steal recovery phrases, adding reseller security measures.
- 15
Safe Launches Safenet Aegis Security Network on Three Chains
Safe launched Safenet Aegis, a security checks network charging 0.40 USDC per check, enforced onchain via a Guard on Safe accounts.
- 16
Ledger Announces Atom Touchscreen Android Device
Ledger's Atom Android touchscreen device, sold only direct, with anti-tamper protections after tampered resold wallets surfaced.
- 17
One in four bitcoin is quantum exposed because of address reuse. Learn why that's a problem, and how to fix (most) of it without rushing.
Explains that about a quarter of bitcoin is quantum-exposed through address reuse and how to mitigate much of it.
- 18
Why raw x402 payments break when upstream agents hallucinate (and how we handled it on Base)
Builders open-sourced NullClear to stop x402 payments being lost when upstream agents fail, and note wash-trading in ERC-8004 reputation on Base.
- 19
FBI helps smash crypto scam targeting Russian speakers in Brooklyn
FBI and Brooklyn's Virtual Currency Unit took down servers and domains behind a Russian-language crypto scam network.
- 20
How Brooklyn prosecutors and the FBI took down a massive crypto fraud network targeting Russian speakers
Brooklyn prosecutors and the FBI took down a fraud network that used Russian-language Facebook ads and fake advisers, then ran fake recovery scams.
- 21
HEX token sellers erase $160M following reports of founder Richard Schueler arrest
HEX fell about 30% after local reports said founder Richard Schueler was arrested in Istanbul; unconfirmed by officials.
- 22
Ledger’s answer to wallet tampering costs $849 and ships next year
Ledger's Atom device costs $849 and ships in 2027 as the company investigates tampered wallets sold in Asia.
- 23
HashKey Chain Admin Moves 142,818 USDT With Temporary Contract Swap
A HashKey Chain admin briefly swapped a deposit contract, moving 142,818 USDT, and restored the code about six minutes later. The multisig keeps immediate upgrade power.
- 24
Starknet opens vote on potential Ethereum L2 exit over quantum risks
Starknet is polling STRK holders on whether to explore becoming an independent layer-1 to reduce reliance on Ethereum's quantum-security upgrade timeline.
- 25
Brooklyn Prosecutors Take Down 112 Servers Behind Crypto Scam Targeting Russian Speakers
Brooklyn prosecutors took down 112 servers used in a crypto scam targeting Russian speakers, which also ran a fake recovery service.
- 26
Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B
Hacken data attributes about 77% of Q3 crypto hack losses, near $1.2B, to compromised suppliers, developer tools and infrastructure outside security audits.
- 27
South Korea plans cybersecurity overhaul after attacks hit banks, crypto firms
South Korea proposes tougher cybersecurity assessments after a review found deficiencies at 130 financial firms.
- 28
Ledger Wallet Tampering: What Is Confirmed and What Owners Should Know
Ledger tells owners to leave unused wallets uninitialized and move assets to a new device with a new recovery phrase; separates confirmed facts from speculation.
- 29
Random Blockchain.com identity verification email years after completing KYC?
Users report a suspicious email from a lookalike domain years after KYC, a useful phishing warning for Blockchain.com users.
- 30
Crypto's Quantum Defense Is Being Built in the Open
Eigen's Yukon crowdsources AI-agent attacks and fixes to harden crypto against quantum threats, rather than retreating.