Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 4 of 28- 1
Luke Dashjr Publishes Nine Coldcard RNG Concerns
Luke Dashjr raises nine concerns about Coldcard RNG, with firmware changes that add seed-error checks and a startup RNG test.
- 2
Binance hack launderers mint homemade Elon Musk, animal memecoins to move stolen funds: Elliptic
Elliptic reports Binance hack launderers minted homemade memecoins to swap stolen funds, slowing but not hiding the trail onchain.
- 3
LNbits urges Bitcoin Lightning server operators to shut down immediately
LNbits issued an emergency shutdown warning after a Paywall extension exploit drained at least one operator's Lightning funds.
- 4
North Korean hackers are creating memecoins to wash loot from $6.3 billion Binance hack
Elliptic traced North Korean hackers laundering about 117,000 NEAR (~$430,000) from the $6.3B Binance hack through six homemade memecoins.
- 5
How fake randomness stole $130m in Bitcoin
A clear layman explainer of how weak randomness in the Coldcard seed generation enabled a roughly $130m Bitcoin theft, with lessons for self-custody.
- 6
Analysts see no broader ‘contagion’ from $6.3B Binance hack
Analysts see limited contagion from the $6.3B Binance hack after Binance pledged to cover all user losses.
- 7
Mercado Bitcoin Begins View-Only Reopening After Hack
Mercado Bitcoin is reopening view-only after a hack, replacing stolen assets with company funds; trading and payments return in later phases.
- 8
PeckShield Flags $45.3 Million ETH Long With Possible UXLink Exploit Link
PeckShield flagged a $45.3M ETH long possibly linked to a UXLink exploit, with about $652K unrealized loss in a later snapshot.
- 9
Coinify Breached
Coinify disclosed a cybersecurity incident involving unauthorized activity on hot wallets; details are still thin and the company is not being transparent.
- 10
Ankr Ethereum Bridge Loses More Than $303,000 in Five-Transaction Exploit
Ankr's Ethereum bridge lost over $303,000 in five transactions after the contract stayed unpaused and let withdrawals reference an already-redeemed Optimism deposit.
- 11
Binance Says 335.9 Million-Record Breach Claim Is Likely a Scam
Binance says a claimed 335.9M-record breach, listed for $900,000, is likely a scam based on inconsistencies in the listing.
- 12
Solana moves to scrap the transaction feature used in the $270 million Drift hack
A Solana draft proposal would retire durable nonces, the feature used in the $270M Drift hack, no earlier than May 2027, forcing offline-signing custodians to rebuild.
- 13
Test whether your AI agent pays safely over x402, in about 40 lines
The exam's builders tested an AI agent's x402 payment client against 19 simulated sellers on Base Sepolia test USDC; the post describes the test design but reports no agent results yet.
- 14
SlowMist Flags 'Cracked TradingView Premium' as Wallet-Data Malware
SlowMist warns of a cracked TradingView Premium lure carrying wallet-data malware; no confirmed thefts or victim count yet.
- 15
tBTC bridge partially resumes as $120M Aave reserve remains frozen
Threshold partially resumed its tBTC bridge after a critical Linux kernel vulnerability, while $120M in an Aave reserve stays frozen.
- 16
Threshold Says tBTC Bridge Has Resumed Onchain, but App Remains Paused
Threshold says tBTC bridge is live onchain again but the app stays paused, while Aave's $119.9M tBTC reserve remains frozen.
- 17
Binance names new CFO days after $6.3 billion cryptocurrency hack
Binance named a new CFO days after a $6.3 billion hack; the snippet lacks detail on the hack or its impact.
- 18
FBI arrests man accused of using Steam games to drain victims' crypto wallets
FBI arrested a man accused of using Steam games to drain victims' crypto wallets, a clear example of gaming-platform wallet theft.
- 19
LNbits Urges All Server Operators to Shut Down After Attacks
LNbits is urging all server operators to shut down after attacks, with patches expected in 24 to 48 hours; a security-critical event for Lightning operators.
- 20
Web3Auth says it frontran hackers by moving $5.6 million out of exposed Keplr wallets
Web3Auth says it moved $5.6 million out of exposed Keplr wallets to front-run hackers; the account is thin and the attacker link is unclear.
- 21
Quantum Resistant BTC-transactions Without New Cryptography?
A proposal for quantum-resistant Bitcoin transactions via a hash-commit pre-transaction, presented as an idea without analysis or evaluation.
- 22
The model said yes. The chain said no. An on-chain lock for AI agents with wallets
A cybersecurity builder put AI agents with Solana devnet vaults against prompt-injection attacks; the model was fooled, but an on-chain spend policy kept the money in place.
- 23
This Bitcoin Developer’s Idea Would Make Quantum Attacks a Losing Bet
Cory Fields proposes making quantum attackers post Bitcoin collateral before touching vulnerable wallets, turning attacks into a costly bet for prepared owners.
- 24
Keplr Confirms Web3Auth Recovery Addresses After Wallet Breach
Keplr confirmed recovery addresses tied to a Web3Auth wallet breach, including a six-account Cosmos Hub batch that tokenized 2,265 staked ATOM.
- 25
Tornado Cash-Funded Wallet Builds $26 Million Bitcoin-Ether Trade
A Tornado Cash-linked wallet converted 3,100 ETH to about 6.92M USDC and opened a $26M Bitcoin long against an Ether short on Hyperliquid, a notable onchain trading trail.
- 26
Cosmos Batch Moves 2,266 Staked ATOM From Six Accounts
A batch move of 2,266 staked ATOM from six accounts drew theft reports, while Web3Auth says some apparent drains are protective recovery transfers.
- 27
Binance CFO steps down nine days after record hack; co-CEO says transition was planned six months ago
Binance's CFO Kaiser Ng is leaving nine days after a record $6.34B theft, but co-CEO Yi He says the transition was planned six months earlier.
- 28
Loopscale Reopens All Vaults After Attack-Related Freeze
Loopscale reopened all vaults, including the USDC Genesis Vault, after an attack-related freeze, with a technical post-mortem promised.
- 29
Ex-FBI agent pleads guilty to stealing $2.47 million in crypto from wallets tied to 35 investigations
Former FBI agent pleaded guilty to stealing $2.47M in crypto from seized-case wallets, with restitution and forfeiture terms.
- 30
the “EU entity” zachxbt was tracking turned out to be credit mutuel arkea, $133M taken from the bank’s own account
Follow-up on the roughly $133M exchange-account drain, traced to Credit Mutuel Arkea and largely moved from ETH to Monero; a fast-moving security story.