Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 5 of 28- 1
Keplr Says Recovery Effort May Explain Empty Wallet Balances
Keplr says users who signed up via Google or Apple should stop deposits and move liquid assets, as a recovery effort may explain empty balances.
- 2
Gnosis Pay breach exposes card numbers, home addresses and linked crypto wallets
Gnosis Pay breach exposed card numbers, home addresses and linked crypto wallets, raising targeted-scam risk for users.
- 3
Keplr Pauses Google and Apple Login After Unauthorized Transaction Reports
Keplr paused Google and Apple social login after reports of unauthorized transactions. Recovery-phrase and hardware-wallet users are unaffected so far; social-login users should stop funding those accounts.
- 4
Gnosis Pay breach exposes card details, personal data and crypto wallet information
Gnosis Pay disclosed a breach exposing card details and personal data, though it says customer funds remained safe.
- 5
Binance hack is ‘cyber war,’ TRM Labs executive says
TRM Labs' Ari Redbord calls for offensive government action against North Korean hackers after the record $6.3B Binance theft.
- 6
Gnosis Pay data breach exposes customer info; funds unaffected
Gnosis Pay disclosed a data breach of legacy debit card system customer info on Nov. 3; funds were not affected.
- 7
Built an MCP auditor with Claude Code — here are the sweep numbers
A builder used Claude Code to write a CLI that audits 277 public MCP servers for auth gaps; 55 reachable servers accepted tool listing with no credential, though this is a security scan, not a crypto task.
- 8
Elliptic says Binance hackers swapped stolen tokens for $124M in bitcoin, exchange plans more withdrawal reopenings
Elliptic says Binance hackers swapped stolen tokens for $124M in bitcoin, with little cashed out and $2.85 billion still frozen.
- 9
US Sanctions 45 More Targets Tied to Alleged Crypto Scam Empire Prince Group
OFAC sanctioned 45 more targets tied to Prince Group, accused of helping executives hide assets and evade earlier sanctions.
- 10
Threshold Sets tBTC Reconnection Target as Week-Long Pause Continues
Threshold paused tBTC redemptions for a week and will resume once enough operators return; Aave's $123.2M tBTC reserve stays frozen.
- 11
Chainalysis Starts Reopening Compliance Tools Behind IP Allowlists in Sixth Breach Update
Chainalysis is reopening compliance tools behind IP allowlists after a breach that exposed all users' password hashes.
- 12
Former FBI Agent Pleads Guilty to Stealing $2.47 Million in Crypto From Investigations
A former FBI agent pleaded guilty to stealing $2.47M in crypto using wallet credentials from 35 seized-asset investigations.
- 13
Crypto Card Provider Gnosis Pay Says Hackers Accessed Customer Data
Gnosis Pay says hackers accessed customer data on its legacy consumer card system; funds and enterprise platform were unaffected.
- 14
Binance Hackers Swap About $50 Million of Stolen XRP Mostly Into Bitcoin, Elliptic Says
Elliptic traced about 42 million stolen Binance XRP swapped mostly into bitcoin via THORChain, about 1,650 BTC in total.
- 15
Rotki Founder Says Gnosis Pay Exposed His Address, Card and Wallet Details
Rotki founder says a Gnosis Pay incident exposed his address, card and wallet details; consumer-card system affected, enterprise unaffected.
- 16
South Korean Crypto Exchange Gopax Suspends Withdrawals and Trading After Hacking Threat
Gopax halted withdrawals and trading after a hacking-threat email and is moving assets to cold wallets; no loss reported so far.
- 17
$3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic
Elliptic reports $3.1B in stolen Binance crypto is largely unmoved, with attackers using 20,000+ wallets across 16 blockchains.
- 18
Ethereum devs won’t fork Glamsterdam on Hoodi until smart contract risks resolved
Ethereum developers will not fork Glamsterdam on Hoodi until eight smart contract invariants tied to EIP-8037 and EIP-8038 are resolved.
- 19
Binance hackers had 8 weeks of access before $6.3B exploit, Security Alliance estimates
Security Alliance estimates Binance hackers had eight weeks of access before the $6.3B exploit, pointing to multi-stage intrusion patterns also seen in other heists.
- 20
Binance Hackers Swap $50 Million in XRP, Mostly Into Bitcoin, Elliptic Says
Elliptic traces about $50M of XRP stolen in the Binance hack being swapped mostly into bitcoin, with the main ETH and BTC holdings untouched.
- 21
Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto From 35 Investigations
A former FBI agent pleaded guilty to stealing $2.5M in crypto from 35 investigations by draining wallets with FBI-collected credentials.
- 22
GOPAX halts crypto trading, withdrawals to move all assets to cold storage
South Korea's GOPAX halted trading, deposits and standard withdrawals after a hacking threat and is moving all assets to cold storage.
- 23
Binance’s $6.3B hack leaves questions over hot wallet safeguards
Onchain records show repeated drains from Binance's hot wallets, but experts say they cannot verify Binance's internal signing controls or transaction limits behind the $6.3B hack.
- 24
Ethereum Foundation Calls for Contract Checks After Glamsterdam Security Findings
Ethereum Foundation urges contract checks after Glamsterdam security findings; the Hoodi testnet upgrade stays paused with no mainnet date.
- 25
Bitcoin Core 32.1, Lightning security fixes, and a question for node operators
Security checklist prompt after Bitcoin Core 32.1 and Lightning fixes, urging operators to harden RPC and wallet setups beyond software updates.
- 26
iPhone Wallet Theft Probe Traces $4.06 Million in TRON Drains
Trust Wallet says DarkSword and Coruna exploit older iOS versions to drain wallets, with $4.06M in TRON drains traced.
- 27
Chainalysis says breach exposed password hashes and live tokens
Chainalysis revised its breach disclosure: password hashes and live tokens were exposed, not just non-sensitive customer data.
- 28
Crypto exchanges tout cold storage ratios after Binance attack
Exchanges are publicizing cold storage ratios after a Binance attack, with Coinbase citing over 99% offline and Gate 88.26%.
- 29
Bitcoin developer proposes ‘landmines’ to make quantum thieves lose their own BTC
A Bitcoin developer proposes collateral-based 'landmines' to deter quantum thieves from moving vulnerable coins.
- 30
Loopscale Partly Restores Loan Functions, Keeps Vault Withdrawals Frozen
Loopscale restores some lending functions while vault withdrawals stay frozen after an attack, with two attack paths detailed.