31 articles tagged with #cryptocurrency-theft. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
North Korea has stolen over $500 million from DeFi protocols Drift and Kelp in successive exploits within two weeks, signaling a coordinated campaign rather than isolated incidents. The attacks reflect the sanctioned state's strategic pivot toward cryptocurrency theft as a revenue mechanism, raising critical security concerns across the DeFi ecosystem.
Kelp DAO suffered a $292 million exploit on its LayerZero bridge, with attackers draining 116,500 rsETH (18% of circulating supply) and stranding wrapped ether across 20 blockchain networks. The incident triggered emergency freezes on major lending protocols including Aave, SparkLend, Fluid, and Upshift.
SecondFi experienced a significant security breach on Cardano that resulted in the loss of $2.4 million in ADA tokens. The platform targets a two-week recovery timeline while the incident highlights systemic vulnerabilities in cryptocurrency wallet security infrastructure.
SecondFi experienced a $2.4 million loss after three separate attacks exploited vulnerabilities in its wallet generation software on Cardano. The team managed to secure an additional 129 million ADA before attackers could access these funds, partially mitigating what could have been a significantly larger breach.
Secret Network's Axelar bridge suffered a $4.67 million exploit through an infinite-mint vulnerability that remained undetected for seven days. Approximately $770,000 in stolen funds remain in the attacker's wallet, with Axelar declining Secret Network's request to freeze the assets.
Researchers discovered malicious Wallpaper Engine downloads on Steam Workshop injecting infostealers, backdoors, and account-hijacking malware into gaming systems. The threat targets cryptocurrency holders who use Steam, exploiting the platform's trusted distribution channel to compromise digital assets and personal accounts.
The article examines trust and security in cryptocurrency exchanges following major industry collapses and ongoing theft incidents. With $3.4 billion in cryptocurrency theft reported in February 2025 alone, the industry faces persistent challenges in establishing reliable platforms despite lessons learned from the 2022 FTX collapse.
Microsoft has identified a USB-distributed clipboard-hijacking malware targeting Bitcoin and Ethereum wallet addresses on Windows systems since February 2026. The malware intercepts and replaces cryptocurrency wallet addresses copied to the clipboard, potentially redirecting transactions to attacker-controlled addresses.
A Chainalysis report reveals that at least $36.7 million has been stolen from cryptocurrency protocols with unverified smart contracts over the last six months. Unverified smart contracts—whose source code is not publicly visible on blockchain explorers—have become a primary target for attackers exploiting hidden vulnerabilities that escape community scrutiny.
Cyble has identified OverlayPhantom, a new Android banking trojan targeting over 180 banking, financial, and cryptocurrency applications across 10 countries. The malware uses fake overlay screens to capture PINs and credentials, enabling account takeover through a two-stage infection chain distributed via malicious URLs impersonating legitimate apps.
North Korean threat actors executed a coordinated six-month operation targeting DeFi protocols, stealing $285M from Drift Protocol and $292M from KelpDAO for a combined $577M haul. The attacks expose critical vulnerabilities in DeFi security infrastructure and raise urgent questions about protocol resilience against sophisticated state-sponsored threats.
Polymarket, a popular prediction market platform, has suffered a security breach resulting in approximately $700K in cryptocurrency theft through a private key compromise. The incident highlights critical security vulnerabilities in decentralized platforms and raises concerns about asset custody practices in crypto applications.
A liquidity provider on 1inch called TrustedVolumes suffered an ongoing exploit draining nearly $6 million, perpetrated by the same attacker who exploited 1inch Fusion V1 in March 2025 for approximately $5 million. The recurring attacks highlight persistent vulnerabilities in 1inch's infrastructure.
April 2024 recorded $600 million in cryptocurrency thefts across hacking incidents, marking a concerning peak in digital asset security breaches. The discussion highlights AI's dual role as both a cybersecurity threat and defensive tool, with industry experts advocating for a shift toward offensive security strategies to combat increasingly sophisticated attacks.
A $280 million theft affecting Ethereum and Arbitrum DeFi protocols has exposed critical vulnerabilities in decentralized finance infrastructure, triggering concerns about systemic risks across major blockchain ecosystems. The incident underscores the need for comprehensive security audits and risk management frameworks as DeFi platforms continue to scale.
Rhea Finance suffered a $7.6 million exploit through a sophisticated attack involving fake token contracts and manipulated liquidity pools that deceived the protocol's Oracle mechanisms. The attackers extracted funds by creating artificial liquidity traps, prompting Rhea Finance to pause all contracts while investigating the incident with security partners.
UC researchers identified 26 malicious LLM routers designed to steal cryptocurrency credentials from blockchain developers. This discovery reveals a sophisticated attack vector that exploits the growing integration of AI tools in development workflows, posing direct security risks to the crypto ecosystem.
American musician Garrett Dutton (G. Love) lost 5.9 BTC after unknowingly installing a counterfeit Ledger application from the App Store and entering his seed phrase. This incident highlights a critical vulnerability in app store security and demonstrates how even established platforms fail to prevent sophisticated impersonation attacks targeting cryptocurrency users.
Bitcoin developer Hunter Beast has proposed the Hourglass V2 solution to address the risk of Satoshi Nakamoto's Bitcoin holdings being stolen through quantum computing attacks. The proposal aims to mitigate potential sell pressure on Bitcoin markets if these early coins are compromised and liquidated.
Game developer Sillytuna lost $24 million in cryptocurrency during a violent physical robbery in the UK, contradicting initial reports that described it as an 'address poisoning' cyberattack. The victim has appealed for help recovering the stolen funds after what appears to be a 'wrench attack' - a physical assault to force access to crypto wallets.
South Korea's tax service accidentally exposed wallet seed phrases in a public press release, leading to the theft of Ethereum tokens from seized wallets. The stolen funds were eventually returned to the original wallets.
A victim identified as Rick S. lost $10,000 in cryptocurrency after responding to a text message offering earnings through a fake job opportunity involving app uploads. The scam exemplifies the growing intersection of employment fraud and cryptocurrency theft, where criminals exploit job-seeking behavior to facilitate crypto transfers.
ZachXBT's investigation concludes that Humanity Protocol's $31 million exploit resulted from a genuine private key compromise rather than insider theft. This distinction is significant for understanding the security vulnerabilities that enabled the attack and has implications for how similar breaches are assessed within the crypto ecosystem.
Renegade protocol recovered $190,000 after a hacker voluntarily returned approximately 90% of stolen funds, underscoring persistent security vulnerabilities in DeFi platforms. The incident emphasizes the urgent need for comprehensive security audits and robust smart contract oversight across the decentralized finance ecosystem.
Marlon Ferro, known online as 'GothFerrari,' received a 78-month prison sentence for his involvement in a nationwide social engineering conspiracy that stole $250 million in cryptocurrency. The case highlights the persistent threat of organized crime targeting crypto users through manipulation rather than technical exploits.
