Do Son A suspected Binance hot wallet breach prompted emergency investigations as issuers froze over $2.3 billion in stablecoins amid massive token outflows.
Ethereum
Elastic uncovers PHANTOMPULSE: A novel RAT abusing Obsidian plugins and blockchain C2. Stay safe from this AI-assisted campaign targeting crypto firms.
ZachXBT unmasks an alleged $40M theft of U.S. government crypto in Jan 2026. The suspect? The son of the USMS contractor hired to protect it.
ASEC warns of EtherRAT, a multi-stage crypto-stealer exploiting the React2Shell flaw. It uses Node.js and Ethereum for stealthy C2. Patch now!
A sophisticated new malware, EtherRAT, leverages Ethereum smart contracts for covert C2 (EtherHiding) 48 hours after the React2Shell (CVSS 10.0) flaw. Analysis shows ties to North Korean APTs.
Malicious Rust crates, downloaded 8,400+ times, were found to be typosquatting legitimate libraries to scan source code and steal Solana and Ethereum private keys.
A new report reveals a supply chain attack on Ethereum. Four malicious npm packages impersonating Flashbots were used to steal private keys and mnemonic seeds from developers.
A new report reveals that malicious npm packages are using Ethereum smart contracts as resilient command-and-control servers, a new tactic in open-source attacks.
An Ethereum developer lost funds to a fake AI extension that stole his private key, highlighting how even experts can fall victim to sophisticated phishing attacks.
SentinelLABS exposes a crypto scam using AI-generated YouTube videos to trick users into deploying malicious smart contracts, siphoning off hundreds of thousands in ETH.
PayPal introduces "Pay with Crypto," allowing US merchants to accept over 100 cryptocurrencies, with funds converting to fiat or PYUSD at low transaction fees (0.99% for first year).PayPal, Crypto Payments, Cryptocurrency, Merchants, Bitcoin, Ethereum, PYUSD, Stablecoin, Transaction Fees, US
ReversingLabs exposes a supply chain compromise of the VS Code ETHcode extension via two lines of malicious code in a GitHub PR, leading to malware deployment.
Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.
German authorities shut down the crypto-swapping platform eXch, a hub for laundering illicit funds, and seized €34 million in cryptocurrencies after tracing stolen Bybit funds.
Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.
During the blockchain summit held at the Kasbah Tamadot Hotel in Morocco, Forbes reporter Michael Del Castillo...