Tag: Hacks
Attackers exploited a March 2021 firmware bug in Coldcard wallets to drain approximately 1,816 BTC (~$116 million) across multiple waves starting July 30, 2026.
The vulnerability cut effective entropy to as low as 40 bits on older models, enabling remote brute-force of seeds without physical access.
Coinkite released emergency firmware fixes, but existing seeds remain vulnerable and require full migration to new wallets.
The incident ranks...
Coldcard Hardware Wallet Losses Approach $130 Million as Galaxy Flags Ongoing Multi-Attacker Exploit
Written on .
Galaxy Research has high confidence that 1,596 BTC (over $100 million) was stolen from roughly 7,300 addresses across three confirmed attack waves plus 14 smaller incidents.
Including a suspected fourth wave would raise the total to about 2,055 BTC, or roughly $130 million.
At least 15 separate attackers are now exploiting the vulnerability; 90% of stolen coins have not moved.
Coinkite has released emergency firmware updates and urged users...
Taiko Halts Ethereum L2 Block Production After $1.7 Million Bridge Exploit
Written on .
Taiko confirmed compromise of its chain state verification mechanism, rendering bridge security assumptions unreliable.
Attacker drained approximately $1.7 million from the ERC20 Vault on Ethereum via forged proofs.
Project halted all block production and urged users to withdraw funds from all bridges immediately.
TAIKO token dived around 10% following the incident.
Ethereum Layer 2 scaling solution Taiko has taken its...
Humanity Protocol Hit by $32M Private Key Exploit as H Token Crashes
Written on .
Around 17 wallets interacting with Humanity Protocol were drained for over $32 million in an ongoing exploit.
Founder Terence Kwok confirmed a private key compromise of a Humanity Foundation member.
The H token crashed up to 90%, trading near $0.13 after selling pressure from stolen and minted tokens.
The project urged users to avoid bridges and liquidity pools while investigations continue.
Humanity Protocol, a...
Potential Privacy Token Debacle Rocks Secretive World
Written on .
The cryptocurrency sector has long thrived on the promise of privacy, but the recent revelation of a critical bug in Zcash has shaken confidence in the very foundations of the privacy token market. The vulnerability, disclosed by developers after being discovered on May 29 by an AI-assisted security auditor, could have allowed rampant counterfeiting of ZEC tokens for nearly four years—without detection.
While Shielded Labs, the nonprofit...



