Skip to main content
Updated

Section

Security

Exploits, drains, bridge hacks, post-mortems, and the incident reports that explain what broke.

40 stories filed

stablecoins

KAST's terms draw fire as stablecoin custody clauses spark security pushback

EtherFi's CEO publicly criticized a stablecoin neobank over terms that may leave user deposits exposed in failure scenarios.

By TheChainPost Editorial Desk1 min read

In-depth

layer-1

BonkDAO loses $20 million BONK in malicious governance attack

BonkDAO's treasury lost approximately $20 million in BONK tokens via a malicious governance proposal, the DAO disclosed Monday.

TheChainPost Editorial Desk1 min

stablecoins

Summer Finance vault drained of $6M in price manipulation attack

Summer Finance lost $6 million from its USDC vault in a price manipulation attack. The hacker used deprecated tokens to distort share prices and drain funds.

TheChainPost Editorial Desk2 min

security

North Korea stole two-thirds of crypto theft losses in the first half of 2024

North Korean actors accounted for roughly two-thirds of global crypto theft in H1 2024, though the absolute value fell from a year prior, raising questions about capability or targeting shifts.

TheChainPost Editorial Desk1 min

layer-1

A $3,000 server broke Aptos's core security—and almost nobody knew

Researchers found a critical flaw in Aptos that let them break the blockchain's finality guarantee 90% of the time for hundreds of dollars in attack costs. The chain has patched it.

TheChainPost Editorial Desk2 min

stablecoins

BTSE wins OJK license, launches Indonesia exchange arm

BTSE Group has launched a licensed crypto exchange in Indonesia, gaining OJK approval to settle trades in local currency and partner with banks.

TheChainPost Editorial Desk2 min

security

IMF warns tokenized finance trades speed for fragility

The IMF says tokenized assets would settle faster but lack the safeguards that prevent shock contagion in traditional markets.

TheChainPost Editorial Desk2 min

layer-1

Solana prediction market World flagged for phishing after brand dispute with Sam Altman's eyeball-scanning firm

A Solana prediction market named World now bears a Cloudflare phishing flag after Tools for Humanity claimed it was impersonating the World Network brand and harvesting credentials.

TheChainPost Editorial Desk2 min

security

Scammers target crypto users trying to recover lost wallet access codes

Scammers are targeting users locked out of their cryptocurrency wallets, offering recovery services then stealing remaining funds when victims share their seed phrases.

TheChainPost Editorial Desk2 min

Archive

security

crypto casino fraud lacks clear guardrails as ai-powered attacks accelerate

Crypto casinos lack deposit insurance and regulatory oversight, leaving fraud victims without clear recovery paths as AI-powered attacks accelerate.

TheChainPost Editorial Desk2 min

security

manadia raises $7M for AI prediction ecosystem, plots June launch

manadia closed a $7 million funding round and plans to launch its AI prediction ecosystem globally in June, with its UMXM token already listed on major crypto exchanges.

TheChainPost Editorial Desk2 min

layer-2

Aave founder shoots down Kraken stake report, unveils automated buyback plan

Aave's founder rejected a reported Kraken acquisition pitch, citing the protocol's governance structure where revenue flows to token holders, not the company.

TheChainPost Editorial Desk2 min

security

83 hacks in Q2 2026: why crypto's security crisis is accelerating

Q2 2026 recorded 83 crypto hack incidents and $775M in stolen funds, the highest quarterly total on record. Two mega-breaches accounted for 74% of losses.

TheChainPost Editorial Desk2 min

security

police disrupt three major infostealers and freeze $47M in stolen crypto

Europol disrupted three infostealer malware families and froze €41 million in cryptocurrency in a coordinated international enforcement action.

TheChainPost Editorial Desk2 min

security

OKX founder accuses Binance of exploiting EU licensing as regulatory arbitrage

OKX founder Star Xu alleges Binance is pursuing an EU crypto license as regulatory arbitrage to sidestep stricter rules in other markets, fueling tension between the two largest exchanges.

TheChainPost Editorial Desk2 min

security

Memecoin bounties are turning online dares into real-world harm

Memecoin platforms are funding real-world stunts, creating liability and safety questions that neither platforms nor issuers have addressed.

TheChainPost Editorial Desk2 min

stablecoins

MyTonWallet becomes My Wallet, spreads to 11 chains as stablecoin volume soars

MyTonWallet rebrands to My Wallet and launches support for 11 blockchains with unified portfolio tracking, gasless stablecoin transfers, and an AI agent.

TheChainPost Editorial Desk2 min

layer-1

Apple's threat to Sparrow dev puts macOS Bitcoin wallet at risk

Apple threatened to revoke Sparrow wallet developer Craig Raw's account after he posted a warning app about fake Sparrow clones, risking his macOS code-signing rights.

TheChainPost Editorial Desk2 min

stablecoins

Main Street stablecoin msUSD crashes to $0.27 after proof-of-reserves vendor exits

Main Street Finance's msUSD stablecoin depegged to $0.27 after its verification firm Accountable terminated its contract, triggering withdrawals that forced Altura to shut down its yield vault.

TheChainPost Editorial Desk2 min

layer-1

Nostr lets you own your social graph. The security cost is steep.

Nostr lets you take your social identity and followers between apps using Bitcoin cryptography, but losing your private key means losing your identity permanently with no recovery option.

TheChainPost Editorial Desk3 min

security

Microsoft uncovers USB malware targeting crypto wallets through clipboard hijacking

Microsoft warns of USB malware that steals crypto wallet addresses and seed phrases, then hijacks clipboard content to redirect payments to attackers.

TheChainPost Editorial Desk2 min

layer-1

Taiko warns users to pull bridge funds after $1.7M theft through proof verification exploit

Taiko disclosed a security breach in its proof verification process that stole more than $1.7 million, and is urging users to withdraw bridge funds.

TheChainPost Editorial Desk2 min

stablecoins

MEV bot JaredFromSubway.eth drained of $7.5M in token approvals trap

A prolific MEV sandwich bot lost $7.5 million after falling for a honeypot that granted attackers token approvals over 97 blocks.

TheChainPost Editorial Desk2 min

layer-1

Taiko shuts layer 2 after attacker forges $1.7M in bridge withdrawals

Taiko halted its layer 2 network after a $1.7 million bridge exploit involving forged withdrawal proofs, and its token fell 10%.

TheChainPost Editorial Desk1 min

security

G7 names North Korea as crypto theft threat in global security statement

G7 leaders formally linked North Korea's crypto thefts to global security threats, placing digital asset crime alongside nuclear weapons concerns for the first time.

TheChainPost Editorial Desk2 min

stablecoins

Ethereum sandwich bot loses $7.5M to its own playbook

A major Ethereum sandwich bot lost $7.5 million after approving fake trading routes, exposing how approval-based exploits bypass key security.

TheChainPost Editorial Desk2 min

stablecoins

Crypto CEOs are paying more for personal security as physical attacks on holders climb

Coinbase’s CEO security bill reportedly jumped to $7.6M in 2025 as physical attacks on crypto holders rose 75%, with CertiK data showing 72 incidents.

TheChainPost Editorial Desk3 min

security

UK sanctions HTX for alleged support to Russia sanctions evasion

UK authorities sanction HTX, formerly Huobi Global, as part of a crackdown on companies allegedly exploited by Russia to circumvent sanctions.

TheChainPost Editorial Desk1 min

layer-1

Zcash ZEC drops 45% after Orchard counterfeit bug disclosure, patch completed by June 2

ZEC dropped about 45% after Zooko Wilcox disclosed an Orchard shielded-pool bug that could have enabled undetectable counterfeit minting, with no proof of prior exploitation.

TheChainPost Editorial Desk5 min

stablecoins

Short-term Bitcoin holders hit record losses as BTC stays oversold since 2018

Checkonchain data cited by Scott Melker shows short-term holders selling at record losses while BTC stays oversold, with macro and IPO chatter in the mix.

TheChainPost Editorial Desk5 min

security

Arthur Hayes faces backlash after reportedly selling WLD and earlier altcoin exits

Arthur Hayes’ WLD sell decision after bullish SpaceX-linked comments has reignited accusations of shilling for exit liquidity, with ZEC, HYPE, and NEAR exits cited too.

TheChainPost Editorial Desk3 min

security

Arthur Hayes exits Zcash position after Orchard “counterfeiting” disclosure

Arthur Hayes says Maelstrom sold all Zcash after Orchard vulnerability disclosures left no cryptographic proof that counterfeiting never happened.

TheChainPost Editorial Desk4 min

stablecoins

Ethereum at $1.5K: exhaustion signals, ETH/BTC weakness, and big-wallet re-accumulation

ETH slid to a 14-month low around $1,500, but TD Sequential and on-chain buying from whales and a Pando Rings attacker suggest downside may be tiring.

TheChainPost Editorial Desk4 min

layer-1

Ether futures sit mid-range as $1686-$1691 holds the key

Ether futures hover around $1666-$1668. The analysis flags $1686-$1691 for repair and $1658 for a potential downside continuation.

TheChainPost Editorial Desk3 min

layer-1

Pump.fun GO launches “pay anyone to do anything” bounties. Critics fear a repeat of 2024 livestream harm

Pump.fun GO lets users create and complete “ANY task” bounties with unlimited rewards. Critics warn it could incentivize real-world harm like 2024 livestreams.

TheChainPost Editorial Desk4 min

security

North Korean hackers mix deepfake calls with stolen Telegram accounts and ClickFix malware

North Korean hackers used stolen Telegram accounts and fake Zoom calls, including ClickFix attacks, to deploy infostealer malware against crypto firms.

TheChainPost Editorial Desk2 min

security

Zcash sees sharp ZEC drop after Orchard privacy pool vulnerability scare

Zcash’s Orchard privacy pool vulnerability talk coincided with a sharp ZEC drop, Coinpedia reports, citing Santiment whale and retail bearish turns.

TheChainPost Editorial Desk2 min

security

Binance donates $250,000 to Ebola response in Uganda and DR Congo

Binance will split a $250,000 donation between Uganda Red Cross and MSF for frontline Bundibugyo Ebola response.

TheChainPost Editorial Desk3 min