Security Incidents

According to COINOTAG, an attacker drained $1.01 million in USDC from a Tranche Vault on the Avalanche network on the evening of October 27 (ET) using a flash loan. The attacker borrowed funds through a flash loan, minted an inflated batch of tranche shares, and converted those shares into the

According to COINOTAG, Altura vault investors alleged on October 28 that approximately $32 million has not been returned to them four months after the protocol began winding down operations. Investors claim the company's records used to explain the

Google is preparing to launch a Multi-Party Computation (MPC) service for institutional digital asset custody, currently in private preview with major financial institutions testing the platform for Ethereum and Solana security, with commercial availability expected in early 2027. The development fo

According to CERT/CC, a vulnerability (VU701544) in Fireblocks' MPC library was disclosed on October 26. The flaw affects the implementation of BIP32 hardened key derivation, potentially weakening protections that isolate cryptographic key shares if a descendant signer share and chain code are

GMO Internet refused a $50 million cryptocurrency ransom after attackers breached its Onamae.com Desktop Cloud service, potentially exposing 26,739 server environments between October 19 and October 21. The attackers initially demanded approximately $50 million, or roughly ¥8 billion, with payment r

According to researchers at Cornell Tech and Yale, nine of ten frontier AI models were able to bypass Circle agent wallet spending caps at least once, according to COINOTAG reporting. The stablecoin issuer's current countermeasure is limited to a warning line in its

According to Nada News, GMO Group's cloud desktop service suffered unauthorized access on October 28, affecting 26,739 servers. Hackers demanded BTC and ETH as ransom, initially requesting $50 million and later lowering it to $1 million. GMO Group's CEO Masatoshi Kumagai refused to pay, and the

According to Foresight News, TermiX, an agent commerce layer backed by YZi Labs, has discovered that fraudsters are impersonating team members to solicit investments from community members. TermiX has not conducted any community fundraising activities. The team urged users to remain vigilant and ver

According to chain sleuth Specter, Bloom drainer transferred nearly $1 million using 2,152 distinct addresses with sophisticated automation, including repeated splitting and consolidation across chains. The 2,152 addresses comprised 1,326 Solana addresses, 822 EVM addresses, and 5 Zcash addresses. A

Datavault AI disclosed on October 26 that it cannot access Bitcoin associated with a $150 million investment agreement, triggering a 49.55% stock decline on October 27 to approximately $0.067 per share. The company revealed unresolved withdrawal issues involving 1,309.04 BTC credited to its

On October 26, Datavault AI (NASDAQ: DVLT) disclosed that it was unable to access 1,309.04 Bitcoin from a $150 million investment agreement with Scilex Holding Company, causing shares to fall 49.55% to $0.067 on October 27. The Bitcoin was credited to Datavault's account with cryptocurrency

According to ChainCatcher, South Korean police launched a preliminary investigation into hacking incidents targeting securities firms and crypto exchanges on October 28. The attacks compromised KB Kookmin Bank and 15 other financial institutions, with approximately 100,000 personal records

According to Scam Sniffer, a user suffered an address poisoning attack today, resulting in approximately $50,000 in asset losses. The incident was monitored and reported by the blockchain security platform.

According to Initia Foundation, following the October 23 security incident, the foundation has approved funding to restore full 1:1 asset backing for affected assets upon chain resumption. The approved reserves will cover shortfalls in iUSD collateral, totaling up to 1.08 million USDC, 105 ETH,

According to COINOTAG, on Tuesday (October 28) Datavault AI disclosed that it has been unable to withdraw 1,309 Bitcoin held at the Biconomy exchange since June and will restate its financial results. DVLT stock closed at $0.067, down 49.55%, with approximately 244 million shares