Security Incidents

According to Foresight News, Transit's recent hack originated from a legacy vulnerability in an old Tron smart contract version deployed in 2022, according to Slowmist founder Yu Xin. Although the vulnerable contract was discontinued in 2022, attackers recently exploited it. Transit's current live s

According to Bubblemaps' analysis reported by Foresight News, an address holding 72% of TCLAW token supply concealed its identity, raising concerns about suspicious activity. Prior to launch, wallet 0x31d7 funded approximately 70 wallets via bridge transfers; these wallets had no prior activity

According to PeckShield, on May 13, multi-chain aggregator Transit Finance suffered a hacking attack resulting in approximately $1.88 million in losses.

A well-known education platform, Canvas, was recently hit by a hacker attack, causing operations to come to a standstill at thousands of colleges and universities worldwide. Its parent company, Instructure, in order to prevent up to 3.5 TB of students’ and teachers’ data from being exposed, has announced and confirmed that it reached an agreement with the hackers and paid a ransom. The incident directly affected students’ online exams, and once again sparked heated debate in the market over whet

According to cybersecurity firm PeckShield, the hacker who exploited liquidity provider TrustedVolumes for $6.7 million on May 7 has begun actively laundering stolen funds. The attacker has laundered $278,000 so far, depositing 10.2 ETH ($23,600) to TornadoCash and routing 110 ETH ($250,000) via

According to GoPlus, decentralized shipping project Aurellion Labs was exploited recently due to an initialization vulnerability in its Diamond proxy contract on Arbitrum, resulting in a loss of $456,000. The project has temporarily suspended related

According to Kelp DAO, on Tuesday the protocol announced it will resume rsETH operations in the coming days following the April 18 exploit that resulted in a $292 million loss. Kelp will progressively refill 117,132 rsETH—the amount stolen—from its Recovery Safe into the LayerZero OFT adapter on

According to CoinTelegraph’s May 13 report, the Ethereum Foundation announced on Tuesday that the Clear Signing (plain-text signing) security feature released by the Ethereum community has been officially integrated into crypto platforms including Ledger, Trezor, MetaMask, Keycard, WalletConnect, Argot, and Fireblocks. Ethereum Foundation statement and background on blind-signing attacks In a Tuesday statement, the Ethereum Foundation said: “Approving transactions is supposed to be the last line

According to Bits.media, reported on May 13, multiple Telegram usernames and virtual vanity numbers were sold on the Fragment auction platform at record-high TON token prices; within a few hours after the trades, the attacker launched a forged USDT attack on users of the TON blockchain NFT trading platform Getgems. A Chinese collector reportedly lost more than $800k in a virtual-number code. Fragment Platform Vanity Number Deal Records According to Bits.media, the major completed deals on the Fr

According to Bits.media, Telegram usernames and premium numbers sold for record-high prices in TON tokens on May 13, with @danbao fetching 1.58 million TON (approximately $2.1 million) from an anonymous buyer last weekend, marking the platform's highest transaction. Other premium numbers

According to ChainCatcher, Aave and Kelp have completed the first phase of their rsETH recovery plan, destroying attacker-held rsETH on Arbitrum. Over the coming days, the parties will gradually replenish funds to LayerZero's OFT adapter and phase in the restart of rsETH operations, with 117,132 rsE

According to Bitcoin developer Jameson Lopp, roughly 200,000 unreachable node addresses have been flooding Bitcoin's peer-to-peer network since April 9, 2026, raising concerns about a potential Sybil-style attack. The anomaly caused ADDR messages—the protocol nodes use to share peer addresses—to

The U.S. Department of Justice on May 12 filed federal charges against three Tennessee men: Elijah Armstrong, Nino Chindavanh, and Jayden Rucker. The three allegedly crossed state lines into California from November to December 2025, disguised themselves as delivery workers to break into the homes of cryptocurrency holders, then after restricting the victims’ movements with firearms, zip ties, and tape, forced them to transfer crypto assets, with the single largest amount reaching $6.5 million.I

According to Slow Mist, decentralized shipping project Aurellion suffered an attack today (May 12), with attackers gaining control of the Diamond contract and draining 455,003 USDC from multiple authorized victim

According to blockchain security firm SlowMist, its threat monitoring system MistEye detected a sophisticated npm worm named 'Mini Shai-Hulud' spreading through developer projects including TanStack, UiPath, and DraftLab. The malware uses compromised GitHub credentials to publish packages

According to ChainCatcher, Goliath Ventures ex-CEO Christopher Delgado recently apologized to investors after being charged by U.S. prosecutors with operating a $328 million cryptocurrency Ponzi scheme. Delgado stated he betrayed investor trust and voluntarily returned to face fraud and money

According to GoPlus, two private key leaks occurred in the past 36 hours, resulting in combined losses of $238,000. The address 0xUnihax0r lost $200,000 and had previously uploaded trading bots and Telegram access. The second compromised address is linked to a larger private key exposure event

According to BeInCrypto, on May 11, Keith Gill’s verified X account “Roaring Kitty” has 1.6 million followers, woke up after 16 months of silence, and posted a Solana Pump.fun contract address and a short video. Because the post style was vastly different from Gill’s usual market commentary, there were widespread suspicions that the account had been compromised. Roaring Kitty’s X account returns: post details According to reports, posts on the Roaring Kitty X account pointed to a Solana meme coi