Price Manipulation Just Hit One in Eight Crypto Hacks in 2026
An attacker drained about $75 million from Tectonic on Cronos by inflating a token that barely traded. Price manipulation is now one in eight crypto hacks.
An attacker drained about $75 million from Tectonic on Cronos by inflating a token that barely traded. Price manipulation is now one in eight crypto hacks.
The biggest crypto hacks of 2026 skipped the code and stole the keys. Losses fell below 2025, yet one state-linked crew still took nearly half the total.
The SEC's first transfer agent overhaul since the 1980s runs 421 pages and adds blockchain reporting, yet only two onchain firms have registered so far.
Injective lost $4.9M on August 31 to a market-ID collision in binary-options settlement, then framed the near four-hour block halt as a routine upgrade.
Coinsbuy says it replenished wallets after an $8 million hack across Ethereum and Tron. On-chain data shows the refund covered only about half.
Two XRPL amendments were pulled after critical flaws. Both return in xrpld 3.3.0 next week, with three new ones and an 80% validator vote.
Minnesota's crypto kiosk ban and its bank custody law took effect on the same August 1 date, and the two statutes point in opposite directions.
A Coldcard firmware flaw drained 594 BTC. Block puts the seed search space at 32 bits, Coinkite at 72. Here is how to check your own device.
Seoul police say a fake Flare staking site took 3.4 million XRP from 71 investors. The wallets behind it moved more than twice that sum.
Ostium's post-mortem confirms $23,752,746 gone from its liquidity vault in six minutes. The smart contracts worked exactly as written.
Zcash sealed the Orchard shielded pool after a four year counterfeiting bug. Only about 5% of 3.5M ZEC has crossed into Ironwood so far.
Over 34% of bitcoin has revealed its public key on chain. What quantum computers could reach, and the two BIPs written to close the gap.
DefiLlama data shows $17 billion stolen across 518 incidents in a decade, and more than half of the losses came from stolen keys or phished humans. The…
North Korea's TraderTraitor subgroup hit Drift on April 1 and KelpDAO on April 18. One attack used a fake quant firm. The other poisoned bridge infrastructure. Different tactics, same wallet.
A single exploit on April 19 triggered one of the fastest liquidity withdrawals the sector has ever seen, and the damage is still moving through the system.
The attacker moved nearly all stolen ETH into Bitcoin in roughly a day and a half, while Arbitrum scrambled to freeze a smaller portion of the funds on its own network.