A Single Validator Drained $10.8M From THORChain Across Four Chains. It Took Days to Set Up.
The attacker funded the node through Monero and Hyperliquid weeks before the theft. Chainalysis mapped the entire trail. THORChain paused all trading.
The attacker funded the node through Monero and Hyperliquid weeks before the theft. Chainalysis mapped the entire trail. THORChain paused all trading.
A compromised private key let an attacker automate withdrawals from Polymarket's UMA CTF Adapter on Polygon. ZachXBT flagged it first. Losses passed $700,000 before the team responded. Polymarket says user funds are safe. The attacker has already split the proceeds across 15 wallets.
A researcher says over 40 DeFi platforms have employed DPRK state-linked developers. Their seven years of blockchain experience is, as she notes, not a lie. The Drift Protocol exploit was not a code bug. It was a six-month intelligence operation conducted by a North Korean state-affiliated group that attended conferences, deposited real capital, and waited.
StablR's EURR and USDR lost their pegs on Sunday after an attacker compromised a single private key in a 1-of-3 multisig, minted 8.35 million unbacked USDR and 4.5 million EURR, and dumped them for 1,115 ETH. The stablecoin issuer holds a Malta EMI license and operates under MiCA. Regulation did not stop a key management failure.
One of the world's largest Bitcoin ATM operators filed an SEC Form 8-K on April 8, 2026, disclosing that an unauthorized party accessed its corporate IT systems and drained 50.903 BTC from settlement accounts. Customer platforms and user data were not affected.
A criminal group is threatening to release videos of internal systems unless Kraken pays up. The exchange says no breach occurred and funds were never at risk. Kraken has identified and removed the insiders involved in both incidents, notified affected users and is cooperating with law enforcement.
North Korean group UNC4736 stole $270 million from Drift Protocol on April 1, converting part of it into USDC via Circle's own bridge. Circle's formal response clarifies when and why it can freeze assets — and calls for legislative action.
Investors allege Circle let $230 million in stolen USDC cross from Solana to Ethereum without intervention. The lawsuit lands as Tether steps in with a $127.5 million recovery package.
A forged message bypassed the Polkadot token contract's admin controls on Ethereum, allowing unlimited minting. Hyperbridge paused operations after the attack — notable because the protocol markets itself as a "full node security" bridge.
The $150 million recovery plan will fund user reimbursements as Drift relaunches with USDt as its settlement asset. Circle faced heavy criticism for not freezing $232 million in USDC that the North Korea-linked attacker moved through its own bridge.
A 9-of-12 council vote moved 30,766 ETH tied to the KelpDAO exploit into a frozen wallet. It recovered funds, and it forced an uncomfortable question about what decentralization actually means on Layer 2.
Choosing the right crypto exchange is no longer about brand recognition. Security architecture, fee transparency, and regulatory compliance now separate platforms worth trusting from those worth avoiding.