Crypto Hacks and Security

This page collects every CryptoTicker.io report on attacks and fraud in the crypto market: hacked exchanges, exploits in DeFi protocols and bridges, stolen NFTs, wallet drainers, phishing, abused token approvals and rug pulls. The newest cases are at the top.

A hack is rarely over after one day. Funds get moved, exchanges freeze accounts, projects announce reimbursements. We therefore keep ongoing cases up to date with dated updates, the latest one always at the top of the article.

How to protect yourself

  • Revoke approvals. Most wallet drainers and many protocol exploits reach your funds through approvals you once granted to a contract. Check them regularly, for example with revoke.cash or in the approvals section of your block explorer, and revoke what you no longer need.
  • A hardware wallet protects your key, not your approvals. It stops anyone from stealing your private key. It does not stop an approval you signed yourself if the contract behind it is exploited later. Only sign what you can read and understand on the device.
  • Check your exchange balance. After an exchange hack, what matters is whether the exchange covers customer losses and whether withdrawals work. Keep only what you need for trading on an exchange and look for a MiCA licence.
  • Never enter your seed phrase. No support agent, airdrop page or wallet update will ask for it. Links from direct messages and sponsored search results are a common way onto phishing sites.

All reports

Ongoing cases are kept up to date with dated updates.

Zwei Hände halten ein unbeschriftetes dunkles Verwahrungsgerät aus gebürstetem Metall mit kleinem schwarzem Display

Hot Wallet or Cold Wallet: the Private Key Decides How Safe Your Coins Are

Hot wallet or cold wallet: the difference rests solely on whether the private key is online. What separates the two forms, where the limits of hardware lie and why moving to your own device triggers no tax.

2 days ago

Dunkler Leitstand in einem Rechenzentrum mit einer Monitorwand und einem einzelnen roten Warnlicht über der leeren Bedienkonsole

$1.26 Billion in Three Months: Crypto Hacks Hit Their 2026 High

The security firm CertiK counts around $1.26 billion in damage from 247 incidents for the third quarter of 2026. September was the worst month of the year with 99 cases, and this is the background and what it means for your custody.

2 days ago

Aufgebrochenes Vorhangschloss an einer Stahltür in einem dunklen Technikgang, der Bügel ist durchtrennt, die Tür steht einen Spalt offen

NEAR Intents halts withdrawals after a $3.8 million exploit: here are the reasons

NEAR Intents confirms an exploit of more than $3.8 million and holds deposits and withdrawals on eleven networks. Reimbursement is promised, a date for it is not.

2 days ago

Rot-weißes Absperrband quer durch einen abgedunkelten Servergang, darüber eine einzelne rote Warnleuchte, rechts ein Metallschild mit eingraviertem rautenförmigem Symbol

MetaMask security incident: Ethereum validators exit by October 7, how to check where your stake sits

MetaMask has confirmed a security incident in parts of its infrastructure and is pulling the affected Ethereum validators out of the network. The quantified loss is 0.36 ETH, while a stake of 523,000 ether is being idled on one estimate.

3 days ago

Verlassener Kontrollraum einer Handelsplattform bei Nacht, ein rotes Warnlicht über dem leeren Leitstandpult

Velocity Replaces Drift After the 285 Million Dollar Hack: What Changes for Investors in Germany

The Solana perp DEX Drift is back as Velocity, and since September 29, 2026 a new team has been running it. What the overhaul after the outflow of 285 million dollars means for your deposits, for settlement in USDT and for the legal position in Germany.

3 days ago

Dunkler Leitstand eines Sicherheits-Kontrollraums bei Nacht, leere Bedienpulte, ein einzelnes rotes Warnlicht taucht den Raum in kaltes Rot

$766 Million Lost to Crypto Hacks in One Month: What It Means for Your Custody

CertiK counts around $766.4 million in damage for September 2026, the highest monthly figure of the year. Two incidents carry more than 92 percent of it, and both hit a place where your balance could be sitting too.

4 days ago

Offenes Stahl-Tresortor, durch das ein Strom goldener Münzen zurück in den Tresor fließt

Bitget after the hack: withdrawals are back and the Protection Fund is above $300 million

Six days after the attack, Bitget is back with strong numbers: withdrawals for Bitcoin, Ether and USDT are running again, the Protection Fund was refilled two days ahead of its own deadline, and the proof of reserves shows 131 percent coverage.

4 days ago

Metallmünze versinkt zur Hälfte in einer undurchsichtigen schwarzen Lache, die Oberfläche schließt sich über ihr

Zcash today: 2,746 ZEC from the Bitget hack vanish into the Ironwood pool

Wallets from the Bitget break-in pushed 2,746 ZEC into Zcash's Ironwood pool on Wednesday morning, roughly $3.9 million. What the shielding means for tracing, and what applies to your exchange account from July 2027.

4 days ago

Schweres Stahl-Tresortor schwingt in einem dunklen Korridor zu und staut einen Strom physischer Bitcoin-Münzen davor auf

NEAR Intents Blocks $50 Million From the Bitget Hack: Why THORChain Let the Swaps Through

A cross-chain protocol says it stopped more than $50 million in transfers from the Bitget attack and froze $503,000. The case shows who can halt funds in transit and what that means for your custody.

4 days ago

Halb offenes Stahl-Tresortor, aus dem ein Strom physischer Münzen nach draußen in die Dunkelheit fließt

Customers Pull $463 Million From Bitget: The Consequences for Reserves and Custody

After the attack of September 24, customers pulled around $463 million out of Bitget within a day, the largest single-day outflow since DefiLlama began tracking reserves. The user protection fund fell from $464 million to below $200 million in the process.

5 days ago