Crypto Hacks and Security, Page 8

Aufgeschlitzter Briefumschlag auf dunklem Holz, aus dem eine gespannte Stahl-Schnappfalle ragt, daneben eine Goldmuenze mit Bitcoin-Zeichen

Crypto Wallet Phishing by Letter: Why the QR Code From Your Postbox Wants Your Recovery Phrase

Letters carrying a QR code urge a supposedly urgent wallet update on grounds of quantum resistance and lead to a page that asks for the recovery phrase. The Federal Office for Cybersecurity reported the ploy on August 18, 2026.

last month

Messing-Siegelstempel schwebt ueber einem unbedruckten Bogen Papier, darunter ragt die Kante eines zweiten, verborgenen Bogens hervor, daneben eine Goldmuenze mit rautenfoermigem Symbol

Ledger Closes a Gap in the Ethereum App: When the Display Shows Something Other Than What You Sign

Ledger has closed a flaw in its Ethereum app that let a malicious application swap the reviewed transaction for a different one. Anyone holding Ether or ERC-20 tokens on the device should check the app version and clear out old token approvals.

last month

Offene, voellig unversehrte Stahl-Tresortuer in einem dunklen Gewoelbe, davor ein umgestuerzter Abstimmungskasten aus Messing mit ausgeschuetteten Muenzen

Term Finance Governance Exploit: Why Audited Code Does Not Protect Your DeFi Deposits

Around $8.5 million flowed out of the Ethereum lending protocol Term Finance on August 23, 2026, after an attacker bought a voting majority over the deposit pools. The code itself stayed intact: here is how to judge how easily a DeFi pool can be opened by a vote.

last month

Geschlossenes stählernes Schleusentor in einer leergelaufenen Schleusenkammer, davor eine geprägte Münze mit Bitcoin-Symbol auf nassem Beton

SAND Bridge Exploit at The Sandbox: Why Not to Trade SAND on Base and BNB Chain Now

An attack on The Sandbox's cross-chain bridge created unbacked SAND tokens on Base and BNB Smart Chain on August 22, 2026. Bridging is halted; holdings on Ethereum and Polygon are unaffected, according to the studio.

last month

Historische Telefonvermittlungswand mit hunderten leeren Klinkenbuchsen, aus einer einzigen fuehrt ein rotes Kabel, davor eine Muenze mit Bitcoin-Symbol

Operation ASTERIX: How a Fake Support Call Delivers a Counterfeit Wallet App

Security researchers analysed an open server on which a phone system, phishing interfaces and cloned wallet programs all came together. The largest list of numbers was the German one.

last month

Zwei fast identische messingfarbene Briefkastenklappen nebeneinander in einer dunklen Metallwand; in den linken Schlitz kippt eine Muenze mit Bitcoin-Symbol ins Dunkle, hinter der rechten Klappe liegt eine gleiche Muenze sicher im Fach

Address Poisoning: Why Seven of Forty Characters Were Enough to Divert $2 Million

A fake wallet address matched the real one in just seven of forty characters and still intercepted 2 million USDC. Our own count of the affected wallet shows that a third of all counterparties in its history belong to such look-alikes.

last month

Fünf Spielwürfel rollen im Licht einer Werkstattlampe über eine dunkle Lederunterlage, daneben steht eine schwere Münze mit eingeprägtem Bitcoin-Symbol hochkant auf ihrer Kante

Coldcard 5.6.1 Is Here: Why the Update Will Not Rescue Your Old Seed

Coinkite shipped Coldcard firmware 5.6.1 and 1.5.1Q on August 20, 2026. The update closes the gap for new seeds but does not repair a seed already affected.

last month

Geoeffnete Metallkassette mit sichtbarer Platine und eingestecktem Kabel auf dunkler Werkbank, davor eine Muenze mit Bitcoin-Zeichen

BitBox02: Firmware 9.26.5 Closes Three Security Vulnerabilities. What to Check Now

BitBox released firmware 9.26.5 on August 17, 2026, closing three security vulnerabilities in the BitBox02 and BitBox02 Nova. Existing seeds are not affected according to the manufacturer; an update is due anyway, and with unused devices the order matters.

last month

Geschlossene Aktenmappe, Stift und Bitcoin-Münze auf einem dunklen Schreibtisch – Sinnbild für eine Anzeige, wenn Krypto gestohlen wurde

Stolen Crypto: Where You Actually File a Report and What Counts in the First Hours

After a theft most people google first and preserve the evidence last, when the right order is the other way round. What you have to record in the first hours, where private individuals actually turn, and where the limit of what is possible lies.

last month

Schwere Eisenkette zwischen zwei grossen Muenzen, ein Kettenglied in der Mitte ist aufgerissen

Maya Protocol Exploit: MAYAChain Is Halted, What to Check Now on Cross-Chain Swaps

On August 18, 2026 an attacker drew roughly $1.65 million out of MAYAChain's liquidity pools through six chained faults, and the team then halted the chain globally. Anyone who swapped or provided liquidity there can check in a few minutes whether their own money is stuck in the halted system.

last month