2025-05
In late April 2025, a North Korean hacking group known as Kimsuky compromised CJ OliveNetworks' digital certificate, which is used to verify the authenticity of software. The stolen certificate was found embedded in malware, suggesting it was used to disg…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2025-03
On March 21, 2025, Zoth suffered a major security breach resulting in the loss of approximately $8.4 million worth of USD0++ tokens. This incident occurred just three weeks after a smaller attack on March 1, which had already exposed vulnerabilities in th…
🇵🇦 Panama
#Cryptocurrency
#FinancialGain
2025-02
On February 21, 2025, ByBit suffered the largest crypto hack in history, losing $1.43 billion. Attackers used a sophisticated front-end spoofing attack to deceive multisig signers into approving malicious transactions. The theft involved over 401,000 ETH …
🇦🇪 United Arab Emirates
#Cryptocurrency
#FinancialGain
2025-02
Safe{Wallet} and external analyses described the Bybit incident as a targeted Lazarus/TraderTraitor attack in which a compromised Safe{Wallet} developer environment enabled malicious front-end code to alter a multisig transaction proposal. The injected Ja…
🇨🇭 Switzerland
#Cryptocurrency
#SupplyChain
#FinancialGain
2025-02
A state-sponsored hacking group has stolen a code-signing certificate from a Korean cybersecurity firm, potentially allowing them to distribute malware disguised as legitimate software. The Korea Internet & Security Agency (KISA) is investigating and work…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2025-01
On January 23, 2025, Phemex suffered a $73 million hack, with funds drained from hot wallets across 16 chains, including Ethereum, Solana, and XRP. The attack exploited access control vulnerabilities, enabling rapid and synchronized thefts. While cold wal…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2024-10
Unit 42 linked Jumpy Pisces, also known as Andariel or PLUTONIUM, to an intrusion that preceded Play ransomware deployment and assessed with moderate confidence that the North Korean state-sponsored actor collaborated with Play operators or acted as an in…
#FinancialGain
2024-10
In October 2024, Tapioca DAO on Arbitrum was hacked, losing $4.4 million due to a private key compromise. The attacker exploited the vesting contract and minted quintillions of USDO stablecoin, causing a 97% drop in TAP token value. The funds were bridged…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2024-10
In October 2024, Radiant Capital lost more than $53 million after attackers compromised multiple developer devices and manipulated multisig transaction signing. Radiant later said the operation began with a September 2024 Telegram lure impersonating a tru…
🇭🇰 Hong Kong
#Cryptocurrency
#FinancialGain
2024-09
Truflation disclosed a significant cryptocurrency incident in which the team and third parties tracked the hacker’s on-chain wallets, blacklisted affiliated accounts, and observed 1.37 million DAI exchanged for 500 ETH before transfer to the eXch exchange…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2024-09
On September 19, 2024, BingX detected abnormal network access after attackers drained about $44.7 million from hot wallets across Ethereum, BNB Chain, Polygon, and other networks. The exchange suspended withdrawals and moved remaining assets while investi…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2024-09
On September 16, 2024, DeltaPrime, a DeFi protocol on Arbitrum, lost $5.98 million due to a private key compromise. The attacker used the compromised admin address to upgrade proxy contracts, inflating their deposits and withdrawing funds in USDC, WBTC, a…
🇻🇬 Virgin Islands, British
#Cryptocurrency
#FinancialGain
2024-09
On September 10, 2024, Indonesia's largest crypto exchange, Indodax, lost over $25 million in a sophisticated hack. Attackers exploited the exchange's withdrawal system, siphoning funds across multiple blockchains, including Ethereum, Bitcoin, Polygon, an…
🇮🇩 Indonesia
#Cryptocurrency
#FinancialGain
2024-08
On August 7, 2024, Nexera’s Fundrs staking contracts on Ethereum were abused after a social-engineering intrusion exposed wallet credentials. The attacker transferred 47.24 million NXRA tokens; Nexera paused NXRA and NAI token contracts across chains, lim…
🇳🇱 Netherlands
#Cryptocurrency
#FinancialGain
2024-07
WazirX recently experienced a cyber attack on one of its multisig wallets, leading to a loss of over $230 million. This wallet, managed using Liminal’s digital asset custody services since February 2023, had six signatories: five from WazirX and one from …
🇮🇳 India
#Cryptocurrency
#FinancialGain