2025-06
On June 18 and June 23, 2025, Matt Furie and ChainSaw-linked NFT projects including Replicandy, Peplicator, Hedz, and Zogz were exploited after contract ownership was transferred to attacker-controlled wallet 0x9Fca. The attacker unpaused mints, minted NF…
🇦🇺 Australia
#Cryptocurrency
#FinancialGain
2025-05
On May 9, 2025, Taiwan-based BitoPro suffered a cryptocurrency theft that forensic findings later said resembled Lazarus Group tradecraft. Attackers socially engineered a cloud operations employee, implanted malware, hijacked AWS session tokens to bypass …
🇹🇼 Taiwan
#Cryptocurrency
#FinancialGain
2025-05
On May 9, 2025, LNDfi suffered a \$1.27 million security breach caused by a rogue developer—later identified as an undercover North Korean IT worker—who gained unauthorized access to admin keys and drained the protocol. The attacker deployed altered smart…
#Cryptocurrency
#FinancialGain
2025-05
In late April 2025, a North Korean hacking group known as Kimsuky compromised CJ OliveNetworks' digital certificate, which is used to verify the authenticity of software. The stolen certificate was found embedded in malware, suggesting it was used to disg…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2025-03
On March 21, 2025, Zoth suffered a major security breach resulting in the loss of approximately $8.4 million worth of USD0++ tokens. This incident occurred just three weeks after a smaller attack on March 1, which had already exposed vulnerabilities in th…
🇵🇦 Panama
#Cryptocurrency
#FinancialGain
2025-02
On February 21, 2025, ByBit suffered the largest crypto hack in history, losing $1.43 billion. Attackers used a sophisticated front-end spoofing attack to deceive multisig signers into approving malicious transactions. The theft involved over 401,000 ETH …
🇦🇪 United Arab Emirates
#Cryptocurrency
#FinancialGain
2025-02
Safe{Wallet} and external analyses described the Bybit incident as a targeted Lazarus/TraderTraitor attack in which a compromised Safe{Wallet} developer environment enabled malicious front-end code to alter a multisig transaction proposal. The injected Ja…
🇨🇭 Switzerland
#Cryptocurrency
#SupplyChain
#FinancialGain
2025-02
A state-sponsored hacking group has stolen a code-signing certificate from a Korean cybersecurity firm, potentially allowing them to distribute malware disguised as legitimate software. The Korea Internet & Security Agency (KISA) is investigating and work…
🇰🇷 Korea, Republic of
#SupplyChain
#Technology
2025-01
On January 23, 2025, Phemex suffered a $73 million hack, with funds drained from hot wallets across 16 chains, including Ethereum, Solana, and XRP. The attack exploited access control vulnerabilities, enabling rapid and synchronized thefts. While cold wal…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2024-10
Unit 42 linked Jumpy Pisces, also known as Andariel or PLUTONIUM, to an intrusion that preceded Play ransomware deployment and assessed with moderate confidence that the North Korean state-sponsored actor collaborated with Play operators or acted as an in…
#FinancialGain
2024-10
In October 2024, Tapioca DAO on Arbitrum was hacked, losing $4.4 million due to a private key compromise. The attacker exploited the vesting contract and minted quintillions of USDO stablecoin, causing a 97% drop in TAP token value. The funds were bridged…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2024-10
In October 2024, Radiant Capital lost more than $53 million after attackers compromised multiple developer devices and manipulated multisig transaction signing. Radiant later said the operation began with a September 2024 Telegram lure impersonating a tru…
🇭🇰 Hong Kong
#Cryptocurrency
#FinancialGain
2024-09
Truflation disclosed a significant cryptocurrency incident in which the team and third parties tracked the hacker’s on-chain wallets, blacklisted affiliated accounts, and observed 1.37 million DAI exchanged for 500 ETH before transfer to the eXch exchange…
🇺🇸 United States
#Cryptocurrency
#FinancialGain
2024-09
On September 19, 2024, BingX detected abnormal network access after attackers drained about $44.7 million from hot wallets across Ethereum, BNB Chain, Polygon, and other networks. The exchange suspended withdrawals and moved remaining assets while investi…
🇸🇬 Singapore
#Cryptocurrency
#FinancialGain
2024-09
On September 16, 2024, DeltaPrime, a DeFi protocol on Arbitrum, lost $5.98 million due to a private key compromise. The attacker used the compromised admin address to upgrade proxy contracts, inflating their deposits and withdrawing funds in USDC, WBTC, a…
🇻🇬 Virgin Islands, British
#Cryptocurrency
#FinancialGain