Inside the KelpDAO Bridge Attack: How a Single Verification Node Unlocked $292 Million for Lazarus Group
The crypto security landscape shifted dramatically in April 2026 when North Korea’s Lazarus Group executed one of the most sophisticated […]
Copy Fail (CVE-2026-31431): How a 732-Byte Python Script Exposed Every Linux Server Since 2017
A single logic flaw buried in the Linux kernel crypto API has given rise to one of the most consequential
Bitwarden CLI Supply Chain Attack Exposes Critical Vulnerabilities in Crypto Developer Infrastructure
TL;DR A malicious version of Bitwarden’s CLI appeared on npm for 93 minutes on April 22, 2026, targeting developer credentials
Hundreds of Dormant Ethereum Wallets Drained in Coordinated Exploit Raising Key Security Fears
On April 30, blockchain investigator WazzCrypto flagged a chilling discovery on Ethereum mainnet: hundreds of long-dormant wallets had been systematically
North Korea’s $577 Million Crypto Heist Campaign: How Two Attacks Devastated April 2026
The first four months of 2026 delivered a stark reminder that cryptocurrency security remains an evolving battlefield. North Korean hacking
SWEAT Token Mass Drain: How 13.71 Billion Tokens Vanished in 30 Seconds on the NEAR Protocol
On April 29, 2026, the Sweat Economy suffered one of the most dramatic security breaches in recent decentralized finance history.
When Trust Becomes a Weapon: How the Drift Protocol Social Engineering Attack Redefined Crypto Threats
The cryptocurrency industry witnessed its most devastating month for security incidents in April 2026, with total losses exceeding $629 million
The Self-Destructing Malware Inside Kelp DAO: How Attackers Erased the Evidence of a $292 Million Heist
The Exploit Mechanics On April 18, 2026, attackers linked to North Korea’s Lazarus Group drained approximately $292 million worth of
Scallop Protocol Breach: How a Deprecated Rewards Contract Cost $140,000 on the Sui Network
On April 26, 2026, Scallop — the largest lending protocol on the Sui blockchain — suffered a security breach that
Cross-Chain Double-Spend Threat Escalates as Litecoin MWEB Vulnerability Exposes $600,000 in NEAR Intents Exposure
The Litecoin network is grappling with the fallout from a sophisticated cross-chain exploit that exposed fundamental weaknesses in privacy-layer bridge