North Korean Crypto Theft Surges Past $2 Billion in 2025 as Attack Tactics Shift
Cryptocurrency theft reached alarming new heights in 2025, with North Korean hacking groups alone stealing $2.02 billion — a staggering […]
Balancer DAO Releases Post-Mortem on $100 Million V2 Stable Pool Exploit
The decentralized finance ecosystem suffered one of its most significant security breaches in late 2025 when Balancer DAO disclosed a
Yearn Finance V1 TUSD Vault Drained for $300K in Flash Loan Exploit
Yearn Finance’s legacy V1 infrastructure fell victim to a sophisticated flash loan attack on December 16, 2025, resulting in a
EtherRAT Malware Hijacks Ethereum Smart Contracts for Stealth Command-and-Control Operations
Security researchers have uncovered a sophisticated new malware strain that uses Ethereum smart contracts as a command-and-control infrastructure, marking a
Aevo Oracle Upgrade Opens Door to $2.7 Million Ribbon Vault Drain
Decentralized exchange Aevo, formerly known as Ribbon Finance, has confirmed a $2.7 million exploit targeting its legacy Decentralized Options Vaults
React CVE-2025-55182 Weaponized in Mass Crypto Wallet Drainer Campaign
Cryptocurrency users and platform operators face an escalating threat as cybercriminals actively exploit a critical React vulnerability to inject wallet-draining
CISA Emergency Patch Deadline Expires: React2Shell Vulnerability Demands Immediate Action From Crypto Platforms
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive requiring federal agencies to patch the critical
Gogs Self-Hosted Git Zero-Day Compromises 700 Servers: What Crypto Teams Need to Know
Security researchers have uncovered a devastating zero-day vulnerability in Gogs, the lightweight self-hosted Git service, that has already compromised over
EtherRAT: North Korean Hackers Weaponize Ethereum Smart Contracts for C2 in React2Shell Attacks
A sophisticated new remote access trojan dubbed EtherRAT has emerged in the wild, exploiting the critical React2Shell vulnerability (CVE-2025-55182) and
Supply Chain Vulnerabilities in Crypto Wallet Extensions Expose Millions of Users to Seed Phrase Theft
The growing sophistication of supply chain attacks targeting cryptocurrency wallet extensions has become one of the most pressing security concerns