React2Shell Surge Exposes 250,000 Servers to Crypto Mining Malware Campaigns
A critical vulnerability in React Server Components, dubbed React2Shell and tracked as CVE-2025-55182, has triggered a massive wave of exploitation
Security
Yearn Finance yETH Vault Drained in $9 Million Exploit Triggered by Numerical Bug
On December 8, 2025, DeFi protocol Yearn Finance disclosed the full details behind a devastating security breach that resulted in
AI-Assisted Hacker Targets Abandoned DeFi Protocols in $5 Million December Spree
TL;DR Three legacy DeFi projects — Ribbon Finance, Rari Capital, and iEarn Finance — were hacked for approximately $5 million
$50 Million Address Poisoning Scam Tops December 2025 Crypto Losses as Exploits Shift to Social Engineering
TL;DR A single address poisoning scam drained $50 million, making it the largest crypto exploit of December 2025 Total monthly
Supply Chain Defense for Crypto Users: What the React2Shell and Trust Wallet Incidents Teach Us About Software Trust
The first week of December 2025 delivered two devastating reminders that the weakest links in crypto security are often not
Inside the React2Shell Crisis: How a CVSS 10.0 Flaw Exposed 77,664 Servers in Under 48 Hours
On December 3, 2025, the React security team disclosed CVE-2025-55182, a pre-authentication remote code execution vulnerability in React Server Components
Why the Upbit Breach and React2Shell Crisis Demand a Security Posture Upgrade for Every Crypto User
The cryptocurrency exchange landscape entered a period of heightened alert on December 5, 2025, as Upbit’s sweeping security response to
Upbit Resets All Deposit Addresses After $37 Million Breach Exposes Digital Signature Vulnerability
South Korea’s largest cryptocurrency exchange Upbit has executed one of the most drastic security measures in recent memory, deleting all
Hardware Wallets Become Essential as Ledger Exposes Unpatchable Smartphone Chip Flaw
The line between software security and hardware security blurred dramatically on December 4, 2025, when Ledger’s security research division, Donjon,
USPD Stablecoin Protocol Drained in $1M Proxy Contract Exploit
A decentralized stablecoin protocol found itself at the center of a sophisticated smart contract attack on December 4, 2025, as