ZKsync Airdrop Exploit Ends With $5M Returned as Hacker Accepts 10% Bounty
The ZKsync airdrop contract exploit that sent shockwaves through the Ethereum Layer 2 ecosystem on April 15, 2025, has reached
Security
How Phishing Attacks Drain Millions From Crypto Wallets and What You Can Do About It
April 2025 delivered a stark reminder that the most sophisticated blockchain security can be undone by the simplest human error.
ACB Token Airdrop Exploit on BNB Chain Exposes Access Control Weaknesses
The cryptocurrency security landscape faced yet another reminder of how seemingly minor vulnerabilities can lead to real losses. On April
Supply Chain Attack on xrpl.js npm Package Exposes XRP Wallet Keys
The cryptocurrency security landscape faced a new kind of threat on April 22, 2025, when a supply chain attack compromised
Loopscale Loses $5.8 Million in Composability Flaw on Solana
The decentralized lending protocol Loopscale fell victim to a sophisticated exploit on April 22, 2025, losing approximately $5.8 million in
XRP Library xrpl.js Compromised in Supply Chain Attack Targeting Private Keys
A critical supply chain attack on the xrpl.js JavaScript library—the recommended package for interacting with the XRP Ledger—has exposed the
Protecting Your Crypto Assets From Social Engineering and Remote Access Attacks
Cryptocurrency traders and investors face an evolving threat landscape where sophisticated social engineering campaigns are combining with legitimate collaboration tools
Exchange Infrastructure Security After Bitget and Hyperliquid: A Practical Defense Framework
The crypto security landscape shifted dramatically in the first half of April 2025. Two high-profile incidents—the Hyperliquid JELLY manipulation on
Bitget VOXEL Incident Exposes Market Maker Bot Vulnerability on Perpetual Futures
On April 20, 2025, cryptocurrency exchange Bitget detected abnormal trading activity on its VOXEL/USDT perpetual futures contract, triggering one of
Securing Crypto Infrastructure: What the SonicWall SMA Exploitation Campaign Teaches About VPN and Access Control
While the cryptocurrency community focused on DeFi exploits in April 2025, a quieter but equally significant threat was compromising the