Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.
Topic stats
Railway says an attacker may have decrypted customer variables. On-chain investigator @tayvano_ separately reports roughly $371,000 drained across at least 19 EVM chains.
Listed vulnerable wallets can require evidence beyond a valid signature before holders regain access, even when an attacker took nothing.
SideSwap’s wallet funds the reopened swaps while partly manual refills can delay payments and direct Federation withdrawals remain restricted.
The address Etherscan labels “Drift Exploiter 5” made 258 deposits on Oct. 20, nearly emptying this wallet.
The latest incident follows attacks involving SecuX, Coldcard and Ledger, exposing vulnerabilities beyond hardware wallets' offline protections.
The quarterly shift toward contract losses and September's Bitget and Liquid failures challenge a fixed hierarchy of security controls.
The hackers didn't need to break Ledger's security when they could just get to the wallets before their owners.
Streami and Pravang are among 16 affected financial companies as the FSC outlines plans for a wider security overhaul.
The rival wallet maker is ending selected retail partnerships despite no confirmed compromise of its devices, while Germany's MediaMarktSaturn suspends Ledger sales.
