Premia Labs vaults on Arbitrum lost $437,000 in collateral to an exploit. The stolen funds were routed through the protocol's own options pools, then cashed out as liquidity, security firm Blockaid found.
The Ethereum Foundation pushed back the Hoodi testnet launch of its Glamsterdam update, saying auditor ChainSecurity had flagged a gas-accounting change that could weaken protection for 13 live smart contracts.
Developers of the modular blockchain Initia halted the network and its rollups on Friday after an attacker exploited a bug to mint unbacked tokens, co-founder Ezaan Mangalji said.
Blockchain security firm Hacken tallied crypto's third-quarter losses: 107 incidents and $1.18 billion stolen, up 55% from the prior quarter. Most of the money disappeared through gaps no audit ever checked.
XRP Ledger developers rushed out a patch for a bug that sat in the code for almost a decade and could have let someone mint tokens past the network's hard cap of 100 billion. No sign it was ever exploited.
A New York jury found the Uranium Finance hacker guilty: he stole $55 million from the DeFi exchange in 2021 and spent part of it on rare Pokémon cards and ancient coins.
Igloo Inc., the company behind Pudgy Penguins, will shut down its Abstract blockchain on December 15 after 18 months of funding and tens of millions in losses. Users must move their assets before the deadline.
Paradigm-backed Ethereum layer-2 Blast is winding down as costs outpaced revenue. TVL collapsed from $2.2 billion to $32 million, its token lost nearly all its value, and users have three weeks to withdraw.
A hot wallet is the most exposed part of any crypto exchanger's stack: one forgotten token approval or a leaked key can empty it in minutes. Here are five common mistakes — and how to fix each one.
The SEC says buying back tokens or upgrading a live blockchain doesn't automatically make an asset a security. The guidance follows the Senate's failure to pass the Clarity Act.
KelpDAO accuses LayerZero of endorsing a risky bridge security setup and hiding the danger — after the $292 million hack, users pulled $650 million out of the protocol.
Blockchain oracles feed rates, prices and API data into networks that can't see beyond themselves. How they work, three 2026 scenarios, and why your exchange rate source matters as much as it does for DeFi.
The CFTC expanded March's one-off relief for wallet maker Phantom into an industry rule: makers of non-custodial wallets and DeFi front-ends can now link users to regulated derivatives without broker registration.
Balancer, one of DeFi's oldest AMM protocols, is winding down. Revenue never recovered after a $128M exploit last November, and its treasury council now plans to return remaining funds to BAL holders.
Senate Republicans released a revised 630-page CLARITY Act and set a procedural vote for September 15 — but no Democrat has backed it, and the bill is still several votes short of the 60 it needs.
Cross-chain bridges move assets between blockchains, and they're the most-hacked category in crypto. We debunk five myths about bridges and explain what an exchanger owner should check before trusting one with liquidity.
Liquid Network, Blockstream's Bitcoin sidechain, lost nearly all its reserves — about 4,000 BTC — to a software bug, not a stolen key. Most of the money came back within a day, but not all of it.
Oracle manipulation is rare but costly: an attacker warps a price for seconds via a flash loan, and an exchanger with an unguarded rate feed foots the bill. Here's how it works and how to pick a safer source.
Decentralized exchanges promise anonymity, dirt-cheap fees, and zero risk — reality is messier. We debunk five persistent DEX myths, from 'fully anonymous' to 'no risk at all,' and explain what actually matters in 2026.
Cross-chain bridges remain the weakest link in multi-network transfers. We break down how they work, why they keep topping the hack charts, and three scenarios for 2026 — with practical steps for exchanger owners.
