Ledger explains how the LTE implant steals seed phrases from reseller devices
Ledger confirms an LTE hardware implant in CryptoBilis-sold signers captures seed phrases during setup; MediaMarkt Saturn has halted European sales.
Security
Hacks, exploits and vulnerability disclosures, bridge and wallet compromises, phishing and scams, fraud charges, sanctions, arrests and sentencing, stolen-funds tracing.
41 posts
Tether Freezes USDT Linked to Near-$90 Million Ledger Wallet Thefts
Tether has frozen USDT at addresses tied to suspected Ledger wallet thefts approaching $90 million, giving victims a partial recovery path that Bitcoin and Ethereum cannot offer.
ZachXBT Spent $350K Undercover in the Laundering Pipeline Behind Poloniex, Bybit and Bitget Hacks
ZachXBT says he fronted $349.7K of his own money to pose as a laundering client, exposing a Chinese syndicate behind hacks at Poloniex, Bybit and Bitget.
Five withdrawals, six hours: the on-chain trail behind the $3.87M NEAR Intents drain
Five withdrawals over six hours drained 3,865,000 USDT from NEAR Intents' BNB Chain vault. The on-chain trail, and how the money came back.
Bitget vs THORChain: can permissionless protocols refuse stolen funds?
Bitget CEO Gracy Chen asked THORChain to refuse service to attacker addresses; the protocol says it cannot selectively freeze funds.
Zano restarts chain a month back at block 3,833,000 to erase Gateway Address exploit
Zano restarted its blockchain from block 3,833,000, rolling back about a month of history to erase unauthorized ZANO and Freedom Dollar minted through a Gateway Addresses exploit.
THORChain earned nearly $1.2M in fees moving Bitget’s stolen funds
THORChain processed $678 million in the two days after the Bitget hack and earned nearly $1.2 million in fees while refusing to block the attacker's wallets.
White hats move 52.37 BTC from Coldcard hack into Wyoming recovery trust
White-hat rescuers moved 52.37 BTC from the Coldcard exploit into a Crypto Recovery Trust address, and victims can search their wallet addresses on the trust's claims site.
Nearly $19M in XRP drained from 6,678 DCENT-linked wallets in six waves
Nearly 11.75 million XRP was drained from 6,678 wallets tied to the DCENT App Wallet in six waves between Sept. 15 and Sept. 20.
The job interview was the attack: how WaterPlum turned hiring into a malware channel
WaterPlum posed as recruiters for AI, crypto and NFT companies and planted malware in fake interviews and coding tasks, draining wallet keys from more than 7,000 crypto wallets.