NES trading resumes on Binance Alpha and Kraken, but recovery rules split holders
Binance Alpha reopened NES trading with a two-snapshot swap rule and a separate refund track, while Kraken migrated Ethereum NES and dropped BNB Chain.
Security
Hacks, exploits and vulnerability disclosures, bridge and wallet compromises, phishing and scams, fraud charges, sanctions, arrests and sentencing, stolen-funds tracing.
30 posts
Blockstream refuses ransom as Liquid Network hackers still hold nearly 600 BTC
Blockstream refuses to pay a ransom for roughly 598 BTC still held by the hackers who drained the Liquid Network, vowing law-enforcement and forensic pursuit.
XRP Healthcare shuts down after wallet flaw exposed 4,000 accounts and $450,000 drain
XRP Healthcare is winding down after a flaw in its XRPH Wallet let attackers drain roughly $450,000 from 4,010 XRP Ledger wallets.
82% of Coldcard’s stolen Bitcoin still hasn’t moved, and that’s the problem
The Wave 3 laundering made headlines, but most of the stolen Bitcoin is still frozen at attacker-controlled addresses.
Purported white hats drain ~4,000 BTC from Liquid Network, leaving L-BTC holders frozen out
Purported white-hat hackers drained roughly 4,000 BTC from the Liquid Network federation wallet, and the sidechain is paused. L-BTC holders cannot redeem while reserves sit near empty.
Coldcard Hacker Moves 45% of Bitcoin Stolen in Third Attack Wave
Galaxy Research says the third-wave Coldcard attacker has moved roughly 45% of stolen BTC, about $7.7 million, draining the 11 largest compromised vaults.
Liquid Network Pauses After Purported White-Hat Hackers Withdraw $320M in Bitcoin
Purported white-hat hackers withdrew roughly 4,000 BTC (~$320M) from Blockstream's Liquid Network federation reserves, pausing the Bitcoin sidechain and triggering LBTC suspensions at exchanges.
Trezor Data Breach Widens: 67,000 More Customers Exposed via ShipMonk Fulfillment Partner
Trezor disclosed a breach at fulfillment partner ShipMonk has now exposed personal data of 67,000 additional US customers, on top of an earlier batch, widening phishing risks for hardware wallet owners.
CrowdStrike and Federal Authorities Dismantle Russian Botnet That Silently Hijacked Crypto Payments for Eight Years
CrowdStrike and federal law enforcement disrupted the Russia-based Sality botnet, isolating more than 15,000 machines that spent eight years silently swapping copied crypto wallet addresses for attacker-controlled ones.
More Markets Lending Reserve Drained for $9.3M in Flow EVM Exploit
A More Markets lending reserve on Flow EVM lost roughly $9.3 million in WFLOW after an attacker paired an Ankr liquid staking token with E-mode to overborrow, Blockaid said.