EXPLOITS news
A Payments Processor Lost $7.9M on Two Chains at Once and That Rules Out Most Causes
Wallets tied to crypto payments platform Coinsbuy were drained of more than $7.9 million across Ethereum and TRON starting around 13:00 UTC on August 9. Simultaneous activity on two unrelated chains points to key compromise rather than a contract exploit.
BTCPay Nodes Were Drained Before the Warning Went Public and the Patch Does Not Undo It
A critical BTCPay Server flaw let unauthenticated attackers steal LND macaroon files and drain Lightning channels. Foundation and Citadel21 had nodes swept before the public advisory. Upgrading to 2.4.2 stops new access but does not invalidate stolen credentials.
Three Bridges Lost $35M in Six Hours and Not One Was a Cryptography Failure
AFX lost about $24.15 million through an Arbitrum bridge, Verus lost $7.54 million to the same bug class as a May hack, and B2 Network lost $3.86 million after an attacker seized its staking contract upgrade authority. All three were permission failures.
The Coldcard Loss Went From $75M to $130M in a Week and Nobody Knows the Final Number
Tracking estimates for the Coldcard hardware wallet exploit climbed from $75 million to $89 million to $116 million to over $130 million within days. At least a dozen separate attackers are draining wallets, and the affected address set is still being mapped.
Follow every move that matters to your bag.
Track your portfolio, LP positions and impermanent loss live. Join Koinlytics and see what moves the market before it shows on Twitter.
Join Koinlytics
Koinlytics