KoinlyticsSECURITY news
Stolen Funds Keep Ending Up in Monero and the Traceability Window Is Closing
The $7.9 million taken from Coinsbuy was converted into Monero, the same exit route used across 2026's largest thefts. Monero's proposed FCMP++ upgrade would replace ring signatures with a membership proof over the full output set, removing what forensic edge remains.
A Payments Processor Lost $7.9M on Two Chains at Once and That Rules Out Most Causes
Wallets tied to crypto payments platform Coinsbuy were drained of more than $7.9 million across Ethereum and TRON starting around 13:00 UTC on August 9. Simultaneous activity on two unrelated chains points to key compromise rather than a contract exploit.
BTCPay Nodes Were Drained Before the Warning Went Public and the Patch Does Not Undo It
A critical BTCPay Server flaw let unauthenticated attackers steal LND macaroon files and drain Lightning channels. Foundation and Citadel21 had nodes swept before the public advisory. Upgrading to 2.4.2 stops new access but does not invalidate stolen credentials.
Bybit Sued North Korea in a US Court and a Judge Actually Froze the Money
Bybit filed suit in the US District Court for the District of Columbia against North Korea, its Reconnaissance General Bureau and the Lazarus Group over the $1.5 billion February 2025 hack, and secured a preliminary injunction freezing identified stolen assets.
Three Bridges Lost $35M in Six Hours and Not One Was a Cryptography Failure
AFX lost about $24.15 million through an Arbitrum bridge, Verus lost $7.54 million to the same bug class as a May hack, and B2 Network lost $3.86 million after an attacker seized its staking contract upgrade authority. All three were permission failures.
The Coldcard Loss Went From $75M to $130M in a Week and Nobody Knows the Final Number
Tracking estimates for the Coldcard hardware wallet exploit climbed from $75 million to $89 million to $116 million to over $130 million within days. At least a dozen separate attackers are draining wallets, and the affected address set is still being mapped.
Coldcard Losses Confirmed at 1,596 BTC and 90% of the Stolen Coins Have Not Moved Since
Galaxy Research puts the confirmed Coldcard firmware exploit total at 1,596 BTC across more than 7,300 addresses, over $100 million at current prices. Coinkite shipped patched firmware and destroyed vulnerable stock. Roughly nine in ten stolen coins have not moved.
A 2021 Firmware Bug Just Cost Coldcard Users 594 BTC in a 25 Minute Sweep
A build setting introduced in Coldcard firmware 4.0.0 back in March 2021 quietly turned hardware seeds into guessable ones, and attackers drained 594 BTC (about $38 million) in a single 25 minute window.
Crypto Lost $1.1B in H1 2026 Across 212 Exploits, Blockaid Says
Blockaid's H1 2026 report counted 212 onchain exploits and $1.1 billion in losses, with Lazarus-linked actors driving 55% of the damage and 74% of thefts traced to compromised keys rather than smart contract bugs.
North Korea's Best Crypto Hackers Now Vet You Before They Rob You
BlueNoroff's phishing kit scans your browser for wallet extensions during a fake Zoom or Teams call and only drops malware if you look worth it, hitting 100+ victims in 20+ countries between May 31 and July 14, 2026.
Follow every move that matters to your bag.
Track your portfolio, LP positions and impermanent loss live. Join Koinlytics and see what moves the market before it shows on Twitter.
Join Koinlytics