Topic
hacks
39 stories
Launderers behind the Binance hack are minting throwaway Elon and animal memecoins to move stolen NEAR, Elliptic says
Blockchain analytics firm Elliptic says North Korea-linked launderers routed about $430,000 of NEAR stolen in the $6.4 billion Binance breach through six throwaway memecoins, reusing a laundering trick from the 2025 Bybit hack.
Elliptic: Binance hackers have swapped $124M of stolen altcoins into bitcoin, little cashed out so far
Blockchain analytics firm Elliptic says attackers in last week's $6.43 billion Binance breach have converted about $124 million in stolen altcoins into bitcoin, while Binance moves to reopen more token withdrawals.
Half the $6.43B Binance Haul Is Still Unlaundered, Elliptic Says
Elliptic says roughly half of the $6.43 billion stolen from Binance on October 29 remains unlaundered, with $3.11 billion still held by the attacker and $2.85 billion frozen or seized.
Mercado Bitcoin's attacker kept draining wallets for hours after the exchange said it was "contained"
Blockchain analytics firm Bitquery says Mercado Bitcoin's attacker kept draining customer deposit addresses for about four hours after the Brazilian exchange declared the breach contained, with total losses now traced at $48.6 million across 10 chains.
North Korean hackers resume laundering Binance's stolen billions through THORChain as RUNE rises 10%
North Korea's TraderTraitor is routing proceeds of the $6.3 billion Binance hack through THORChain, swapping ether into unfreezable bitcoin, as RUNE jumped about 10% when the network resumed trading after an Oct. 31 halt.
Coinbase touts 99% cold storage as Binance says it has replaced 98% of its $6 billion-plus hack
Coinbase said it holds more than 99% of customer assets in offline cold storage and was untouched by the roughly $6.3–6.4 billion Binance breach, which Binance says it has already replenished by about 98%.
Investigator ZachXBT alleges $133M theft from French bank Crédit Mutuel Arkéa
Onchain investigator ZachXBT alleges French cooperative bank Crédit Mutuel Arkéa lost more than $133 million to a thief now laundering the funds; the bank has not confirmed or denied the claim.
Binance blames fake job interview and internal AI tool for $6.3 billion breach
Binance's own incident report blames a months-long North Korea-linked campaign — a fake job interview and compromised internal AI tooling — for the roughly $6.3 billion theft, as it reopens withdrawals and says it has recovered most assets.
North Korea Denies Binance Hack as FBI Pins $6.3B Theft on Pyongyang
North Korea's Kim Yo Jong rejected the FBI's finding that its hackers stole over $6 billion from Binance, as the exchange said deposits had begun outpacing withdrawals after $4.72 billion in net outflows.
Binance's SAFU fund is down to ~7,500 BTC after the exchange tapped it for a $6.3B hack
Binance has spent about half the bitcoin in its SAFU user-protection fund to help cover a $6.3 billion hack, leaving roughly 7,500 BTC (~$580 million) and no timeline for a refill, on-chain data shows.
Mercado Bitcoin halts deposits and withdrawals after breach; outside trackers put losses at $40M–$46M
Mercado Bitcoin, Brazil's largest crypto exchange, suspended deposits and withdrawals on November 2 after a security breach that outside analysts peg at $40 million to $46 million across at least 10 blockchains.
Investigator flags suspected $106M theft from an unnamed EU entity's exchange accounts
Blockchain investigator ZachXBT reported that an unidentified EU entity may have lost more than $106 million from accounts at several crypto exchanges, with funds routed through ether, instant-exchange services and Monero.
BTCPay Server tells merchants to shut down after reports of drained hot wallets
BTCPay Server told merchants on November 1 to shut down their instances after reports that attackers gained admin access and swept bitcoin from internet-connected hot wallets; the project has named no loss figure or fix.
Binance reopens withdrawals, logs $3.64 billion in net outflows days after $6.3 billion hack
Binance processed about $3.64 billion in net outflows in the first nine and a half hours after reopening withdrawals following last week's $6.3 billion hack, the exchange said.
FBI pins $6B Binance hack on North Korea's TraderTraitor, asks DeFi to block addresses
The FBI has attributed last week's roughly $6 billion Binance theft to North Korea's TraderTraitor group and is asking DeFi operators to blacklist hundreds of laundering addresses, as Binance says it has replaced 90% of the stolen funds.
How attackers drained an estimated $6.3 billion from Binance — and why Washington is now arguing about it
Attackers stole an estimated $6.3 billion from Binance on Oct. 29 by compromising its hot-wallet signing infrastructure; investigators blame North Korea, and Binance says it will cover the losses in full.
Binance pledges $6.34 billion to cover losses from laptop-borne breach
Binance says it has set aside $6.34 billion of its own funds to cover losses from a Thursday breach it blames on a compromised DevOps laptop, as partners froze roughly $3 billion more.
Binance pledges $6.34B of its own funds after record $6.3B hot-wallet theft
Binance says it has earmarked more than $6.34 billion of its own money to make users whole after roughly $6.3 billion was drained from its hot wallets, the largest crypto theft on record.
Binance hacker parks $1.4B in bitcoin across 19 wallets — and sits on it
An attacker who drained roughly 18,270 BTC (~$1.4 billion) from Binance split the haul into 19 wallets within minutes, and the coins hadn't moved as of Friday morning; blockchain firm TRM Labs tied the theft to North Korea.
Binance says $6.3B stolen in suspected breach; stablecoin issuers freeze funds and withdrawals halt
Binance says about $6.3 billion in crypto was stolen in a suspected Thursday breach, prompting frozen stablecoins, suspended withdrawals and over $1 billion in liquidations as bitcoin fell below $77,000.
Polymarket freezes trading after third-party breach drains ~$2.7M from users — the second in five months
Polymarket halted trading on its international venue on October 29 after an attacker drained roughly $2.5 million to $2.7 million from user accounts, blaming a compromised third-party provider — its second such breach in five months.
Drift Says $285M Drain Was a Six-Month North Korean Infiltration
Drift Protocol says a North Korean state-affiliated group spent six months infiltrating its contributors before draining roughly $285 million from the Solana-based exchange, according to the protocol's own incident report.
Ledger Investigates Suspected $86M Drain Tied to Reseller's Tampered Devices
Ledger is investigating the loss of a suspected $86–87 million in customer funds after devices sold by a Southeast Asian reseller, CryptoBilis, were found to carry an implant that captured recovery phrases.
Ledger probes Malaysian reseller CryptoBilis after wallets drained of up to $86M
Ledger says it is investigating its Malaysian reseller CryptoBilis after wallets bought there were drained of an estimated $72M to over $86M, and has ordered the reseller to halt sales.
Ledger Investigates Reports of Fund Losses Tied to Reseller CryptoBilis, as Investigator Traces ~$87M
Ledger is investigating reported fund losses among Southeast Asian customers who bought hardware wallets from reseller CryptoBilis, as an onchain investigator traces roughly $87 million in suspected thefts.
SecondFi's hack-recovery portal offers ~$8 per lost NFT — and tells victims to type their seed phrase into a webpage
Cardano wallet firm SecondFi opened a recovery portal for victims of June 2026's $21 million exploit, offering a flat 30 ADA — about $7.60 — for each NFT it can't return, and advising users to enter wallet seed phrases into its website.
Grinex, the Exchange Linked to Sanctioned Garantex, Halts Trading and Blames a $13M "Western" Hack
Russian crypto exchange Grinex halted trading on October 1, claiming a roughly $13 million hack it blamed on "Western special services" — an unverified assertion made on its own Telegram channel.
Bitget says ~$352M stolen in suspected North Korean hack; withdrawals paused
Bitget CEO Gracy Chen says North Korea's Lazarus Group likely stole roughly $352 million from the exchange's hot and warm wallets, with withdrawals paused and most losses covered by a protection fund.
Bitget says $352M drained from hot wallets, pauses withdrawals
Bitget CEO Gracy Chen said roughly $352 million was drained from the exchange's hot and warm wallets on September 24, and paused withdrawals while insisting cold wallets and user funds are safe.
Symbiosis recovers ~15 BTC after Bitcoin bridge exploit, dangles 20% bounty at attacker
Symbiosis says it recovered about 15 BTC after a Sept. 11 exploit of its Bitcoin Bridge minted roughly 46.1 billion unbacked syBTC, though security firms peg the attacker's actual take at about $336,000.
Blockstream refuses to pay ransom over $47M Liquid bitcoin hack: 'It is theft'
Blockstream has rejected a ransom demand tied to a hack of its Liquid network that took roughly $47 million in bitcoin, saying it will treat the loss as theft rather than pay for the coins' return.
Coldcard-Linked Hacker Moves $7.7M in Bitcoin, About Half of a Third Tranche
A hacker shifted about $7.7 million in bitcoin — reportedly nearly half of a third batch of coins tied to a Coldcard-linked theft — while BTC traded near $79,400, per Decrypt.
Coldcard thief moves nearly half of 'Wave 3' bitcoin as total losses near 1,806 BTC
Galaxy Research says the attacker behind the Coldcard hardware-wallet thefts has moved 45% of the bitcoin taken in the "Wave 3" round, with total losses now put at roughly 1,806 BTC (~$143.9 million).
Immunefi puts July crypto hack losses at $110 million — and uses the occasion to market its audit competitions
Immunefi says crypto lost about $110 million to hacks in July and paid researchers $2.32 million, in a statement that also markets its own audit-competition product against rival auditors.
Coinsbuy drained of $8.07M across TRON and Ethereum; wallets refilled within a day, no statement
An attacker drained $8.07 million in USDT and ETH from crypto exchange Coinsbuy across TRON and Ethereum in under an hour on Aug. 9, and the exchange quietly topped the wallets back up without explaining how.
Emurgo winds down SecondFi wallet, keeping only an asset-recovery team after Cardano exploit
Cardano developer Emurgo says wallet firm SecondFi will not resume operations after a June exploit exposed private keys, drained 16 million ADA to attackers and moved 129 million ADA to an unidentified white hat.
BonkDAO says $20M in BONK drained via malicious governance proposal
BonkDAO said an attacker pushed through a malicious governance proposal and drained an estimated $20 million in BONK from its treasury, with Upbit halting BONK deposits and withdrawals in response.
Wallet linked to accused $65M DeFi hacker Medjedovic moves $13.5M through Tornado Cash
On-chain records show a wallet tied to accused DeFi hacker Andean Medjedovic sent roughly $13.5 million in Ether to Tornado Cash, bringing funds laundered from his alleged thefts to nearly $25 million.
Drift's fix for its $295M hack: IOUs paid out of future revenue, possibly over eight years
Drift proposed compensating victims of April's $295 million hack with "recovery tokens" backed by future protocol revenue — a plan that, at 2025's earnings rate, could take roughly eight years to make users whole.