Security Incidents

Yapeswap lost approximately $21.9K in a governance exploit that allowed an attacker to manipulate critical contract roles. According to @SlowMist_Team, the incident resulted from a zero quorum proposal that enabled a small fraction of voting power to transfer the 'feeToSetter' role to a malicious ac

According to Slow Mist, Yapeswap suffered an attack on October 25, resulting in approximately $21,900 in losses. The vulnerability stemmed from the WorkersUnion governance mechanism having zero quorum requirements, allowing an attacker with just 0.000055% voting power to pass a proposal that transfe

According to CoinDCX, on October 25, the Indian crypto exchange clarified that 15.99 million USDT lost on October 21 originated from a deprecated wallet generated in January 2025 and compromised during a security incident in July. The exchange stated the loss resulted from accumulated user deposits

According to Salus monitoring, Tether has blacklisted 9 addresses related to CoinDCX security incident and frozen 2,212,850.3 USDT. The action was triggered by an anomalous transfer of approximately 15.99 million USDT identified by investigator Darcy. Salus provided on-chain evidence based on reserv

According to Bitcoin Core's official security policy, the project changed its security rules on October 22 to accelerate disclosure and patching for vulnerabilities easily discovered through AI tools or simple prompts. The policy update, merged from a GitHub proposal submitted on October 16, introdu

According to ChainCatcher, based on monitoring by Slow Mist, DarkSword malware is conducting targeted attacks on iPhone crypto users, exploiting iOS vulnerabilities to break sandbox restrictions and steal Keychain passwords, wallet private keys, and notes data. Users are advised to update their iPh

According to BlockBeats, hardware wallet provider Keystone confirmed on October 25 that its official website suffered unauthorized access on October 20. After verifying Shopify API activities, the company determined on October 23 that a third party obtained customer shipping information, including n

Keystone Hardware Wallet disclosed today that its website was accessed without authorization on October 20, exposing customer names, contact details, shipping addresses and order details, including items purchased and prices. The company confirmed on October 23, after verifying API activity with Sho

According to The Cryptonomist, X100 stablecoin suffered an exploit on October 24 that drained $4.7M from its treasury after attackers exploited governance vulnerabilities to seize protocol voting control. The attack exposed critical flaws in the protocol's governance mechanism, allowing unauthorize

Chainalysis reported an exploit on the X100 protocol that resulted in the theft of approximately $4.7 million in stablecoins. The attack was executed through contracts that captured protocol Senate seats, allowing attackers to gain a voting majority and manipulate treasury assets. This incident high

KeystoneWallet, a hardware wallet provider, suffered a data breach that exposed customer names, contact details, shipping addresses, and order details, according to a tweet from @SolanaFloor. Payment information, private keys, and recovery phrases remain secure. The incident raises security concerns

According to ChainCatcher, Keystone confirmed its website suffered a security vulnerability that exposed customer addresses and order details. The company stated it immediately stopped unauthorized access upon discovery and completed the security patch. Keystone emphasized that payment information,

Electrum wallet released version 4.8.3 on October 24, addressing a security vulnerability that allowed malicious servers to deceive users into overpaying transaction fees. The flaw exploited a lack of transaction validation, enabling attackers to trick users into sending funds with inflated fees. Th

According to Arkham, Bitget hacker funds transferred $78.01 million to new addresses between October 15 and October 23.

According to security firm Blockaid, X100 on Ethereum came under attack on October 24 at 22:49 UTC, with approximately 4.85 million USDT drained across two transactions. An attacker seized two of the project's three governance seats and sold 400,000 X tokens from the treasury into a newly created em

According to Cryptonomist, an exploit targeting Initia's AUSD stablecoin resulted in 1.4 million tokens being moved to an attacker's address on October 24. The incident prompted Agora to halt operations on the affected protocol while investigating the breach.