News category
Security & incidents
Hacks, vulnerabilities, fraud, asset loss and security-control disclosures.
Image: CoinDeskBTCPay Server LND Vulnerability Exploited to Drain Merchant Lightning Nodes, CoinDesk Reports
According to CoinDesk reporting that is not officially confirmed, attackers exploited a critical flaw in BTCPay Server to compromise LND credential files and drain merchant Lightning nodes.
Latest coverage
Security & incidents
Page 50 of 66
CoinDeskBTCPay Server LND Vulnerability Exploited to Drain Merchant Lightning Nodes, CoinDesk Reports
According to CoinDesk reporting that is not officially confirmed, attackers exploited a critical flaw in BTCPay Server to compromise LND credential files and drain merchant Lightning nodes.
crypto.newsTrezor User Reports Life Savings Lost Through Sponsored Google Phishing Ad Campaign
According to media reporting by crypto.news, an individual identified as David posted on X that his cryptocurrency life savings were stolen after a sponsored search result impersonating Trezor directed him to a fraudulent phishing website hosted on Google Sites. The affected user stated that the fraudulent page harvested wallet recovery information. Trezor subsequently issued a warning regarding an increase in deceptive sponsored search results, though the specific claims remain not officially confirmed by independent audits or first-party validation.
CoinDeskBybit Files Lawsuit Against North Korea and Lazarus Group Following Massive Digital Asset Heist, Secures Asset Freeze
According to reporting by CoinDesk published on August 7, 2026, cryptocurrency exchange Bybit has initiated a civil lawsuit in a U.S. federal court against the Democratic People's Republic of Korea, its Reconnaissance General Bureau, and the Lazarus Group over an alleged $1.5 billion theft. The exchange also secured a preliminary injunction to freeze certain identified stolen assets while litigation proceeds, though these claims remain not officially confirmed by an independent or judicial authority outside the plaintiff's public statements.
crypto.newsRussia arrests more than 20 after raids on unregistered crypto exchange services
According to reporting by crypto.news, Russian authorities detained over 20 workers following raids on nine unregistered crypto exchange services in Moscow over allegations of laundering scam proceeds, which is not officially confirmed.
crypto.newsBitcoin Developer Cites Self-Custody Fears After Coldcard Wallet Incident
According to reporting by crypto.news, Bitcoin developer René Pickhardt stated that self-custody fears and key management complexities limited his accumulation of BTC, a development that coincides with reported Coldcard hardware wallet vulnerabilities and estimated losses that are not officially confirmed.
crypto.newsColdcard Temporarily Halts Customer Data Deletion Over July Exploit
According to reporting by crypto.news, hardware wallet manufacturer Coldcard has temporarily suspended its automatic customer data deletion schedule due to legal obligations tied to a security incident disclosed on July 30, 2026. This reported development has not officially confirmed formal litigation, but preserves records that would otherwise have been erased after 120 days.