News category
Security & incidents
Hacks, vulnerabilities, fraud, asset loss and security-control disclosures.
Image: decrypt.co via LBankColdcard Hardware Wallet Firmware Flaw Leads to Million-Dollar Bitcoin Drains in Reported AI-Assisted Exploit
According to reporting by LBank News citing decrypt.co, hardware wallet maker Coinkite disclosed that a build error caused seeds to be generated from a software fallback rather than the hardware generator. Coinkite believes attackers utilized artificial intelligence to uncover the vulnerability, which has not officially confirmed by independent law enforcement.
Latest coverage
Security & incidents
Page 61 of 66
decrypt.co via LBankColdcard Hardware Wallet Firmware Flaw Leads to Million-Dollar Bitcoin Drains in Reported AI-Assisted Exploit
According to reporting by LBank News citing decrypt.co, hardware wallet maker Coinkite disclosed that a build error caused seeds to be generated from a software fallback rather than the hardware generator. Coinkite believes attackers utilized artificial intelligence to uncover the vulnerability, which has not officially confirmed by independent law enforcement.
crypto.news via LBankColdcard Mk3 Warning Follows Large Bitcoin Drain While Investigators Explore Potential Entropy Flaws
According to reporting by LBank News and crypto.news, Coinkite issued an advisory for Coldcard Mk3 devices running specific firmware versions following a massive digital asset transfer involving hundreds of coins. Investigators have observed suspicious wallet drainage patterns, though a direct connection to the hardware device vulnerability is not officially confirmed.
CoinDeskFake Flare Network Staking Site Reportedly Drains $8.5 Million in XRP from Dozens of Investors in South Korea
CoinDesk has reported that a fake Flare Network staking website allegedly stole $8.5 million in XRP from at least 71 investors in South Korea, with Seoul police warning that total losses may approach $20 million. Two suspects have been detained, and a third remains at large. These details are not officially confirmed and are based on media reporting.
CoinDeskBitRiver Founder Igor Runets Faces Fraud Charges in Russia: Not Officially Confirmed
According to CoinDesk, Igor Runets, founder of BitRiver, has reportedly been transferred from house arrest to a pre-trial detention facility in Russia. He faces accusations of large-scale fraud related to an alleged failure to deliver crypto mining equipment, with damages estimated at $12.5 million. These developments are not officially confirmed and are based solely on media reporting.
crypto.newsChina Business Journal Issues Warning on Bitcoin Extortion Scam Using Its Name
China Business Journal has issued a public warning after impostors allegedly used its name and Proton Mail to demand Bitcoin from companies, threatening negative coverage. The warning, as reported by crypto.news, is not officially confirmed and no victim losses or payment details have been disclosed. The scam involves impersonation and extortion tactics, but the full scope and impact remain unverified.
crypto.newsOstium Reports $23.75M USDC Exploit Originated from Off-Chain Breach, Not Smart Contract Flaw
According to crypto.news, Ostium has stated that its July exploit, which resulted in the loss of $23.75 million USDC, was caused by a breach in its off-chain infrastructure rather than a vulnerability in its smart contracts. The attacker manipulated price reporting mechanisms to drain funds from the protocol’s liquidity vault. This finding is not officially confirmed and is based solely on media reporting, with no verification from Ostium or any official source. The incident highlights risks associated with off-chain components in DeFi protocols.