
Indian crypto exchange CoinDCX has denied allegations of a new security breach involving roughly $15.8 million, insisting customer funds are safe. Blockchain investigator ZachXBT challenged that explanation, noting that at least one compromised address was still processing deposits and interacting with CoinDCX's current hot wallets months after the July 2025 incident. The dispute stems from transfers of about 15.99 million USDT and 5,783.81 TRX on the TRON network flagged by investigator Darcy. CoinDCX's CEO said the addresses were compromised in last year's hack and that the exchange is investigating the latest claims. No independent confirmation of a new breach or customer losses has emerged.
20 hours ago

NEAR co-founder Illia Polosukhin warns that the internet is heading toward a "security Armageddon," pointing to vulnerabilities in widely used software components such as PHP/WordPress, malicious TLS certificates, Node.js, and LiteLLM that could trigger cascading attacks. He calls for stronger AI-assisted defenses and cryptographic systems. The article also references NEAR's previously disclosed $3.8 million Intents exploit and its compensation pledge, and notes that NEAR's price fell about 3.61% on the day to around $5.02, while futures open interest dropped 7.45%.
21 hours ago

President Trump is set to headline a White House cybersecurity event on October 21 highlighting federal efforts to combat overseas crypto fraud. FBI data shows Americans reported over $11 billion in crypto-related losses in 2025, with complaints up 17%. The Justice Department has frozen more than $701 million in illicit crypto assets and shut down over 500 fake investment sites. Officials expected to attend include the Homeland Security secretary, FBI director, defense secretary, and attorney general. The article does not address specific coin prices or project developments.
2026-10-21

Qubic's Layer-1 blockchain is back online after a seed-generation vulnerability let attackers drain roughly 1.4 million QU tokens from 1,404 wallets, forcing a network halt on October 18. A Computor quorum approved the recovery plan, and the first funds have been returned to verified wallet owners. Affected users must file claims through the official portal by May 1, 2027, and anyone who created a web wallet before version 4.26.4 must generate a new one. About 12.9% of the stolen funds reached MEXC, which has frozen the related accounts.
2026-10-21

Qubic's Layer-1 blockchain was attacked due to insufficient randomness in wallet recovery seed generation. Between October 17 and 18, attackers stole roughly 2.94 trillion QU tokens—worth about $1.4 million—from 1,404 wallets. The network was halted at tick 85,371,949, and about 87.1% of the stolen tokens remain frozen on-chain, while the remaining 12.9% flowed to MEXC, which froze the related accounts. Developers have patched the seed generation flaw, but older wallets may still be at risk; the timing of network resumption and an asset recovery plan are still pending a decision by Computors.
2026-10-19

Authorities in Ghana and Nigeria arrested 28 suspects in a joint international operation targeting cyber fraud, with private firms including Binance and Coinbase helping investigators identify over $11 million in potentially freezeable funds. Coinbase reported preventing more than $415,000 in potential fraud losses and identifying over 65 victims. Ghanaian police confirmed 117 trafficking victims, while Meta removed more than 3.7 million suspicious accounts. The operation, led by the UK's National Crime Agency, targeted criminal networks involved in crypto investment scams and impersonation fraud.
2026-10-18

Cysic's cross-chain bridge was exploited through a flaw in its message-handling logic, allowing an attacker to mint 10 million CYS tokens without authorization on BNB Smart Chain. The Cysic Foundation has suspended bridge operations and blacklisted an address holding roughly 2.8 million CYS to restrict transfers. The project says its mainnet and other systems were unaffected and user wallet funds were not stolen, and it is still investigating the flow of tokens and assessing the final financial loss.
2026-10-18

At the Hexacon security conference in Paris, Calif.io demonstrated a persistent jailbreak for the iPhone 18 Pro running iOS 27.0.1, keeping root access even after a reboot — a first on current-generation hardware. The team withheld details of the exploit and released no tool, saying they'll disclose more in due course. Apple has yet to comment; its security advisories have previously credited Calif.io for crash bugs found with Claude and Anthropic Research. The story has no direct connection to cryptocurrency.
2026-10-16

Toronto police announced Wednesday the arrest of seven men in connection with the July 2026 kidnapping of a cryptocurrency exchange owner, including three Canadian Armed Forces members. A total of 82 charges were laid, including kidnapping for ransom and multiple firearms offenses. The victim was abducted at gunpoint near Finch Avenue East and Bayview Avenue, handcuffed, and assaulted as suspects sought access to his crypto assets and corporate security systems before releasing him with threats not to contact police. Searches turned up a 3D-printed firearm, a silencer, drugs, and over 2,700 rounds of ammunition, roughly 2,500 of which were stolen from the military.
2026-10-16

On October 15, 2026, Ledger introduced new security requirements for authorized retailers after attackers bought genuine hardware wallets, tampered with them to implant hidden electronics, and stole recovery phrases during setup to drain funds via cellular networks. Ledger has paused sales through authorized resellers in Southeast Asia and Hong Kong, is inspecting retail stores and warehouses, says its internal systems, OS, and secure chips were unaffected, and is working with law enforcement to trace the stolen funds.
2026-10-15