CrossCurve confirmed its cross-chain bridge was exploited after a smart contract validation flaw let attackers unlock tokens and drain about $3 million across several networks. The project has told users to stop using the platform while it investigates the breach.

A massive trove of 149 million stolen login credentials has been uncovered in a publicly accessible database, exposing the growing threat of infostealer malware and raising alarms over how easily sensitive personal, financial and government-linked data can be harvested—often without victims realizing their devices were ever compromised.

Matcha Meta suffered a hack through its SwapNet integration, with attackers stealing around $16.8 million by swapping USDC for Ether and bridging it to Ethereum. Users who disabled One-Time Approvals and set direct allowances were affected, while those using the One-Time Approval feature were safe.

Makina Finance lost about 1,299 ETH, worth around $4.13 million, after hackers exploited its DUSD/USDC Curve pool using a flash loan and manipulated price data. Part of the stolen funds were captured by an MEV builder, and the remaining ETH is now held in two wallets while the platform reviews the incident.

A crypto wallet lost over $282 million in Bitcoin and Litecoin after the owner was tricked in a social engineering scam. Much of the stolen funds were converted to Monero and moved across multiple blockchains, causing a sharp spike in its price.

Reports of a potential large-scale Instagram data leak triggered concern this week after cybersecurity firm Malwarebytes claimed that millions of user records were discovered for sale on underground forums

A new phishing scam is targeting MetaMask users, tricking them with fake 2FA messages to steal their wallet seed phrases. The attackers use cloned websites and urgent emails to gain full access to users’ wallets.

North Korea has set a new records when it comes to crypto theft in 2025, stealing a total of billions through increasingly sophisticated cyber operations that underscore how deeply digital asset crime has become embedded in the regime’s state strategy.

Hackers took control of Rainbow Six Siege, giving players billions of in-game credits and rare items, forcing Ubisoft to shut down the servers. The company is rolling back the affected accounts while allowing players to keep any items they used, and is gradually reopening the game.

Over $35 million in cryptocurrency stolen from LastPass users since 2022 has been traced to Russian cybercriminals using weak master passwords and laundering funds through mixers and Russian exchanges. TRM Labs found the thefts continued for years, showing that even encrypted vaults can be compromised if security practices are weak.