Blockchain investigator ZachXBT claims a man known as “Lick” stole tens of millions of dollars in crypto from U.S. government wallets linked to seized Bitfinex funds. The suspect is alleged to be the son of the boss of a company contracted to manage those assets, raising concerns over security and oversight.

Decentralized finance projects are increasingly distancing themselves from public Discord servers, arguing that the platform has become a security liability rather than a community hub as scams and phishing attacks continue to target users at scale.

China has told local companies to stop using cybersecurity software from more than a dozen U.S. and Israeli firms, citing national security risks and fears that sensitive data could be sent overseas. The move supports Beijing’s push to rely more on home-grown technology and reduce dependence on Western suppliers.

Coinbase has finally made its first arrest of one of the masterminds behind the exchange's customer data breach that exposed nearly 70,000 user accounts.

A Singapore-based entrepreneur has fallen victim to a sophisticated crypto malware scam, losing over $14,000 in digital assets after downloading a seemingly legitimate online game launcher.

A critical vulnerability in React, one of the world’s most widely used JavaScript libraries, is being actively exploited by hackers to inject crypto-draining malware into legitimate websites — a development that has alarmed cybersecurity experts and Web3 teams alike.

A flaw in a MediaTek chip used in many Android phones lets attackers take full control of the device, and it cannot be fixed because it sits in the chip’s hardware. Ledger says this makes storing crypto keys on affected phones unsafe, as the weakness allows attackers to bypass security during startup.

Three Chinese men were jailed in Singapore for carrying out cyberattacks on gambling and SMS companies, earning US$3 million in cryptocurrency. They were hired by a Ni-Vanuatu citizen, used malware and hacking tools, and were caught during a police raid.

Cybersecurity researchers have uncovered a dangerous new Android vulnerability, dubbed “Pixnapping,” that could allow malicious apps to secretly steal what’s being shown on your phone screen — including crypto wallet recovery phrases, two-factor authentication (2FA) codes, and other sensitive information.

A teenage hacker and an accomplice accessed a Crypto.com employee account, exposing personal information of a small number of users. No customer funds were stolen, but the breach has raised questions about the exchange’s security and transparency.