#hack
17 posts
Crypto swap guides, coin analysis, and exchange comparisons.
Keplr halts Google and Apple login after Web3Auth flaw leaks private keys
Keplr suspended Google and Apple login on November 6–7, 2026 after a flaw in Web3Auth’s infrastructure leaked private keys of social-login wallets. Early loss estimates exceed $700,000 on Cosmos chains; seed-phrase and hardware wallets are unaffected.
Crédit Mutuel Arkéa confirms cyberattack as ZachXBT traces $133M in crypto
French bank Crédit Mutuel Arkéa confirmed on November 4, 2026 that a cyberattack enabled fraudulent operations, a day after on-chain investigator ZachXBT named it as the alleged victim of a $133 million theft withdrawn through crypto exchanges.
Name.com DNS hijack sends visitors of 12 DeFi sites to a wallet drainer
Overnight into October 31, 2026, attackers redirected DNS records for at least twelve DeFi websites registered with Name.com to copies running Step Drainer; Bitquery counts $202,386 taken from 32 wallets.
FBI names North Korea in Binance hack, lists 600+ addresses; THORChain pauses
On October 31, 2026, the FBI attributed the $6 billion-plus Binance theft to North Korea’s TraderTraitor and published more than 600 attacker addresses, as THORChain halted trading on 10 of its 13 chains.
Binance hack: TRM blames North Korea’s TraderTraitor, SAFU to cover $6.3B
On October 30, 2026, Binance named a compromised DevOps engineer’s laptop as the likely entry point for the $6.3 billion hack, TRM Labs attributed it to North Korea’s TraderTraitor, and Binance pledged to cover losses via SAFU.
Binance hot wallet hack: ~$6.3B drained via EIP-7702 in crypto’s largest theft
On October 29, 2026, attackers drained Binance hot wallets on ten blockchains in about 20 minutes, starting at 20:05 UTC; Binance estimates the impact at about $6.3 billion, the largest crypto theft on record.
Ngrave push-alert phishing drains $2.56M from 70 wallets, October 2026
On October 17, 2026, attackers hijacked the push-notification provider of Belgian wallet maker Ngrave and sent fake security alerts; Ngrave’s October 19 report counts about $2.56 million stolen from roughly 70 wallets.
Railway breach exposes env variables; ~$371K drained from crypto wallets
On October 21, 2026, cloud platform Railway told customers to rotate every secret after an unauthorised party may have decrypted environment variables; researcher Taylor Monahan counted about $371,000 drained from linked wallets.
Drift hacker moves up to $61M of ETH into Tornado Cash after two quiet months
On October 20, 2026, wallets linked to the April Drift Protocol exploit sent between $32 million and $61.6 million in ETH into Tornado Cash after about two months of silence; roughly 81,500 ETH remain with the attacker.
Ledger probes $86M+ losses tied to reseller CryptoBilis, October 2026
On October 9, 2026, Ledger opened an investigation into $86M+ in losses reported by users who bought devices from Southeast Asian reseller CryptoBilis, and told recent buyers not to set them up.
Base vault loses $6M in wstETH after 3-of-7 multisig whitelist change
On October 4, 2026, an unclaimed Base vault controlled by an anonymous 3-of-7 multisig lost about 1,783 wstETH, over $6M, minutes after two whitelist edits added a new borrower.
NEAR Intents hack: $3.8M returned in full after 48-hour ultimatum
By October 3, 2026, the full $3.8M taken in the October 1 NEAR Intents exploit was returned, NEAR GM Alex Shevchenko said, after the team identified the attacker and set a 48-hour deadline.