#security
32 posts
Crypto swap guides, coin analysis, and exchange comparisons.
Coldcard X account hijacked to push fake firmware alert, October 2026
On October 11, 2026, Coldcard’s official X account posted a fake “critical firmware vulnerability” alert for the Mk4, Mk5 and Q with a phishing link; no losses have been verified.
XRP Ledger overflow bug could have minted XRP from nothing, Oct 2026
On October 9, 2026, XRP Ledger developers disclosed a 2015-era overflow bug that could have created XRP beyond the 100 billion cap; it was quietly patched on September 25 and shows no sign of exploitation.
Ledger probes $86M+ losses tied to reseller CryptoBilis, October 2026
On October 9, 2026, Ledger opened an investigation into $86M+ in losses reported by users who bought devices from Southeast Asian reseller CryptoBilis, and told recent buyers not to set them up.
Base vault loses $6M in wstETH after 3-of-7 multisig whitelist change
On October 4, 2026, an unclaimed Base vault controlled by an anonymous 3-of-7 multisig lost about 1,783 wstETH, over $6M, minutes after two whitelist edits added a new borrower.
NEAR Intents hack: $3.8M returned in full after 48-hour ultimatum
By October 3, 2026, the full $3.8M taken in the October 1 NEAR Intents exploit was returned, NEAR GM Alex Shevchenko said, after the team identified the attacker and set a 48-hour deadline.
Best Privacy Coins in 2026: Monero, Zcash, Dash, Firo
Monero, Zcash, Dash, and Firo compared on privacy model, liquidity, and delisting risk in 2026 — an honest roundup, not a hype list.
Bridge Hacks in 2026: How to Swap Cross-Chain Safely
2026 has been a brutal year for cross-chain bridges. Here's exactly what attack surface bridges carry, and how deposit-based swaps sidestep that risk.
SimpleSwap Review 2026: Fees, Limits, Safety
We break down SimpleSwap's real fee spread, per-coin limits, and verification triggers — everything to check before you route through it.
Robinhood Chain memecoin rug pull: $18.4M linked to one operation
On September 27, 2026, onchain analyst Wazz alleged that one operation extracted at least $18.43 million from 53 Robinhood Chain memecoin launches between July 10 and September 21 by exploiting launchpad wallet exemptions.
Bitget hack: $387.5M drained from hot wallets, CEO points to North Korea
On September 24, 2026, attackers drained Bitget’s hot and warm wallets of about $351.6 million, later revised to $387.5 million, by spoofing transfer data rather than stealing keys. Bitget says users will be covered.
BitMEX shuts down after 11 years: what to do if your exchange closes
BitMEX, the exchange that invented the bitcoin perpetual swap, stopped trading for good at 04:00 UTC on September 23, 2026. Withdrawals stay open, but balances left behind pay the greater of 1% a year or $50.
Fetch.ai, NuNet, SingularityNET exploit: unbacked mints, $2.25M profit
On September 19–20, 2026, one attacker drained about 8.7M FET from Fetch.ai’s converter and minted unbacked NuNet, SingularityNET and World Mobile tokens, but realized only about $2.25 million.