Crypto & Wallets
Exchange hacks, wallet theft and fake crypto apps: what happened and how to protect funds.
Binance Hack North Korea: FBI Blames TraderTraitor for the $6.3 Billion Theft, and the Laptop Lesson for Every Business
Attackers took about $6.3 billion from Binance on October 29, 2026, and the FBI has named North Korea's TraderTraitor. Here is what is confirmed, what is still claimed, and what businesses should check this week.
CryptoPayment Gateway Vulnerability CVE-2026-81648: Unpatched WordPress Plugin Flaw Exposes Wallet Keys and Deletes Files, and What to Do Now
A CVSS 10.0 flaw in the CryptoPayment Gateway WordPress plugin lets anyone with no login read stored wallet keys, rewrite payment settings and delete files. There is no patch, so the fix is removal.
Binance Hack: A Compromised DevOps Laptop, a $6.3 Billion Theft the FBI Ties to North Korea, and What to Lock Down This Week
Binance says the $6.3 billion theft on October 29 may have started on one DevOps engineer's compromised laptop, and the FBI blames North Korea's TraderTraitor. Here is what is confirmed and what businesses should lock down.
Keystone Wallet Breach: Stolen Verification Key Means Fake Devices Could Pass the Check, and What Owners Should Do Now
An attacker got into Keystone's website and took the key its hardware wallets use to prove they are genuine. Here is what Keystone has confirmed, what is still unknown, and what owners should check this week.
Polymarket DebugBear Hack: How a Hijacked Monitoring Script Drained Traders, and How to Check the Scripts on Your Site
On October 29, 2026, a hijacked DebugBear monitoring script sold Polymarket traders' positions and moved their funds. Here is what is confirmed, what is not, and how to check the outside scripts on your own site.
Fake Crypto App on App Store: Padre Terminal Linked to $23,000 in Solana Wallet Thefts, and What to Check
A fake Padre Terminal trading app on Apple's App Store is linked to about $23,000 taken from 27 Solana wallets. Here is what is confirmed, what is not, and the checks to run on company phones this week.
Trezor Implant Warning: Suspected Spy Board Found in a Safe 5 Sold by CryptoBilis, and What Hardware Wallet Owners Should Do Now
A Trezor customer reported an extra cellular circuit board inside a Safe 5 bought from reseller CryptoBilis. Trezor has not confirmed it yet, but it is telling CryptoBilis buyers since March 2026 to move their funds now.
Hugging Face Malware: Fake Qwen2 Models Hijack GPU Servers for Crypto Mining, and a Fake Solana Kit Targets AI Coding Agents
Fake 'qwen2-tiny' models on Hugging Face ran hidden code when loaded, turning GPU servers into crypto miners and sometimes opening reverse shells. Here is what is confirmed and what to check this week.
Binance Hack: The $6.3 Billion Theft Traced to a DevOps Laptop, and What Businesses Should Check
Attackers drained about $6.3 billion from Binance's hot wallets on October 29, 2026. Binance's early finding points to an engineer's laptop. Here is what is confirmed, what is not, and what to check this week.
