Verified scams, breaches and threats in digital assets, with what to check and what to do.
US authorities ordered a ban on MEXC transfers through US financial institutions, effective 30 days after Federal Register publication. The order does not establish a worldwide withdrawal halt.
A Bitcoin “quantum landmine” proposal would put an attacker’s own BTC at risk. Owners would need proof of ownership prepared in advance; adoption is unconfirmed.
Stolen Binance funds moved through about 12,000 wallets in the first three and a half days. A November 5 analysis put frozen or seized assets at about $2.85 billion; this does not mean users have been repaid.
Seven THORChain swap routes resumed on November 3. The summary shared in the group on November 5 describes a partial restart, with some networks still restricted.
BIP-54 proposes four fixes to Bitcoin’s consensus rules. Some mining pools have begun producing compatible transactions; mainnet activation is still pending.
South Korea plans to prepare crypto incident-reporting guidelines in November. A shared report summary outlines immediate notifications to support incident investigation and information sharing.
Fake developer tools and recruiter coding tests featured in the Binance theft reported this week. Douzone Bizon customers also issued possible-leak notices, while KISA warned of ransomware on Synology NAS devices.
Customers report unauthorized use of AI API keys stored on Northflank. The cloud hosting platform says to assume all environment variables were decrypted and rotate every stored secret.
18,270 BTC stolen from a Binance hot wallet. A freeze on other tokens does not mean the BTC is frozen.
Binance withdrawal availability varies by asset and network. Binance says approximately $6.3 billion in crypto assets was stolen from its hot wallets on October 29 (UTC).
Chainalysis customer names, emails and other profile data were exposed. Watch for unexpected password reset requests and authentication prompts.
About 8.2 million personal records were stolen from 90+ Korean businesses. This week also saw a Daishin Securities data leak and security updates for older iPhones and iPads.
Some booking data was viewed without authorisation through ONDA's Hotel Plus system. About 25,000 bookings may be affected; the exact scope is still under investigation.
Daishin Securities says personal and credit data of more than 38,000 customers has leaked. Eight items were exposed, including names, addresses and encrypted account numbers.
About $16M was drained from old deposit addresses at CoinDCX, India's largest crypto exchange. The exchange first called the reports a false alarm, then confirmed the loss days later.
An attacker minted unbacked tokens on Initia and bridged out about $2.7M in assets. As of Oct 27, no restart date had been set.
Bithumb has reported a breach of its internal mobile work system. Whether customer data was exposed remains under review.
Dark web alert from your bank? Chase Credit Journey (powered by Experian) alerts aren't proof of a Chase breach or identity theft.
Railway disclosed that an unauthorized party may have obtained decrypted customer secrets, including API keys and database credentials. It urged all users to rotate or revoke stored credentials.
Breaches at 16 Korean firms exposed about 100,000 personal records. Microsoft fixed 1,411 flaws, and Ledger found a hardware wallet implant.