⚠️ XPR Network Suffers $9M Exploit

Proton.Swaps on XPR Network was exploited for over $9 million due to a withdrawal bug. Producers patched the issue and secured around 1.8B XPR, while the token dropped 6.5%.

@LORE

⚠️ MEV Bot Front-Runs $7.8M rsETH Exploit

An attacker tried to exploit a vulnerability on Ethereum to steal $7.8M in rsETH. But MEV bot “yoink” front-ran the attack and took the funds instead.

@LORE

⚠️ $565K Lost in Phishing Attack

An Ethereum user lost around $565,768 in sUSDat after signing a fake phishing transaction.

The attacker used the signature to drain the funds from the victim’s wallet.

@LORE

⚠️ Two Men Sentenced to 12 Years Over Bitcoin Ransom

Two men in Costa Rica were sentenced to 12 years in prison each for laundering money obtained from the 2018 kidnapping of U.S. businessman William Sean Creighton. His family paid 148 BTC, worth around $1 million at the time, as ransom.

@LORE

⚠️ Curaçao Gaming Authority Breached

The CGA’s licensing portal was reportedly breached, with investigators still assessing what data was accessed.

The portal stores identity documents of casino owners, applicants and stakeholders from hundreds of operators, including Stake and Shuffle,raising concerns over potential exposure
Source link

@LORE

🔔 Discord Starts Age Verification

Discord is rolling out age assurance, classifying accounts as adult, teen, or unconfirmed based on account history and activity.

Adults incorrectly classified can verify their age via credit card, video selfie, or ID to access age-restricted content.
(More info)

@LORE

⚠️ Duelbits Hot Wallets Drained for $4.2M

Duelbits hot wallets on Ethereum, BSC, and Tron reportedly lost around $4.2 million in outflows to newly created addresses following a suspected private key compromise.

The stolen assets included ETH, USDT, USDC, BNB, and TRX, with most funds reportedly swapped into ETH.

@LORE

⚠️ Bitget reportedly hacked for over $170 million.

Large amounts of $ETH, $AVAX, $BNB and stablecoins are being transferred out, while users report withdrawal issues.

Bitget has not yet confirmed a hack.

@LORE

🔔 Bitget Confirms $350M Hack

Bitget has acknowledged a major security incident after approximately $350 million was reportedly compromised.

Bitget says it will cover the losses and fully reimburse all affected users.

@LORE

⚠️ Ex-LA Deputy Sentenced for Crypto Conspiracy

Former LA deputy Eric Chase Saavedra has been sentenced to 21 months in prison for helping crypto criminal Adam Iza locate a man holding over $100M in crypto.

Armed men later attempted to break into the victim’s home but fled after he fired a shot.

@LORE

⚠️ NEAR Intents Exploited for $3.865M

NEAR Intents suffered a $3.865M exploit after irregular BSC hot-wallet outflows.

The funds were sent to KuCoin and bridged to BTC. The exploiter also interacted with a Lazarus-linked address, but this does not confirm Lazarus involvement.

@LORE

🔔 NEAR Intents Hacker Returns $4M

The attacker behind the $4M NEAR Intents exploit has returned the entire stolen amount.

Following identification by the project’s CEO, the hacker apologized and sent back 100% of the funds, saying they regretted the theft.

No funds were retained.

@LORE

⚠️ $305K DAI Lost in Address-Poisoning Attack

A victim lost $305,560 in DAI after sending funds to a malicious Ethereum address that closely resembled their intended address.

Correct: 0x085adc...f1dd
Wrong: 0x085ccc...f1dd
Tx: [transaction link]

@LORE

⚠️ $6M Stolen From a Vault

An unnamed vault was drained of 1,783 wstETH worth around $6M in six transactions.

The exact security flaw is still being investigated.
Tx: [transaction link]

@LORE

⚠️ DNS Security Breach

Hackers hijacked the .gh (Ghana), .sl (Sierra Leone) and .as (American Samoa) registries, changing DNS records and obtaining HTTPS certificates for major brands and Google domains.

This could make fake websites look legitimate.

@LORE

⚠️ Crypto trader Frogman lost $4M+ in a hack while in Singapore for TOKEN2049.

Two wallets were drained of 9 tokens, including $1.77M $BP, $1.55M $MARSCOIN and $515K $CASHCAT.

The attacker swapped the funds into $ETH, $BNB and $SOL and moved them through privacy tools.

Frogman said he met “a lot of new people” in Singapore and still doesn’t know how it happened.

@LORE