SecuritySecurity
News about Security, written in plain language.
Showing news in Security. View all news
Showing 1–12 of 13
Security
SecurityCoinbase’s contractor breach is an insider story, not a chain failure
In a 14 May 2025 filing, Coinbase said overseas support contractors stole account data and that it would not pay a $20 million ransom. Keys in cold storage were not the headline. Names were.EasyCryptoGuides · · 2 min read
SecurityThe Bybit theft was a company wallet. The chain did what signatures do.
Bybit lost a record sum from a wallet its signers controlled. Later attribution pointed at North Korea. A 2026 lawsuit tries to freeze what can still be reached.EasyCryptoGuides · · 2 min read
SecurityDMM Bitcoin’s theft is Japan’s custody lesson, again
On 31 May 2024 DMM Bitcoin reported an unauthorised outflow of 4,502.9 BTC. A company wallet was emptied. Bitcoin’s rules were not.EasyCryptoGuides · · 1 min read
SecurityTrezor’s support portal leak was a helpdesk, not the device
On 17 January 2024 Trezor said a support ticketing vendor had been accessed. Hardware wallets stayed intact. The inbox did not.EasyCryptoGuides · · 1 min read
SecurityA hacked SEC account is not an ETF approval
Someone took the phone number behind the SEC’s X login and announced ETF approval a day early. Social media is not the Federal Register.EasyCryptoGuides · · 1 min readSecurityThe Ronin hack was a bridge with too few keys, not Ethereum failing
Sky Mavis’s sidechain bridge did what a 5-of-9 scheme does when five keys are in the wrong hands. Ethereum mainnet kept producing blocks. The game’s on-ramp did not.EasyCryptoGuides · · 1 min read
SecurityWormhole was a bridge bug. Jump put the ETH back.
A signature-check failure on the Solana side of a cross-chain bridge printed IOUs that were not matched by ether on Ethereum. Users of the wrapped token got made whole by a company, not by maths.EasyCryptoGuides · · 1 min readSecurityPoly Network’s $610m hole was a bridge bug. The chains kept running.
A little-known interoperability protocol lost on the order of $610 million, then spent two weeks getting it returned. Ethereum did not halt. A keeper path did.EasyCryptoGuides · · 1 min readSecurityLedger’s shop dump was a mailing list, not the device
A million emails, plus a large slice of postal details. Hardware wallets stayed intact. Phishing and, later, worse mail, used the list. Cold storage does not encrypt the invoice.EasyCryptoGuides · · 1 min readSecurityKuCoin’s theft was hot-wallet keys, not a broken chain
Initial headlines said $150 million; later tallies sat near $275–285 million across BTC, ETH and a pile of ERC-20s. An exchange login is still a company wallet.EasyCryptoGuides · · 1 min readSecurityBinance’s 7,000 BTC theft is why SAFU existed
Phishing and malware against users, then one withdrawal that passed existing checks. Roughly $41 million at the day’s print. Bitcoin confirmed a signature. It did not fail.EasyCryptoGuides · · 1 min readLatest Security news
SecurityTrezor’s shipping partner leaked customer details. The device is not the leak.
ShipMonk told Trezor it had unauthorised access to order data. About 13,700 recent buyers were exposed. Hardware wallets and keys were not.EasyCryptoGuides · · 2 min readSecurityCoinbase’s contractor breach is an insider story, not a chain failure
In a 14 May 2025 filing, Coinbase said overseas support contractors stole account data and that it would not pay a $20 million ransom. Keys in cold storage were not the headline. Names were.EasyCryptoGuides · · 2 min readSecurity