SecuritySecurity
News about Security, written in plain language.
Showing news in Security. View all news
Showing 25–34 of 34
Security
SecurityTrezor’s support portal leak was a helpdesk, not the device
On 17 January 2024 Trezor said a support ticketing vendor had been accessed. Hardware wallets stayed intact. The inbox did not.EasyCryptoGuides · · 1 min read
SecurityA hacked SEC account is not an ETF approval
Someone took the phone number behind the SEC’s X login and announced ETF approval a day early. Social media is not the Federal Register.EasyCryptoGuides · · 1 min read
SecurityThe Ronin hack was a bridge with too few keys, not Ethereum failing
Sky Mavis’s sidechain bridge did what a 5-of-9 scheme does when five keys are in the wrong hands. Ethereum mainnet kept producing blocks. The game’s on-ramp did not.EasyCryptoGuides · · 1 min read
SecurityWormhole was a bridge bug. Jump put the ETH back.
A signature-check failure on the Solana side of a cross-chain bridge printed IOUs that were not matched by ether on Ethereum. Users of the wrapped token got made whole by a company, not by maths.EasyCryptoGuides · · 1 min readSecurityPoly Network’s $610m hole was a bridge bug. The chains kept running.
A little-known interoperability protocol lost on the order of $610 million, then spent two weeks getting it returned. Ethereum did not halt. A keeper path did.EasyCryptoGuides · · 1 min readSecurityLedger’s shop dump was a mailing list, not the device
A million emails, plus a large slice of postal details. Hardware wallets stayed intact. Phishing and, later, worse mail, used the list. Cold storage does not encrypt the invoice.EasyCryptoGuides · · 1 min readSecurityKuCoin’s theft was hot-wallet keys, not a broken chain
Initial headlines said $150 million; later tallies sat near $275–285 million across BTC, ETH and a pile of ERC-20s. An exchange login is still a company wallet.EasyCryptoGuides · · 1 min readSecurityBinance’s 7,000 BTC theft is why SAFU existed
Phishing and malware against users, then one withdrawal that passed existing checks. Roughly $41 million at the day’s print. Bitcoin confirmed a signature. It did not fail.EasyCryptoGuides · · 1 min readSecurityCoincheck’s NEM theft was an exchange wallet, not a broken ledger
Then the largest exchange theft by dollar print. A Tokyo shop that was still only “deemed” registered kept customer NEM online. Custody vs the chain is the whole story.EasyCryptoGuides · · 1 min readLatest Security news
SecurityACryptoS says about $665,000 left its vaults. Deposits are closed. Withdrawals are not.
ACryptoS says about $665,429 left concentrated-liquidity vaults on five chains on 8 November. Deposits are rejected. Withdrawals stayed open. The project is retiring the vaults and is not promising to repay depositors.EasyCryptoGuides · · 3 min read
SecurityGopax halted trading after an email claiming a hack. A freeze is not a confirmed theft.
Gopax was still halted on Monday 9 November. News1 says the company will not publish a restart time, and that user assets have been moved to cold wallets. No loss is confirmed.EasyCryptoGuides · · 3 min readSecurity