SecuritySecurity
48 articles tagged Security.
Articles
Showing 1–12 of 48
Security
SecurityGopax halted trading after an email claiming a hack. A freeze is not a confirmed theft.
Gopax was still halted on Monday 9 November. News1 says the company will not publish a restart time, and that user assets have been moved to cold wallets. No loss is confirmed.EasyCryptoGuides · · 3 min read
SecurityChainalysis says password hashes and live tokens were exposed. The tracing files were not.
Chainalysis’s 7 November note says Reactor, know-your-transaction, and address screening are back online. Data Solutions is not in that note. Password hashes and live tokens for every user were exposed.EasyCryptoGuides · · 5 min read
SecurityBTCPay says old servers were drained. A self-hosted wallet is still a hot wallet.
BTCPay’s 2 November blog says bitcoin and litecoin were taken from hot wallets on version 2.4.1 and older. That is the flaw fixed in 2.4.2, used another way. An old server needs a fresh machine and a new wallet.EasyCryptoGuides · · 4 min read
SecurityMercado Bitcoin says customers will not lose. The hot wallet did.
Mercado Bitcoin’s site is open for looking. Crypto quantities on screen are the 2 November positions. Withdrawals, deposits, and trading are still off. The FAQ no longer states the dollar total.EasyCryptoGuides · · 7 min read
Securityb14g says 97 million CORE left its staking contracts. The bitcoin stayed locked.
At 09:29 UTC on 31 October 2026 about 97 million CORE staked through b14g was withdrawn without permission. A later post says the recovered pile goes back within five to seven days, about 70% of each stake. The rest is a promise against future revenue.EasyCryptoGuides · · 7 min read
SecurityPolymarket says it will repay about $3.9 million. A script on the site used open sessions.
Polymarket halted trading on 29 October 2026 after a script on its site used open sessions to sell positions and move funds. Its post-mortem puts the repayment at about $3.9 million.EasyCryptoGuides · · 4 min read
SecurityBinance puts the hot-wallet loss near $6.3 billion. Covering it is a company promise.
Binance reopened HYPE and APT withdrawals on 8 November, and Alpha withdrawals on four networks on 9 November. INJ, PLASMA, NEAR, and LTC were not in that post. The 98% figure did not move.EasyCryptoGuides · · 19 min read
SecurityzkLink stopped Nova after a bridge exploit. A halt is not a refund.
On 29 October 2026 zkLink suspended block production on Nova and disabled withdrawals after an attack on its Arbitrator contracts on Ethereum and Optimism. The project published no loss figure and no cause beyond the contract it named.EasyCryptoGuides · · 5 min read
SecurityHumanode says 12.8 million eHMND was taken. Native HMND was not.
At 15:00 UTC on 28 October 2026 an attacker took 12,773,243.03 eHMND from 436 accounts on Humanode’s contract environment. The project fixed that path in about 40 minutes and said every owner will be repaid in eHMND.EasyCryptoGuides · · 5 min read
SecurityBloom says a trading bot lost 9,408 SOL. A bot that can send is a hot wallet.
On 26 October 2026 Bloom said a flaw in a third-party module drained about 9,408 SOL from 49 addresses belonging to nine users. It took the bot offline and promised to repay those users in full.EasyCryptoGuides · · 4 min read
Security