SecuritySecurity
26 articles tagged Security.
Articles
Showing 13–24 of 26
Security
SecurityThe Bybit theft was a company wallet. The chain did what signatures do.
Bybit lost a record sum from a wallet its signers controlled. Later attribution pointed at North Korea. A 2026 lawsuit tries to freeze what can still be reached.EasyCryptoGuides · · 2 min read
SecurityDMM Bitcoin’s theft is Japan’s custody lesson, again
On 31 May 2024 DMM Bitcoin reported an unauthorised outflow of 4,502.9 BTC. A company wallet was emptied. Bitcoin’s rules were not.EasyCryptoGuides · · 1 min read
SecurityTrezor’s support portal leak was a helpdesk, not the device
On 17 January 2024 Trezor said a support ticketing vendor had been accessed. Hardware wallets stayed intact. The inbox did not.EasyCryptoGuides · · 1 min read
SecurityA hacked SEC account is not an ETF approval
Someone took the phone number behind the SEC’s X login and announced ETF approval a day early. Social media is not the Federal Register.EasyCryptoGuides · · 1 min read
SecurityThe Ronin hack was a bridge with too few keys, not Ethereum failing
Sky Mavis’s sidechain bridge did what a 5-of-9 scheme does when five keys are in the wrong hands. Ethereum mainnet kept producing blocks. The game’s on-ramp did not.EasyCryptoGuides · · 1 min read
SecurityWormhole was a bridge bug. Jump put the ETH back.
A signature-check failure on the Solana side of a cross-chain bridge printed IOUs that were not matched by ether on Ethereum. Users of the wrapped token got made whole by a company, not by maths.EasyCryptoGuides · · 1 min read
SecurityPoly Network’s $610m hole was a bridge bug. The chains kept running.
A little-known interoperability protocol lost on the order of $610 million, then spent two weeks getting it returned. Ethereum did not halt. A keeper path did.EasyCryptoGuides · · 1 min read
SecurityLedger’s shop dump was a mailing list, not the device
A million emails, plus a large slice of postal details. Hardware wallets stayed intact. Phishing and, later, worse mail, used the list. Cold storage does not encrypt the invoice.EasyCryptoGuides · · 1 min read
SecurityKuCoin’s theft was hot-wallet keys, not a broken chain
Initial headlines said $150 million; later tallies sat near $275–285 million across BTC, ETH and a pile of ERC-20s. An exchange login is still a company wallet.EasyCryptoGuides · · 1 min read
SecurityBinance’s 7,000 BTC theft is why SAFU existed
Phishing and malware against users, then one withdrawal that passed existing checks. Roughly $41 million at the day’s print. Bitcoin confirmed a signature. It did not fail.EasyCryptoGuides · · 1 min read
Security