SecuritySecurity
48 articles tagged Security.
Articles
Showing 37–48 of 48
Security
SecurityTrezor’s support portal leak was a helpdesk, not the device
On 17 January 2024 Trezor said a support ticketing vendor had been accessed. Hardware wallets stayed intact. The inbox did not.EasyCryptoGuides · · 1 min read
SecurityA hacked SEC account is not an ETF approval
Someone took the phone number behind the SEC’s X login and announced ETF approval a day early. Social media is not the Federal Register.EasyCryptoGuides · · 1 min read
SecurityThe Ronin hack was a bridge with too few keys, not Ethereum failing
Sky Mavis’s sidechain bridge did what a 5-of-9 scheme does when five keys are in the wrong hands. Ethereum mainnet kept producing blocks. The game’s on-ramp did not.EasyCryptoGuides · · 1 min read
SecurityWormhole was a bridge bug. Jump put the ETH back.
A signature-check failure on the Solana side of a cross-chain bridge printed IOUs that were not matched by ether on Ethereum. Users of the wrapped token got made whole by a company, not by maths.EasyCryptoGuides · · 1 min readSecurityPoly Network’s $610m hole was a bridge bug. The chains kept running.
A little-known interoperability protocol lost on the order of $610 million, then spent two weeks getting it returned. Ethereum did not halt. A keeper path did.EasyCryptoGuides · · 1 min readSecurityLedger’s shop dump was a mailing list, not the device
A million emails, plus a large slice of postal details. Hardware wallets stayed intact. Phishing and, later, worse mail, used the list. Cold storage does not encrypt the invoice.EasyCryptoGuides · · 1 min readSecurityKuCoin’s theft was hot-wallet keys, not a broken chain
Initial headlines said $150 million; later tallies sat near $275–285 million across BTC, ETH and a pile of ERC-20s. An exchange login is still a company wallet.EasyCryptoGuides · · 1 min readSecurityBinance’s 7,000 BTC theft is why SAFU existed
Phishing and malware against users, then one withdrawal that passed existing checks. Roughly $41 million at the day’s print. Bitcoin confirmed a signature. It did not fail.EasyCryptoGuides · · 1 min readSecurityWhat is cold storage?
Cold storage means the signing keys stay offline. It is a practice, not a product name, and it does not forgive a bad backup.EasyCryptoGuides · · 3 min read
CompaniesQuadrigaCX’s missing coins were a company, not a locked laptop
Canada’s then-largest crypto shop told customers the CEO was gone. Creditor protection followed. One person with the passwords is not a custody design. It is a single point of failure — or a cover.EasyCryptoGuides · · 1 min readSecurity