LastPass confirms CRM data breach via third-party vendor Klue. Names, emails, phones, addresses, support tickets exposed. Password vaults and master passwords remain secure. Beware phishing using leaked contact info.
#LastPass #DataBreach #Phishing
⚠️ ALERT: Mercado Bitcoin suspends withdrawals after detecting unauthorized activity. Brazil's largest exchange. Estimated suspicious transactions exceed $40M. Tether froze 4.5M USDT linked to incident. Customer funds claimed safe.
#MercadoBitcoin #ExchangeSecurity #Brazil
BTCPay Server warns of attacks on hot wallets. Instance operators advised to shut down servers until investigation complete. Unauthorized transfers reported. If you run a BTCPay instance, secure your funds and go offline.
#BTCPayServer #HotWallet #Bitcoin
Portable Android retweeted
Replying to @PocketRetroid
Exactly right 🙌 Spotlight status means nothing if the app asks for recovery words. Anyone who typed them should treat that wallet as burned and move funds to a fresh one right away 🔐
⚠️ ALERT: Fake "SKR Claim" app hit Solana dApp Store's featured section. Asked users for seed phrases. Was live for 1 hour before removal. Solana Mobile says it never asks for seed phrases. If you entered yours, move funds immediately.
#SolanaMobile #Phishing #SeedPhrase
Ledger investigates CryptoBilis reseller after reports of tampered hardware wallets sold in Southeast Asia. On-chain detective estimates losses exceeding $86M across BTC, ETH, Tron. Ledger warns: if bought from this channel in past 90 days, do not initialize.
#Ledger #CryptoBilis
⚠️ ALERT: Trezor Safe 5 found with hidden hardware implant from reseller CryptoBilis. Extra circuit board with cellular antenna can capture seed phrase from screen and transmit it. Trezor warns: move funds if bought from CryptoBilis since March 2026.
#Trezor #HardwareWallet
Solflare enters "bunker mode" after industry attacks. All code changes now require multiple approvals, new development paused. Third-party staking provider breach affected validator keys, but no user funds lost. Migration deadline extended to Nov 30.
#Solana #WalletSecurity
🤖 Made with AI
Allbridge Core exploited for $1.65M via Solana flash loan. Attacker manipulated USDC/USDT pool ratios, bridged funds to Ethereum. Protocol paused, moving to pool-free architecture with CCTP and LayerZero.
#Allbridge #FlashLoan #DeFi
⚠️ ALERT: Malvertising campaign "SourTrade" impersonates TradingView, Solana, Luno. Fake ads lead to pages that build malware in your browser's memory. Targets crypto traders in 12 countries. Never download trading tools from ads.
#Malvertising #SourTrade #CryptoSecurity
Binance's CZ warns AI-driven phishing is the real threat, not quantum hacking. "No crypto wallet is 100% safe." AI exploits leaked data, not cryptography. Stay skeptical of urgent messages and verification requests.
#CZ #AIPhishing #CryptoSecurity
Mario Nawfal
nitter.gq/MarioNawfal/status/211…
🚨🇺🇸 One hacked employee laptop just cost Binance an estimated $6.3 billion, the biggest crypto theft on record
Binance says attackers likely got in through a compromised DevOps engineer's laptop and pushed through unauthorized withdrawals, and it has frozen deposits and withdrawals while it investigates and promised to cover every customer's loss.
About $3 billion has been frozen so far, most of it in stablecoins after Tether and Circle locked the tokens within hours, but roughly $2.4 billion in bitcoin and ether is still in the attacker's wallets, and those have no company that can hit pause.
Bitcoin dropped more than 4% to under $78,000. The previous record, the Bybit hack in 2025, was $1.5 billion.
The lesson is uncomfortable for an industry that sells itself as unhackable: the money that could be stopped was the money controlled by a company, and the money that got away was the part nobody controls.
Getting it back now depends on the thieves trying to cash out through an exchange that cooperates, which can take months or years.
Source: CNBC / Writer: Daniel
⚠️ ALERT: Crypto theft suspect Dritan Kapllani Jr moved another 126.7 ETH (~$239K) on July 22. Linked to $19M social engineering thefts. Flaunted $3.68M Exodus wallet on Discord in April. ZachXBT tracking.
#SocialEngineering #CryptoTheft #ZachXBT
Bitcoin News
nitter.gq/BitcoinNewsCom/status/…
🇰🇵 NORTH KOREA’S LAZARUS GROUP LINKED TO RECORD $6.3 BILLION BINANCE HACK
TRM Labs has identified North Korea’s elite TraderTraitor hacking unit as the likely perpetrator, citing high-confidence intelligence and similarities to previous attacks.
The hackers allegedly prepared at least 36 hours in advance, compromising Binance’s signing infrastructure to drain wallets across 10 blockchains in minutes.
The same group was responsible for the $1.5 billion Bybit hack in 2025.
Roughly $3 billion has been frozen, while billions remain under attacker control.
Verus-Ethereum Bridge exploited again for $7.5M. Same vulnerability class as May's $11.6M hack, but a different attacker with a new wallet. Bridge validation logic still flawed. Funds laundered via Tornado Cash.
#VerusBridge #BridgeSecurity #DeFi
Cyber Security News
nitter.gq/The_Cyber_News/status/…
Polymarket Hacked - Users Reported Funds Stolen From Their Wallets
Details: cybersecuritynews.com/polyma…
Polymarket suffered a security incident on October 29, 2026, after a compromised third-party provider exposed users of its international platform to wallet theft. Traders reported missing funds, unexpected withdrawals, and positions being closed without permission.
The company temporarily stopped trading, said it had fixed the issue, and promised to reimburse affected users. Trading later resumed. In its public statement, Polymarket said an outside provider had been compromised and that the matter had been referred to law enforcement.
Although early descriptions pointed to an authentication provider, current reporting connects this incident to DebugBear.
#cybersecurityNews
⚠️ ALERT: Triple-A hot wallets drained for $11.8M across Ethereum, TRON, Polygon, Arbitrum, Solana, TON. Customer funds claimed safe. Stolen assets consolidated into one Ethereum address. Investigation ongoing.
#TripleA #HotWallet #ExchangeSecurity
Fake IRS letters target crypto holders via physical mail. QR code leads to phishing site mimicking IRS. Scammers then call posing as officials. Coinbase Security traced the network. Report suspicious mail.
#Phishing #IRS #CryptoSecurity
🤖 Made with AI











