Elite Blockchain Security and Risk Solutions for the World's Largest Financial Institutions
Metaverse
Joined June 2020
- Tweets5.7K
- Following301
- Followers414K
- Likes2.6K
Pinned Tweet
We analyzed the 100 largest digital asset security incidents from 2014 to H1 2026. 🔐
The attack surface moved. 96% of H1 2026 losses now come from compromised keys, signing workflows, and vendor infrastructure.
🔗 Get your copy: halborn.com/reports/top-100-…
$6.3B left Binance’s hot wallets in under four hours, and nobody has shown a private key was stolen. 🚨
The cryptography held. The process that decides what gets signed did not.
Read @urruts' full analysis 🔗 halborn.com/blog/post/binanc…
Busy week for digital assets in NYC, and the Halborn team is on the ground. 🔐
Catch us at The Bridge, SWELL 2026, Link:NYC, and the Google Web3 & Digital Asset MPC Symposium, plus Devcon with the Ethereum community.
Swarm fraud is not new. AI agents with wallet access make it easier to run and harder to detect. ⚠️
One actor can coordinate many low-cost accounts to run Sybil attacks, wash trading, oracle manipulation, and protocol exhaustion.
📰 Learn more: halborn.com/blog/post/swarm-…
Supply chain risk is treasury risk. Most crypto orgs file it under engineering hygiene.
One poisoned npm or PyPI release or compromised workflow can end in irreversible loss.
📰 Read our overview on threats and controls: halborn.com/blog/post/crypto…
Hybrid incidents are now a recurring pattern in digital asset hacks. 🔓
One infrastructure or social step. One technical exploitation step.
🔗 Learn more in our report: halborn.com/reports/top-100-…
HSMs, multisig wallets, and MPC each move the attack surface somewhere different and trade availability against isolation differently. 🔏
We evaluate them on security, availability, and operational complexity.
📰 Read: halborn.com/blog/post/mpc-vs…
An estimated $93M was stolen from accounts protected by a Ledger hardware wallet. 🔒
The hack is linked to an implant in hardware from a reseller. It monitored the screen during setup and captured the recovery phrase.
🔗 Learn more: halborn.com/blog/post/explai…
Recovery rate in the top 100 digital asset hacks: 40% in 2021, 11% in H1 2026. 💸
Forensics got better. Laundering got faster.
DPRK-linked losses recover at 9.0%.
🔗 Get the report: halborn.com/reports/top-100-…
Halborn retweeted
We're pleased to announce the formation of CMTA's new Product Committee, chaired by Gabi Urrutia, (SVP Security & Field CISO @HalbornSecurity), to drive international tokenization standards and cross-border interoperability.
Halborn retweeted
1/ @HalbornSecurity has finished the security audit of our concentrated liquidity pools. Every finding is closed.
The pools have been live and working for a while. Now an independent auditor has signed off on them too. ♒
Halborn retweeted
RCM is moving closer to launch.
@HalbornSecurity has completed the smart contract audit of the RCM Protocol, covering the contracts supporting RCM Asset issuance and lifecycle functions.
The audit summary is available below ↓
Raising the signer count doesn't address where attackers actually operate. ❌
All 12 multisig breaches in our Top 100 Digital Asset Hacks report were defeated through the human or workflow layer. Not the cryptography.
📰 Full report: halborn.com/reports/top-100-…
$387.5M out of Bitget's hot and warm wallets on Sept 24. The biggest hack of the year so far. 🚨
On current evidence, no private key was stolen. Bitget's own signing service signed the transfers.
📰 Read @urruts' analysis: halborn.com/blog/post/bitget…
Third-party custodian, self-custody, in-house build, or acquisition. Every route to institutional digital asset custody carries a different risk profile. ⚖️🔐
Today at Digital Assets Week London, our CEO Jacques Boschung discussed these trade-offs with fellow experts on a panel.
French fintech @finaryhq needed to run a custody key ceremony, with no internal experience and a regulatory need for independent attestation. 🔑
Halborn reviewed the runbook, identified two gaps, then attested the ceremony live.
🔗 Full case study: halborn.com/case-studies/pos…
It is a major week on the digital asset conference calendar, and Halborn is on the ground at every stop. 📌
The biggest hacks have cost this industry $12B+ so far. Come find us and talk through the security measures that keep institutions off that list.
Custody decisions carry more than operational weight. They define an institution's compliance posture and risk exposure for years. ⚖️
Our CEO Jacques Boschung joins experts from @ArchaxEx, @taurus_hq, @Bitpanda, and @StateStreet at DAW London to break down each option.
DPRK-linked incidents were 0% of annual crypto losses in 2021. By H1 2026, they hit 81.9%. 🚨
Fake recruiters, deepfake approval calls, compromised signing vendors. This is patient APT tradecraft, not smash-and-grab crime.
📰 More in our report: halborn.com/reports/top-100-…
