Cybercrime News

Private key compromises led crypto hack losses over the past decade as recent DeFi exploits show attackers moving beyond smart contract bugs.

LayerZero said that Kelp’s DVN setup allowed the $290 million exploit, as investors questioned which protocol would step up to cover the shortfall.

The contagion from the Kelp exploit could have been contained, but at the cost of capital efficiency, according to the founder of Curve Finance.

The attack triggered a "cross-protocol contagion" that has hit at least nine crypto protocols, blockchain security firm Cyvers said.

The Ketman Project, funded by an Ethereum Foundation stipend, identified 100 North Korean IT workers and alerted about 53 projects employing DPRK operatives.

The Drift Protocol will use the $150 million to relaunch and restore user funds following a $280 million exploit earlier in April.

Jean-Didier Berger said at Paris Blockchain Week that France is preparing new steps to protect crypto holders as wrench attacks and kidnappings keep mounting.

Hacken’s Q1 2026 report finds $482 million lost across 44 incidents, with phishing, legacy code bugs and key compromises driving losses as regulators tighten security demands.

A Hyperbridge exploit let an attacker mint 1 billion bridged Polkadot tokens on Ethereum and cash out about $237,000, reviving debate over bridge security.

Some LLM routers are “secretly injecting malicious tool calls and stealing creds,” warns researcher Chaofan Shou.

The Treasury Department said the move reflects increases in frequency and sophistication of actions targeting digital asset platforms.

North Korea’s crypto playbook now spans fake developers, conference contacts and major DeFi exploits reaching deep across the industry.

The $280 million Drift Protocol attack was likely carried out by threat actors aligned with North Korea state-affiliated hackers.

Circle had several hours or days to freeze illicit USDC funds in many of the 15 cases presented, but failed to act, according to ZachXBT.

A threat researcher estimates the exploit could reach $200 million and may be linked to a compromised private key.