
This month's Crypto Security Report
Over half a billion stolen in 30 days, the Axios npm package weaponized, Anthropic's Mythos finding zero-days faster than red teams, and a fake Ledger app draining $9.5 million.

Over half a billion stolen in 30 days, the Axios npm package weaponized, Anthropic's Mythos finding zero-days faster than red teams, and a fake Ledger app draining $9.5 million.

Post-quantum threats mapped by Google and the Ethereum Foundation, AI-driven credential theft campaigns, a fake news scam ring exposed by ZachXBT, and more.

Supply chain worms harvesting developer credentials, OpenClaw agents going rogue, signature phishing surging 207%, and the DAO relaunching with $200 million.

AI fraud projected at $17 billion, a $282 million social engineering theft bypassing a hardware wallet, the Ethereum Foundation assembling a post-quantum team, and more.

$3.4 billion stolen in 2025, AI agents exploiting real smart contracts in simulation, DPRK Zoom scams hitting $300 million in losses, and more.

DPRK operatives recruiting collaborators on Upwork and Fiverr, a $128 million Balancer exploit from a rounding error, fake wallet extensions on the Chrome Web Store, and more.

MetaMask joins SEAL's phishing defense network, record pig butchering busts totaling $22 billion, AI outrunning bug bounty programs, and more.

An npm supply chain attack with 2 billion weekly downloads exposed, deepfake voice phishing hitting crypto execs, the Trillion Dollar Security initiative, and more.

Over 40 fake Firefox extensions impersonating wallets, a $42 million hack resolved by bounty, zombie dapps rising from the dead, and more.

Consensys acquires Web3Auth, EIP-7702 exploited within weeks, DPRK laundering billions through Tron, and more.