
Crypto Security Report: October 2025
Featuring MetaMask joining SEAL's phishing defense network, record pig butchering busts totaling $22 billion, AI outrunning bug bounty programs, and more.

Featuring MetaMask joining SEAL's phishing defense network, record pig butchering busts totaling $22 billion, AI outrunning bug bounty programs, and more.

Featuring the npm supply chain attack on 18 packages with 2 billion weekly downloads, deepfake voice phishing targeting crypto executives, ModStealer wallet-draining malware, the Ethereum Foundation's Trillion Dollar Security initiative, and more.

Featuring over 40 fake Firefox extensions, impersonating MetaMask and other wallets, GMX's $42 million re-entrancy hack resolved by a white hat bounty, zombie appsdapps reviving defunct crypto domains, and the DPRK's NimDoor macOS backdoor.

Featuring North Korean operatives laundering billions through Tron, Interpol's global infostealer takedown netting 32 arrests, the largest-ever pig butchering fund recovery, Taylor Monahan on the CrimeEnjoyor drainer script, and more.

MetaMask's Solana security rollout, the Coinbase extortion attempt by rogue support agents, the FreeDrain AI phishing campaign, FBI and Europol's LummaC2 takedown, violent attacks on crypto holders in Paris and New York, and more.

Featuring security researcher Nick Franklin exposed as a DPRK operative behind the Radiant Capital hack, Lazarus Group laundering Bybit funds through THORChain, FBI IC3's record crypto fraud report, and more.

Featuring a GitHub Actions attack hitting 23,000 organizations, a RAT targeting 20 Chrome wallet extensions, DPRK Zoom malware, and more.

Featuring the largest hack in crypto history, OCR malware scanning your photo gallery for seed phrases, FBI saving thousands from pig butchering, and more.

Featuring the Lazarus Group's suspected Phemex exchange heist, AdsPower's wallet extension swap attack, AmosStealer malware via fake Homebrew Google Ads, DPRK's Contagious Interview campaign deploying BeaverTail, and more.

Featuring Luker's Devcon SEA talk on social engineering scams, same-origin realms for browser extension security, the Ethereum Protocol Attackathon's $1.5 million reward pool, a $2.2 million WallStreetBets X account hack on Solana, and more.