Featuring the $46 million KyberSwap exploiter's demand for control of the protocol, the $87 million HECO bridge hack on HTX, the Ledger Connect Kit supply chain attack, and 12 new security Snaps in the MetaMask Snaps Directory.
Featuring Tether's freeze of 225 million USDT tied to a pig butchering syndicate, the $130 million Poloniex hack and its $10 million bounty, a $12.5 million crypto abduction in Montenegro, and Taylor Monahan and ZachXBT's LastPass breach investigation.
Featuring MetaMask and Blockaid's security alerts, the $7 million Fantom Foundation hack, EtherHiding malware stored on BNB Chain, Galxe's 110% compensation after a DNS hijacking attack, and the LavaMoat webpack plugin open beta.
Featuring the MetaMask Snaps open beta, roughly $35 million in thefts possibly linked to Secret Recovery Phrases stored in LastPass, the Pink Drainer SIM-swap attack on Vitalik Buterin, and a calldata allowlist to curb DNS hijacking losses.
Featuring the launch of Seal 911, a Telegram hotline for crypto emergencies from MetaMask, Paradigm, Yearn, and Polygon, a typosquatted npm package that steals private keys, a bold new direction for Snow, and MetaMask talks at Defcon.
Featuring pig butchering and fake mining scams, a new fake approvals scam using airdropped gas tokens, npm malware from the Lazarus Group targeting crypto developers, and MetaMask's Menpo DeFi incident database at DeFi Security Summit.
Featuring the inaugural MetaMask and Wallet Guard State of Security Twitter Space, Harry Denley on smart contract security, an explainer on LavaMoat's scuttling feature, and a preview of the Menpo DeFi incident database at DeFi Security Summit.
Featuring the $10 million multichain hack targeting crypto veterans, a checklist for investigating a drained wallet, an FTC alert about phishing emails, and a Hardened JavaScript conference talk.
Featuring the scam-as-a-service that stole $27 million, MetaMask, OpenSea, and Blockaid's new transaction security feature, the multichain drainer targeting longtime crypto users, and Etherscan's move to curb address poisoning.
Featuring a surge in airdrop scams that exploited fake giveaway hype to phish users, ~2,400 wallets targeted before the Arbitrum airdrop, a Cloudflare Global API key warning for web3 teams, and EthDenver talks on Delegatable and JavaScript realms.