cryptohacks

India's leading crypto exchange is in a public dispute with ZachXBT over $16M that moved last night.

Timeline: on Oct 21 at 23:35 UTC+8, wallets linked to CoinDCX sent ~15.99M USDT and 5,783 TRX to a single Tron address, which then split the funds — some landing at Binance, OKX and Gate, per the transaction report. The flag came from Darcy's post at Salus.

CoinDCX CEO Sumit Gupta says this is not a new hack: the wallets were created in January 2025 and compromised in last year's $44M breach, and the hackers are just reusing old addresses. Users' funds are safe, trading is normal.

But ZachXBT pushed back: one flagged address, he says, kept sweeping user deposits and receiving gas funds as recently as May 2026, and sent funds to CoinDCX's current hot wallet — asking how a "dead" wallet handled user deposits.

Tape: BTC $81,877 (-2.0%/24h), ETH $2,403 (-2.6%/24h) — context only; no market move tied to this.

So why was a "compromised" July 2025 wallet still touching user deposits in May 2026? DYOR. $BTC #CryptoNews #CoinDCX #ExchangeSecurity #CryptoHacks

Qubic says weak wallet seeds, not protocol flaw, caused a 2.94 trillion QU loss.

Qubic confirmed an attacker drained 1,404 wallets and stole about 2.94 trillion QU between October 17 and 18, citing weak wallet seed generation as the cause.

Seed randomness was insufficient on iPhones, iPads (any browser before Oct 18), Macs (Safari before that date) and the Qubic iOS app before July 2025.

Validators halted the chain at tick 85,371,949, freezing 87.1% of the funds; the remaining 12.9% moved to MEXC, which froze the account, and exchanges have paused QUBIC deposits and withdrawals.

September recorded 55 crypto hacks costing about $766.5 million—462% higher than August—with $387 million lost at Bitget and $320 million at Liquid Network.

How should layer‑1 blockchains improve seed generation to protect users without hurting usability?

#Qubic #CryptoSecurity #Blockchain #CryptoHacks

🚨 $1.17B Stolen in Q3 2026: The Bitget Hole and the New Security Floor

📊 Alpha Breakdown:
SlowMist tracked $1.17 billion in cryptocurrency hacks during Q3 2026. September alone saw $762 million stolen across 50 incidents. The Bitget exploit accounts for $387.5 million of the total. These losses exceed the entire first half of the year. The data highlights extreme concentration in top 5 attacks....

🔗 Full Breakdown on YourWeb3Guy:
https://www.yourweb3guy.com/news/1-17b-stolen-in-q3-2026-the-bitget-hole-and-the-new-security-floor

#CryptoHacks #Bitget #SlowMist #Security

🚨 Crypto Theft Losses Surge 462% in September

💰 Crypto theft losses jumped 462% month-over-month to around $766.49M in September.

🔐 55 major hacks were reportedly recorded, highlighting continued security risks across the crypto industry.

⚠️ Another reminder that strong security practices remain critical in the digital-asset space.

👀 Can the industry reduce these losses as adoption grows?

#CryptoSecurity #CryptoHacks #CryptoNews #Blockchain

🚨 September Crypto Hacks Hit $768M ⚠️🚫

Crypto suffered worst hacking month of 2026 with $768.4 million stolen across 97 incidents per CertiK. Major breaches included $388M Bitget hack and $320M Liquid Network hack. Over $270M was later returned. Total 2026 losses reached $2.68 billion across 656 incidents.
$TRUMP $BTW $MOVR
#cryptohacks

𝐇𝐀𝐂𝐊𝐄𝐑𝐒 𝐃𝐑𝐀𝐈𝐍 12.4 𝐌𝐈𝐋𝐋𝐈𝐎𝐍 𝐗𝐑𝐏 𝐅𝐑𝐎𝐌 𝐃’𝐂𝐄𝐍𝐓 𝐖𝐀𝐋𝐋𝐄𝐓𝐒

A major security breach has hit D’CENT App Wallet users, with hackers stealing over 12.4 million $XRP from more than 7,000 wallets. The incident is now the second-largest XRP theft of 2026.

The attack also affected users holding assets on other blockchains, including Bitcoin, Ethereum and Stellar($XLM ). Around 6.3 million XRP has reportedly already been moved to Ethereum through cross-chain swaps.

⚠️ D’CENT users should immediately check the official security notice and migrate funds from potentially affected wallets using a new recovery phrase.

Crypto security remains a major concern as attackers continue targeting wallet infrastructure. #XRP #Dcent #CryptoSecurity #CryptoHacks

Over $721 million was stolen from DeFi protocols in H1 2026 that had a completed security audit. Not "no audit." Not "sketchy anonymous team." Audited. The badge everyone tells you to check for before depositing.

A study covering 135 DeFi hacks this year found 67.6% happened outside the actual scope of what got audited. "Audited" almost never means "the whole protocol, forever." It means "this specific code, at this specific version, on this specific date." Add a feature next month, integrate a new bridge, tweak the liquidation logic — and you're now running unaudited code with an audited badge still on your website.

The Euler Finance case is the cleanest example: the exploit succeeded not because of a coding bug, but because of economic logic in the donation and liquidation mechanics. No line-by-line code review catches that. The code was correct. The design assumption was wrong.

Meanwhile $1.3B has been drained from DeFi in 2026 so far, and Chainalysis attributes roughly 76% of hack losses this year to state-backed groups, mostly Lazarus — not random script kiddies. These aren't people probing for typos in Solidity. They're well-funded teams studying validator infrastructure, RPC endpoints, and governance mechanisms, the stuff audits don't even look at.

"Audited" is a marketing word doing the job of a security guarantee it was never built for. Not saying skip protocols with audits. Saying: an audit tells you less than the badge implies, and knowing that is worth more than the badge itself.

Next time a project leads with "audited by [firm]" — do you know what that audit actually covered, or are you just trusting the checkmark?

#DeFi #Security #CryptoHacks #SmartContracts

🔴 Market Shock: $351.6M Crypto Hack — Is Your Capital Safe?

After a major security incident, there’s an atmosphere of FUD in the crypto market. But instead of making emotional decisions in panic, it’s more important to review your security strategy and risk management.
$BTC

📊 Market Snapshot — 25 Sept 2026:
• BTC: Around $83.8K (-0.7%) — slight downward pressure is visible.
• ETH: Around $2.69K (+0.1%) — relatively stable, but market risk is still present.
• SOL: Around $120.14 (+3.3%) — showing relative strength despite broader uncertainty.
$ETH

💡 3 Important Lessons in Crypto Security:

1. Keep Hot and Cold Wallets Separate
For funds that aren’t needed for active trading, you can consider offline cold storage. Hot wallets are connected to the internet, so they may have comparatively higher security exposure.

2. Avoid Panic Selling
During major security news, liquidity, volatility, and order flow can change quickly. Instead of reacting emotionally, calmly evaluate your risk limits, portfolio exposure, and market conditions.
$SOL

3. Understand Exchange Security Measures
When choosing an exchange, it’s important to check security controls, proof-of-reserves, risk-management practices, and user-protection mechanisms. Binance’s protection fund like SAFU is an example of user safeguards, but recovery is not guaranteed in every incident.

.

Today’s question:
After a security incident, which approach do you prefer to keep your funds secure?
A: Trusted centralized exchanges + strong security settings
B: Self-custody hardware wallet + private-key control

👇 In the comments, write A or B and share your reasoning too.

Disclaimer: This content is for educational purposes only; it is not financial or security advice.
#cryptohacks #BTC☀ #Binance

💥💥 BITGET HACKED — ABOUT $351.6M IN FUNDS AFFECTED

Bitget detected abnormal transfers from several hot wallets at 02:31 Beijing time on Sept. 25. The exchange estimates that about $351.6 million was affected, while cold wallets and the vast majority of platform assets remained unaffected.

Withdrawals have been temporarily suspended for security checks, while deposits and trading remain operational. Bitget says the losses will be covered by its User Protection Fund, which holds more than $464 million.

Onchain monitoring initially tracked roughly $180–183 million moving from Bitget-labeled addresses before being dispersed. Transfers included $34.75M USDT, $12.85M USDC and 3,000 XAUT. On Arbitrum, 19.67M USDT was used to buy roughly 7,111 ETH.

CEO Gracy Chen said the incident likely did not involve a private-key leak and may be linked to a third-party software supply-chain compromise. Some funds may be recoverable, while attribution — including possible North Korean links — remains preliminary.

#Bitget #cryptohacks #CyberSecurity
#ThuyBNB
$BTC $ETH $NEAR

🚨 HACKER GOT AIRDROP INSTEAD OF TOKEN HOLDERS — HOW IS THIS EVEN POSSIBLE?

The #Superfortune team somehow sent an airdrop… straight into the hacker's pocket. No joke.

During a multisig transaction, the attacker somehow swapped the recipient address. As a result, the #GUA tokens flew to the hacker's wallet 0x70ae67…5c15 — instead of the official airdrop contract 0x70ae7d…5c15. The difference between the addresses is just a few characters in the middle. That was all it took.

Interestingly, the team rules out the classic address poisoning scheme — since the hacker's address had never interacted with the project's infrastructure before the incident. This suggests that the attack vector was different, and likely more sophisticated — possibly the compromise of one of the signers or a swap at the interface level.

The market reacted instantly:
📉 $GUA — down 75% in 24 hours

Another reminder: even multisig isn't a cure-all if there's a weak link in the signature chain. Always verify addresses byte by byte, not just visually.

#cryptohacks #Airdrop #Web3Security #defi

If you find this content useful — subscribe, I regularly break down high-profile incidents and discoveries from the crypto world 🔔

$BTC AND $ETH TANKING AS HACKS HIT RECORD HIGH IN 2026 🔥

207 hacks in six months — that's the highest ever. North Korea-linked groups took 66% of the $972 million stolen, with two exploits alone draining $577 million from KelpDAO and Drift Protocol.

Smart contracts aren't the only weak spot. Infrastructure failures caused 76% of losses despite only 15% of incidents. TVL in DeFi dropped from $115B to $70B in the same period.

Bitcoin down 28%, ETH down 40%. That kind of pressure shakes out weak hands fast. Are you staying long or stepping aside?

Not financial advice. Always manage your risk.

#BTC #Ethereum #CryptoHacks #MarketCrash

🔥

💥 Lazarus Group is Cooking Crypto in 2026 ⚠️
North Korean hackers just dropped some of the biggest exploits this year:
Drift Protocol → $285M
Kelp DAO → $292M
Their Dirty Tactics:
Fake job offers & deepfake calls 😈
Malware on dev laptops to steal keys
Bridge exploits & fake collateral plays
They plan attacks for months... super patient & dangerous.
Stay Safe Kings:
Hardware wallet only
Never share seed/private keys
Double-check every link & file
Projects need better security ASAP!
You teaming up against Lazarus or still clicking random links? 😂👇

#Lazarus #cryptohacks #CryptoSecurity #BinanceSquare

#sandboxsandsuspectedinfinitemintflawonbase
​🚨 CRITICAL SMART CONTRACT FLAW ON BASE! 🚨

​A massive infinite mint exploit just hit the market. Over 500 MILLION SAND tokens were printed out of thin air due to a severe smart contract loophole on the Base network.

​Market conditions are tough enough without dealing with broken code flooding the supply!

​Immediate Action Plan for Traders:

​🛑 Step Away from SAND: Do not try to catch this falling knife. Buying the dip right now is incredibly risky.

​🛡️ Review Your Exposure: Double-check your portfolio's exposure to other assets on the Base network just to be safe.

​📢 Await Official Updates: Keep an eye out for a formal announcement and post-mortem from The Sandbox team.

​Developers need to prioritize auditing their code so we can trade in peace. Stay safe out there!

​⚠️ Disclaimer: Always do your own research. This is not financial advice.

​ #cryptohacks #SmartContractExploit
CLICK below 👇 TO TRADE

$SOL $TRB $DASH

🚨 $11 BILLION WIPED OUT IN 6 MONTHS – THE BIGGEST HACK WAVE IN CRYPTO HISTORY 💥

Over 212 on-chain exploits this year alone, with North Korea-linked groups pocketing 55% of total losses. The real story isn't just the numbers – it's how they're executing these hits.

🔍 The top 4 attacks (KelpDAO, Drift Protocol, Resolv, CowSwap) accounted for 64% of all damage, and none were simple code bugs. Attackers compromised developer credentials, manipulated RPC infrastructure, and exploited single-point validator setups. Even LinkedIn recruitment scams are being weaponized to steal admin keys.

📊 Ethereum still leads in absolute losses ($332M), but Solana is now #2 – with 98% of its $326M coming from compromised private keys and signature infrastructure. Meanwhile, Arbitrum saw the first-ever exploit using EIP-7702 wallet delegation. The attack surface is expanding faster than most traders realize.

💬 If you're holding assets on any chain, what's your single biggest vulnerability right now? Is it the protocol, the bridge, or your own key management? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #CryptoHacks #ETH #SOL #DeFi #Security

🛡️ 🔍

In 2026, the amount stolen in DeFi exceeded $750 million. I checked the list of victims, and several were audited projects. Many people think that having an audit report means safety, but the data from 2026 says the opposite: Kelp DAO was hacked for $293 million, making it the largest single incident this year, and it was exploited through a bridge contract vulnerability; Silo V2 was manipulated by an oracle, also after an audit.

An audit isn't a safety net, so what’s the real meaning of an audit? 🤔

【I checked four auditing firms on Genius Terminal】
Halborn, Cantina, HackenProof, and Borg Research, each with their own focus in the industry. Halborn has audited over 200 blockchain projects, primarily focusing on smart contracts and infrastructure vulnerabilities; Cantina is known for competitive audits, where multiple independent researchers challenge the same code simultaneously; HackenProof specializes in bug bounty management and penetration testing; Borg Research leans towards the foundational verification of cryptographic protocols.
I think the interesting part of this combination isn’t the number, but the coverage. A single auditing firm’s perspective has blind spots, while the four firms approach it from different angles, theoretically reducing overlooked attack surfaces.

【What’s the essence of an audit】
Personally, I believe the four auditing firms don’t provide a guarantee of "won’t be hacked," but rather a signal: this team is willing to spend money to have outsiders point out issues, and not just once. Industry audit fees range from $25,000 to $200,000, while a successful attack in DeFi can result in losses from $5 million to hundreds of millions. When you calculate this ratio, the cost of auditing multiple times is entirely reasonable.
"The quantity of security audits doesn’t represent safety, but it does reflect the project team’s attitude towards risk."

【The significance of $GENIUS 】🔑
After Ghost Orders go on-chain, Genius Terminal’s privacy trading feature can truly take off, allowing users to execute large trades on the platform. High trading volumes support the platform's GMV, and the token holders’ $USDC recommended returns have a sustainable foundation. Security isn’t just a bonus; it’s the premise of the whole flywheel.

@GeniusOfficial $GENIUS #genius #defi #cryptohacks

$ETH INCIDENT EXPOSES DEEP VULNERABILITY IN MEV BOTS 🚨

The recent hack of Jaredfromsubway.eth, a prominent MEV bot on the Ethereum network, has revealed a significant vulnerability in automated execution systems, resulting in a loss of over $7.5 million. This incident highlights the importance of robust security measures in the crypto space.

The attack involved the deployment of 66 fake token contracts and liquidity pools, mimicking assets such as $WETH , $USDC , and $USDT , which enticed the bot to execute malicious transactions. This level of sophistication and deception is a wake-up call for the entire crypto community, are you increasing your security measures in response to this incident?

Not financial advice. Manage your risk.

#EthereumNews #MEVBotSecurity #CryptoHacks
💸

EXPLOITED

Gnosis Pay just dropped a bombshell revealing a software flaw dating back to October 2023 that enabled the $1.5 million exploit of its card safe infrastructure #GnosisPay #CryptoHacks #SecurityMatters. According to a postmortem, the vulnerability was discovered after the exploit occurred and thankfully all affected users have been fully reimbursed. This historic hack serves as a reminder that the crypto landscape is a cat-and-mouse game where security is paramount. The implications are clear: if you haven't tightened the screws on security measures yet, it's time to do so, not just for yourself, but for your fellow holders too. Will you adapt before it's too late?

🔓 RAYDIUM HACKED FOR $1.34 MILLION — THROUGH CONTRACTS THAT HAVE BEEN AROUND FOR 3 YEARS

No need to panic — but it’s worth understanding.

It wasn’t the exchange itself that got hacked, but the legacy AMM V3 — five outdated liquidity pools that were deprecated back in 2021 after the demise of #Serum. No active interface, no current users. Just dead contracts that were completely forgotten.

What leaked:
— ~150,000 #RAY tokens
— 5,600 #SOL
— ~893,000 #USDC

How it happened:

The hacker created a fake LP mint and bypassed the security checks during the withdrawal. The vulnerability isn’t in fresh code, but in the logic from three years ago that nobody got around to fixing.

The good news:

#Raydium stated that they will cover the losses of the affected users from their treasury. Current CLMM pools and new versions of the AMM are unaffected — continuing to operate as usual.

This is a perfect illustration of one of the main problems in DeFi: new contracts get audited and patched, while old ones are forgotten. Teams move ahead, Legacy hangs in the background for years. Hackers aren’t in a rush — they just wait until everyone forgets there’s anything there at all.

$1.34 million for a three-year vulnerability — a costly reminder about digital hygiene.

#raydium #solana #defi #cryptohacks

Subscribe🤝

#sandboxsandsuspectedinfinitemintflawonbase
Can someone check the developers?! 🤦‍♂️ Seriously, being a trader is already hard enough with the usual market crashes, but now we have to deal with endless mint exploits? More than 500M SAND were printed as if from nothing on the Base network due to a vulnerability in a smart contract. Total nightmare!
What should traders do now?
🛑 Avoid grabbing a falling knife—don’t try to buy SAND for now.
🚨 Monitor the situation for an official response from The Sandbox team.
🛡️ Make sure to re-check whether any of your assets on the Base network were exposed.
We’re just trying to trade safely—please fix the code next time!
⚠️ This is not financial advice!
Stay safe and trade on a secure platform.

Update, please

#cryptohacks #SmartContractExploit #sand
$BTC

🚨 **$H PUMPING 44%... BUT IS IT A MASSIVE BULL TRAP?!** 🚨
Everyone is celebrating because Humanity Protocol ($H ) just pumped 44% after the team dropped their breach report and teased a compensation plan for the victims. But do NOT let this relief rally fool you—this is screaming danger! 🛑
Here is what the hype boys are ignoring:
1️⃣ **The Breach Was Brutal:** A single malware-infected developer laptop gave the attacker 7 private keys, allowing them to steal and maliciously mint a staggering **447 MILLION $H tokens**.
2️⃣ **THE HACKER STILL HAS CONTROL!** Yes, you read that right. The attacker still holds the ProxyAdmin keys on the BSC network. The protocol remains exposed! 🤯
3️⃣ **Massive Unlock Incoming:** As if the hack wasn't bad enough, a massive scheduled token unlock is hitting the market on **June 25**. Imagine that insane sell pressure crashing into an already fragile chart! 🩸
Smart money isn't buying this pump; they are using it as exit liquidity. This looks like the perfect setup for a brutal dump. Stay safe, protect your capital, and do not catch falling knives! 📉
Are you shorting $H or staying entirely away? Let me know! 👇🔥💸
#HumanityProtocol #CryptoNews #BinanceFutures #BearishSetup #CryptoHacks