Following the automated attacks that saw funds leave wallets in SecondFi, Cardano’s wallet provider formerly known as Yoroi ...

Ethereum L2 bridge exploit drains $1.7 million from Taiko after a leaked SGX signing key let an attacker forge withdrawal ...

Stake DAO's Arbitrum deployer key was compromised, letting an attacker mint 5.4 trillion vsdCRV in a key-control failure.

Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

The $10.7 million THORChain exploit was caused by a GG20 vulnerability, which allowed a malicious node to reconstruct a full private key to one of its vaults. THORChain said a malicious node operator ...

The hacker has already laundered nearly 5% of the loot through Tornado Cash and is still holding the remaining 955 eBTC. Decentralized finance protocol Echo Protocol was exploited after an attacker ...

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.