#Cryptocurrency
All CosmicBytez Labs articles tagged #Cryptocurrency, across news, security advisories, how-to guides, and projects.
- News
U.K. Sanctions Cryptomus Over $7 Billion in Russia-Linked Money Laundering
The U.K. sanctioned crypto payment platform Cryptomus, accused of laundering over $7 billion for ransomware, fraud, and darknet markets.
- News
Ledger Confirms Spy-Chip Hardware Implant Behind $93M+ Wallet Thefts
Ledger confirmed hardware wallets sold through reseller CryptoBilis held hidden LTE implants that captured seed phrases, draining over $93M from 300+ wallets.
- News
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Ledger confirms a hardware implant in CryptoBilis-sold wallets siphoned recovery phrases via LTE/eSIM, draining over $93 million from 315+ wallets.
- News
P7 DarkSword: New iOS Exploit Kit Variant Adds Crypto Wallet Theft and Remote Commands
A stealthier DarkSword variant called P7 extracts crypto wallet keys and keychain data locally before exfiltration, and polls for live commands.
- News
16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
Socket found 16 fake Firefox extensions cloning Rabby and OKX wallets that stole recovery phrases via Cloudflare Workers before Mozilla's Oct. 5 removal.
- News
Uranium Crypto Exchange Hacker Convicted for Stealing $53 Million
A Manhattan jury convicted Jonathan Spalletta on all counts for hacking Uranium Finance twice in 2021 and laundering $53.3M in crypto.
- News
MetaMask Security Incident Triggers Mass Exit of 17,000 Ethereum Validators
MetaMask exited about 17,000 Ethereum validators ($1.4B) after an attacker rerouted block rewards to Tornado Cash; wallets reportedly unaffected.
- News
US Treasury Sanctions Tren de Aragua Members Over $40.7M ATM Jackpotting Scheme
OFAC sanctioned 8 Tren de Aragua members, including FBI fugitive Prometheus, over a $40.73M ATM jackpotting scheme hitting 1,500+ US ATMs.
- News
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Bitget says attackers used a zero-day in third-party security tools to steal $387.5M from hot wallets, per SlowMist and Mandiant findings.
- News
Bitget Hacked via Zero-Day in Third-Party Security Products
Bitget says attackers who stole $387.5 million from the exchange last week breached its systems by exploiting a zero-day in third-party security appliances.
- News
Vietnamese National Charged in $16 Million 'Pig Butchering' Crypto Scam
DOJ charges Vietnamese national Trung Nguyen Van with laundering $16M from a 'pig butchering' crypto scam; his wallets moved over $53M since 2018.
- News
Bitget Resumes Bitcoin Withdrawals After $387.5 Million North Korea-Linked Heist
Bitget restored BTC withdrawals Sep 28 in a phased restart after its $387.5M breach, with ETH, USDT, and fiat/P2P to follow through Oct. 2.
- News
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget says a zero-day in a third-party security product gave attackers internal credentials used to forge withdrawal commands and steal $388 million.
- News
Bitget Loses $351.6M in Suspected North Korean Backend Compromise
Bitget's hot wallets lost $351.6M — since revised toward $387.5M — after attackers spoofed its backend to approve fraudulent transfers.
- News
Crypto CEO Accuses North Korea of Stealing $387 Million From Bitget Platform
Bitget CEO Gracy Chen says North Korean hackers stole $387.5 million via a wallet system breach; a $464M User Protection Fund will cover losses.
- News
Bitget Hack Losses Climb to $387.5 Million as CEO Points to North Korea
Bitget's hack losses grew from an initial $351.6M estimate to $387.5M as North Korea-linked actors spoofed backend transfer approvals.
- News
Hackers Steal $351.6 Million in Bitget Crypto Exchange Hack
Bitget says $351.6M was drained from its hot and warm wallets on Sept. 24; the CEO points to IP evidence tied to a North Korea-linked hacking group.
- News
Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme
Japan, the US, Germany and Australia detail WaterPlum's 30,000-device haul and Japan's first North Korean laptop farm takedown.
- News
FBI Warns of North Korean 'WaterPlum' Campaign Infecting Devices Across 100 Countries
FBI, DoD, and allied agencies detail 'WaterPlum,' a North Korean fake-recruiter scheme that stole $10.5M and infected 30,000+ devices.
- News
Revolut Breach Ran 5 Months, Hit 680 High-Profile Accounts, Now Draws $3M Ransom Demand
New details show the Revolut breach ran 5 months via a spoofed Italian ministry email, hit 680 crypto-whale accounts, and drew a $3M ransom demand.
- Security
CVE-2026-81648: Unauthenticated Authorization Bypass in CryptoPayment Gateway WordPress Plugin
CVSS 10 flaw in CryptoPayment Gateway (≤ 1.2.2) lets anyone delete files, overwrite config, and steal cleartext wallet keys via an open AJAX endpoint.
- News
Treasury urges banks to file cyber scam reports, noting nearly $13 billion in losses since 2023
FinCEN urged banks to boost scam detection and SAR filings after tracing nearly $13 billion in suspected crypto investment scam activity since 2023.
- News
Trezor: 347,000 Users Targeted in Phishing Attacks After Brevo Breach
A breach at email platform Brevo let attackers hijack Trezor's newsletter account and phish 347K addresses; 2,500 users clicked the malicious link.
- News
Scammer Behind $245 Million Crypto Heist Pleads Guilty to RICO Charges
Malone Lam, ringleader of a social-engineering crypto theft ring, pleaded guilty to racketeering conspiracy over a $245M Bitcoin heist.
- News
JSCeal Malware Hijacks Google Sessions via Stolen Cookies
JSCeal, a heavily obfuscated V8 JavaScript malware, steals browser session cookies to replay Google logins and drain crypto accounts.
- News
Trezor Data Breach Impact Now Reaches 81,000 Customers
Trezor says a ShipMonk data breach via a Metabase SQLi zero-day now affects 81,000 customers, up from 14,000 in the initial disclosure.
- News
Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted
Trezor confirms ShipMonk's breach exposed 67,000 more customers via old records the fulfillment partner had assured were deleted, pushing the total to ~80,689.
- News
Cronos Blockchain Restarts After $74 Million Tectonic Exploit
A price-manipulation attack on Tectonic let an attacker borrow $74M on Cronos; validators halted the chain and rolled back state to contain it.
- News
Chrome Web Store Extensions Caught Stealing Crypto, Browser Data
Socket found 19 modules across Chrome and Edge extensions running a malware framework that drains crypto wallets and steals browser data.
- News
SafePal Data Breach Impacts 39,798 Customers, Stolen Info for Sale
Crypto hardware wallet maker SafePal warns of a breach exposing order data for 39,798 customers after a flaw was exploited, with stolen data now listed...
- News
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hackers stole shipping data including names, addresses, emails, and phone numbers from 14,000 Trezor customers via a breach at logistics firm ShipMonk.
- News
COLDCARD Security Audit Phishing Attack Installs Remote Access Tool
Attackers impersonating COLDCARD hardware wallet makers are sending fake 'security audit' emails to exploit user anxiety over the RNG vulnerability....
- News
Bitcoin Hardware Wallet Maker Destroys Inventory After $88 Million Stolen via Firmware Flaw
A hardware wallet manufacturer was forced to destroy part of its product inventory after attackers exploited a firmware vulnerability to siphon more than...
- News
Online Ad Firm Adform's Script Compromised to Steal Cryptocurrency
Online advertising firm Adform suffered a supply-chain attack — a third party compromised Adform's JavaScript ad delivery script to inject...
- News
SE Asian Cybercriminal Syndicates Become a Global Power
A new UNODC threat assessment reveals that Southeast Asian cyber fraud syndicates generated $88–$114 billion in losses in 2025 alone — and are now...
- News
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
A firmware flaw introduced in Coldcard's March 2021 4.0.0 release caused devices to skip hardware random number generation and fall back to predictable...
- News
Apple Sued Over Fake App Store Crypto Wallet That Stole $1.8M in Bitcoin
Three plaintiffs have filed suit against Apple in California federal court after a fraudulent Sparrow Wallet impersonator on the App Store harvested their...
- News
New ClickLock macOS Malware Traps Users Into Revealing Login Password
Group-IB researchers uncovered ClickLock, a macOS infostealer that runs a 210ms kill loop for up to 83 hours to coerce victims into entering their...
- News
Attackers Exploit 'Ill Bloom' Vulnerability to Drain Over $5 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a critical crypto wallet flaw called Ill Bloom that exploits weak pseudorandom number generation in wallet seed...
- News
Money Launderer Accused of Stealing $290K in Seized Crypto While Serving Prison Sentence
A Bulgarian national already serving over 10 years for laundering millions stolen from American fraud victims now faces new charges after allegedly...
- News
INTERPOL Arrests 5,800 Suspects in Operation First Light 2026 Global Fraud Bust
A 3.5-month INTERPOL-led operation spanning 97 countries resulted in 5,811 arrests, $293 million seized, and 142,000 victims identified — targeting...
- News
Attackers Vote Themselves $20 Million in BONK Cryptocurrency via Governance Attack
An attacker spent $4 million to buy enough BONK tokens to control BonkDAO's governance system, then voted through a malicious treasury transfer proposal...
- News
236,000 DCloud Uni-App Sites Powering Crypto Scams and Wallet Drainers
Infoblox researchers have uncovered over 236,000 websites built on the legitimate DCloud Uni-App framework being weaponized for investment scams,...
- News
Chinese DCloud Uni-App Framework Powers 200,000+ Global Investment Scam Sites
Researchers at Infoblox documented how the legitimate DCloud Uni-App cross-platform development framework has been weaponized to power over 236,000 scam...
- News
Poland Busts SIM-Swapping Gang Tied to Millions in Crypto Theft
Polish authorities, working alongside the FBI and HSI, have arrested four members of a cybercrime gang that used SIM-swapping attacks to hijack...
- News
JaredFromSubway MEV Bot Hacked in $15 Million Crypto Theft
The JaredFromSubway Ethereum MEV bot lost $15 million after an attacker exploited its opportunity-detection logic by creating fake trading setups,...
- News
USB Worm Spreads Crypto-Stealing Malware via Windows Shortcut Files
A self-spreading USB worm active since February 2026 hides real files behind malicious .lnk shortcuts, hijacks clipboard cryptocurrency addresses, hunts...
- News
Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2
Microsoft Threat Intelligence has exposed a cryptocurrency clipboard-hijacking campaign active since February 2026 that spreads via malicious USB LNK...
- News
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol has dismantled AudiA6, a cryptocurrency laundering service described as a key financial pipeline for ransomware gangs and cybercriminal networks...
- News
Authorities Dismantle 'AudiA6' Ransomware Crypto-Laundering Service
Law enforcement has dismantled the AudiA6 cryptocurrency laundering service used by ransomware actors and cybercriminals to clean more than $380 million...
- News
DoJ Disrupts Southeast Asia Crypto Fraud Networks, Freezes $3.8 Million in Assets
The U.S. Department of Justice's 'Disruption Week' operation has dismantled Southeast Asia-linked crypto fraud networks, freezing $3.8 million in assets and…
- News
The U.S. Sanctions Nobitex Crypto Exchange Used by Ransomware
The U.S. Treasury's OFAC has sanctioned Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments linked to terrorist activities and…
- News
US Charges Google Security Engineer with Polymarket Insider Trading
A Google security engineer was charged with insider trading after winning $1.2 million by placing bets on cryptocurrency-based Polymarket using...
- News
More Than $10 Million Stolen from Crypto Platform THORChain
THORChain officials confirmed that one of their six vaults was compromised in a security incident, leading to a loss of approximately $10.7 million. The...
- Security
CVE-2026-41583: ZEBRA Zcash Node Consensus Rule Bypass
A missing sighash validation in ZEBRA, the Rust-based Zcash node, allowed invalid V5 transactions to pass consensus checks — patched in zebrad 4.3.1 and...
- News
Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive
Researchers at Infoblox and Confiant have uncovered a dual-threat fraud operation active since 2020: fake CAPTCHA pages secretly send up to 50...
- News
Money Launderer for Crypto Thieves Given 5-Year Prison
A California man has been sentenced to more than five years in federal prison for his role in laundering proceeds for a cybercriminal organization that...
- News
Money Launderer Linked to $230M Crypto Heist Gets 70 Months
Evan Tangeman, 22, of Newport Beach, California, was sentenced to 70 months in federal prison for laundering funds stolen in a $230 million cryptocurrency...
- News
Crypto Infrastructure Company Blames $290 Million Theft on North Korean Hackers
A major cryptocurrency infrastructure company has attributed a $290 million theft to North Korean state-sponsored hackers, as the industry continues to...
- Newsletter
Apr 21 Digest: Vercel AI Tool Breach, DPRK $290M, ActiveMQ
Vercel confirms breach through a compromised third-party AI coding tool; North Korean hackers attributed to a $290 million crypto theft; 6,400 Apache...
- News
$13.74M Hack Shuts Down Sanctioned Grinex Exchange After
Grinex, a Kyrgyzstan-based cryptocurrency exchange sanctioned by the U.S., U.K., and EU for facilitating sanctions evasion, has suspended all operations...
- News
Grinex Exchange Blames Western Intelligence for $13.7M
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended all operations after a $13.7 million hack, with the platform controversially attributing the...
- News
Over 20,000 Crypto Fraud Victims Identified in International Crackdown
An NCA-led international law enforcement operation has identified more than 20,000 cryptocurrency fraud victims across the UK, US, and Canada, marking one...
- News
'It Reads Like a Spy Novel': $280M Drift Theft Linked to North Korean Fake Companies
A post-mortem of the $280 million Drift Protocol crypto theft reveals a sophisticated six-month North Korean social engineering operation involving fake...
- News
Cryptocurrency ATM Giant Bitcoin Depot Reports $3.6 Million
Bitcoin Depot, one of North America's largest Bitcoin ATM operators, has filed an SEC disclosure revealing a cyberattack in which threat actors gained...
- News
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M
A now-patched security vulnerability in the widely used EngageLab Android SDK allowed apps on the same device to bypass the Android security sandbox and...
- News
Hackers Steal $3.6 Million from Crypto ATM Giant Bitcoin
Bitcoin Depot, operator of one of the largest Bitcoin ATM networks in North America, disclosed that attackers stole $3.665 million in Bitcoin from its hot...
- News
Drift $280M Crypto Theft Linked to 6-Month In-Person DPRK
Drift Protocol has revealed that the $280 million hack it suffered was the culmination of a six-month long operation in which North Korean-linked threat...
- Newsletter
Apr 7 Digest: Medusa Ransomware Surge, FBI $21B Record
Storm-1175 runs sub-24-hour Medusa ransomware campaigns using zero-days; the FBI IC3 reports a record $21 billion in US cybercrime losses for 2025; North...
- News
$285 Million Drift Hack Traced to Six-Month DPRK Social
Drift has confirmed the April 1, 2026, theft of $285 million resulted from a meticulously planned six-month North Korean social engineering operation that...
- News
Hacker Charged with Stealing $53 Million from Uranium
U.S. prosecutors have charged a Maryland man with hacking DeFi protocol Uranium Finance twice and laundering over $53 million through cryptocurrency mixers.
- News
Hacker Walks Away with $24.5 Million After Breaching Resolv
A compromised private key allowed an attacker to mint $80 million in unbacked USR stablecoins on the Resolv DeFi protocol, extract $24.5 million in ETH,...
- News
AppsFlyer Web SDK Supply Chain Attack Spread
Attackers hijacked AppsFlyer's CDN domain via a registrar incident, serving a sophisticated 170 KB crypto-stealing JavaScript payload to every site...
- News
North Korea's UNC4899 Breached Crypto Firm via AirDropped
North Korean threat actor UNC4899 compromised a cryptocurrency organization after a developer AirDropped a trojanized archive from a personal device to a...
- News
Truebit Protocol Hit by $26.5 Million DeFi Hack via Smart
Attackers exploited a smart contract integer overflow vulnerability in Truebit Protocol, minting massive amounts of TRU tokens at zero cost and draining...
- News
Lazarus Group Plants 192 Malicious Packages in npm and PyPI
North Korea's Lazarus Group is running a fake recruitment campaign codenamed Graphalgo, planting 192 malicious packages on npm and PyPI that target...
- News
North Korea Deploys AI-Generated Video and ClickFix
North Korean threat actors are running sophisticated campaigns using AI-generated deepfake videos and the ClickFix social engineering technique to target...
- News
North Korean Hackers Use Fake Zoom Meeting to Target Crypto
UNC1069, a North Korean APT group, deployed a sophisticated ClickFix scam using a fake Zoom meeting to target a cryptocurrency executive in a social...