Blockchain security is no small matter

Blockchain security is no small matter

What risks will we encounter in the blockchain dark forest? How should we deal with them?

97 articles
An Insider Setup and Face-ID Transfers: Crypto KOL Robbed of $2 Million
Crypto investor Evan Luthra has disclosed that while returning from Oxford, UK, in November 2025, he was abducted by five masked men who forced him to unlock his phone with facial recognition and transfer more than $2 million in crypto assets, and who also took a limited-edition Richard Mille watch worth about £450,000. Binance returned about $370,000 under a UK court POCA order.
Foresight News
链上追踪：黑客抢走币安62.8亿美元，完整攻击路径深度复盘
币安热钱包遭盗 62.8 亿美元，链上追踪揭示攻击者如何用 EIP-7702 授权接管钱包，抢在 Tether 等发行方冻结前转移资金，全景还原这起最大安全事件。
深潮TechFlow
Binance Hacked for $5.8 Billion: The Full Postmortem of Crypto's Largest-Ever Security Breach
Binance suffers the largest theft in crypto history at $5.5 billion, with EIP-7702 at the core of the attack; hackers suspected of borrowing AI and North Korean methods; BTC fell below $78,500, triggering $629 million in liquidations.
深潮TechFlow
Why Third Parties Again? A Review of Coinbase's Supply Chain Risk and Defense Dilemma
Coinbase denies a data breach, saying third-party analytics provider Amplitude suffered a security incident.
Foresight News
硬核指南：iPhone 如何变身安全冷钱包？
iPhone做加密冷钱包并非断网就安全，硬件代际与密钥状态才是真正防线。苹果A19芯片内存完整性强制、iOS 27补丁版本、BFU/AFU解锁状态及钱包密钥管理，决定离线手机的实际安全成色。
深潮TechFlow
In the AI era, how do you safeguard your own tokens?
A Ledger hardware wallet reseller was exposed for implanting chips to steal seed phrases, with over $90 million stolen across more than 300 wallets. In the AI era, the risk of single-device custody has surged. The article proposes five defense strategies: distributing private keys via multisig, AI-assisted custody planning, domain verification, screenshot interpretation before signing, and security warning monitoring — teaching you to fight AI with AI and protect your crypto assets.
闪电HSL
2026 Latest Anti-Scam Guide: How Many Crypto Scams Do You Know?
A 2026 roundup of crypto scams, from the fake GIWA mainnet to stolen KOL accounts and phishing sites, revealing the latest scam tactics and how to protect yourself.
Biteye
Bitget Hacked for ~$350 Million: After the Funds Are Moved, Who Can Still Press "Pause"?
From exchange freezes and swap services suspending settlement, to cross-chain protocols restricting entry points — what does asset-recovery collaboration really test?
曼昆区块链
After the FomoPeek Hack: Here's the New Private Key Security Guide You Need!
The malicious FomoPeek app stole iOS wallet private keys, with hackers exploiting a kernel vulnerability to escape the sandbox. A Web3 security guide: physical isolation of seed phrases, tiered asset management, and dedicated backup devices to keep your crypto assets from being wiped out.
Biteye
Crypto Security Guide: How to Identify and Defend Against Social Engineering Attacks
Social engineering attack tactics are constantly evolving, with attackers increasingly using identity impersonation, phishing links, psychological pressure, and profit inducement to gain control of users' assets. SafePal outlines five common types of social engineering attacks and summarizes four core security principles to help users raise their awareness of crypto asset security.
SafePal
6.8 亿美元警示：多数 DeFi 攻击落在审计范围之外
DeFi审计漏洞揭示，超94%的巨额损失来自审计范围外攻击，研究分析135起安全事件，用户安全保障面临信任危机。
Cryptoslate
On-Chain Data Analysis: Over $43 Million Frozen on Xinbi Guarantee Platform
On September 8, Tether initiated a large-scale freeze targeting a Telegram cryptocurrency guarantee platform. The Beosin team analyzed relevant addresses using the blockchain tracking and analysis tool Beosin Trace. Among all frozen addresses, 19 belong to the Xinbi Guarantee platform, with approximately $43.437 million frozen; 31 addresses belong to Xinbi Guarantee merchants, with over $9 million frozen.
Beosin
近九成被盗资金无法追回：2026上半年Web3攻击目标正从“代码”转向“人”
在 AI 合成现实成为可能的时代，需要验证的不再是某一条信息，而是环境本身。
OKX
世界杯期间USDT成非法赌球首选筹码？警惕三大典型骗局
揭秘链上资金多层洗钱链路，教你识别网赌地址并防范加密诈骗陷阱。
零时科技
虚拟币洗钱“隐身衣”失效！AI 照妖镜让链上黑产无处遁形
AI自动标记高危地址、聚类团伙、跨链追踪，破解洗钱与传销资金链路。黑产用AI伪造交易对抗，防御端以行为建模、红队演练反制。用户可用浏览器查标签、健康工具验地址，转账前10秒自查。技术博弈中，AI正成为击穿链上隐身衣的核心武器。
零时科技
市场冷了，黑客没停：跨链桥为什么总是被盯上？
安全不只是保管好助记词，也包括在连接 DApp、授权/交易和跨链转账前，看懂每一步操作。
imToken
Is the old DeFi path no longer viable? Behind the billions of dollars in withdrawal: People crave security.
Frequent hacker attacks have led to billions of dollars being withdrawn from native DeFi and instead flowing into safer tokenized government bonds, compliant stablecoins, and institutional-grade settlement products.
Foresight News
A retrospective of 20 hacking incidents: Why is the cryptocurrency world so prone to being hacked?
This article analyzes 20 cases of encrypted data theft, dissecting the two paths attackers take and explaining why a problem with one protocol can harm the entire ecosystem.
Biteye
Why is DeFi so frequently hacked? You may be ignoring these warning signs.
Often, hackers don't "break" the rules; they simply "exploit" them.
Yuliya
Interpreting the FBI's "2025 Internet Crime Report": AI Scams Become the Biggest Variable, and People Over 60 Become the Primary Target of Crypto Scams
Global cybercrime losses have surpassed a record high of $20.8 billion, with investment fraud and cryptocurrency-related crimes being the most rampant.
慢雾科技