2026-04-01
[vendor] Drift Protocol (Solana DeFi perpetual futures DEX)
Vector: Six-month DPRK social engineering operation (UNC4736/TraderTraitor) targeted Drift Security Council members; attackers built relationships with team members and used Solana's 'durable nonces' feature to trick council members into pre-signing malicious transactions that transferred admin control
On April 1, 2026, UNC4736 (North Korean state-sponsored TraderTraitor group) executed a 12-minute, 31-transaction drain of $285 million from Drift Protocol, the largest Solana DeFi …
2026-03-24
[vendor] Moonwell governance attack
Vector: Governance attack / malicious on-chain proposal
The Moonwell lending protocol faced a governance attack on its deprecated Moonriver instance that could have drained $1 million from the project. Because Moonwell's MFAM governance …
2026-03-22
[vendor] Resolv Protocol (Ethereum DeFi stablecoin protocol)
Vector: Attacker exploited a vulnerability in Resolv Protocol's smart contracts on Ethereum, allowing unauthorized minting of tokens worth approximately $24 million; the specific technical exploit involved manipulating the protocol's collateralization or price oracle mechanisms
In March 2026, an attacker exploited a vulnerability in Resolv Protocol — an Ethereum-based decentralised finance (DeFi) stablecoin protocol — to mint approximately $24 million in …
2026-03-20
Vector: Attackers obtained credentials linked to Bitcoin Depot's digital asset settlement accounts, enabling unauthorized transfer of Bitcoin from company-controlled corporate wallets
On March 20, 2026, attackers used compromised credentials to access Bitcoin Depot's digital asset settlement accounts and transfer 50.903 BTC (valued at approximately $3.665 …
2026-03-15
[vendor] BlockFills goes bankrupt
Vector: Protocol collapse / insolvency
Approximately a month after halting deposits and withdrawals, citing liquidity issues and "recent market and financial conditions", the American crypto lender BlockFills has filed …
2026-03-12
[vendor] Aave swap loss
[loss] $50M
A trader using the Aave interface attempted to swap $50 million USDT for AAVE. However, due to the enormous size of the order, the purchase had dramatic impact on the aave price. …
2026-03-11
[vendor] Microsoft Intune (mobile device management)
Vector: Handala (Void Manticore, MOIS-affiliated Iran) compromised a Microsoft Intune admin account at Stryker, then used the MDM platform to issue remote wipe commands against the entire enrolled device fleet across 79 countries
On March 11, 2026, the Iran-linked hacktivist group Handala (a persona of Void Manticore, affiliated with Iran's Ministry of Intelligence and Security) wiped between 80,000 and …
2026-03-10
[vendor] Chaos Labs Aave liquidations
[loss] $27M
Vector: Software bug / unintentional loss
Users of the Aave defi lending protocol who had borrowed from the wstETH/stETH pool suffered erroneous liquidations when a price oracle from Chaos Labs reported an inaccurately low …
2026-03-01
[vendor] Bithumb cryptocurrency exchange (South Korea)
Vector: Bithumb suffered an unauthorised access incident affecting its cryptocurrency exchange platform; specific technical attack vector not publicly disclosed at time of reporting; the exchange was working on a recovery plan to compensate affected users and restore operations
In early 2026, Bithumb — South Korea's largest cryptocurrency exchange with approximately $1 billion in daily trading volume and over 8 million registered users — suffered a …
2026-03-01
[vendor] Handala leak site infrastructure (Iranian IRGC-linked)
Vector: US federal law enforcement (FBI/DOJ) executed court-ordered domain seizures targeting four web domains used by Handala, an Iran-linked hacktivist group, for publishing stolen data and coordinating cyberattack claims
In March 2026, US federal law enforcement seized four web domains associated with Handala's Iranian online leak infrastructure, days after Handala published materials it claimed to …
2026-02-17
[vendor] FBI Digital Collection System Network DCS-3000 (Red Hook) - pen register and tap-and-trace surveillance infrastructure
Vector: Threat actors leveraged a commercial Internet Service Provider's vendor infrastructure to access FBI systems; FBI systems in the Virgin Islands were compromised
On February 17, 2026, the FBI began investigating abnormal activity in an unclassified system — DCS-3000 (known as Red Hook), part of its Digital Collection System Network (DCSNet) …
2026-02-11
[vendor] BlockFills
Vector: Withdrawal halt / insolvency
The Chicago-based institutional crypto lending firm BlockFills has halted deposits and withdrawals, citing "recent market and financial conditions" and a desire to "further the …
2026-02-05
[vendor] Gemini layoffs
Vector: AI-assisted attack or AI-generated exploit
Gemini, the cryptocurrency exchange founded and run by Cameron and Tyler Winklevoss, will lay off as many as 200 employees globally. The news came amid an announcement that the …
2026-01-23
[vendor] Lick theft
Vector: On-chain theft (attributed by zachxbt)
Two crypto thieves decided to settle an argument over who was wealthier by screensharing as they transferred crypto between wallets to prove ownership. In doing so, one of them — …
2026-01-01
[vendor] SOHO routers (multiple vendors including TP-Link, ASUS, Netgear, D-Link) used by target organisations
[malware] MooBot (Mirai variant), custom DNS hijacking tools
Vector: GRU-linked APT28 (Fancy Bear) threat actors compromised SOHO (Small Office/Home Office) routers by exploiting default credentials, unpatched firmware vulnerabilities, or known CVEs in popular router models; once compromised, attackers modified the routers' DNS resolver settings to redirect DNS queries through attacker-controlled infrastructure, enabling passive interception of cloud service authentication traffic for high-value targets
In early 2026, security researchers and government agencies disclosed a new cyberespionage campaign by hackers tied to Russia's GRU military intelligence agency (Fancy Bear / APT28 …
2025-11-17
[vendor] DappRadar
Vector: Protocol collapse / insolvency
Amid a month of falling crypto prices, the crypto tracking platform DappRadar has announced it will be shutting down after seven years of operation. "Running a platform of this …
2025-11-01
[vendor] Cisco ASA (firewall)
Vector: Suspected exploitation of an outdated Cisco ASA firewall (last patched 2024) — vulnerable to newly discovered bugs actively exploited by suspected Chinese state-sponsored hackers; suspected PRC/China state-backed actor
In early November 2025, the US Congressional Budget Office (CBO) detected and confirmed a cyberattack by a suspected foreign actor. US officials briefed CNN that Chinese …
2025-10-22
[vendor] Cryptomus fine
Vector: Regulatory / legal action
The Canadian cryptocurrency exchange Cryptomus has been fined CA$177 million (US$127 million) by the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) for …
2025-10-22
[vendor] Fortress Trust insolvency
[loss] $11M
Vector: Protocol collapse / insolvency
Nevada's Financial Institutions Division has issued a cease and desist order against Fortress Trust, stating that the firm is "on the verge of insolvency". The company admits it …
2025-09-29
[vendor] Futureverse
Vector: Exit scam / rug pull
In 2023, there was no shortage of buzzy press coverage for Futureverse, which promised to build a metaverse and gaming-focused blockchain. They partnered with Ready Player One …
2025-08-27
[vendor] BetterBank
[loss] $1M
The PulseChain-based defi project BetterBank was exploited by an attacker who took advantage of a vulnerability that allowed them to mint arbitrary tokens, some of which they then …
2025-08-07
[vendor] WNBA sex toy incidents
A group of crypto enthusiasts promoting a memecoin have claimed responsibility for a string of incidents in which neon green sex toys were thrown onto professional women's …
2025-07-29
[vendor] Abra
Vector: Withdrawal halt / insolvency
The Abra cryptocurrency lender sent an email to customers announcing that "Abra Earn international services are currently paused, effective immediately", attributing the decision …
2025-05-08
[vendor] Jeffy Yu
On May 4, 22-year-old Zerebro founder Jeffy Yu published a blog post introducing "legacoins" — a version of memecoins he said would be used to "define the legacy" of those who had …
2025-04-27
[vendor] VOXEL manipulation
[loss] $20M
Vector: Regulatory / legal action
After trading — and prices — surged in Bitget's market for the thinly traded video game token VOXEL, the company has accused a "professional arbitrage" group of "improperly" …
2025-04-18
[malware] BPFDoor; Tiny Shell
Vector: Multiple strains of malware (including 27 variants of BPFDoor backdoor, Tiny Shell, and other tools) installed on SK Telecom's internal servers; went undetected for approximately 3 years (2022–2025)
SK Telecom (South Korea's largest mobile carrier, ~27 million subscribers) officially confirmed a breach on April 19, 2025, after detecting malware on April 18 targeting its Home …
2025-04-14
[vendor] Mantra
Vector: Exit scam / rug pull
Mantra's $OM token price suddenly crashed by around 90%, with the project's supposed "market cap" shrinking by around $5 billion in the span of hours. Mantra is a layer-1 …
2025-04-02
[vendor] FDUSD depegs
The stablecoin issued by First Digital, FDUSD, has lost its $1 peg and sunk as low as $0.76 before returning to around $0.97 — which, in stablecoin world, is still a substantial …
2025-03-28
[vendor] Galaxy digital agrees to $200 million settlement over alleged LUNA manipulation
Vector: Regulatory / legal action
While many crypto firms have escaped enforcement actions from federal regulators thanks to massive industry lobbying, state enforcers are still on the beat. Crypto investment firm …
2025-03-27
[vendor] Polymarket governance attack
[loss] $7M
Bets on the Polymarket platform where the outcome is not clear are resolved using an oracle system called UMA, or Universal Market Access. Holders of the UMA token participate in a …
2025-03-24
[vendor] Binance insider trading
Binance announced on Twitter that they had fired an employee after discovering that they had engaged in insider trading. The employee took a large position in a token that he knew …
2025-02-18
Vector: Insider threat: two employees (twin brothers) with prior hacking convictions retained privileged access; exfiltrated files via USB drive and deleted government databases during and after termination meeting
Opexus, a Thoma Bravo-owned software company providing records management services to nearly every US federal agency, was compromised by twin brothers Muneeb and Suhaib Akhter who …
2025-02-11
[vendor] Trader accidentally sends 2,000 SOL to bankrupt FTX
[loss] $396,000
Vector: Regulatory / legal action
A former FTX customer made an expensive mistake in October 2023 when he transferred 2,000 SOL (~$64,000 at the time, almost $400,000 today) to an old FTX account, about a year …
2025-01-30
[vendor] Tsotchke Twitter profile picture
Vector: AI-assisted attack or AI-generated exploit
A project called "Tsotchke" has convinced a lot of people to buy up its token based on claims that it uses "spin-based quantum computing" to "enable quantum-enhanced AI at room …
2025-01-27
[vendor] KuCoin
Vector: Regulatory / legal action
The KuCoin cryptocurrency exchange has pleaded guilty to a charge filed against them in March that they were operating an unlicensed money transmitting business. Since at least …
2025-01-23
[vendor] Thorchain
Vector: Protocol collapse / insolvency
The ThorChain project is in crisis amid news that the project is insolvent. In order to prevent what would effectively be a bank run and likely death spiral, the project has paused …
2025-01-23
[vendor] Zero Edge crypto casino liquidation
[loss] $8M
Vector: Phishing attack
Richard Kim, the founder of the Zero Edge crypto casino, resigned on July 2, 2024 after blowing most of the project's seed funding. Kim was a former executive of Galaxy Digital, …
2025-01-19
[vendor] Tweet thread with Ryan Fournier
Vector: Exit scam / rug pull
Ryan Fournier, a co-founder of the Students for Trump organization, worked with a memecoin creator to create a $TIKTOK memecoin, which he said was intended to celebrate TikTok …
2025-01-17
[vendor] Genesis
Vector: Regulatory / legal action
The Digital Currency Group has agreed to settle with the SEC for $38 million over charges that its Genesis subsidiary misled investors. When the hedge fund Three Arrows Capital …
2025-01-16
[vendor] MakersPlace NFT marketplace
Vector: Protocol collapse / insolvency
Citing "ongoing market challenges and funding difficulties", the MakersPlace NFT platform announced it will be shutting down after six years of operations. The company had raised …
2025-01-15
[vendor] BitMex
Vector: Regulatory / legal action
Although BitMEX had previously tried to argue that they should not face additional penalties after being fined $110 million in 2024 for Bank Secrecy Act violations, a judge has …
2025-01-11
[vendor] Bankless hosts slammed for dumping tokens
The hosts of the Bankless crypto podcast have landed in hot water after selling off some of the substantial quantities of $AICC tokens they were allocated as investors in the …
2025-01-01
[vendor] Enterprise networks globally across all sectors
Vector: AI and automation enable attackers to execute complete attack chains — from initial access through lateral movement, privilege escalation, data exfiltration, and ransomware deployment — faster than human security operations teams can detect and respond; AI-driven tools exploit vulnerabilities and pivot across networks without requiring human attacker intervention at each step
By 2025-2026, documented case studies from Darktrace, CrowdStrike, Palo Alto Networks Unit 42, and Microsoft MSTIC demonstrate that the most advanced attackers are executing …
2024-12-12
[vendor] Kraken
Vector: Regulatory / legal action
The US-based cryptocurrency exchange Kraken has been fined AU$8 million (US$5.1 million) for illegally offering margin trading to Australian customers. The firm had offered the …
2024-12-02
[vendor] Nike to
Nike will be shutting down its RTFKT "virtual collectibles" project at the end of January 2025, according to an announcement made in early December. Nike had acquired RTFKT in 2021 …
2024-10-22
[vendor] Forte Labs game studio acquisitions
Sometime in 2023, blockchain firm Forte acquired game studios Phoenix Labs and Rumble Games. However, it would be a year before this came to light, because according to a report …
2024-10-22
Vector: Russian SVR-linked Midnight Blizzard (APT29/NOBELIUM) sent signed malicious RDP configuration files via spear-phishing email; RDP files connected targets' machines to attacker-controlled servers, mapping local resources for data theft and malware staging
From 22 October 2024, Midnight Blizzard targeted thousands of users across 100+ organizations in government, academia, defense, and NGOs in UK, Europe, Australia, and Japan. Emails …
2024-10-03
[vendor] American Water Works customer IT systems
Vector: CWE-284: Improper Access Control
American Water Works, the largest regulated water and wastewater utility in the United States (serving 14+ million people across 14 states), detected unauthorized activity in its …
2024-09-19
[vendor] Germany seizes 47 cryptocurrency exchanges
Vector: Regulatory / legal action
German authorities have seized 47 cryptocurrency exchanges alleged to have been used to launder stolen funds by ransomware groups. The exchanges did not require KYC, allowing …
2024-09-18
[vendor] Rari Capital
Vector: Regulatory / legal action
The defi lending protocol Rari Capital, and its three co-founders, have settled charges from the SEC that it misled investors and engaged in unregistered broker activity. Rari …
2024-09-15
[vendor] Flappy Bird creator disavows crypto spin-off
A blockchain-based version of the 2014 hit game Flappy Bird has emerged, taking advantage of the recent "tap-to-earn" crypto craze. The @flappy_bird Twitter account posted "I AM …
2024-09-15
A blockchain-based version of the 2014 hit game Flappy Bird has emerged, taking advantage of the recent "tap-to-earn" crypto craze. The @flappy_bird Twitter account posted "I AM …
2024-09-13
[vendor] Eve Online announcement
CCP, the developer of the Eve Online space MMORPG, has angered their fanbase with a new announcement that their upcoming game will be built on the blockchain and incorporate …
2024-09-12
[vendor] eToro settlement
Vector: Regulatory / legal action
The eToro stock and crypto trading platform settled with the U.S. Securities and Exchange Commission on charges that it was operating an unregistered broker and unregistered …
2024-09-11
[vendor] Adam Neumann's Flowcarbon refunds customers
In May 2022, WeWork founder and former CEO Adam Neumann announced he would be launching a company called Flowcarbon, which would issue "tokenized carbon credits" called "Goddess …
2024-09-09
[vendor] AssangeDAO accused of
AssangeDAO was a project created to fundraise for the legal defense of WikiLeaks founder Julian Assange, who has been fighting espionage and computer intrusion charges for over a …
2024-09-04
[vendor] Robinhood pays settlement to California
Vector: Regulatory / legal action
Robinhood has paid $3.9 million to settle charges from the California Department of Justice that the platform was violating commodities laws. From 2018 to 2022, the popular trading …
2024-09-03
[vendor] Galois Capital
Vector: Regulatory / legal action
Eighteen months after the crypto-focused algorithmic trading fund Galois Capital shut down, explaining that they had lost around $40 million in the FTX collapse, the SEC has filed …
2024-09-01
[malware] Hunters International ransomware
Vector: Unknown
The London subsidiary of the Industrial and Commercial Bank of China (ICBC), the world's largest bank by assets and a Chinese state-owned financial institution, was attacked by …
2024-08-31
Vector: Social engineering / MFA bypass by Scattered Spider members; attacker gained internal access via compromised employee credentials
Scattered Spider attacked Transport for London on 31 August 2024, ultimately exposing data of approximately 10 million customers — one of the largest breaches in British history. …
2024-08-28
[vendor] OpenSea Wells notice
Vector: Regulatory / legal action
OpenSea has announced that they received a Wells notice from the U.S. Securities and Exchange Commission, warning them of a likely lawsuit from the agency. According to CEO Devin …
2024-08-26
[vendor] Abra charged by SEC
Vector: Regulatory / legal action
The SEC charged the Abra cryptocurrency lending platform with failing to register the offers and sales of its retail crypto asset lending product, Abra Earn, and with operating as …
2024-08-19
[vendor] Roman Ziemian
Vector: Ponzi / pyramid scheme
Roman Ziemian, a co-founder of the alleged crypto pyramid scheme FutureNet, was arrested in Montenegro, where he was living under a false identity. He had previously been arrested …
2024-08-12
[vendor] NovaTech lawsuit
Vector: Ponzi / pyramid scheme
Following a lawsuit from the New York Attorney General in June, the SEC has filed a lawsuit against the promoters of the NovaTech crypto pyramid scheme and affinity fraud. Cynthia …
2024-08-08
[vendor] FTX CFTC settlement
Vector: Regulatory / legal action
FTX will pay $8.7 billion in restitution and another $4 billion in disgorgement to settle the lawsuit from the CFTC, which was filed shortly after FTX collapsed in November 2022. …
2024-08-02
[vendor] CFTC subpoenas BitBoy's former company
Vector: Regulatory / legal action
The CFTC has sent a subpoena to Hit Network, the crypto media company that was previously headed up by Ben "BitBoy" Armstrong until his rather public meltdown. According to The …
2024-07-30
[vendor] BitClout
Vector: Regulatory / legal action
Nader Al-Naji, also known as "Diamondhands", was arrested on wire fraud charges relating to his BitCloud crypto social media platform. He was simultaneously charged by the SEC with …
2024-07-30
[vendor] ZKX shutdown
Vector: Exit scam / rug pull
The Starknet-based decentralized exchange ZKX abruptly shuttered operations on July 30, with an announcement from founder Eduard Tur explaining that they had "been unable to find …
2024-07-19
[vendor] CrowdStrike Falcon sensor (Windows) — Channel File 291
Vector: A faulty content configuration update (Channel File 291) for the CrowdStrike Falcon sensor on Windows hosts caused a logic error in the sensor's Content Interpreter, triggering an out-of-bounds memory read that led to an exception handling failure and Windows BSOD (Blue Screen of Death)
On 19 July 2024, CrowdStrike released a faulty content configuration update (Channel File 291) to Windows systems running the CrowdStrike Falcon endpoint detection and response …
2024-07-15
[vendor] Metamax pyramid scheme
Vector: Ponzi / pyramid scheme
Three people have been arrested in connection to a crypto pyramid scheme called Metamax. Those behind the scam promised that people who invested in the scam could then earn income …
2024-07-10
[vendor] BitMex pays $110 million fine
Vector: Regulatory / legal action
BitMEX has pleaded guilty to charges from 2020 that they violated the Bank Secrecy Act by failing to implement an appropriate anti-money laundering program. BitMex's founders, …
2024-07-01
[vendor] Silvergate Bank settlement
Vector: Regulatory / legal action
More than a year after the crypto-friendly Silvergate Bank collapsed, its parent company has agreed to pay $63 million in fines to the Federal Reserve and California Department of …
2024-06-28
[vendor] Yield App
Vector: Protocol collapse / insolvency
Yield App, a crypto investment platform, has announced that it will be entering liquidation proceedings. Citing "significant financial challenges", the project announced that the …
2024-06-27
[vendor] Logan Paul lawsuit against Coffeezilla
Vector: Regulatory / legal action
A year and a half after threatening to sue YouTuber Coffeezilla for his series of videos exposing influencer Logan Paul's (alleged) role in (allegedly) scamming his large following …
2024-06-25
[vendor] Remy St. Felix conviction
[loss] $150,000
Vector: Regulatory / legal action
The Department of Justice busted a group of more than a dozen people, led by a 24-year-old man named Remy St. Felix, who perpetrated a string of break-ins and violent assaults in …
2024-05-28
[vendor] Ryan Salame
Vector: Regulatory / legal action
Ryan Salame was the CEO of FTX Digital Markets which was the Bahamian portion of the FTX business. In September 2023, just before Sam Bankman-Fried's trial began, Salame pleaded …
2024-05-17
[vendor] Crypto
[loss] $73M
Vector: Regulatory / legal action
Two people were charged in California for laundering money obtained from cryptocurrency and fiat "pig butchering" scams. After receiving the money from the investment scammers, the …
2024-05-16
[vendor] Aiden Pleterski arrested
Vector: Regulatory / legal action
Aiden Pleterski, a 25-year-old who goes by "Crypto King", has finally been arrested and charged with fraud and money laundering. In 2022, he was sued by a group of investors who …
2024-05-14
[vendor] Alexey Pertsev sentencing
Vector: Regulatory / legal action
Alexey Pertsev, one of the developers of the Tornado Cash mixing service, was found guilty of money laundering and sentenced to 64 months imprisonment in the Netherlands. …
2024-05-06
[vendor] SEC sends Wells notice to Robinhood Crypto
Vector: Regulatory / legal action
Robinhood has disclosed that they received a Wells notice from the US Securities and Exchange Commission in relation to their "Robinhood Crypto" product. This indicates that the …
2024-05-03
[vendor] Cred executives indicted
Vector: Regulatory / legal action
The former CEO, CFO, and CCO of the cryptocurrency lending service Cred have been indicted on multiple charges involving wire fraud and money laundering. They were charged in …
2024-04-30
[vendor] Changpeng Zhao
Vector: Regulatory / legal action
Former Binance CEO Changpeng "CZ" Zhao has been sentenced to four months in prison after pleading guilty to money laundering-related charges. The charges were filed in November, …
2024-04-29
[vendor] ZKasino
Vector: Exit scam / rug pull
In the wake of the $33 million ZKasino rug pull, Dutch police have arrested an as yet unnamed 26-year-old who is likely "Derivatives_Ape", the creator of the project. The police …
2024-04-18
[vendor] Avi Eisenberg convicted
Vector: Regulatory / legal action
A jury found Avi Eisenberg guilty of fraud and market manipulation after he stole $110 million from the Mango Markets defi protocol in October 2022. Although he tried to argue that …
2024-04-18
[vendor] JPEX police action
Vector: Regulatory / legal action
Police in Hong Kong have arrested 72 people and frozen HK$228 million (~US$29 million) in connection to the collapse of the JPEX cryptocurrency exchange in September 2023. The …
2024-04-17
[vendor] Roger Stone endorses $TRUMP memecoin
Amid tweets alleging corruption among jurors in his 2019 criminal case, far-right activist and Trumpworld figure Roger Stone has posted several tweets endorsing "MAGA Memecoin", …
2024-04-14
[vendor] tea.xyz causes open source software spam problems, again
The tea.xyz protocol first earned an entry on Web3 is Going Just Great in late February, when their plan to reward open source software contributors resulted in crypto enthusiasts …
2024-04-12
NGS Crypto, which sold "crypto mining packages" to interested investors, has been put into receivership. The Australian firm encouraged customers to set up a self-managed super …
2024-04-12
[vendor] Australian NGS Crypto mining fund
[loss] $42M
Vector: Protocol collapse / insolvency
Liquidators have been appointed for three cryptocurrency companies owned by Ash Balanian. DCA Capital, Digital Commodity Assets, and the Digital Commodity Assets Fund have all …
2024-04-10
[vendor] Uniswap Wells notice
Vector: Regulatory / legal action
The US Securities and Exchange Commission issued a warning to the Uniswap decentralized exchange in the form of a Wells notice. Wells notices are used to inform the recipient of an …
2024-04-09
[vendor] STFIL investigation
[loss] $23M
Vector: Ponzi / pyramid scheme
STFIL, a protocol that promises liquid staking and "leverage mining" to holders of Filecoin's FIL token, announced on Twitter that "We believe that the STFIL core technical team is …
2024-04-04
[vendor] SushiSwap treasury vote
Vector: Governance attack / malicious on-chain proposal
The leadership team behind SushiSwap, a popular defi platform, submitted proposals for a DAO governance vote that would transfer control of around $40 million from the DAO to a …
2024-03-28
[vendor] Sam Bankman-Fried
Vector: Regulatory / legal action
Sixteen months after the collapse of his FTX cryptocurrency exchange, Sam Bankman-Fried has been sentenced to 25 years in prison. He has also been ordered to pay an $11 billion …
2024-03-26
[vendor] KuCoin and founders indicted
Vector: Regulatory / legal action
The cryptocurrency exchange KuCoin and two of its founders, Chun Gan and Ke Tang, were indicted in the Southern District of New York on charges of conspiring to operate an …
2024-03-26
[vendor] Palo Alto Networks PAN-OS GlobalProtect
[malware] UPSTYLE Python backdoor
[cve] CVE-2024-3400
Vector: CWE-77: Command Injection via arbitrary file creation in GlobalProtect feature
CVSS 10.0. Threat actor UTA0218 exploited zero-day in PAN-OS GlobalProtect feature allowing unauthenticated OS command execution as root. Affected PAN-OS 10.2, 11.0, 11.1 with …
2024-03-15
[vendor] Tether user's accidental burn
Someone accidentally threw away $1.36 million when they accidentally sent Tethers to the Tether contract address — making them permanently inaccessible in a process known as …
2024-02-26
[vendor] BitForex withdrawals
[loss] $57M
Vector: On-chain theft (attributed by zachxbt)
The Hong Kong-based BitForex cryptocurrency exchange has shut down access to its platform after a suspicious outflow of around $57 million on several blockchains. Users who have …
2024-02-26
[vendor] tea.xyz spam
This crypto skeptic I've heard of once said "Show me the incentive and I will show you the outcome."A project called tea.xyz promised people they could "get rewards for [their] …
2024-02-25
[vendor] Aleo privacy error
Aleo, a blockchain project that advertises it's a place for "fully private applications" with "built-in privacy" has just emailed private identification documents — including …
2024-02-24
[vendor] Kow Seng Chai disappearance
[loss] $320,000
When businessman Kow Seng Chai transferred AU$99,500 (~US$65,000) to a cryptocurrency account on the Australian OTCPro cryptocurrency trading platform on January 25, he received an …
2024-02-20
[vendor] AAX money movement
[loss] $56M
The Hong Kong-based AAX cryptocurrency exchange suspended withdrawals in November 2022, only days after the FTX collapse and related chaos in the cryptocurrency world. They claimed …
2024-02-20
[vendor] Influencer "Crypto Rover" accused of pump-and-dump and other shady behavior
Vector: On-chain theft (attributed by zachxbt)
A popular cryptocurrency influencer known as "Crypto Rover" has been accused by blockchain sleuth zachxbt of shady behavior, including accepting promotional payments from crypto …
2024-02-19
[vendor] Airdrop hunters spam Github projects
After projects like Celestia and Starknet distributed airdrops of crypto tokens to people who had contributed to their open source Github repositories, airdrop hunters have begun …
2024-02-15
[vendor] YouTuber KSI accused of pump-and-dump
[loss] $850,000
Vector: On-chain theft (attributed by zachxbt)
Crypto sleuths Coffeezilla and zachxbt teamed up on an investigation into YouTuber and crypto promoter KSI, accusing him of pumping up interest into the XCAD project and then …
2024-02-14
Pablo Stanley, an artist who created the "Robotos" generative NFT collection, posted two final messages from the Robotos Twitter account. First, "it was a good run! thank u, all!", …
2024-02-01
[vendor] OPNX shutdown
Vector: Protocol collapse / insolvency
Who can believe this. OPNX, the crypto derivatives exchange created by the people who ran and then blew up the Three Arrows Capital hedge fund, will be shutting down. The exchange …
2024-02-01
[vendor] SIM swapping ring charged
Vector: Regulatory / legal action
Three people running a SIM swapping operation have been charged with fraud and identity theft. By gaining access to the personal information of their victims and then convincing …
2024-01-18
[vendor] Unitronics PLC / Muleshoe, TX water tower SCADA
Vector: CWE-1188: Insecure Default Initialization of Resource (default credentials on internet-exposed industrial control systems)
In January 2024, Russian hackers affiliated with Sandworm (a GRU/Russian military intelligence cyber unit) infiltrated water treatment systems in Muleshoe, Texas, causing a water …
2024-01-16
[vendor] TrueUSD
TrueUSD, a stablecoin connected to Justin Sun, deviated from its intended $1 peg to around $0.983 as traders sold off more than $100 million of the token seeking safer options. The …
2024-01-15
[vendor] Gamestop
Just as the NFT marketplace was entering collapse in May 2022, GameStop decided it would be a great time to launch an NFT marketplace. The marketplace launched in July, and made …
2024-01-12
[vendor] Genesis NYDFS settlement
Vector: Regulatory / legal action
After the New York Department of Financial Services accused the Genesis cryptocurrency platform of cybersecurity failures that made it vulnerable to criminal activity and hacking …
2024-01-10
[vendor] Euler Finance private key loss
[loss] $4M
As Euler Finance tried to recover from a massive hack in March 2023, and as founder co-founder Michael Bentley was dealing with matters in his personal life, he "made an error and …
2024-01-10
[vendor] Twitter removes NFT profile picture support
Just about two years after launching a feature in which NFT owners could show off their NFTs with special, hexagonal profile pictures, Twitter has apparently removed support for …
2024-01-09
[vendor] Bitcoin Rodney arrest
Vector: Regulatory / legal action
A crypto influencer known as "Bitcoin Rodney" was arrested by US authorities for his involvement in the HyperVerse crypto scam, which fleeced victims out of over $1 billion. In …
2024-01-01
[vendor] Healthcare technology vendor ecosystem — EHR vendors, billing processors, lab networks, pharmacy benefit managers
Vector: Healthcare vendor supply chain attacks exploit the concentration of sensitive patient data and operational dependencies in third-party EHR vendors, billing processors, managed care platforms, and file transfer systems; a single vendor breach cascades to hundreds of hospital and health plan clients simultaneously
By 2025-2026, healthcare vendor supply chain attacks had become the dominant breach vector in US healthcare, with HHS OIG and OCR reporting that third-party vendor incidents …
2024-01-01
[vendor] LockBit, BlackCat/ALPHV, Hive, Cl0p, Scattered Spider — ransomware operations disrupted 2024-2026
[malware] LockBit, ALPHV/BlackCat, Hive, Cl0p, REvil, Scattered Spider
Vector: Law enforcement disruption of ransomware infrastructure using proactive techniques: infiltrating group chats and affiliate portals months before public action (Operation Cronos / LockBit), seizing cryptocurrency from ransomware wallets, arresting affiliates and key operators globally, and publishing decryption keys for victims
By 2025-2026, international law enforcement agencies had significantly shifted their approach to ransomware disruption — moving from reactive arrests after the fact to proactive …
2023-12-25
[vendor] Tether Christmas 2023 mint
I wish I could give myself a billion dollars for Christmas, too.On December 25, Tether minted 1 billion of its USDT dollar-pegged stablecoin. CEO Paolo Ardoino announced on Twitter …
2023-12-21
[vendor] Qredo overhaul
Vector: Protocol collapse / insolvency
Despite raising $80 million in February 2022 in a Series A round that saw the company valued at $460 million, the Qredo crypto custody platform just had to secure debt financing to …
2023-12-14
[vendor] SafeMoon files for bankruptcy
Vector: Regulatory / legal action
The company behind the SafeMoon cryptocurrency scam has filed for Chapter 7 bankruptcy. Screenshots circulated on Twitter of a letter to employees citing "a number of operational …
2023-12-13
[vendor] CoinList sanctions settlement
Vector: Regulatory / legal action
The Californian cryptocurrency exchange CoinList has settled a lawsuit from the Treasury Departments Office of Foreign Assets Control (OFAC) for $1.2 million. OFAC charged CoinList …
2023-12-13
[vendor] EXW fraud
[loss] $19M
Vector: Ponzi / pyramid scheme
There was surprise in an Austrian courtroom when a defendant suddenly gave up any pretense of innocence, proclaiming, "I've run out of steam, I've finished driving... I plead …
2023-12-12
[vendor] KuCoin fine
Vector: Regulatory / legal action
The KuCoin cryptocurrency exchange has agreed to a settlement in which it will pay a $22 million fine and ban residents of New York state from its platform. The New York Attorney …
2023-12-05
[vendor] AEUR depeg
Binance says traders must have missed the memo on the AEUR stablecoin, which was intended to be pegged to the Euro. Shortly after it was listed on Binance, high demand caused the …
2023-11-30
[vendor] Forkast shutdown
Vector: Protocol collapse / insolvency
The crypto media website Forkast has stopped publishing and laid off most of its editorial staff. The last post on the site is from November 22.After raising $1.7 million in seed …
2023-11-30
The crypto media website Forkast has stopped publishing and laid off most of its editorial staff. The last post on the site is from November 22.After raising $1.7 million in seed …
2023-11-29
[vendor] BitStable sale failure
BitStable launched their BSSB token in a public sale only to watch as all tokens sold out in one block. Four entities acquired the majority of the BSSB tokens, an outcome that the …
2023-11-29
[vendor] SoFi exits crypto
Vector: Regulatory / legal action
After entering the crypto sector in 2019, the neobank SoFi is jettisoning the blockchain portion of its business by mid-December. Customers are being given the option to move their …
2023-11-22
[vendor] Unitronics Vision Series PLCs (programmable logic controllers) at US water and wastewater facilities
[cve] CVE-2023-6448
Vector: CyberAv3ngers (affiliated with Iran's Islamic Revolutionary Guard Corps Cyber-Electronic Command, IRGC-CEC) exploited internet-exposed Unitronics Vision Series PLCs at water and wastewater facilities; the PLCs had default factory passwords and were directly internet-accessible without authentication
Beginning 22 November 2023, CyberAv3ngers — a threat group affiliated with Iran's IRGC Cyber-Electronic Command — conducted attacks against Unitronics Vision Series PLCs at water …
2023-11-21
[vendor] Binance legal action
Vector: Regulatory / legal action
Binance founder Changpeng "CZ" Zhao pleaded guilty to money laundering charges and agreed to step down as CEO of Binance, the largest global cryptocurrency exchange. He will pay a …
2023-11-20
[vendor] Bittrex winds down
Vector: Protocol collapse / insolvency
After paying a then-record $29 million fine for sanctions violations in October 2022, shutting down US operations in March 2023, filing for bankruptcy in May, and paying $24 …
2023-11-20
[vendor] Crypto romance
[loss] $225M
At least according to the rather shady Tether stablecoin provider, the U.S. Department of Justice has been working on an investigation into a massive "pig butchering" romance scam …
2023-11-20
[vendor] DOJ Binance resolution rumors
Vector: Regulatory / legal action
According to Bloomberg, ongoing negotiations between the U.S. Department of Justice and Binance have involved penalties greater than $4 billion as part of ending an ongoing, …
2023-11-20
[vendor] Kraken sued by U.S. SEC
Vector: Regulatory / legal action
Kraken is the latest cryptocurrency exchange to face a lawsuit from the U.S. Securities and Exchange Commission. According to the SEC, Kraken violated securities laws by listing …
2023-11-17
[vendor] The Blockchain Group financial crisis
Vector: Protocol collapse / insolvency
French blockchain firm The Blockchain Group announced that they had requested trading be halted on the company's shares and postponed a planned company meeting. The announcement …
2023-11-08
[vendor] Citrix NetScaler (CitrixBleed)
[malware] LockBit ransomware
[cve] CVE-2023-4966
Vector: CitrixBleed vulnerability (CVE-2023-4966) exploitation on Citrix NetScaler appliance
The US broker-dealer subsidiary of the Industrial and Commercial Bank of China (ICBC Financial Services) suffered a LockBit ransomware attack on November 8, 2023. The attack …
2023-11-02
[vendor] Sam Bankman-Fried convicted
Vector: Regulatory / legal action
After less than five hours of deliberation, a jury convicted Sam Bankman-Fried of seven fraud and money laundering charges. The conviction followed a five-week-long trial which …
2023-10-20
[vendor] AuBit liquidation
Vector: Protocol collapse / insolvency
A judge in the Cayman Islands has placed Aubit, the firm behind the Freeway crypto project, into liquidation. Freeway was a crypto lending project that promised annual returns as …
2023-10-19
[vendor] Gemini, Genesis, and DCG lawsuit
Vector: Protocol collapse / insolvency
The New York Attorney General filed suit against Gemini, Genesis, and Digital Currency Group (DCG), a group of companies that have been involved in a bitter feud amongst …
2023-10-19
[vendor] Superdao to
Vector: Protocol collapse / insolvency
Superdao, a project aiming to assist communities in forming DAOs, has announced it will be closing its doors. It was blunt in its announcement: "it became clear that the crypto …
2023-10-19
[vendor] Treasury Department introduces proposal targeting crypto mixers
Vector: Regulatory / legal action
The U.S. Treasury Department introduced a proposal for new regulation that would require cryptocurrency mixers (also called tumblers) to up their recordkeeping and reporting …
2023-10-12
[vendor] Stephen Ehrlich lawsuits
Vector: Regulatory / legal action
Simultaneous civil lawsuits from the Commodity Futures Trading Commission (CFTC) and Federal Trade Commission (FTC) against former CEO of the collapsed Voyager crypto lender accuse …
2023-10-12
[vendor] USDR stablecoin de-pegs
Vector: MEV / sandwich attack
The real-estate-backed US dollar stablecoin "Real USD" (aka USDR) lost its peg, dropping from $1 to around $0.53. The website for the stablecoin was — even after the depeg — …
2023-10-10
[vendor] Goldfinch lending platform facing $7 million loss
Goldfinch is a decentralized lending platform aiming to provide undercollateralized loans, an unusual strategy in the crypto world where loans are typically overcollateralized due …
2023-10-10
[vendor] Trader Joe's sues Trader Joe
Vector: Regulatory / legal action
The American supermarket chain and cookie butter paradise, Trader Joe's, has filed a lawsuit against the popular Trader Joe decentralized exchange. According to the lawsuit, the …
2023-10-09
[vendor] UK FCA adds more unauthorized firms to list
Vector: Regulatory / legal action
The United Kingdom's Financial Conduct Authority (FCA) has added another 146 entries to its "warning list" of unauthorized firms, including the crypto exchanges Huobi and KuCoin. …
2023-10-06
[vendor] Gitcoin transfer mistake
[loss] $500,000
After agreeing to allocate $500,000 to "MMM" (merchandise, memes, and marketing — no, really), Gitcoin screwed up sending the money so badly that it's gone forever. Whoever was in …
2023-10-02
[vendor] Crypto.com fine
Vector: Regulatory / legal action
Crypto.com spent around two years operating in the Netherlands without bothering to register as required by the Dutch central bank — or pay the supervisory fees they were supposed …
2023-09-29
[vendor] Auditor Prager Metis sued by SEC
Vector: Regulatory / legal action
The U.S. Securities and Exchange Commission filed a lawsuit against auditor Prager Metis, who they allege violated auditor independence rules and aided and abetted their clients' …
2023-09-29
[vendor] Su Zhu
Vector: Regulatory / legal action
Co-founder of the collapsed Three Arrows Capital hedge fund, Su Zhu, was arrested in Singapore while allegedly trying to leave the country. He and his cofounder Kyle Davies have …
2023-09-26
[vendor] Chase UK to block payments for crypto
Chase Bank’s UK branch has decided it will completely block debit card purchases and bank transfers that it identifies as being "related to crypto assets", a move they say is …
2023-09-17
[vendor] JPEX issues
Vector: Withdrawal halt / insolvency
"We believe that the platform will not collapse," wrote JPEX, amidst apparent collapse. JPEX is a Hong Kong crypto exchange that was advertising more than 20% APY on various …
2023-09-15
[vendor] FTX class action settlements
Vector: Regulatory / legal action
Jacksonville Jaguars quarterback Trevor Lawrence has agreed to settle claims against him made in a class action lawsuit by FTX customers who say his endorsement of the fallen …
2023-09-15
Maybe they'd sunk too much money into producing Killer Whales to back out, or maybe its creators actually think that a Shark Tank-style crypto reality TV series is what it will …
2023-09-15
[vendor] Killer Whales crypto reality show
Maybe they'd sunk too much money into producing Killer Whales to back out, or maybe its creators actually think that a Shark Tank-style crypto reality TV series is what it will …
2023-09-15
[vendor] PolkaWorld pause
PolkaWorld, a major community within the Polkadot blockchain project, has announced that they will have to suspend operations as a funding proposal was overwhelmingly rejected. In …
2023-09-14
[vendor] Genesis closes trading entirely
Vector: Protocol collapse / insolvency
After announcing on September 5 that Genesis would be closing their U.S. spot trading business in a "decision ... made voluntarily and for business reasons", Genesis has now …
2023-09-12
[vendor] Binance.US CEO leaves
Brian Shroder, the CEO of Binance's US entity, has left the crypto exchange as it faces an existential lawsuit from the U.S. SEC. Shroder is only the latest exec to leave Binance …
2023-09-12
[vendor] Ruja Ignatova and Karl Sebastian Greenwood
Vector: Ponzi / pyramid scheme
Karl Sebastian Greenwood, co-founder of the notorious OneCoin ponzi scheme, was sentenced to 20 years in prison after pleading guilty to fraud and money laundering charges. He will …
2023-09-07
[vendor] CFTC goes after three defi projects
Vector: Regulatory / legal action
The CFTC has announced charges and settlements against defi projects Opyn, ZeroEx, and Deidex for various commodities law violations. The projects will pay $250,000, $200,000, and …
2023-09-07
[vendor] Ryan Salame plea
Vector: Regulatory / legal action
Former CEO of FTX's Bahamian entity, Ryan Salame, has pleaded guilty to two criminal charges in the ongoing case against FTX and founder Sam Bankman-Fried. Salame (pronounced …
2023-09-06
[vendor] Promo image for the Creator League
A group of high-profile streamers and social media influencers agreed to join eFuse's "Creator League", where they would lead community e-sports teams. The project was announced on …
2023-09-05
[vendor] Genesis to close U.S. spot trading business
Vector: Protocol collapse / insolvency
Although Genesis Global Capital filed for bankruptcy in January 2023, portions of the larger business were not included in bankruptcy proceedings and continued to operate. One such …
2023-09-04
[vendor] Nima Capital
[loss] $4M
Vector: Exit scam / rug pull
"Even VCs are rugging now", remarked someone on Twitter as Nima Capital was observed selling 9 million $SYN (priced at ~$3.7 million before the sudden sale caused the token price …
2023-08-31
[vendor] Gala Games lawsuits
Vector: Regulatory / legal action
The two co-founders of blockchain gaming company Gala Games are suing each other. One lawsuit, filed by Gala Games CEO Eric Schiermeyer, alleges that Gala's director Wright …
2023-08-30
[vendor] Starknet upgrade leaves $550,000 inaccessible
"The wallets that did not upgrade in time will lose their assets," a StarkWare customer support representative said on Discord to an individual inquiring why they could no longer …
2023-08-27
[vendor] Google Authenticator (cloud sync feature); Okta
Vector: Attacker used spear phishing SMS (smishing) to social engineer a Retool employee into providing credentials and a Google Authenticator TOTP code, then used the synced OTP tokens from Google Account cloud sync (newly enabled feature) to bypass MFA and access Retool's Okta admin, then Google Workspace and internal systems
On August 27, 2023, a Retool employee received a convincing smishing (SMS phishing) message claiming to be from Retool IT support regarding a benefits enrollment issue requiring …
2023-08-23
[vendor] DOJ charges two founders of Tornado Cash
Vector: Regulatory / legal action
A year after the Department of Treasury added Tornado Cash to the OFAC sanctions list, the DOJ has come in to charge the service's two founders with conspiracy charges involving …
2023-08-21
[vendor] SEC cracks down on Titan crypto investment manager for advertising 2,700% returns
Vector: Regulatory / legal action
Titan Global Capital Management, an investment advisory firm, has been charged by the SEC for violations of securities laws, including misrepresenting potential investment …
2023-08-18
[vendor] Crypto founder
[loss] $273,000
Bryan Lawrence, the leader of a crypto project called Glow Token, recently shared that he'd fallen victim to scammers impersonating employees of the Crypto.com exchange. Lawrence …
2023-08-18
[vendor] Fed issues cease and desist to FTX-connected Farmington State Bank
Vector: Regulatory / legal action
Farmington State Bank, also known as Moonstone Bank, is a tiny Washington state bank that drew scrutiny after the FTX collapse for receiving an outsized investment from the firm. …
2023-08-18
[vendor] Recur NFT platform
Vector: Protocol collapse / insolvency
In September 2021, the Recur NFT platform announced it had raised $50 million in a Series A funding round that saw the startup valued at $333 million.In December 2021, the company …
2023-08-15
[vendor] Prime Trust files for bankruptcy
Vector: Protocol collapse / insolvency
After the Nevada Financial Institutions Division issued a cease and desist describing Prime Trust as insolvent in June, then successfully requested the company be placed into …
2023-08-15
[vendor] Shenzhen Shikongyun Technology scheme
[loss] $83M
Vector: Ponzi / pyramid scheme
Shenzhen Shikongyun Technology, a company focused on mining the Filecoin token, has been accused of running a pyramid scheme. Four of the company's executives were also charged. …
2023-08-10
[vendor] Bittrex
Vector: Regulatory / legal action
The Bittrex crypto exchange was charged in April by the SEC for operating an unregistered exchange, broker, and clearing agency. In May, Bittrex filed for bankruptcy. Now, Bittrex …
2023-08-08
[vendor] Disney exits the metaverse
Disney has shut off the last light in its metaverse division, parting ways with "metaverse chief" Michael White. In February 2022, Disney's then-CEO described the metaverse as "the …
2023-08-07
[vendor] Bitsonic CEO arrested for allegedly stealing $7.5 million
[loss] $8M
Vector: Regulatory / legal action
Jinwook Shin, CEO of the Bitsonic crypto exchange, was arrested in South Korea for allegedly stealing funds from users of his exchange. According to the prosecutors, he allegedly …
2023-08-07
[vendor] Huobi
Hong Kong crypto news outlet Techub cited two insiders when reporting on August 5 that "at least three executives" at Huobi had been detained by Chinese police for investigation. …
2023-08-07
[vendor] Worldcoin warehouse in Nairobi raided by authorities
Vector: Regulatory / legal action
After Kenya shut down Worldcoin's operations in the country over data privacy concerns, police have raided a warehouse in Nairobi. Authorities reportedly took "machines they …
2023-08-04
[vendor] Revolut
Vector: Regulatory / legal action
Revolut, a British fintech firm, has announced it will no longer offer cryptocurrency services to its US-based customer. As is becoming typical, they blamed US regulations and …
2023-07-31
[vendor] SEC goes after Richard Heart and his projects Hex, PulseChain, and PulseX
Vector: Regulatory / legal action
The SEC filed charges against Richard Heart, the operator of Hex, PulseChain, and PulseX. Despite Heart's best attempts at evading securities laws — including by asking people to …
2023-07-21
[vendor] Party Parrot treasury distribution
You almost have to hand it to the Party Parrot team, they really figured out how to take advantage of ostensibly "decentralized" governance to line their own pockets. After raising …
2023-07-17
[vendor] Five men, including inspector in bankruptcy proceeding, charged with kidnapping "Crypto King" alleged
Vector: Regulatory / legal action
Five men are facing charges for allegedly kidnapping, confining, and beating Aiden Pleterski, the young, self-proclaimed "Crypto King" accused of losing $35 million in investor …
2023-07-14
[vendor] Multichain finally confirms their CEO was arrested in China
Vector: Regulatory / legal action
After a months-long saga involving "stuck" transactions, Multichain announcing they couldn't get in contact with their CEO, rumors that the whole team was arrested, and several …
2023-07-13
[vendor] Celsius lawsuits, CEO arrest
Vector: Ponzi / pyramid scheme
A multi-agency hammer came down on the bankrupt cryptocurrency lender and alleged Ponzi scheme that was Celsius. The co-founder and former CEO of the company, Alex Mashinsky, was …
2023-07-12
[vendor] Digitex
Vector: Regulatory / legal action
Adam Todd, the CEO of the Digitex Futures exchange, has been ordered to pay $3.9 million in disgorgement and $11.7 million in penalties. The Commodity Futures Trading Commission …
2023-07-10
[vendor] AlgoFi
Vector: Protocol collapse / insolvency
AlgoFi, a lending protocol built on the Algorand blockchain, announced that they will begin winding down the project. They were vague about the specific reasons, writing only that …
2023-07-10
[vendor] Arkham Intelligence referral program exposes user emails
In a somewhat amusing complement to Arkham Intelligence's "on-chain intelligence exchange" announcement, a new product which seeks to allow people to buy and sell private …
2023-07-09
[vendor] Dubai regulator cracks down on BitOasis
Vector: Regulatory / legal action
Dubai's Virtual Assets Regulatory Authority issued an alert that BitOasis was "under review for not meeting mandated conditions". In April, BitOasis received the first "MVP …
2023-06-30
[vendor] Kraken ordered to turn over user information to U.S. tax investigators
Vector: Regulatory / legal action
Bad news for wealthy crypto traders on Kraken, who previously might have hoped to evade paying taxes on their past crypto trades. A judge has ordered the exchange to turn over …
2023-06-28
[vendor] Huobi vulnerability
After the Huobi crypto exchange (finally) fixed a massive vulnerability, researcher Aaron Phillips published a blog post explaining what he had found. According to Phillips, two …
2023-06-27
[vendor] Azuki Elementals mint
The blue-chip "Azuki" NFT brand opened sales on June 27 for its latest NFT collection, a 20,000-piece project called "Elementals". Eager to get in on the Azuki action, people …
2023-06-26
[vendor] Prime Trust insolvency
[loss] $84M
Vector: Protocol collapse / insolvency
Nevada's Financial Institutions Division and the Prime Trust crypto custodian requested that Prime Trust be placed into receivership, according to the NFID. A week earlier, the …
2023-06-23
[vendor] Binance
Vector: Regulatory / legal action
Belgium's Financial Services and Markets Authority alleged on June 2023 is violating prohibitions against "offering and providing exchange services in Belgium between virtual …
2023-06-22
[vendor] Alleged
[loss] $50,000
What is it with former child stars and the siren song of crypto? Zachery Ty Bryan, who played Brad on the sitcom Home Improvement in the 90s, got rich when he used his earnings to …
2023-06-22
[vendor] Prime Trust
Vector: Withdrawal halt / insolvency
The planned acquisition by BitGo of the Prime Trust crypto custodian fell through on June 22, as BitGo announced that they had "made the hard decision to terminate its acquisition" …
2023-06-22
[vendor] Prime Trust
Vector: Regulatory / legal action
The Nevada Financial Institutions Division issued a cease and desist to the Prime Trust crypto custodian. Earlier in the month, the apparently embattled Prime Trust signed a …
2023-06-19
[vendor] Binance cancels registration in the United Kingdom
Binance's footprint is shrinking even further, as the company has canceled its registration with the United Kingdom's Financial Conduct Authority (FCA). This means that the company …
2023-06-19
[vendor] Financial Times alleges Crypto.com is trading against its own customers
A report out of the Financial Times alleges that the Singapore-based Crypto.com exchange runs proprietary trading and market making teams. This is a controversial activity — though …
2023-06-19
A report out of the Financial Times alleges that the Singapore-based Crypto.com exchange runs proprietary trading and market making teams. This is a controversial activity — though …
2023-06-16
[vendor] Binance exits the Netherlands
Vector: Regulatory / legal action
As they are wont to do, Binance set up shop in the Netherlands without getting permission from the country's regulators. However, after being warned and then fined €3.3 million …
2023-06-16
[vendor] Machi Big Brother sues zachxbt
Vector: On-chain theft (attributed by zachxbt)
Crypto personality and creator of C.R.E.A.M. Finance Jeffrey Huang, aka "Machi Big Brother", has filed a defamation lawsuit against crypto sleuth zachxbt. Huang alleges that …
2023-06-16
[vendor] Wyre finally
Vector: Protocol collapse / insolvency
The crypto payments platform Wyre finally announced they would be winding down "due to market conditions". This came after a January announcement from the CEO, where it was not …
2023-06-15
[vendor] Abra insolvency
Vector: Regulatory / legal action
In an emergency cease-and-desist issued on June 15, the Texas State Securities Board alleged that the Abra crypto lending firm was "insolvent or nearly insolvent" as of interviews …
2023-06-15
[vendor] Binance looks to exit Cyprus
Although Binance's Cyprus arm was only registered in October 2022, the company is already looking to deregister in the country. According to Binance, they're pulling back in …
2023-06-15
[vendor] Binance.US cuts staff following SEC lawsuit
The US arm of Binance has cut around 50 positions, amounting to approximately 10% of its US employees. In a message to employees, Binance.US CEO Brian Shroder explained, "Because …
2023-06-15
[vendor] CoinEx settlement
Vector: Regulatory / legal action
The Hong Kong-based cryptocurrency exchange CoinEx has agreed to pay $1.17 million in refunds to investors and $600,000 in penalties for failing to register as a securities and …
2023-06-14
[vendor] Delio suspends withdrawals
Vector: Withdrawal halt / insolvency
South Korean cryptocurrency lending platform Delio announced to its customers on June 14 that they would be suspending withdrawals. In a letter to customers, they wrote that the …
2023-06-13
[vendor] Banq bankruptcy
Vector: Protocol collapse / insolvency
Banq, a subsidiary of the Prime Trust crypto custodian, has filed for bankruptcy. Banq is a "crypto-friendly" payment processor based in Nevada, though according to the bankruptcy …
2023-06-13
[vendor] Haru Invest suspends withdrawals
Vector: Withdrawal halt / insolvency
The South Korean yield platform Haru Invest abruptly suspended withdrawals and deposits on June 13. They wrote in a blog post that they were experiencing "a certain issue" with an …
2023-06-10
[vendor] TUSD depeg
On June 10, TrueUSD announced on Twitter: "TUSD mints via Prime Trust are paused for further notification." They offered no further explanation. TUSD is the fifth largest …
2023-06-09
[vendor] CFTC awarded summary judgment in case against Ooki DAO
Vector: Regulatory / legal action
Ooki DAO was sued in September of last year for allowing illegal trading of digital assets, engaging in activities only allowed by registered futures commission merchants, and not …
2023-06-09
[vendor] Crypto.com to
Singapore's Crypto.com has announced it will be imminently shutting down its institutional exchange service in the US, citing "limited demand from institutions in the U.S. in the …
2023-06-06
[vendor] SEC files complaint against Coinbase
Vector: Regulatory / legal action
The SEC has clearly been busy. The agency followed up its complaint against Binance by smacking Coinbase with charges the very next day. This isn't terribly unexpected: in late …
2023-06-01
[vendor] Consumer and SOHO routers, IP cameras, DVRs (multiple vendors)
[malware] Flax Typhoon botnet (Raptor Train)
Vector: CWE-1188: Insecure Default Initialization of Resource (compromised SOHO routers and IoT devices with default/weak credentials)
In September 2024, the FBI and CISA announced the disruption of a botnet operated by Flax Typhoon, a Chinese state-sponsored threat actor (also tracked as RedJuliett/Ethereal …
2023-05-31
[vendor] Binance delists privacycoins
Vector: Regulatory / legal action
Seeming to bow to regulatory pressures, Binance announced they would delist various privacycoins including Monero, ZCash, and MobileCoin for some regions. Privacycoins are tokens …
2023-05-31
[vendor] Binance reportedly begins layoffs
Crypto giant Binance has reportedly begun layoffs, according to independent crypto reporter Colin Wu, who cited several anonymous sources. The layoffs will amount to around 20% of …
2023-05-31
[vendor] Trust Reserve (formerly CNHC) employees arrested
Vector: Regulatory / legal action
A Chinese cryptocurrency publication has reported that the staff of Trust Reserve (formerly CNHC Group) were detained by police. A sign on the door of the company's office in …
2023-05-30
[vendor] Bybit exits Canada
Vector: Regulatory / legal action
The cryptocurrency exchange Bybit announced that they would be exiting Canada. The company cited "recent regulatory development" in the country for their decision to stop offering …
2023-05-30
[vendor] MoonPay executives pocketed Series A funding
According to a report from The Information, MoonPay executives including CEO Ivan Soto-Wright pocketed $150 million from their $555 million Series A funding round completed in …
2023-05-30
[vendor] NFL labor union is out almost $42 million thanks to crypto
Vector: Protocol collapse / insolvency
A report from The Athletic indicates that the National Football League Players Association, a labor union for NFL players, has been unable to collect nearly $42 million it is owed …
2023-05-29
[vendor] BKEX
Vector: Withdrawal halt / insolvency
The BKEX crypto exchange announced on May 29 that they would be suspending withdrawals, claiming it was related to a police investigation. "Recently, the platform users' funds were …
2023-05-26
[vendor] Coinone employees "admit to facts" in bribery case
Vector: Regulatory / legal action
A lawyer for a broker and the former director of the South Korean cryptocurrency exchange Coinone have told a court that their clients "admit the facts of the prosecution". The …
2023-05-26
[vendor] DCG shutters TradeBlock subsidiary
Vector: Protocol collapse / insolvency
Digital Currency Group, the parent company of several companies in the crypto industry including Genesis, Grayscale Investments, and CoinDesk, announced that it will be shuttering …
2023-05-26
[vendor] Unbanked to
Vector: Protocol collapse / insolvency
The US-based crypto payments and custody platform Unbanked announced in a blog post that they will be shutting down services. The company was founded in 2018, and claimed they …
2023-05-24
[vendor] Multichain malfunction
Vector: Software bug / unintentional loss
The Multichain blockchain bridge, formerly known as Anyswap, encountered an apparent issue as users' funds were delayed for over 24 hours in getting to their destination. Some …
2023-05-20
[vendor] BitLucky
[loss] $76M
Vector: Ponzi / pyramid scheme
Croatian company BitLucky told its customers that it would invest their money in cryptocurrencies, promising 5–25% monthly profits. However, its director Luka Burazer wrote an …
2023-05-14
[vendor] South Korean legislator Kim Nam-kuk
Vector: Regulatory / legal action
South Korean lawmaker Kim Nam-kuk has resigned over a cryptocurrency scandal. On May 8, 2023, The Korea Times reported that Kim cashed out around 800,000 Wemix tokens priced at …
2023-05-13
A year ago, Andreessen Horowitz general partner Arianna Simpson wrote about the firm's investment into Irreverent Labs. Simpson had joined their first $5 million funding round, and …
2023-05-12
[vendor] Bakkt delists 25 of 36 crypto tokens on newly acquired Apex Crypto
Vector: Regulatory / legal action
The American corporation Bakkt recently acquired Apex Crypto, a Chicago-based crypto trading service. Bakkt shares a majority owner with the New York Stock Exchange. Shortly after …
2023-05-12
[vendor] Binance exits Canada
Vector: Regulatory / legal action
Binance announced they would be exiting Canada, "proactively withdrawing" ahead of stablecoin regulation and crypto investment limits. As is becoming a trend in the industry, …
2023-05-08
[vendor] Bittrex files for bankruptcy
Vector: Protocol collapse / insolvency
A bit over a month after Bittrex announced it was closing US operations, and less than a month after the US SEC charged the company with operating an unregistered exchange, Bittrex …
2023-05-08
[vendor] Everledger
Vector: Protocol collapse / insolvency
Everledger was an Australian company that hoped to use blockchains to track provenance of diamonds, other precious gems, fine wines, and other luxury goods. Things apparently …
2023-05-03
[vendor] Nate Chastain conviction
Vector: Regulatory / legal action
Nate Chastain, the former Head of Product for the popular OpenSea NFT marketplace, was convicted by a jury of fraud and money laundering for illegally profiting from his insider …
2023-05-02
[vendor] OKX withdrawal limit change
Vector: Withdrawal halt / insolvency
As regulatory groups have started to pay more attention to crypto platforms, it hasn't been terribly unusual to see them tighten their identification requirements — particularly …
2023-05-01
Storybook Brawl, a card based autobattler game that was beloved by Sam Bankman-Fried, took its servers offline on May 1. The game had no connection to the crypto industry until its …
2023-05-01
[vendor] Poloniex OFAC settlement
Vector: Regulatory / legal action
A US entity that previously controlled the Poloniex crypto exchange has agreed to pay a $7.6 million fine to settle allegations that it violated US sanctions against Crimea, Cuba, …
2023-05-01
[vendor] Storybook Brawl
Vector: Protocol collapse / insolvency
Storybook Brawl, a card based autobattler game that was beloved by Sam Bankman-Fried, took its servers offline on May 1. The game had no connection to the crypto industry until its …
2023-04-27
[vendor] Bit4You suspends activities
Vector: Protocol collapse / insolvency
The only Belgian crypto platform, the Bit4You crypto lender, announced they would be suspending activities after the CoinLoan crypto exchange was ordered to suspend activities …
2023-04-27
[vendor] FBI raids home of FTX exec Ryan Salame
Vector: Regulatory / legal action
The FBI raided the home of Ryan Salame, the former co-CEO of FTX Digital Markets (FTX's Bahamian subsidiary). Salame was close with Sam Bankman-Fried, although it came out in …
2023-04-25
[vendor] Voyager
Vector: Protocol collapse / insolvency
After surmounting various obstacles to acquire the assets of the bankrupt Voyager Digital crypto lending firm, Binance.US abruptly backed out of the $1.3 billion deal.Binance cited …
2023-04-25
[vendor] CoinLoan suspends withdrawals
[loss] $10M
Vector: Withdrawal halt / insolvency
The Estonian crypto exchange CoinLoan announced they were immediately suspending all operations, including withdrawals. The action came after CoinLoan was declared insolvent by an …
2023-04-23
Around 770 people were convinced to spend a combined almost €1.5 million (~$1.66 million) on NFTs of teddy bears, which sold for around €1,250 each (~$1,380). Buyers were told they …
2023-04-23
[vendor] Plush NFT
[loss] $2M
Around 770 people were convinced to spend a combined almost €1.5 million (~$1.66 million) on NFTs of teddy bears, which sold for around €1,250 each (~$1,380). Buyers were told they …
2023-04-17
[vendor] SEC charges Bittrex
Vector: Regulatory / legal action
Several weeks after Bittrex announced it would be winding down its US operations by the end of April, citing the US "regulatory and economic environment", the SEC filed charges …
2023-04-07
[vendor] dYdX
Vector: Regulatory / legal action
dYdX announced that it would be shutting down its decentralized derivatives exchange in Canada. They gestured toward regulatory issues in the post, writing that, "We hope that the …
2023-04-05
[vendor] Binance closes its derivatives arm in Australia
Vector: Regulatory / legal action
Binance announced it would be closing its derivatives business in Australia "following recent engagement with ASIC", referring to the Australian Securities and Investments …
2023-04-01
[vendor] Dynasty Loop NFT games studio owes millions
Vector: Regulatory / legal action
Dynasty Loop is a Montreal-based video games studio launched in 2020 to create NFT games. In March, gaming news outlet Polygon reported that the studio allegedly owed more than $2 …
2023-03-31
[vendor] Bittrex crypto exchange to close US operations
Vector: Regulatory / legal action
Bittrex, one of the oldest and largest cryptocurrency exchanges serving US customers, announced that it would be shuttering its US platform. "It's just not economically viable for …
2023-03-29
[vendor] SEC
Vector: Regulatory / legal action
The U.S. Securities and Exchange Commission charged the Beaxy crypto exchange and its executives for failing to register as a national securities exchange, broker, and clearing …
2023-03-27
[vendor] CFTC sues Binance and CEO Changpeng Zhao
Vector: Smart contract access control vulnerability
The US Commodity Futures Trading Commission (CFTC) filed charges against the crypto exchange Binance and its CEO Changpeng "CZ" Zhao for allegedly violating rules around trading …
2023-03-23
[vendor] Do Kwon
Vector: Regulatory / legal action
The founder of Terra/Luna, the stablecoin that crashed dramatically in May 2022 and has subsequently been alleged to be a massive fraud, has been arrested in Montenegro.After the …
2023-03-22
[vendor] Kraken to suspend ACH transfers after Silvergate
The Kraken cryptocurrency exchange announced to its users that it will be suspending ACH transfers on March 27, as a result of the collapse of its banking partner, Silvergate. …
2023-03-22
Celebrities Lindsay Lohan, Jake Paul, Soulja Boy, Austin Mahone, Kendra Lust, Lil Yachty, Ne-Yo, and Akon were all charged by the SEC for violating anti-touting laws that would …
2023-03-20
[vendor] SpankPay crypto porn payment service
Despite people periodically claiming that crypto is a panacea for the many issues that make it difficult for sex workers to get paid, the SpankPay crypto-based payments processor …
2023-03-13
[vendor] Meta ends support for NFTs
In a Twitter thread, Meta (formerly Facebook) Head of Commerce and Fintech Stephane Kasriel announced that they would be "down digital collectibles (NFTs) for now to focus on other …
2023-03-12
[vendor] Regulators
Vector: Protocol collapse / insolvency
Two days after the collapse of Silicon Valley Bank and four days after the collapse of Silvergate Bank, the New York Department of Financial Services announced they had taken …
2023-03-10
[vendor] Bankrupt BlockFi has $227 million at
Vector: Protocol collapse / insolvency
BlockFi, which has been in bankruptcy since shortly after the November FTX collapse, appears to have exposure to the collapsed Silicon Valley Bank. According to a court filing, …
2023-03-10
[vendor] Coinbase
The collapse of the Silicon Valley Bank on March 10 led to concerns over the stability of the stablecoin USDC, after it was revealed that a portion (later specified at $3.3 …
2023-03-10
[vendor] Huobi Token flash crashes
Huobi Token, the token tied to the Huobi cryptocurrency exchange, experienced a flash crash in which the token price tumbled 90% from $4.60 to around $0.31 within about a …
2023-03-10
[vendor] Silicon Valley Bank
Vector: Protocol collapse / insolvency
Although it doesn't seem that it was exposure to the crypto industry that did in Silicon Valley Bank (unlike with fellow failed bank Silvergate), the crypto industry has been …
2023-03-08
[vendor] Gemini reportedly
Both CoinDesk and Reuters have reported that JPMorgan Chase & Co. will be ending its banking relationship with Winklevoss-led Gemini cryptocurrency exchange. Gemini responded …
2023-03-08
[vendor] Silvergate bank
Vector: Protocol collapse / insolvency
California-based Silvergate bank had pivoted almost entirely to serving crypto clients, a move that proved fatal to them in the wake of the FTX collapse and ensuing contagion. On …
2023-03-03
[vendor] WSJ alleges Tether and related companies used falsified documents to obtain banking
A report from the Wall Street Journal made serious allegations against the stablecoin operator Tether, sister company Bitfinex, and the web of companies behind it. According to …
2023-03-02
[vendor] Silvergate crypto-focused bank faces crisis
Vector: Protocol collapse / insolvency
Silvergate is a US bank that shifted its business toward primarily serving crypto clients. Following the collapse of FTX, there have been concerns over Silvergate's exposure to the …
2023-02-28
[vendor] Nishad Singh agrees to cooperate against sbf
Vector: Regulatory / legal action
Nishad Singh, a co-founder of FTX and its former director of engineering, has agreed to plead guilty to six criminal charges and co-operate against his former boss, Sam …
2023-02-24
[vendor] Jump Crypto recovers Wormhole funds
Vector: Cross-chain bridge exploit
In a world where "code is law", crypto users don't necessarily expect that the smart contracts might change out from under them — particularly given contracts are often assumed to …
2023-02-23
[vendor] Phoenix Community Capital vanishes
Vector: Ponzi / pyramid scheme
The Guardian published a report on Phoenix Community Capital, a cryptocurrency investment project that solicited investments in part based on credibility it built by ingratiating …
2023-02-23
[vendor] Sam Bankman-Fried indicted on four new charges in criminal case
Vector: Regulatory / legal action
Sam Bankman-Fried, the founder and former CEO of the now-bankrupt FTX exchange, was already facing eight criminal charges for offenses including wire fraud, securities fraud, money …
2023-02-22
[vendor] Canadian regulators tighten rules for crypto exchanges
Vector: Regulatory / legal action
New guidance from the Canadian Securities Administrators requires any crypto asset trading platforms (CTPs) operating in Canada without formal registration to commit to …
2023-02-20
[vendor] Galois Capital
Vector: Protocol collapse / insolvency
One of the largest crypto-focused algorithmic trading funds, Galois Capital, announced that they would be closing up shop in the wake of the FTX collapse. The fund had half its …
2023-02-17
[vendor] Paul Pierce to pay $1.4 million fine over undisclosed touting
Vector: Regulatory / legal action
In the second big-name slapdown from the SEC relating to the EthereumMax token, former Celtics player Paul Pierce has agreed to pay a $1.4 million fine to settle charges that he …
2023-02-15
[vendor] FDIC demands CEX.io stop claiming it's FDIC-insured
Vector: Regulatory / legal action
The FDIC is continuing its recent crackdown on exchanges claiming they're protected by FDIC insurance, issuing a cease-and-desist to CEX.io. CEX.io, like several other crypto …
2023-02-09
[vendor] Kraken ends staking, pays $30 million in settlement with U.S. SEC
Vector: Regulatory / legal action
U.S. cryptocurrency exchange Kraken has reportedly agreed to close up shop on its crypto staking operation and pay a $30 million fine to the U.S. Securities and Exchange …
2023-02-09
[vendor] Paxos faces investigation over stablecoin offerings
Vector: Regulatory / legal action
CoinDesk reported that the New York Department of Financial Services is actively investigating Paxos, which issues both the Pax dollar (USDP) and the considerably larger Binance …
2023-02-08
[vendor] MetaBirkins creator
Vector: Regulatory / legal action
A year ago, the Hermès luxury brand slapped Mason Rothschild, creator of "MetaBirkins" NFTs, with a trademark lawsuit. The suit centers on his NFT collection: a series of 100 …
2023-02-07
[vendor] Coin Cloud bankruptcy
[loss] $124M
Vector: Protocol collapse / insolvency
The US-based company Coin Cloud, which operates crypto ATMs in the US and Brazil, filed for bankruptcy on February 7. They are the second largest crypto ATM operator in the world, …
2023-02-06
[vendor] Binance suspends USD bank transfers
Binance announced that they would be "temporarily suspending USD bank transfers" with two days notice.This comes in the wake of various crypto exchanges — Binance included — …
2023-02-01
[vendor] FortiGate 300D firewall / Littleton Electric Light and Water Departments OT network
Vector: CWE-1188: Insecure Default Initialization of Resource (unpatched FortiGate 300D firewall — CVE patched December 2022, not applied until after breach)
Volt Typhoon (VOLTZITE per Dragos), a Chinese state-sponsored APT group, maintained persistent unauthorized access to the operational technology (OT) network of Littleton Electric …
2023-01-31
[vendor] FTX tries to claw back $446 million from Voyager
It's no big secret that there's a lot less money actually floating around in crypto than bogus "market caps" and other numbers would have you believe, but it's being put into stark …
2023-01-30
[vendor] New York regulator investigates Gemini
Vector: Regulatory / legal action
The embattled Gemini crypto exchange, which is has $900 million of customer funds locked up in the Genesis bankruptcy and has been charged by the SEC for offering unregistered …
2023-01-26
[vendor] Coinbase
Vector: Regulatory / legal action
The Dutch central bank levied a €3.3 million ($3.6 million) fine against Coinbase, who began operating in the Netherlands without properly registering. The fine is reportedly …
2023-01-25
[vendor] Bithumb executives charged
Vector: Regulatory / legal action
South Korean prosecutors filed charges against several executives of the Korean cryptocurrency exchange Bithumb. Those charged included its owner, Kang Jong-Hyun, and his sister …
2023-01-23
[vendor] Gemini lays off 10% of staff
Gemini performed a 10% layoff, cutting roughly 100 positions. This move followed a 7% layoff in July 2022, and a 10% reduction just a month prior to that.Gemini has been having a …
2023-01-21
[vendor] Binance SWIFT floor implemented
Binance informed its users that they would no longer be able to perform transactions below $100,000 via the SWIFT financial network. According to Binance, this was because their …
2023-01-19
[vendor] Genesis bankruptcy
[loss] $5.1B
Vector: Protocol collapse / insolvency
The Genesis cryptocurrency lending platform filed for bankruptcy, following weeks of turmoil after the FTX collapse. Genesis halted withdrawals shortly after FTX's failure, and …
2023-01-19
[vendor] Nexo
Vector: Regulatory / legal action
More bad news for Nexo, whose Bulgarian offices were raided a week prior amidst allegations of organized financial crime. Now, the United States SEC and state securities regulators …
2023-01-18
[vendor] Bitzlato
Vector: Regulatory / legal action
US authorities arrested and charged Anatoly Legkodymov, the founder of the Bitzlato cryptocurrency exchange. Although the exchange is relatively unknown, the justice department …
2023-01-16
[vendor] Three Arrows Capital founders seek funding for exchange
Kyle Davies and Su Zhu, the founders of the bankrupt Three Arrows Capital crypto hedge fund, have joined forces with Mark Lamb and Sudhu Arumugam, the founders of the CoinFLEX …
2023-01-12
[vendor] Nexo raided by Bulgarian authorities
Vector: Regulatory / legal action
Bulgarian prosecutors raided more than 15 locations in Sofia, Bulgaria in relation to the Nexo cryptocurrency lender. A spokesperson for the prosecutors has said that the raids are …
2023-01-12
[vendor] SEC charges Gemini and Genesis
Vector: Regulatory / legal action
The SEC filed charges against Genesis Global Capital and Gemini, two crypto firms that collaborated to create Gemini's embattled Earn lending program. According to the SEC, their …
2023-01-10
[vendor] Coinbase performs more layoffs
After laying off 1,100 people in an 18% staffing cut in June 2022, Coinbase CEO Brian Armstrong wrote that "in hindsight, we could have cut further at that time." The company …
2023-01-05
[vendor] Genesis lays off another 30% of staff
After a round of layoffs in August that impacted 20% of their employees, Genesis is laying off another 30% of their employees.Genesis is currently in a really bad spot, halting …
2023-01-05
[vendor] New York Attorney General sues Celsius CEO Alex Mashinksy
Vector: Regulatory / legal action
As Celsius bankruptcy proceedings continue on, the New York Attorney General has come out with a lawsuit against the company's founder and CEO, Alex Mashinsky. Attorney General …
2023-01-05
[vendor] Silvergate bank takes $718 million loss liquidating debt during FTX
Silvergate, a Californian bank that primarily serves the crypto industry, and which was FTX's primary banking partner, scrambled to cover $8.1 billion in withdrawals during the …
2023-01-04
[vendor] Coinbase
Vector: Regulatory / legal action
Coinbase agreed to a $100 million settlement with the New York State Department of Financial Services over charges that the company violated anti-money laundering laws by …
2023-01-04
[vendor] Fanatics ditches Candy Digital
"Over the past year, it has become clear that NFTs are unlikely to be sustainable or profitable as a standalone business," wrote CEO Michael Rubin in an internal email explaining …
2023-01-04
[vendor] Logan Paul threatens to sue CoffeeZilla
Influencer-turned-(alleged)-crypto-grifter Logan Paul has threatened to sue scam researcher CoffeeZilla, who has exposed Paul's "CryptoZoo" blockchain game project as his latest …
2023-01-03
[vendor] DNP3 gambled with investor funds
DNP3 is a streamer known for giving away large sums of money to other streamers. He is also a crypto founder behind projects including CluCoin, the Xenia play-to-earn game, the …
2023-01-03
[vendor] Wyre
Vector: Protocol collapse / insolvency
Crypto payments platform Wyre inked a deal to be acquired by Bolt in a $1.5 billion deal in April 2022, but the acquisition was canceled in September after the two firms "mutually …
2023-01-02
[vendor] Tyler and Cameron Winklevoss, Gemini founders
On November 16, Genesis halted withdrawals from its lending service shortly after the FTX collapse. Gemini, who partners with Genesis lending to power their Earn program, halted …
2023-01-01
[vendor] Cisco IOS routers; CALEA lawful intercept systems
[malware] Demodex (kernel-mode rootkit)
Vector: Chinese MSS-linked Salt Typhoon APT exploited vulnerabilities in telecom network infrastructure including Cisco routers; leveraged CALEA wiretap backdoor access and a Windows kernel-mode rootkit (Demodex) for persistence
Salt Typhoon (China MSS) breached at least 9 US telecom carriers including AT&T, Verizon, T-Mobile, Lumen, Spectrum, Consolidated Communications, and Windstream. Active for 1-2 …
2023-01-01
[vendor] AT&T / Verizon / T-Mobile / Lumen / Spectrum / Consolidated Communications / Windstream telecom infrastructure
Vector: CWE-287: Improper Authentication (exploitation of network edge devices and telecom infrastructure to access CALEA lawful intercept systems)
Chinese MSS-affiliated APT Salt Typhoon (FamousSparrow) breached at least 9 US telecoms including AT&T, Verizon, T-Mobile starting ~late 2022/early 2023. Accessed CALEA lawful …
2022-12-29
[vendor] Covario bankruptcy
Vector: Protocol collapse / insolvency
Just before the holidays, employees of the Covario crypto broker based in Zug, Switzerland learned that their employer was no longer solvent. Attempts to secure a buyout had been …
2022-12-29
[vendor] Tax loss harvesting tool launched
If you bought an NFT for $1,000 and it's now worthless, you still have to find someone willing to buy it before you can claim it as a loss on your taxes. A project called …
2022-12-28
[vendor] Alameda wallets sell off tokens
[loss] $2M
Wallets known to be controlled by Alameda Research, the crypto trading firm founded by Sam Bankman-Fried and currently in bankruptcy with the other FTX companies, suddenly began …
2022-12-27
[vendor] Midas Investments
[loss] $63M
Vector: Protocol collapse / insolvency
Midas Investments announced suddenly that they would be shutting down their platform, which previously enabled users to deposit cryptocurrencies which would then be invested in …
2022-12-23
[vendor] AAX executives arrested
Vector: Regulatory / legal action
The Hong Kong-headquartered AAX cryptocurrency exchange suddenly halted withdrawals on November 13, claiming they were performing temporary system maintenance. However, withdrawals …
2022-12-21
[vendor] Caroline Ellison and Gary Wang
Vector: Regulatory / legal action
Two of Sam Bankman-Fried's inner circle, Caroline Ellison and Gary Wang, have pled guilty to federal criminal charges and are cooperating in the case against Sam Bankman-Fried. …
2022-12-20
[vendor] Auros bankruptcy
Vector: Protocol collapse / insolvency
Crypto market maker Auros filed for bankruptcy protection in the British Virgin Islands, not long after a missed loan repayment to the Maple defi lender in late November signaled …
2022-12-20
[vendor] Waves
Apparently adopting Do Kwon's belief that the solution to a crashing algorithmic stablecoin project is creating another project, Waves founder Sasha Ivanov has announced, "I will …
2022-12-16
[vendor] Mazars Group stops crypto audits
The accounting firm Mazars Group has ceased working with cryptocurrency clients, including Binance, KuCoin, and Crypto.com. A statement from the firm attributed their decision to …
2022-12-13
[vendor] Binance withdrawals surge
Binance, the largest cryptocurrency exchange in the world, processed at least $1.9 billion in withdrawals in a 24-hour period—considerably more than it processes in a typical day. …
2022-12-12
[vendor] Argo Blockchain warns of bankruptcy
Vector: Protocol collapse / insolvency
When the company accidentally published draft bankruptcy documents to its website, Argo Blockchain was forced to reveal that it is in last-ditch negotiations to raise capital. The …
2022-12-12
[vendor] DoJ considers criminal charges for Binance
Vector: Regulatory / legal action
Reuters has reported that the U.S. Department of Justice is considering filing criminal charges against Binance executives, including CEO Changpeng Zhao ("CZ"). This comes as a …
2022-12-12
[vendor] Sam Bankman-Fried arrested
Vector: Regulatory / legal action
Sam Bankman-Fried has been arrested by Bahamian authorities, who said in a press release that they took the action "follow[ing] receipt of formal notification from the United …
2022-12-09
The Block is a cryptocurrency-focus media outlet that was originally founded in 2018 by Mike Dudas. In 2020, Michael McCaffrey became CEO of the company, and in 2021 he led a …
2022-12-09
[vendor] The Block CEO resigns
The Block is a cryptocurrency-focus media outlet that was originally founded in 2018 by Mike Dudas. In 2020, Michael McCaffrey became CEO of the company, and in 2021 he led a …
2022-12-08
[vendor] Digital Surge enters voluntary administration
Vector: Protocol collapse / insolvency
The Australian crypto broker Digital Surge entered voluntary administration several weeks after suspending withdrawals in the wake of the FTX collapse. In their announcement, …
2022-12-06
[vendor] Koinly layoffs
UK-based crypto tax company Koinly announced they would be letting go of 14% of their team. This amounted to more than 100 employees, including the entire London- and Sydney-based …
2022-12-05
[vendor] Orthogonal Trading insolvency
[loss] $36M
Vector: Protocol collapse / insolvency
The unsecured lending platform Maple Finance published a blog post announcing that they were severing ties with Orthogonal Trading, who had "misrepresented its financial position" …
2022-12-05
[vendor] Swyftx layoffs
Following a round of layoffs in August that cut 21% of their workforce, Australian cryptocurrency exchange Swyftx has just performed another round of layoffs less than four months …
2022-12-04
[vendor] Bybit layoffs
After reducing their staff by 20–30% in June, Dubai-based cryptocurrency exchange Bybit is doing another round of layoffs. This time the cut is estimated at around 30%, which is …
2022-12-03
[vendor] AAX customers search for executives
Vector: Protocol collapse / insolvency
On November 13, the AAX cryptocurrency exchange suspended withdrawals, claiming they were dealing with a botched system upgrade. Shortly before, they had reassured their customers …
2022-12-03
[vendor] Genesis owes Gemini
[loss] $900M
Vector: Protocol collapse / insolvency
After a domino effect in which Gemini suspended withdrawals from its "Earn" lending product due to Genesis suspending withdrawals due to FTX's collapse, it's been revealed by the …
2022-11-30
[vendor] Kraken fined
Vector: Regulatory / legal action
The US cryptocurrency exchange Kraken settled charges from the Office of Foreign Assets Control (OFAC) alleging that they had violated sanctions against Iran. In the agreement, …
2022-11-30
[vendor] Kraken layoffs
The US cryptocurrency exchange Kraken announced that it had laid off 30% of its employees, or about 1,100 people. They blamed "macroeconomic and geopolitical factors" resulting in …
2022-11-30
[vendor] Maersk and IBM shutter blockchain project
Tough news for folks who insist that blockchains' obvious use case is for supply chains: IBM and Maersk have discontinued their private blockchain-based TradeLens platform due to …
2022-11-29
[vendor] Bitso layoffs
After cutting around 10% of their employees in May, the Latin American crypto exchange Bitso has performed another round of layoffs.The company didn't reveal how many employees …
2022-11-29
[vendor] TBD
TBD is a subsidiary of Block (formerly Square), a tech company co-founded by billionaire social media mogul and Twitter founder Jack Dorsey. In July, they unveiled the concept of …
2022-11-28
[vendor] BlockFi bankruptcy
[loss] $1.3B
Vector: Protocol collapse / insolvency
Crypto lending firm BlockFi has filed for Chapter 11 bankruptcy in the wake of the FTX collapse. The company was in dire straits in the spring after Terra and Three Arrows Capital …
2022-11-25
[vendor] 150 companies want Binance bailout
On November 14, CZ of Binance announced an "industry recovery fund", which he said would devote money to ending "further cascading negative effects of FTX [and] help projects who …
2022-11-24
[vendor] CoinList
Vector: Withdrawal halt / insolvency
Beginning in mid-November, users of the CoinList exchange and ICO platform reported that they couldn't withdraw assets from the platform. On November 24, CoinList tweeted, "There …
2022-11-24
[vendor] Lemon Cash layoffs
The Argentinean cryptocurrency exchange Lemon Cash announced that they had laid off 38% of their employees, or around 100 people. The CEO blamed the international crypto …
2022-11-21
[vendor] Genesis warns of bankruptcy
Genesis Global Trading has reportedly been telling investors that Genesis may need to file for bankruptcy if its attempts to raise at least $1 billion in new capital don't succeed. …
2022-11-18
[vendor] Hoo vanishes
Vector: Protocol collapse / insolvency
On June 19, the Hong Kong-based crypto exchange Hoo announced that they would be pausing withdrawals for "24–72 hours" while they transferred some assets to top up their hot …
2022-11-17
[vendor] Australian Securities Exchange scraps blockchain project
The Australian Securities Exchange (ASX) has finally pulled the plug on their project that would have replaced the aging CHESS system that is used for transfer and settlement. The …
2022-11-17
[vendor] Coinhouse
Vector: Withdrawal halt / insolvency
The French crypto broker Coinhouse announced that they would be suspending withdrawals from their crypto "savings account" product. Coinhouse partners with Genesis to offer the …
2022-11-16
[vendor] FTX celebrities class action filed
Vector: Regulatory / legal action
A class action lawsuit has been filed against Sam Bankman-Fried and a slew of celebrities who helped to promote FTX as a safe place to hold and trade crypto. Defendants include Tom …
2022-11-16
[vendor] Gemini
The Gemini cryptocurrency platform announced that they would be pausing withdrawals on their lending platform. This is because they partner closely with Genesis' lending products, …
2022-11-16
[vendor] Genesis
The crypto lending portion of Genesis Global Trading announced they would be halting withdrawals in the wake of the "extreme market dislocation and loss of industry confidence …
2022-11-16
[vendor] Nestcoin layoffs
Nestcoin, a Nigerian startup that both builds and invests products they hope will "democratis[e] access to economic opportunity for everyday people in frontier markets", has …
2022-11-15
[vendor] BlockFi layoffs
Vector: Protocol collapse / insolvency
Cryptocurrency lending company BlockFi suspended withdrawals on November 10 after the FTX collapse, an expected move since they had stayed afloat after the previous crypto meltdown …
2022-11-15
[vendor] Digital Surge
Vector: Withdrawal halt / insolvency
The Brisbane-based cryptocurrency exchange Digital Surge announced that they would be suspending deposits and withdrawals. "Due to the impact of FTX Australia's administration, we …
2022-11-15
[vendor] Salt
Vector: Withdrawal halt / insolvency
The crypto lending firm SALT announced that they would be halting withdrawals due to exposure to FTX. "I am sorry to report that the collapse of FTX has impacted our business," …
2022-11-14
[vendor] Binance announces industry recovery fund
CZ of Binance announced on Twitter that Binance would be forming an "industry recovery fund", which he says is intended for projects that are "otherwise strong, but in a liquidity …
2022-11-14
[vendor] Ikigai Asset Management reveals FTX exposure
The founder and chief investment officer of the Californian crypto hedge fund Ikigai Asset Management wrote on Twitter, "Last week Ikigai was caught up in the FTX collapse. We had …
2022-11-13
[vendor] AAX
Vector: Withdrawal halt / insolvency
The Hong Kong-headquartered cryptocurrency exchange announced that they would suspend withdrawals, which they claimed was due to a system upgrade that went poorly. They've …
2022-11-13
[vendor] Huobi reveals FTX exposure
Huobi announced to shareholders that they had $18.1 million in crypto assets on the FTX exchange, where they can't be withdrawn. They reported that approximately $13.2 million of …
2022-11-12
[vendor] Bahamas Securities Commission denies telling FTX to open withdrawals
The Securities Commission of the Bahamas issued a statement saying that "The Commission wishes to advise that it has not directed, authorized or suggested to [FTX] the …
2022-11-12
[vendor] Tokensoft intentionally publishes user data
Tokensoft is a project that aims to help web3 projects launch fairly, without the launches being gamed. The group evidently thought they had come across 5,000 or so users who had …
2022-11-11
[vendor] FTX
[loss] $1.7B
Vector: Protocol collapse / insolvency
Aaaand there it goes.FTX announced that it had filed for Chapter 11 bankruptcy in the United States. Sam Bankman-Fried resigned as CEO.SBF had spoken about trying to raise …
2022-11-10
[vendor] BlockFi
Vector: Withdrawal halt / insolvency
BlockFi had a tough time this past June, floundering after substantial losses in the crypto downturn. They were bailed out by FTX, who extended them a $250 million loan, then …
2022-11-10
[vendor] Securities Commission of the Bahamas freezes FTX assets
Vector: Protocol collapse / insolvency
The Securities Commission of the Bahamas (where FTX is headquartered) announced they had frozen the assets of FTX and "related parties" — presumably Alameda. They also disclosed …
2022-11-10
[vendor] Users circumvent FTX withdrawal halt
Vector: Protocol collapse / insolvency
Users panicked when FTX stopped processing withdrawals, particularly those with substantial amounts of funds locked in the exchange. When the exchange tweeted that they had "begun …
2022-11-09
[vendor] Binance rescinds FTX bailout
Vector: Protocol collapse / insolvency
It's over as quickly as it started, and it started pretty dang quickly. Binance walked away from the non-binding letter of intent that Binance signed to acquire FTX, which doesn't …
2022-11-08
[vendor] Binance offers FTX bailout
Surprising just about everyone, FTX's Sam Bankman-Fried and Binance's Changpeng "CZ" Zhao announced suddenly that Binance had signed a "non-binding [letter of intent], intending to …
2022-11-07
[vendor] CoinDesk publishes Alameda Research balance sheet
On November 2, CoinDesk published a leaked balance sheet from Alameda Research (a trading firm also owned by FTX founder and CEO Sam Bankman-Fried). The sheet suggested that …
2022-11-07
On November 2, CoinDesk published a leaked balance sheet from Alameda Research (a trading firm also owned by FTX founder and CEO Sam Bankman-Fried). The sheet suggested that …
2022-11-07
[vendor] LBRY violated securities laws
Vector: Regulatory / legal action
LBRY is a blockchain-based social network and video sharing protocol that was described by a researcher at The International Centre for the Study of Radicalisation and Political …
2022-11-05
[vendor] Telegram repossesses usernames
In August, the popular messaging app Telegram started repossessing some desirable usernames that were already being used. Shortly afterwards, Telegram founder Pavel Durov explained …
2022-10-28
[vendor] Hodlnaut founders hide records
Hodlnaut, a crypto lending platform that halted withdrawals on August 8, has been undergoing court proceedings while it's determined if the insolvent company has a path to …
2022-10-23
[vendor] Freeway
[loss] $160M
Vector: Withdrawal halt / insolvency
Freeway, a financial scheme where users buy "Superchargers", which are crypto "simulations" that promise to pay out rewards of up to 43% annually, seems to have taken the off-ramp. …
2022-10-21
Warner Bros. has just announced their "The Lord of the Rings: The Fellowship of the Ring (Extended Version) Web3 Movie Experience". Catchy name.Now, you have of course already been …
2022-10-21
[vendor] Lord of the Rings NFTs announced
Warner Bros. has just announced their "The Lord of the Rings: The Fellowship of the Ring (Extended Version) Web3 Movie Experience". Catchy name.Now, you have of course already been …
2022-10-17
[vendor] Aptos
Aptos, a much-anticipated layer 1 blockchain backed by FTX and a16z, and created by a team of former Meta employees, launched to much anticipation on October 17. The team had …
2022-10-17
[vendor] Texas Securities investigators looking into FTX
Vector: Regulatory / legal action
Joseph Jason Rotunda, Director of the Enforcement Division of the Texas State Securities Board, submitted a filing to the ongoing Voyager bankruptcy case. FTX is the highest bidder …
2022-10-14
[vendor] DAO Maker dodges repayment promises
In August 2021, DAO Maker (not to be confused with MakerDAO) was hacked for $7.38 million. The stolen funds were taken from users, rather than a project treasury, and 5,521 people …
2022-10-11
[vendor] Bittrex fined
Vector: Regulatory / legal action
The U.S. Treasury Department announced fines against Bittrex, a U.S.-based cryptocurrency exchange. The Office of Foreign Assets Control (OFAC) announced a $24 million penalty …
2022-10-10
Vector: Volumetric Layer 7 (HTTP flood) DDoS attacks coordinated via KILLNET's Telegram channel, using distributed botnet infrastructure; targets selected in retaliation for Western support of Ukraine
KILLNET is a Russian hacktivist collective (with suspected ties to Russian intelligence) that conducted a sustained wave of DDoS attacks against Western government and …
2022-10-09
[vendor] Blockwater Technologies insolvency
Vector: Protocol collapse / insolvency
Blockwater Technologies, a crypto investment firm based in South Korea, missed a payment on their $3.4 million loan from TrueFi, a decentralized borrowing platform. According to …
2022-10-07
[vendor] Decentraland has few users
According to CoinDesk, the metaverse platform Decentraland is entertaining roughly 38 users a day these days. This isn't much for its "valuation" of $1.3 billion — although …
2022-10-06
[vendor] Celsius customer info exposed in bankruptcy court
Celsius Network is undergoing bankruptcy proceedings after its impressive implosion earlier this year. The company's latest court filing is 14,532 pages long — because it contains …
2022-10-05
[vendor] Zcash spam attack
Zcash is a privacycoin which, unlike popular blockchains like Bitcoin and Ethereum, allows users to obscure who they are sending money to and how much. Since June or July, the …
2022-10-03
[vendor] Hacked account seller convicted
A Floridian who was in the business of buying and selling hacked account logins on the dark web was busted for attempted income tax evasion when he tried to hide more than $1 …
2022-10-03
[vendor] Kim Kardashian's Instagram post
Kim Kardashian agreed to settle with the SEC over allegations that she had promoted a "crypto asset security" without disclosing how much she had been paid, or when. In June 2021, …
2022-10-02
[vendor] Coinbase outage
The largest crypto exchange in the U.S., Coinbase, suffered a six-hour-long outage in which they couldn't take payments or make withdrawals involving U.S. bank accounts. They …
2022-09-30
[vendor] Flip.xyz fantasy NFT trading
"Most of us are too poor to be spending the [ether] we have left on huge sweeps, but we still want that sweet adrenaline rush of flipping JPEGs" said Brian Krogsgard, co-founder of …
2022-09-29
[vendor] Elon Musk blockchain Twitter ideas
Texts exposed in the discovery process during the Elon Musk v. Twitter lawsuit have exposed not just a number of high-profile people embarrassingly simping for Musk, but also …
2022-09-28
[vendor] Crypto executives leave
The wave of crypto executives stepping down from their roles is continuing, after Genesis' CEO left the company and Michael Saylor gave up his CEO title (but stayed on as chairman) …
2022-09-26
[vendor] Nexo enforcement actions
Vector: Regulatory / legal action
Crypto lending service Nexo was hit with a barrage of cease-and-desist lawsuits from eight states: California, Vermont, Oklahoma, Kentucky, Washington, South Carolina, New York, …
2022-09-22
[vendor] Coinbase tested proprietary trading
According to a report in the Wall Street Journal, US-based cryptocurrency exchange Coinbase tested a group to speculate on cryptocurrencies in hopes of earning funds for the …
2022-09-22
[vendor] Compute North bankruptcy
Vector: Protocol collapse / insolvency
Compute North has filed for Chapter 11 bankruptcy, in what may be a blow to the crypto mining industry. Compute North is a major datacenter provider, and have deals with crypto …
2022-09-22
[vendor] IRS authorized to issue John Doe summons
Vector: Regulatory / legal action
The IRS was granted authorization to issue a "John Doe summons", which will require M.Y. Safra Bank to provide them with information on U.S. customers who may have failed to report …
2022-09-20
[vendor] "Crypto King"
[loss] $32M
Vector: Regulatory / legal action
"[I] was a 20-something-year-old kid" said Aiden Pleterski, when asked why he kept his "investment" scheme going when he knew he couldn't repay his existing customers. Although he …
2022-09-19
[vendor] CryptoFX pyramid scheme
[loss] $12M
Vector: Ponzi / pyramid scheme
CryptoFX is a crypto-based scheme targeted specifically to Latines, promising to invest its victims' assets in cryptocurrencies and teach its customers how to trade crypto. It also …
2022-09-19
[vendor] Sparkster SEC settlement
Vector: Regulatory / legal action
The firm Sparkster and its CEO Sajjad Daya settled with the U.S. SEC after a cease-and-desist arguing that Sparkster sold securities worth at least $30 million without …
2022-09-19
[vendor] UK FCA warns against FTX
The United Kingdom's Financial Conduct Authority issued a warning that FTX is not authorized by them, but is targeting consumers in the UK. "Almost all firms and individuals …
2022-09-14
[vendor] Coinbase rolls out politics feature
When the "politics" were widespread civil unrest in the summer of 2020 triggered by the police murder of George Floyd, and pressure on the company to release a statement in support …
2022-09-10
[vendor] Ubisoft describes previous NFT projects as "research"
Remember when Ubisoft decided it was going to shoehorn NFTs into their Tom Clancy's Ghost Recon Breakpoint game, to the nearly universal disappointment of their fans? Remember when …
2022-09-09
[vendor] Algorand Foundation exposure to Hodlnaut
The Algorand Foundation is a group responsible for managing Algorand, a proof-of-stake blockchain. On September 9 they disclosed that they had put $35 million of the project's …
2022-09-08
[vendor] Celsius Monopoly
After what USA Strong Head of Sales & Partnerships described as "months and months" of work, apparently the company had decided they had sunk too much effort into the …
2022-09-08
[vendor] Coinbase Tornado Cash lawsuit
Vector: Regulatory / legal action
In the wake of OFAC adding Tornado Cash to the U.S. sanctions list in early August, Coinbase has announced they will fund a lawsuit against the Treasury Department to challenge the …
2022-09-08
[vendor] Queen Elizabeth NFTs
The news of Queen Elizabeth II's death resulted in the creation of at least 40 memecoins, multiple Queen Elizabeth-themed NFT collections, and special edition NFTs in various …
2022-09-08
[vendor] Shiba Inu credential leak
Vector: Software bug / unintentional loss
If Amazon would like to buy the rights to the slogan "Web3, powered by AWS™️", feel free to reach out, because I'm registering it.On September 8, a security researcher published a …
2022-09-05
[vendor] Binance plans to convert stablecoins to BUSD
Binance users who hold USDC (USD Coin), USDP (Pax Dollar), or TUSD (True USD) will find their holdings "converted" into Binance's stablecoin, BUSD, on September 29. The three …
2022-09-05
[vendor] Poolin
Vector: Withdrawal halt / insolvency
PoolinWallet is a crypto wallet service provided by Poolin, which runs the fourth-largest Bitcoin mining pool and third-largest Ethereum mining pool in the world. In the …
2022-09-04
[vendor] Islamic State launches NFTs
In the apparent "first known nonfungible token created and disseminated by a terrorist sympathizer", a supporter of the Islamic State has minted an NFT with a message praising an …
2022-09-02
[vendor] Coinbase bug
Vector: Software bug / unintentional loss
Some Coinbase customers in Georgia (the country, not the state) took advantage of an hours-long price bug where a misplaced decimal point altered the exchange rate of the Georgian …
2022-09-01
[vendor] 2TM layoffs
2TM, the holding company for the Brazilian crypto exchange Mercado, announced they would be laying off 15% of their workforce — about 100 people. The company had previously laid …
2022-09-01
[vendor] dYdX announces and cancels "liveness checks" plan
The decentralized crypto exchange dYdX announced on August 31 that they would give users $25 if they completed a "liveness check", which is accomplished by taking webcam facial …
2022-08-31
[vendor] DC Attorney General sues Michael Saylor and MicroStrategy
Vector: Regulatory / legal action
DC-based Bitcoin evangelist and former CEO (now chairman) of MicroStrategy has been accused by the DC Attorney General of avoiding years of taxes by pretending to live in Florida, …
2022-08-31
[vendor] Kyle Roche withdraws from class actions
Vector: Regulatory / legal action
Kyle Roche, a founding partner and namesake of the Roche Freedman law firm, has withdrawn from class-action lawsuits filed by the company against projects including Tether and …
2022-08-31
[vendor] Snapchat abandons web3 plans
Snap Program Manager Jake Sheinman tweeted that "As a result of the company restructure, decisions were made to sunset our web3 team. The same team that I co-founded last year with …
2022-08-30
[vendor] Bitkub
Vector: Regulatory / legal action
The Securities and Exchange Commission in Thailand took action against Samret Wajanasathian, the chief technology officer of the Thai crypto exchange Bitkub. The SEC fined him 8.5 …
2022-08-30
[vendor] Compound Finance cETH bug
Vector: Software bug / unintentional loss
Compound Finance released an update to change the price feed used by the Compound v2 protocol. Despite being audited by three firms, no one caught a bug that caused all …
2022-08-30
[vendor] Crypto.com wants accidental transfer back
Crypto.com somehow managed to not only send a woman AUD$10.5 million (US$7.2 million) in May 2021, but not notice it for months afterwards. The woman had requested a $100 refund, …
2022-08-30
[vendor] Thodex CEO arrested
Vector: Regulatory / legal action
Faruk Fatih Özer, the CEO of the Thodex cryptocurrency exchange, swore that when they halted trading and shut off customers' access to accounts in April 2021, it was just to …
2022-08-25
[vendor] CoinSwitch offices searched
Vector: Regulatory / legal action
Financial crime agents from India's Directorate of Enforcement searched the offices of CoinSwitch and the residences of some of its executives. CoinSwitch is the largest crypto …
2022-08-23
[vendor] Transaction reversal scheme perpetrators charged
Vector: Regulatory / legal action
The U.S. Attorney's Office of the Southern District of New York announced charges against three men responsible for a scheme in which they stole millions from cryptocurrency …
2022-08-19
[vendor] FDIC cease and desist letters
Vector: Regulatory / legal action
The Federal Deposit Insurance Corporation (FDIC) sent cease and desist notices to the FTX US crypto exchange and four websites that they allege are falsely claiming their products …
2022-08-19
[vendor] Swyftx layoffs
The Australian crypto exchange Swyftx laid off 21% of its workforce, affecting 74 employees. One such employee was on her honeymoon in Hawaii when she learned she was suddenly out …
2022-08-18
[vendor] Bribe Protocol
[loss] $6M
Vector: On-chain theft (attributed by zachxbt)
The Bribe Protocol promised a DAO infrastructure tool where "token holders get paid to govern", and raised $5.5 million in funding in January to work on their extensive roadmap. …
2022-08-18
[vendor] Crypto.com layoffs
In mid-June, Crypto.com announced they would be laying off 260 people, or around 5% of their employees. However, The Verge has reported that "hundreds more" employees were quietly …
2022-08-18
[vendor] Divorcee wants do-over
A letter-writer seeking advice from the Financial Times wrote, "I got divorced last year and as part of the financial agreement, my ex-wife and I agreed that I would keep my …
2022-08-18
[vendor] South Korea moves to block unregistered exchanges
Vector: Regulatory / legal action
The South Korean Financial Services Commission (FSC) reported to investigators sixteen unregistered crypto exchanges that were serving Korean users and hosting events marketing to …
2022-08-17
[vendor] Adam Neumann gets more backing
In a just world, people would probably not be able to fail upwards quite to the extent of Adam Neumann, who engaged in all sorts of self-dealing and lost billions of dollars, among …
2022-08-17
[vendor] Canadian pension manager regrets crypto investments
Vector: Protocol collapse / insolvency
Canadian caisse de dépôt et placement du Québec (CDPQ), Canada's second-largest pension fund manager, sunk $150 million into Celsius during a WestCap-led funding round announced in …
2022-08-17
[vendor] Genesis layoffs, CEO steps down
Crypto broker Genesis is laying off 20% of their employees and reshuffling their leadership in the wake of a several-hundred-million dollar loss related to the Three Arrows Capital …
2022-08-16
[vendor] Dragonchain SEC complaint
Vector: Regulatory / legal action
The U.S. Securities and Exchange Commission filed a complaint against an individual and his companies in relation to their sale of Dragon tokens in 2017. The ICO raised $16.5 …
2022-08-16
[vendor] Hodlnaut
[loss] $200M
Vector: Protocol collapse / insolvency
After halting withdrawals on August 8, Singaporean crypto lender Hodlnaut has applied for protection against creditors: a process similar to the U.S. Chapter 11 bankruptcy.They …
2022-08-15
[vendor] BitGo plans to seek damages from Galaxy Digital
Vector: Regulatory / legal action
In May 2021, investment management firm Galaxy Digital announced their plans to acquire crypto custodian BitGo for $1.2 billion in what would be the first $1 billion dollar deal …
2022-08-15
[vendor] Eqonex
Vector: Protocol collapse / insolvency
The Nasdaq-listed firm Eqonex has announced they will close their "underperforming" crypto exchange, hoping to change their money allocation to "reflect the current market …
2022-08-12
[vendor] BitBoy defamation lawsuit
Vector: Regulatory / legal action
"BitBoy Crypto" (Ben Armstrong) has sued "Atozy" (Erling Mengshoel Jr.) over a video in which Mengshoel accuses Armstrong of "lacking integrity as a cryptocurrency commentator" and …
2022-08-12
[vendor] Coinbase insider trading report
It's no secret that insider trading has happened at Coinbase, with the U.S. Attorney's Office of the Southern District of New York filing charges in July against three individuals, …
2022-08-12
[vendor] FlipVolt assets frozen
Vector: Regulatory / legal action
India's Enforcement Directorate froze $46.5 million of assets belonging to FlipVolt, the Indian branch of the Vauld cryptocurrency exchange. Vauld had previously filed for …
2022-08-12
[vendor] Martin Shkreli
[loss] $459,261
Vector: Exit scam / rug pull
I've almost got to give it to him. When I wrote up Druglike, Martin "Pharma Bro" Shkreli's new "web3" project for drug discovery, and asked him some questions in the project …
2022-08-12
[vendor] Tornado Cash developer arrested
Vector: Regulatory / legal action
A suspected developer of the Tornado Cash cryptocurrency tumbler was arrested in the Netherlands, according to the country's Fiscal Information and Investigation Service (FIOD). …
2022-08-11
Over 3,000 backers put a combined ~NZ$841,000 (~US$535,000) into Untamed Isles, a Pokémon-like MMORPG. Although the developers did eventually plan to add optional crypto elements …
2022-08-11
[vendor] Mailchimp bans crypto newsletters
The email marketing company Mailchimp reportedly suspended accounts belonging to several prominent companies and individuals in the crypto sphere, including crypto analytics tool …
2022-08-11
[vendor] Untamed Isles squanders Kickstarter funds on crypto
Over 3,000 backers put a combined ~NZ$841,000 (~US$535,000) into Untamed Isles, a Pokémon-like MMORPG. Although the developers did eventually plan to add optional crypto elements …
2022-08-10
[vendor] Celsius CEO dumps tokens
A wallet identified as belonging to Celsius CEO Alex Mashinsky sold off 17,475 CEL (the native token of the Celsius lending platform) for around $28,000. Celsius is undergoing …
2022-08-10
[vendor] Coinbase doesn't send notifications during crash
Mother Jones has reported that the Coinbase crypto exchange stopped sending the email notifications that it had previously sent some users when the price of a cryptocurrency …
2022-08-10
[vendor] Hotbit suspends trading
Vector: Withdrawal halt / insolvency
The Hotbit cryptocurrency exchange abruptly announced they would be suspending services because they were under criminal investigation, and law enforcement had frozen some of their …
2022-08-10
[vendor] OpenSea requires police report to freeze NFTs
The dominant NFT platform, OpenSea, has changed its policy around NFTs that are reported as stolen. OpenSea now requires those who have reported an NFT as stolen to produce a …
2022-08-10
[vendor] RenBridge money laundering report
Two days after OFAC sanctioned crypto tumbler Tornado Cash, the blockchain analytics firm Elliptic pointed to cryptocurrency bridges as a likely future target for sanctions if the …
2022-08-09
[vendor] CoinFLEX restructuring
Vector: Protocol collapse / insolvency
The cryptocurrency exchange CoinFLEX announced they had filed for restructuring, a move that probably didn't surprise too many people after they stopped customer withdrawals in …
2022-08-09
[vendor] Nuri insolvency
Vector: Protocol collapse / insolvency
The German cryptocurrency exchange Nuri, formerly known as Bitwala, filed for insolvency. Interestingly, they did not stop customer withdrawals — as have many exchanges who later …
2022-08-08
[vendor] Hodlnaut
Vector: Withdrawal halt / insolvency
Crypto lending firm Hodlnaut announced they would be suspending withdrawals "due to recent market conditions". They also announced they would be withdrawing their license …
2022-08-08
[vendor] OFAC sanctions Tornado Cash
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The U.S. Office of Foreign Assets Control (OFAC) added Tornado Cash to its SDN list: a list of "Specially Designated Nationals And Blocked Persons" with whom U.S. individuals and …
2022-08-08
[vendor] Truth in Advertising letters
Vector: Regulatory / legal action
Non-profit advertising watchdog organization Truth in Advertising (TINA) sent letters to seventeen celebrities, urging them to follow FTC requirements on clearly disclosing when …
2022-08-08
[vendor] WazirX ownership dispute
Vector: Regulatory / legal action
After India froze the assets of the WazirX cryptocurrency exchange due to suspicions they were enabling money laundering, suddenly no one wants to admit to operating it.Despite a …
2022-08-05
[vendor] WazirX assets frozen
Vector: Regulatory / legal action
India's Enforcement Directorate froze $8.16 million of assets belonging to WazirX, a Binance-owned cryptocurrency exchange that is one of the largest exchanges in India. According …
2022-08-03
[vendor] News outlets publish wrong recovery address after Nomad
Vector: On-chain theft (attributed by zachxbt)
After the August 1 Nomad bridge exploit, Nomad created an address where people who took money out of the bridge could return it.However, that was not the address that CoinGape …
2022-08-02
[vendor] CoinShares reports Terra loss
In their Q2 earnings report, European cryptocurrency investment firm CoinShares reported that they'd only made $120,000 in net income in the most recent quarter, down from more …
2022-08-02
[vendor] Robinhood fined
Vector: Regulatory / legal action
The New York Department of Financial Services levied a $30 million fine against Robinhood, an app used for stock trading that has also branched into crypto. According to the DFS, …
2022-08-02
[vendor] Robinhood layoffs
Stock and crypto trading app Robinhood announced they would be laying off 23% of their staff: 780 people. The layoffs followed a prior round of layoffs in April, which saw 9% of …
2022-08-01
[vendor] Dropil operators
Vector: Regulatory / legal action
Two men who ran an "investment management service" called Dropil were sentenced to 2½ and 3 years in prison after stealing around $1.9 million from more than 2,000 people. …
2022-08-01
[vendor] National Women's Soccer League players out money due to Voyager bankruptcy
Vector: Protocol collapse / insolvency
Half of the money in a large deal between the crypto platform Voyager Digital and the National Women's Soccer League was supposed to be distributed to players in cryptocurrency …
2022-08-01
[vendor] Nomad cross-chain bridge
Vector: A routine smart contract upgrade introduced a misconfiguration in Nomad's Replica contract — setting the 'trusted root' to 0x00, causing the contract to accept any message as valid; once the initial exploit was noticed on-chain, hundreds of copycat exploiters joined to drain the remaining funds
On August 1, 2022, the Nomad cross-chain bridge was drained of approximately $190 million in a chaotic 'free-for-all' exploit. A recent routine upgrade had inadvertently set the …
2022-07-29
[vendor] CoinFLEX layoffs
Vector: Protocol collapse / insolvency
CoinFLEX, a yield farming platform that stopped withdrawals in late June, announced they had made major staff cuts to reduce their cost base by 50–60%. "The intention is to remain …
2022-07-29
[vendor] Helium caught lying
Helium, a network of wireless hotspots for low-power devices whose operators are incentivized by a crypto token, has been lying about its relationship with scooter rideshare …
2022-07-28
[vendor] Regulators order Voyager to stop saying they're FDIC insured
Vector: Regulatory / legal action
One of the ways Voyager Digital drew in customers was by promising that their funds in USD were protected from a collapse of the company by FDIC deposit insurance, which normally …
2022-07-27
[vendor] SpiceDAO wraps up
"DAO delusion was at its peak when the community went into this journey together", wrote SpiceDAO founder Soban "Soby" Saqib. SpiceDAO (named for the Dune drug) won an auction to …
2022-07-26
[vendor] Yes, they have a
Those in the crypto ecosystem have long claimed to embrace the principles of censorship resistance and freedom of speech, but apparently some of them draw the line at speech that's …
2022-07-26
[vendor] OFAC investigating Kraken
Vector: Regulatory / legal action
The New York Times reported on July 26 that the Treasury Department's Office of Foreign Assets Control (OFAC) has been investigating major US-based crypto exchange Kraken for …
2022-07-26
[vendor] Titanium Blockchain Infrastructure Services
Vector: Regulatory / legal action
CEO Michael Stollery of Titanium Blockchain Infrastructure Services (TBIS) pled guilty to securities fraud in connection to a $21 million cryptocurrency scam. The company promoted …
2022-07-25
[vendor] Martin Shkreli starts web3 project
Vector: Ponzi / pyramid scheme
Martin Shkreli, sometimes known as "Pharma Bro", earned notoriety after obtaining the patent for an anti-parasitic drug and hiking the price from $13.50 a pill to $750. An FTC …
2022-07-22
[vendor] Celsius customers send letters to bankruptcy judge
Vector: Protocol collapse / insolvency
Celsius customers have begun to send letters to the judge presiding over Celsius Network's bankruptcy case in the Southern District of New York. More than fifty letters have been …
2022-07-21
[vendor] Blockchain.com layoffs
The cryptocurrency exchange Blockchain.com announced they would be cutting 25% of their employees, or around 150 people. They attributed the decision to the crypto market …
2022-07-21
[vendor] Coinbase tipster charged
Vector: Regulatory / legal action
Ishan Wahi, a former product manager for Coinbase, was indicted on two charges of wire fraud and two charges of wire fraud conspiracy for allegedly tipping off his brother and …
2022-07-21
[vendor] My Big Coin founder convicted
Vector: Regulatory / legal action
Randall Crater, founder of the cryptocurrency company My Big Coin, was convicted of multiple charges including wire fraud for a crypto scheme in which he stole more than $6 million …
2022-07-20
[vendor] Still frame from a video of the Ateca fire
Five villages were evacuated and a rail line was closed as a wildfire has burned 14,000 hectares (~35,000 acres) near Ateca in northwestern Spain. The fire was reportedly sparked …
2022-07-20
Minecraft is a massively popular sandbox-style video game that had almost 140 million monthly active users as of 2021. Its developer, Mojang Studios, published a blog post …
2022-07-20
[vendor] Minecraft disallows NFTs
Minecraft is a massively popular sandbox-style video game that had almost 140 million monthly active users as of 2021. Its developer, Mojang Studios, published a blog post …
2022-07-20
[vendor] Zipmex
Vector: Withdrawal halt / insolvency
Singapore-based crypto exchange Zipmex is the latest in a long string of crypto platforms to suspend customer withdrawals. "Due to a combination of circumstances beyond our control …
2022-07-18
[vendor] Binance faces fine in the Netherlands
Vector: Regulatory / legal action
Binance, the world's largest crypto exchange, was fined €3.3 million ($3.35 million) by De Nederlandsche Bank (DNB) for operating in the Netherlands without the required …
2022-07-18
[vendor] BlockFi layoffs
Vector: Protocol collapse / insolvency
The cryptocurrency lender BlockFi is reportedly offering employees buyouts — sorry, a "voluntary separation program" — in an effort to reduce their headcount even further. Those …
2022-07-18
[vendor] Gemini layoffs
After laying off 10% of its workforce in the first week of June, Gemini has performed a second round of layoffs. The layoffs have not been announced externally, nor were they …
2022-07-18
[vendor] SkyBridge suspends redemptions from crypto-exposed fund
Vector: Withdrawal halt / insolvency
SkyBridge Capital, an investment firm founded by Anthony Scaramucci, reportedly suspended redemptions from its "Legion Strategies" fund. Around 18% of the $230 million fund is …
2022-07-17
[vendor] AEX
Vector: Protocol collapse / insolvency
The AEX crypto exchange paused all withdrawals on June 16, estimating a 36-hour outage "to avoid unnecessary panic withdrawal". Then, instead of re-enabling all withdrawals, they …
2022-07-15
[vendor] Coinbase
A leaked email revealed that Coinbase is planning to temporarily end its affiliate-marketing program, which pays influencers to convince their followers to sign up. Some …
2022-07-14
[vendor] Betty Boop NFT announcement
Vector: Ponzi / pyramid scheme
The studio behind Betty Boop decided there was no better time to launch a Betty Boop NFT collection than during a period of record low interest in NFTs (or, more likely, they …
2022-07-14
[vendor] OpenSea layoffs
OpenSea, the largest NFT marketplace, announced that they would be laying off around 20% of their employees, or around 60 people. CEO Devin Finzer blamed "crypto winter" for …
2022-07-13
[vendor] Celsius
[loss] $1.7B
Vector: Protocol collapse / insolvency
One month after pausing customer withdrawals, crypto lending firm Celsius Network filed for Chapter 11 bankruptcy. Celsius had recently hired a new group of restructuring lawyers …
2022-07-13
[vendor] John McAfee
Vector: Regulatory / legal action
In October 2020, the SEC filed charges against anti-virus software magnate, two-time Libertarian presidential candidate, and all-around shady character John McAfee, as well as his …
2022-07-11
[vendor] Binance reportedly violated sanctions
Vector: Regulatory / legal action
The latest Reuters investigation into Binance has alleged that the company processed transactions for Iranian users, despite U.S. sanctions and the company's claim to be compliant …
2022-07-09
[vendor] CoinFLEX sues Roger Ver
Vector: Regulatory / legal action
When CoinFLEX suspended withdrawals on June 23, they blamed "continued uncertainty involving a counterparty".Although they initially dodged naming the counterparty, CEO Mark Lamb …
2022-07-08
[vendor] Blockchain.com exposure to Three Arrows Capital
Crypto exchange Blockchain.com announced in a letter to shareholders that they could lose the $270 million in cryptocurrency and USD they loaned to Three Arrows Capital, a …
2022-07-08
[vendor] Rogers Communications network infrastructure
Vector: A network maintenance update to Rogers' IP routing policy distributed during a network upgrade caused a cascade failure across Rogers' core network; the failure was a configuration error rather than a cyberattack; the outage took down mobile, internet, and cable services for approximately 12 million Canadian customers
On 8 July 2022, Rogers Communications — Canada's largest telecommunications company serving approximately 12 million wireless customers — suffered a massive network outage that …
2022-07-08
[vendor] Three Arrows Capital founders abscond
Vector: Protocol collapse / insolvency
Kyle Davies and Zhu Su, the founders of Three Arrows Capital, have apparently disappeared after the firm entered bankruptcy proceedings. Although lawyers for the duo have said they …
2022-07-08
[vendor] Vauld seeks creditor protection
Vector: Protocol collapse / insolvency
Cryptocurrency exchange Vauld, who suspended withdrawals on July 4, filed for a moratorium against creditors in Singapore, a process that's conceptually similar to Chapter 11 …
2022-07-07
[vendor] 2gether closes accounts
Vector: Withdrawal halt / insolvency
The Spanish cryptocurrency platform 2gether suddenly announced that they were "forced to close service for private accounts" due to "lack of resources and crypto winter". Users …
2022-07-07
[vendor] Former Celsius asset manager accuses them of Ponzi scheme
Vector: Ponzi / pyramid scheme
Jason Stone, founder of the KeyFi company who formerly managed assets for Celsius, filed a complaint against Celsius Network in a New York court, alleging the company was operating …
2022-07-06
[vendor] Bitstamp
The cryptocurrency exchange Bitstamp announced its plans to charge a €10 (~$10.17) monthly fee to inactive users outside of the US who had account balances below €200 ($203.38). …
2022-07-06
[vendor] Decentral Bank bug
Vector: Smart contract vulnerability exploit
A user tried twice to swap $5 of the USN stablecoin for Tether on the Decentral Bank platform. Both times, the transaction failed due to a bug that prevented users who didn't …
2022-07-06
[vendor] Genesis exposure to Three Arrows Capital and Babel Finance
Genesis, a crypto broker and lender, suffered "a few hundred million dollars" in losses during the recent crypto downturn. This were largely due to the firm's exposure to the …
2022-07-06
[vendor] Voyager Digital bankruptcy
[loss] $430M
Vector: Protocol collapse / insolvency
Voyager Digital, a crypto broker that suspended withdrawals a week prior, announced that it had filed for bankruptcy. They attributed their decision to "prolonged volatility and …
2022-07-05
[vendor] Polium logo (left) and GameCube logo (right)
Vaporware is hardly a new phenomenon in the web3 space, but the Polium project is bringing it to new heights. They announced their product — a "multi-chain console for Web 3 …
2022-07-05
[vendor] US Office of Government Ethics issues crypto guidance
Vector: Regulatory / legal action
The U.S. Office of Government Ethics issued a legal advisory stating that government employees who hold cryptocurrency may not work on policy or regulation that could potentially …
2022-07-04
[vendor] CoinLoin limits withdrawals
Vector: Withdrawal halt / insolvency
Claiming that they had no exposure to the various high profile collapses in the crypto industry lately, CoinLoan announced that they nevertheless would be reducing account …
2022-07-04
[vendor] Vauld
Vector: Withdrawal halt / insolvency
Vauld, a major cryptocurrency lender backed by the likes of Coinbase and Peter Thiel, announced they have suspended withdrawals, trading, and deposits due to the crypto market …
2022-07-01
[vendor] Meta
Diem, formerly known as Libra, was a stablecoin-based payments system proposed by Meta, formerly known as Facebook. Novi, formerly Calibra (are you keeping up?), was a crypto …
2022-06-30
[vendor] BlockFi nears acquisition deal with FTX
Vector: Protocol collapse / insolvency
According to CNBC, the cryptocurrency exchange FTX is hammering out the details on an agreement to acquire crypto lending platform BlockFi. Earlier in June, it was reported that …
2022-06-30
The U.S. Department of Justice announced fraud charges against David Saffron, the owner of the Circle Society cryptocurrency investment platform (with no relation to Circle). …
2022-06-30
The U.S. Department of Justice announced they had filed charges against Emerson Pires, Flavio Goncalves and Joshua David Nicholas, the two founders and the "head trader" of the …
2022-06-30
The U.S. Department of Justice charged Michael Alan Stollery with securities fraud over his role as founder and CEO of Titanium Blockchain Infrastructure Services (TBIS). TBIS was …
2022-06-29
[vendor] Coinbase provides ICE with analytics tools
Vector: Regulatory / legal action
A Freedom of Information Act request has revealed an August 2021 contract between U.S. crypto company Coinbase and U.S. Immigrations and Customs Enforcement (ICE). The contract …
2022-06-29
[vendor] Three Arrows Capital
[loss] $3.3B
Vector: Protocol collapse / insolvency
A court in the British Virgin Islands ordered the liquidation of Three Arrows Capital, a crypto hedge fund. This follows initial rumors in mid-June that the firm was insolvent, …
2022-06-29
[vendor] w3itch.io steals website code and games
A somewhat blundering group of developers decided to create "w3itch.io", an online marketplace for game creators. The marketplace said it was intended to be friendly to games …
2022-06-24
[vendor] Bitpanda layoffs
The Austrian cryptocurrency exchange Bitpanda joined the recent litany of crypto companies laying off employees. In an announcement to staff, later shared publicly, the company …
2022-06-24
The LA Times reported that the Bored Ape-themed "Bored & Hungry" restaurant in Long Beach, California had stopped accepting crypto payments. Despite excitedly announcing the …
2022-06-23
[vendor] CoinFLEX
Vector: Withdrawal halt / insolvency
Yield farming platform CoinFLEX is the latest crypto platform to stop allowing customers to withdraw their money. Customers had raised concerns about withdrawals not processing, …
2022-06-23
[vendor] Lummis and Gillibrand solicit feedback on bill via Github
Vector: Regulatory / legal action
After announcing their crypto-friendly proposed legislation earlier in June, Senators Lummis and Gillibrand have uploaded it to Github to solicit feedback, as was apparently widely …
2022-06-22
[vendor] Bybit settlement, Kucoin ban in Ontario
Vector: Regulatory / legal action
The Ontario Securities Commission (OSC) accused crypto trading platforms Bybit and Kucoin of operating unregistered platforms and offering unregistered securities to Ontarian …
2022-06-22
[vendor] $TWINKcoin
In a decision that makes you wonder if there was one single queer person in the room during the branding meetings, Hostess has announced $TWINKcoin snack cakes. The limited-edition …
2022-06-22
[vendor] Invictus Capital
Vector: Protocol collapse / insolvency
Invictus Capital, the group operating several cryptos in the Cayman Islands and the British Virgin Islands, announced to investors that it would be suspending redemptions. The …
2022-06-22
[vendor] Voyager Digital limits withdrawals
Vector: Withdrawal halt / insolvency
Voyager Digital disclosed that they had loaned $350 million in stablecoins and 15,250 Bitcoin (around $310 million) to Three Arrows Capital, a crypto hedge fund that could not meet …
2022-06-21
[vendor] BlockFi bailed out by FTX
Vector: Protocol collapse / insolvency
Crypto exchange FTX loaned $250 million to BlockFi, a crypto lending platform that recently announced 20% layoffs as they struggled to weather the crypto downturn. BlockFi also had …
2022-06-21
[vendor] Vauld layoffs
Vector: Protocol collapse / insolvency
The Peter Thiel- and Coinbase-backed Vauld cryptocurrency exchange laid off 30% of its 100–200 employees, reportedly due to falling prices, low trading volumes, and tax concerns. …
2022-06-20
[vendor] Bybit plans layoffs
Bybit, a Dubai-based cryptocurrency exchange, is reportedly joining the group of crypto companies laying off employees amidst plummeting cryptocurrency markets. Journalist Colin Wu …
2022-06-19
[vendor] Bancor
Vector: Withdrawal halt / insolvency
The defi insurance protocol Bancor announced on June 19 that they would be suspending their impermanent loss protection due to "hostile market conditions". The feature sought to …
2022-06-19
[vendor] Hoo
Vector: Withdrawal halt / insolvency
The Hong Kong-based cryptocurrency exchange Hoo announced that they would be pausing withdrawals, after so many customers tried to withdraw their crypto that they began to run out …
2022-06-18
[vendor] Magic Internet Money wobbles
A stablecoin called Magic Internet Money (yes, really) is one of the latest to have trouble maintaining its peg. The stablecoin is issued by the Abracadabra lending platform, which …
2022-06-17
[vendor] Babel Finance
Vector: Protocol collapse / insolvency
Babel Finance is the latest crypto finance platform to suddenly limit customer withdrawals. Citing "unusual liquidity pressures" and "conductive risk events" to crypto …
2022-06-17
[vendor] MakerDAO
MakerDAO voted to disable the Aave—DAI direct deposit module, which previously allowed users to mint DAI (MakerDAO's stablecoin) and deposit it into the Aave lending protocol. …
2022-06-17
[vendor] Three Arrows Capital looks for bailout
Vector: Protocol collapse / insolvency
The Wall Street Journal reported that Three Arrows Capital, a crypto hedge fund that was rumored to be insolvent several days earlier, was indeed pursuing last-ditch options to …
2022-06-16
[vendor] AEX limits withdrawals
Vector: Withdrawal halt / insolvency
The AEX crypto exchange is among a growing number of exchanges to limit customer withdrawals amidst a crypto downturn. In an announcement, AEX wrote that "we honestly admit that …
2022-06-16
[vendor] Anna Delvey plans NFTs
Anna Sorokin, the scammer who convinced people and companies to give her hundreds of thousands of dollars by pretending to be a German heiress, has decided to get into NFTs. After …
2022-06-16
[vendor] Finblox limits withdrawals
Vector: Withdrawal halt / insolvency
Finblox is a crypto yield farming company that describes themselves as a "savings platform" and promises "up to 90% APY on your crypto!". They announced they would be preventing …
2022-06-15
[vendor] 8 Blocks Capital calls to freeze Three Arrows Capital funds
8 Blocks Capital is a Hong Kong-based trading firm. In a Twitter thread, Danny Yuan explained that 8BC had been using 3AC's trading accounts to reduce their trading fees. He wrote, …
2022-06-15
[vendor] Kraken
The U.S.-based crypto exchange Kraken has announced that, despite the layoffs and hiring freezes among its competitors in the ongoing "crypto winter", they intend to keep hiring …
2022-06-14
[vendor] BlockFi fined
Vector: Regulatory / legal action
The Iowa Insurance Division announced that they had levied a $943,000 fine against BlockFi for failing to register securities they offered on their platform. The regulator also …
2022-06-14
[vendor] Coinbase layoffs
Coinbase announced that they would be cutting 18% of their employees, amounting to 1,100 people. This announcement came only two weeks after they rescinded already-accepted job …
2022-06-14
[vendor] Merit DAO votes to renege on deal
Members of the Merit DAO, a DAO operating in the play-to-earn space, voted on proposals renege on a deal signed with an early investor to the DAO, Yield Guild Games (YGG). The …
2022-06-14
[vendor] SEC insider trading probe
Vector: Regulatory / legal action
According to FOX Business, the SEC has sent an inquiry to at least one "major crypto exchange", in what their source said they believed was an investigation spanning several …
2022-06-14
[vendor] Three Arrows Capital insolvency
Vector: Protocol collapse / insolvency
Blockchain data showed that Three Arrows Capital (3AC), a crypto-focused hedge fund based in Singapore, appeared to be dumping stETH as quickly as possible. stETH is Lido-staked …
2022-06-13
[vendor] Crypto.com and BlockFi layoffs
On June 10, Crypto.com announced they would be "making targeted reductions" of 260 people, amounting to around 5% of their workforce. On June 13, BlockFi announced that they were …
2022-06-12
[vendor] Celsius
Vector: Withdrawal halt / insolvency
The Celsius platform announced that they would be pausing all withdrawals, swaps, and transfers due to "extreme market conditions".There has been a lot of concern lately about …
2022-06-07
[vendor] Lummis and Gillibrand propose crypto bill
Vector: Regulatory / legal action
Senators Lummis (R-WY) and Gillibrand (D-NY) introduced the "Responsible Financial Innovation Act", the first major proposal for cryptocurrency regulation in the US. A press …
2022-06-06
[vendor] Grit blockchain game demo fails to impress
You might think that, since Epic Games has decided to distinguish itself from its major competitor Steam by welcoming blockchain games to its platform, they might try to make a …
2022-06-06
You might think that, since Epic Games has decided to distinguish itself from its major competitor Steam by welcoming blockchain games to its platform, they might try to make a …
2022-06-06
[vendor] Reuters Binance money laundering report
Vector: Regulatory / legal action
A Reuters investigation alleged that Binance "served as a conduit for the laundering of at least $2.35 billion in illicit funds" between 2017 and 2021. Binance is the largest …
2022-06-06
[vendor] SEC reportedly reviewing BNB token
Vector: Regulatory / legal action
The same day that Reuters released an investigation implicating Binance in helping to launder billions of dollars of illicit funds, Bloomberg reported that the U.S. Securities and …
2022-06-03
[vendor] FTC reports $329 million in crypto
Vector: Regulatory / legal action
The U.S. Federal Trade Commission (FTC) reported that "Although it's yet to become a mainstream payment method, reports to the FTC show [crypto is] an alarmingly common method for …
2022-06-02
[vendor] Coinbase rescinds job offers
The same day that Gemini announced they would be laying off 10% of their staff, Coinbase announced they would be extending a hiring freeze they'd put in place two weeks earlier, …
2022-06-02
[vendor] Forest Tiger Pro
[loss] $5M
Vector: Exit scam / rug pull
The TIGER project was supposed to be a DAO aiming to "support global technical teams" and protect wild animals and the environment. The project was broad-ranging, and had NFT, …
2022-06-02
[vendor] Gemini layoffs
The Winklevoss twins, founders of the Gemini crypto exchange, announced to employees and in a public blog post on June 2 that they would be laying off 10% of their workforce. They …
2022-06-02
[vendor] Gemini sued by CFTC
Vector: Regulatory / legal action
Gemini is a major cryptocurrency exchange and market for Bitcoin futures. The Commodity Futures Trading Commission (CFTC) filed a lawsuit against Gemini for making false or …
2022-06-01
[vendor] Guardian editor impersonated
Alex Hern, a technology editor at the Guardian, was surprised to receive an onslaught of messages asking about "Tsuka", a new crypto token. It turned out someone had been using …
2022-06-01
Alex Hern, a technology editor at the Guardian, was surprised to receive an onslaught of messages asking about "Tsuka", a new crypto token. It turned out someone had been using …
2022-06-01
[vendor] Letter in Support of Responsible Fintech Policy
Vector: Regulatory / legal action
A group of 26 technologists (disclosure: myself included) have signed an open letter to U.S. lawmakers urging them to "take a critical, skeptical approach toward industry claims …
2022-06-01
[vendor] OpenSea insider trader arrested
Vector: Regulatory / legal action
Nate Chastain was asked to resign from his position as Head of Product at OpenSea in September 2021 following allegations of NFT insider trading. Online sleuths had discovered that …
2022-05-26
[vendor] Bitso layoffs
The Latin American crypto exchange Bitso laid off 80 employees, around 10% of their staff which had previously amounted to around 700 people. The exchange told CoinDesk that they …
2022-05-23
[vendor] Jonny Reid wallet compromise
Vector: Regulatory / legal action
The U.S. House of Representatives Committee on Ethics announced on May 23 that they had unanimously voted to investigate whether Representative Madison Cawthorn (R-NC) "improperly …
2022-05-20
[vendor] HUMBL class action
Vector: Regulatory / legal action
A litigation firm filed a class action lawsuit against HUMBL, a financial services company that touts its web3 and defi products. The lawsuit alleges that HUMBL and its executives …
2022-05-12
[vendor] EminiFX CEO charged
Vector: Regulatory / legal action
Eddy Alexandre, CEO of the cryptocurrency and forex trading platform EminiFX, was charged by the FBI with fraud for his role in what he described to investors as a crypto …
2022-05-12
[vendor] Tether
Tether, the largest stablecoin, had a major wobble. Pegged to the U.S. dollar and widely used throughout the cryptocurrency ecosystem, even a fractional cent deviation from its peg …
2022-05-11
[vendor] BitPrime
The New Zealand cryptocurrency exchange BitPrime paused trading operations, issuing a notice to their customers: "A perfect storm has occurred, where liquidity has reduced, the …
2022-05-11
[vendor] Ruja Ignatova added to most wanted list
Vector: Ponzi / pyramid scheme
Ruja Ignatova, also known as the "Cryptoqueen", is a serial fraudster who has been on the run since 2017. In 2019, she was charged in absentia by U.S. authorities due to her …
2022-05-10
[vendor] Coinbase adds bankruptcy language to quarterly report
Coinbase added new language to its latest 10-Q, a quarterly report submitted by public companies to the SEC. In the section outlining risks to the business, Coinbase wrote: …
2022-05-09
[vendor] Michael Owen
In what almost guarantees some fun lawsuits down the line, former footballer Michael Owen tried to hit back at "the critics" by announcing that "[his] NFTs will be the first ever …
2022-05-07
[vendor] Coinbase NFT marketplace flops
Coinbase is a big name in the crypto exchange world, enjoying the highest trading volume in the United States. The company decided to enter the NFT trading space, first releasing …
2022-05-05
[vendor] Mining Capital Coin CEO indicted
Vector: Ponzi / pyramid scheme
The Department of Justice unsealed an indictment on May 5, showing that Mining Capital Coin's CEO and founder Luiz Capuci Jr. was charged with orchestrating a $62 million …
2022-05-04
[vendor] ape holders can use multiple slurp juices on a single ape
a lotta yall still dont get itape holders can use multiple slurp juices on a single apeso if you have 1 astro ape and 3 slurp juices you can create 3 new apesTonight's slurp juice …
2022-05-03
[vendor] NFT sales down 92%
The Wall Street Journal reported that "the NFT market is collapsing", citing data from NonFungible that showed daily average sales of NFTs had dropped 92% from their September …
2022-05-03
[vendor] Square Enix sells IP to get into blockchain gaming
Video game company Square Enix, the creators of titles including Deus Ex and Tomb Raider, agreed to sell off the intellectual property rights to those games, as well as other games …
2022-05-02
[vendor] Vatican plans metaverse NFT gallery
A press release from metaverse developer Sensorium announced a "VR and NFT gallery" that would host art and content for the Vatican. The project will allow VR, PC, and mobile …
2022-05-01
[vendor] Wikimedia Foundation stops accepting cryptocurrency donations
The Wikimedia Foundation, the non-profit organization that owns and operates Wikipedia and related projects, announced that they would no longer accept donations in cryptocurrency. …
2022-04-28
[vendor] NASGO SEC charges
Vector: Regulatory / legal action
The SEC charged four individuals with fraud violations in relation to their actions with NASGO, a company that created various tokens that the SEC has since described as …
2022-04-26
[vendor] Madison Cawthorne accused of insider trading
Vector: Regulatory / legal action
North Carolina Representative Madison Cawthorn was one of several influential people who helped to promote the "Let's Go Brandon" memecoin, which has since become the subject of a …
2022-04-25
[vendor] Reggie Fowler
Vector: Regulatory / legal action
Reggie Fowler, a businessman and former pro football player who worked for the Panama-based Crypto Capital Corp., pled guilty to various charges involving bank fraud, wire fraud, …
2022-04-25
[vendor] Sam Bankman-Fried describes yield farming as a Ponzi scheme
Vector: Ponzi / pyramid scheme
Sam Bankman-Fried, one of the most well-known crypto execs and the founder of the popular FTX crypto exchange, appeared for an interview on Bloomberg's Odd Lots podcast alongside …
2022-04-22
Bob Byrne and Tim Collins, two prolific contributors to the far-right Epoch Times, have expanded their grift to crypto. A twenty-page-long "newspaper" titled Wall Street Today …
2022-04-18
[vendor] Andre Cronje calls for regulation
Andre Cronje has graced the pages of W3IGG before, when he and his development partner Anton Nell unexpectedly announced they would be abandoning their 20+ defi projects, without …
2022-04-14
According to the FBI, the infamous cybercrime group Lazarus has been implicated in the March Axie Infinity exploit that saw $625 million taken from the game's blockchain bridge. …
2022-04-13
[vendor] Coinbase class action lawsuit filed
Vector: Regulatory / legal action
A group of shareholders have filed a class-action lawsuit against Coinbase, alleging that the registration and prospectus statements provided for the company's IPO were false and …
2022-04-12
[vendor] Celsius ends Earn product in US
Vector: Regulatory / legal action
Celsius announced that, in order to comply with United States regulations, they would no longer allow non-accredited investors from the U.S. to "earn rewards on" (that is, lend) …
2022-04-12
[vendor] Coinbase insider trading
On April 11, Coinbase announced 50 new cryptocurrencies they were considering listing on their exchange. These announcements tend to increase the price of the tokens under …
2022-04-12
[vendor] Solar Society promotional art
"Don't make your dystopian books our reality, Pierce," a fan replied to sci-fi author Pierce Brown's announcement of an NFT project. Brown, the author of the bestselling Red Rising …
2022-04-12
[vendor] Wikimedia community requests an end to crypto donations
Wikipedia editors and other members of the Wikimedia communities completed a three-month-long discussion about whether the Wikimedia Foundation (WMF) should continue to accept …
2022-04-11
[vendor] Ichi cascading liquidations
[loss] $30M
Ichi, a defi project that allows other projects to create their own stablecoins suffered cascading liquidations in its Rari pool, leading to a token price crash. Rari is a protocol …
2022-04-09
A restaurateur opened "Bored & Hungry", a Bored Ape-themed restaurant in Long Beach, California that offers a simple menu of hamburgers or plant-based burgers (with or without …
2022-04-08
[vendor] IEC 60870-5-104 SCADA; Ukrainian high-voltage substations
[malware] Industroyer2; CaddyWiper; ORCSHRED; SOLOSHRED; AWFULSHRED
Vector: Sandworm (GRU Unit 74455) pre-positioned in Ukrainian energy sector network with undisclosed initial access vector (likely spearphishing or supply chain); deployed Industroyer2 IEC 60870-5-104 payload targeting high-voltage substations; simultaneously deployed five wiper variants (CaddyWiper, ORCSHRED, SOLOSHRED, AWFULSHRED) targeting Windows, Linux, and Solaris systems
On April 8, 2022 — during Russia's full-scale military invasion of Ukraine — Sandworm (GRU Unit 74455) attempted to deploy an upgraded version of Industroyer malware (dubbed …
2022-04-06
Star Trek announced the creation of "Star Trek Continuum", a part of Paramount's new NFT platform. They state that the project is "accessible to everyone [with $250 to throw …
2022-04-05
Ubisoft announced in December that they would be incorporating NFTs in to their Tom Clancy's Ghost Recon Breakpoint title, much to the chagrin of its players and some employees as …
2022-04-04
[vendor] r/place NFTs
Reddit reopened its chaotic collaborative art project, r/place, for several days. Users could place colored pixels onto a shared canvas at limited intervals, collaborating to …
2022-04-04
[vendor] Robert Malone speaking to trucker convoy
Robert W. Malone, a COVID-19 conspiracy theorist, gave a speech to a group of anti-vax truckers in which he announced plans to dox over 4,000 "[World Economic Forum] trainees" by …
2022-04-04
[vendor] Waves stablecoin
Vector: Ponzi / pyramid scheme
The stablecoin belonging to the Waves protocol, "Neutrino dollar" (aka USDN), crashed nearly 20%, despite intending to maintain its 1:1 ratio to the US dollar. The volatility …
2022-04-01
[vendor] Waves protocol losses
[loss] $530M
An up-and-coming defi lending project called Vires Finance, which was based on the Waves protocol, offered high returns of 30–70% APY on stablecoins placed in the project. As with …
2022-03-31
[vendor] OpenSea insider trader opens new NFT platform
Nate Chastain resigned from OpenSea at their request in September 2021 after it was discovered that he had allegedly been buying NFTs based on insider knowledge that they would be …
2022-03-26
[vendor] Coinbase requires KYC from more users
Vector: Regulatory / legal action
Coinbase began sending out notices to its customers who reside in Canada, Singapore, and Japan, to tell them that in early April, they will need to begin inputting information …
2022-03-25
[vendor] Dan Hannum Twitter profile photo
New York Times reporter Ron Lieber began fact-checking a story in March about a deal between crypto tax software firm ZenLedger and the Internal Revenue Service. Lieber ran into …
2022-03-18
[vendor] IGObit founder convicted
Vector: Regulatory / legal action
Asa Saint Clair created an organization called the World Sports Alliance, which he falsely described to prospective investors as being closely affiliated with the United Nations …
2022-03-16
[vendor] Apecoin launches
Bored Ape Yacht Club decided to release "ApeCoin", a new cryptocurrency token. The token distribution heavily favors current BAYC owners, truly underscoring the fantasy about a …
2022-03-16
[vendor] Binance stops operating in Ontario
Vector: Regulatory / legal action
In June 2021, Binance announced they would stop operating in Ontario after the province introduced new prospectus and registration requirements for crypto exchanges. However, in …
2022-03-15
After an extended Polygon outage on March 10, Binance temporarily paused deposits and withdrawals via Polygon on March 15. Although Binance reported it was "due to the network wide …
2022-03-11
[vendor] Fir Tree Capital shorts Tether
The large hedge fund Fir Tree Capital Management has decided that the doubts around the stablecoin Tether are serious enough to take out a substantial short position against the …
2022-03-11
[vendor] Socios payments controversy
Off the Pitch reported on March 11 that Socios, the sports fan platform, had withheld payments owed to staff, advisors, and others who had signed agreements to endorse the …
2022-03-09
[vendor] LimeWire NFT marketplace annoucement
LimeWire, the filesharing service that was enormously popular in the early 2000s for piracy, has been resuscitated — or at least the brand has. Needless to say they are probably …
2022-03-08
[vendor] Crypto.com calls back loans
Vector: Regulatory / legal action
Crypto.com sent out an unexpected email to some users, apparently primarily in the EU, announcing that "Lending is no longer supported in your jurisdiction... [and] we are required …
2022-03-06
[vendor] Andre Cronje and Anton Nell leave crypto
Andre Cronje and Anton Nell, the prolific developers of around 25 defi projects including yearn.fi and the new Solidly exchange, suddenly announced on Twitter that they would be …
2022-03-03
Iranian users were surprised to find that their OpenSea accounts had been deactivated with no warning. One Iranian user wrote, "NOT A gm AT ALL. Woke up to my opensea trading …
2022-03-01
[vendor] Former ConsenSys employees demand audit
Vector: Regulatory / legal action
A group of 35 former employees of the startup incubator ConsenSys filed a request for an audit of a transfer of the company's "crown jewel" assets to a new company, which they say …
2022-02-28
[vendor] Randi Zuckerberg music video
Apparently hoping to create the "rallying cry for the women of web3", Randi Zuckerberg released her second crypto-themed song "WAGMI", a parody of Twisted Sister's "We're Not Gonna …
2022-02-27
[vendor] Gavin Wood tries to use Ukraine invasion as marketing opportunity
On February 26, the Ukrainian government tweeted Bitcoin and Ethereum addresses, allowing cryptocurrency donations directly to the government to support their resistance to the …
2022-02-26
[vendor] Scammers try to profit off Ukraine invasion
Cryptocurrency scammers have turned to the crisis in Ukraine to provide fodder for their scams. Some have taken the tactic of pretending to be a person trying to escape the country …
2022-02-24
[vendor] BitMEX founders plead guilty
Vector: Regulatory / legal action
Arther Hayes and Benjamin Delo, the founders of the BitMEX cryptocurrency exchange, pled guilty to violations of the Bank Secrecy Act, which they violated by ignoring requirements …
2022-02-24
[vendor] Ukrainian government, financial, energy, and media infrastructure; Israeli government and critical infrastructure; civilian internet services globally
[malware] HermeticWiper, WhisperGate, CaddyWiper, IsaacWiper, Sandworm AcidRain, Industroyer2, SolarWinds SUNBURST
[cve] CVE-2022-24521
Vector: Coordination of destructive wiper malware, DDoS campaigns, information operations, and OT/ICS attacks by state-sponsored threat actors and hacktivist auxiliaries alongside conventional military operations; use of pre-positioned access (established months or years before conflict activation) against critical infrastructure
The 2022-2026 period fundamentally documented the integration of cyberattacks into modern armed conflicts as a standard component of military operations. Key documented cyber …
2022-02-21
[vendor] Coinbase takes credit for ad
Coinbase CEO Brian Armstrong embarked on a 12-tweet-long thread congratulating Coinbase employees for coming up with the bouncing QR code Super Bowl ad. He wrote, "I guess if there …
2022-02-20
[vendor] Composable Finance exec unmasked as Omar Zaki
Vector: On-chain theft (attributed by zachxbt)
Composable Finance is a company that makes infrastructure tools for defi. Until recently, their head of product has been known only as 0xbrainjar, and has operated pseudonymously. …
2022-02-17
[vendor] Binance
Vector: Regulatory / legal action
Binance announced they had stopped "marketing to Israelis and all activities focused on Israel until we examine the issue of licensing." The "issue" in question seems to be that …
2022-02-16
[vendor] Gary Vee calls out shadiness
Gary Vaynerchuk, an entrepreneur and now crypto/NFT personality, took to Twitter to express his frustration with some projects that airdrop their NFTs to big-name collectors and …
2022-02-13
[vendor] British authorities seize NFTs in tax investigation
Vector: Regulatory / legal action
British tax authorities seized three NFTs in what they said was an attempt to dodge £1.4 million ($1.9M) in taxes. Officials stated that the seizure was a "warning to anyone who …
2022-02-13
[vendor] Coinbase outage
People were apparently tempted by Coinbase's Super Bowl ad — which was just a QR code bouncing around the screen like the DVD screensaver — so much so that it took the Coinbase …
2022-02-11
[vendor] BlockFi SEC settlement
Vector: Regulatory / legal action
Bloomberg reported that BlockFi is preparing to pay $100 million to settle allegations from the Securities and Exchange Commission (SEC) and state regulators that it provided a …
2022-02-11
The "Runescape-like" MMO game known as TitanReach has had a bumpy history so far, first failing to reach its Kickstarter goal in a crowdfunding project launched in 2020, but …
2022-02-11
[vendor] MoviePass
Remember MoviePass, the completely unsustainable and shady business that allowed people to go see unlimited movies in theaters (until it didn't)? Well, it's back. This time they …
2022-02-11
[vendor] TitanReach alleged fund misappropriation
[loss] $150,000
The "Runescape-like" MMO game known as TitanReach has had a bumpy history so far, first failing to reach its Kickstarter goal in a crowdfunding project launched in 2020, but …
2022-02-10
[vendor] Atomic Wallet vulnerabilities
Vector: Software bug / unintentional loss
Atomic Wallet is a cryptocurrency wallet that claims to have more than 3 million downloads and advertises that "we provide users with the exceptional safety of their funds". …
2022-02-09
[vendor] BBC article about
The BBC featured an article on their homepage about Hanad Hassan, "a 20-year-old who made millions trading cryptocurrency [who] is set to open a food bank to give back to his …
2022-02-09
[vendor] Skycoin kidnapping lawsuit
Vector: Regulatory / legal action
Brandon Smietana, the creator of the Skycoin cryptocurrency, filed a civil racketeering lawsuit on February 9 against a slew of people. He claims that the people hired to market …
2022-02-08
[vendor] British Journal of Photography replaces Twitter account
The British Journal of Photography is a magazine and institution within the fine art and documentary photography world dating to 1854. In June 2021, they asked for investments, but …
2022-02-08
[vendor] Coinbase insider trading
In early February, Coinbase listed the Aventus token ($AVT) on its exchange and added support for Pawtocol ($UPI). Shortly before these announcements, someone created a new crypto …
2022-02-07
[vendor] NFT Music Stream unauthorized marketplace
Following close on the heels of the disaster of an idea that was HitPiece, a new project called "NFT Music Stream" cropped up. Like HitPiece, the project appeared to be scraping …
2022-02-07
[vendor] SuperRare community manager controversy
The same week as bigoted tweets from an ENS director Brantly Millegan surfaced, so too did racist tweets by Ashni Christenson, then-community manager for the NFT platform …
2022-02-06
[vendor] UN report on North Korean
A report by the United Nations identified cyberattacks as an "important revenue source". At least three cryptocurrency exchanges were targeted by North Korean hackers, and a …
2022-02-04
[vendor] Gumroad NFT controversy
Brian Box Brown, an artist who had previously worked for the digital self-publishing platform Gumroad, tweeted that he was ramping up his original art sales because "my former …
2022-02-02
[vendor] Wormhole cross-chain bridge (Solana/Ethereum)
Vector: Attacker exploited a signature verification vulnerability in Wormhole's Solana smart contract — a failure to properly validate 'guardian' program accounts allowed the attacker to spoof a valid signature and fraudulently mint 120,000 wETH (wrapped Ethereum) on Solana without depositing collateral
On February 2, 2022, the Wormhole cross-chain bridge — which facilitates token transfers between Solana, Ethereum, and other blockchains — suffered a smart contract exploit …
2022-01-31
[vendor] Gambling addiction posts
Crypto trading and crypto casinos have presented a new challenge to those battling gambling addiction. There are options for problem gamblers who are struggling to stop gambling in …
2022-01-31
[vendor] Redditors discover tax season
With so many newcomers to cryptocurrencies this year, and the often complex tax situations cryptocurrency trading can create (assuming it's reported at all), some traders are …
2022-01-30
[vendor] Wonderland
The Wonderland protocol had a rough week, first experiencing massive losses in "cascading liquidations" and then the unmasking of the previously pseudonymous lead developer as …
2022-01-27
[vendor] IP harvesting NFTs created
Vector: Software bug / unintentional loss
MetaMask acknowledged a week ago that they'd failed to address an IP leakage "issue has been widely known for a long time". The issue is present in many NFT marketplaces and …
2022-01-27
[vendor] Padawan DAO treasury loss
Padawan DAO is a project that aims to provide funding to students under 25 to attend blockchain-related events. In early January, the DAO decided to essentially gamble with project …
2022-01-27
[vendor] Wonderland developer exposed as Michael Patryn
Vector: On-chain theft (attributed by zachxbt)
Sifu, the pseudonymous chief developer of the Wonderland protocol, was revealed to be Michael Patryn, previously known as Omar Dahani. Patryn was a co-founder of the Canadian …
2022-01-26
[vendor] IQONIQ
"Fan engagement blockchain platform" IQONIQ went into liquidation late January 2022, taking down its token sale platform and crashing the value of the fan-owned coin by over 90%. …
2022-01-26
[vendor] Let's Go Brandon coin crashes
The "Let's Go Brandon" $LGB coin tied to NASCAR driver Brandon Brown, and created as an apparent way to support "the American dream" and stick it to Joe Biden (somehow), suddenly …
2022-01-25
[vendor] Wonderland cascading liquidations
Vector: Ponzi / pyramid scheme
The broader decline in cryptocurrency prices triggered "cascading liquidations" in the Wonderland defi project, which is a fork of the "it might be a ponzi" OlympusDAO project. …
2022-01-22
[vendor] Kurt Cobain NFT announcement
An NFT group announced that they'd be releasing NFTs created from photographs of a 1991 Nirvana show they performed shortly before Nevermind rose to popularity. The NFTs go on sale …
2022-01-20
[vendor] McDonalds steals artwork
Shortly after rolling out their hexagonal NFT profile pictures, @twitter posted "gm, looking for an nft pfp". The next day, McDonald's German
language communications account, …
2022-01-20
[vendor] MetaMask vulnerability
Vector: Software bug / unintentional loss
Security researchers publicly disclosed a critical privacy vulnerability with the popular cryptocurrency wallet Metamask, where a malicious attacker can easily create an NFT and …
2022-01-20
[vendor] Screenshot of the Twitter NFT announcement
Although NFTs-as-profile-pictures on Twitter is nothing new, Twitter launched a new feature in which users can connect their crypto wallets to verify that an NFT belongs to them. …
2022-01-17
[vendor] MetaBirkins lawsuit
Vector: Regulatory / legal action
Mason Rothschild, the creator of "MetaBirkins" NFTs, was the target of a trademark lawsuit by Birkin bag-maker Hermès. The lawsuit came after he ignored a cease and desist from the …
2022-01-15
[vendor] InvertedCulture and MadHashers
Shortly after it was discovered that the images used for the NFT project "InvertedCulture" were nothing more than unauthorized flipped copies from a different NFT project, DNA …
2022-01-07
[vendor] CoinSuper withdrawal issues
Users reported not being able to withdraw currency from their accounts with Coinsuper, a Hong Kong-based crypto exchange. Although trading has remained active on the platform to …
2022-01-07
[vendor] EthereumMax class action filed
Vector: Regulatory / legal action
An investor filed a class action lawsuit against Kim Kardashian, Floyd Mayweather, and Paul Pierce, all of whom promoted the EthereumMax currency (not to be confused with the …
2022-01-06
[vendor] Original Mozilla tweet
Someone on the Mozilla Foundation's social team inexplicably thought that tweeting "Dabble in @dogecoin? HODLing some #Bitcoin & #Ethereum? We're using @BitPay to …
2022-01-04
[vendor] Kosovo temporarily bans crypto mining
Energy shortages and rolling blackouts plagued Kosovo towards the end of 2021, leading the Kosovan government to issue a 60-day state of emergency to address the crisis. The …
2022-01-03
[vendor] Samsung NFT TV announcement
If trying to type in the name of a movie on Netflix with a TV remote isn't painful enough for them, now people will be able to try using their TV to do due diligence into whether …
2022-01-02
[vendor] Matt Damon advertisement
"Fortune favors the brave", said Matt Damon as he walked past images of mountain climbers, the Wright brothers, and astronauts. "History is filled with 'almosts'. With those who …
2022-01-01
[vendor] Carson Turner NFT loss
[loss] $38,000
Vector: Software bug / unintentional loss
Carson Turner accused ACYCapital of "exploiting @BoredApeYC through a glitch in @rarible" after they bought his Bored Ape NFT that he had listed for sale (and which he has …
2022-01-01
[vendor] Square Enix NFT announcement
In the announcement, Square Enix CEO Yosuke Matsuda apparently wrote with a straight face: "I realize that some people who 'play to have fun' and who currently form the majority of …
2022-01-01
[vendor] Tether prints $1 billion
Shortly after midnight on January 1, Tether added another $1 billion to its total supply. Although Tether claims that all of its supply is fully backed by actual currency, many …
2021-12-28
[vendor] Crypto mining in Georgia crushes electrical grid
Board chairman of Energo-Pro Georgia, an energy company serving the Svaneti region of Georgia, wrote, "This can no longer continue. No network can withstand the electricity …
2021-12-28
[vendor] Maricoin announced
Founders say they aim to help the LGBTQ+ community with a Spanish cryptocurrency project, "Maricoin". The team plans for the currency to be used for payment in a network of …
2021-12-25
[vendor] Elon Musk pumps Santa Floki
On Christmas, Elon Musk tweeted a very cute photograph of his pet dog, Floki, wearing a Santa suit with the caption "Floki Santa". Creators of a memecoin called "Santa Floki" …
2021-12-23
[vendor] Fuck Joe Biden coin launch
Vector: Exit scam / rug pull
Around the holidays, Steve Bannon started touting a "Fuck Joe Biden" ($FJB) coin (formerly known as the "Let's Go Brandon" coin, and not to be confused with the other Let's Go …
2021-12-17
[vendor] Artist may need to close online gallery
Comics artist Liam Sharp wrote on Twitter that he would likely need to close his DeviantArt gallery, which he has maintained for fourteen years, because his artwork keeps being …
2021-12-16
Pushback from fans led S.T.A.L.K.E.R. 2 creators to quickly reverse their decision to add NFTs to the game. The studio announced their NFT plans on December 15, which involved …
2021-12-14
[vendor] Crypto tracker bugs
[loss] $340,000
Vector: Software bug / unintentional loss
Some people were briefly elated or devastated when they looked at Coinbase or CoinMarketCap, both major cryptocurrency trackers. A glitch caused some cryptocurrency investments to …
2021-12-07
Ubisoft announced that it would be adding NFTs to its Tom Clancy's Ghost Recon Breakpoint title, allowing players to buy "Digits": artificially scarce in-game weapons, vehicles, …
2021-12-05
[vendor] CoinDesk OlympusDAO article
Vector: Ponzi / pyramid scheme
Thurman began an article by writing, "Yes, it's a Ponzi scheme. But who cares? So are the dollars in your pocket." He was writing about OlympusDAO, a "decentralized finance (DeFi) …
2021-12-05
Thurman began an article by writing, "Yes, it's a Ponzi scheme. But who cares? So are the dollars in your pocket." He was writing about OlympusDAO, a "decentralized finance (DeFi) …
2021-12-04
[vendor] BitMart (cryptocurrency exchange, Cayman Islands)
Vector: Theft of private keys for two of BitMart's hot wallets — one on Ethereum and one on Binance Smart Chain; the exact method of key compromise was not publicly disclosed by BitMart
On December 4, 2021, security firm PeckShield identified large unauthorized outflows from BitMart's hot wallets totaling approximately $196 million — approximately $100 million …
2021-12-04
[vendor] Tether prints $3 billion
Tether minted more than $3 billion in a two week span. This brings the total amount of USDT (which is pegged to the U.S. dollar) to 76 billion, and much of it was minted this year. …
2021-12-02
[vendor] Ivars Auzins SEC charges
Vector: Regulatory / legal action
The SEC charged Latvian citizen Ivars Auzins with investment schemes he created using fake names and businesses. He allegedly created a fraudulent ICO for a coin that would back …
2021-12-01
[vendor] Apache Log4j 2
[malware] Conti (ransomware), various cryptominers, Orcus RAT
[cve] CVE-2021-44228 +2
Vector: CWE-917: Improper Neutralization of Special Elements in Expression Language (JNDI injection in log4j)
Critical CVSS 10.0 RCE vulnerability in Apache Log4j 2 logging library. Publicly disclosed Dec 9 2021; patch released same day (2.15.0). Nation-state actors from China, Iran, North …
2021-11-30
[vendor] Unvaxxed Sperm launch
Developers launched a memecoin called "Unvaxxed Sperm", hoping to make a buck while also recruiting for their anti-vaccine group. The name is based on the belief that in the …
2021-11-23
[vendor] Senat Committee stablecoin letters
Vector: Regulatory / legal action
The U.S. Senate Committee on Banking, Housing, and Urban sent letters to various stablecoin operators including Tether, Coinbase, and Binance, asking for more details on how the …
2021-11-22
Because Wolf Game put their entire source code into the blockchain, they were unable to patch an exploit once it was discovered. They had to completely recreate the game, reissuing …
2021-11-10
[vendor] BadgerDAO (Bitcoin yield DeFi protocol); Cloudflare CDN
Vector: Attackers compromised the Cloudflare API key for BadgerDAO's frontend, injecting malicious JavaScript that prompted users to approve unlimited ERC-20 token transfers to attacker-controlled addresses when interacting with the BadgerDAO web application
BadgerDAO, a DeFi protocol allowing users to earn yield on Bitcoin via Ethereum-based vaults, suffered a frontend supply chain attack beginning approximately November 10, 2021, …
2021-11-06
[vendor] Filecoin Ponzi scheme
[loss] $62M
Vector: Ponzi / pyramid scheme
Chinese police arrested 31 people for allegedly running a Ponzi scheme, in connection to sales of mining equipment for the filestorage crypto project Filecoin. The individuals were …
2021-11-05
[vendor] Fake press release about Bitcoin Cash
PR Newswire republished a fake press release which claimed that the Kroger supermarket chain would begin accepting "Bitcoin Cash" (not to be confused with Bitcoin) at its outlets. …
2021-11-03
[vendor] Blockchain Global enters liquidation
[loss] $50M
Vector: Protocol collapse / insolvency
Blockchain Global, the parent company of a cryptocurrency exchange called ACX.io, entered voluntary administration after its protracted collapse. Customers had been unable to …
2021-11-01
Creators of a Squid Game-themed token (not affiliated with, or authorized by, those behind the Netflix series) created a token which quickly skyrocketed in value and earned news …
2021-11-01
[vendor] Squid Game
[loss] $3M
Vector: Exit scam / rug pull
Creators of a Squid Game-themed token (not affiliated with, or authorized by, those behind the Netflix series) created a token which quickly skyrocketed in value and earned news …
2021-10-31
[vendor] Monkey Jizz
[loss] $270,000
In a twist absolutely no one could have predicted, the developer of a coin called "Monkey Jizz" ran off with around $270,000. The project promised to share a portion of …
2021-10-29
[vendor] AnubisDAO
[loss] $60M
Vector: Phishing attack
A project called AnubisDAO launched a coin called ANKH, and were quickly flooded with cash from investors hoping to find another dog-themed memecoin success like Dogecoin or Shiba …
2021-10-27
[vendor] Cream Finance (DeFi lending protocol, Ethereum)
Vector: Flash loan attack exploiting a price oracle manipulation vulnerability in Cream Finance's lending protocol; attackers used flash loans from multiple DeFi protocols to manipulate the price oracle for the yUSD token (a Yearn Finance vault token), inflating its reported collateral value and enabling the attacker to borrow far more than the actual collateral value across multiple transactions
On October 27, 2021, Cream Finance suffered its third exploit of the year (previous hacks in February 2021 for $37.5M and August 2021 for $18.8M). This third attack was the …
2021-09-30
[vendor] Compound Finance bug
[loss] $147M
Vector: Software bug / unintentional loss
Robert Leshner, the founder of Compound Labs, took an unusual approach when trying to recoup funds that were mistakenly distributed through a $160 million bug in the protocol. He …
2021-09-23
[vendor] German government blockchain project scrapped
Shortly before the federal election, the German government launched the app "ID Wallet". It was supposed to store driver's licenses and other identification documents, and allow …
2021-09-13
[vendor] GTV Media Group SEC settlement
Vector: Regulatory / legal action
The SEC filed charges against GTV Media Group and related entities, alleging they engaged in an unregistered ICO when they offered investors the opportunity to buy "G-Coins" (also …
2021-08-13
[vendor] Microsoft Exchange Server (on-premises)
[malware] LockFile ransomware, Babuk ransomware, web shells (various)
[cve] CVE-2021-34473 +2
Vector: Multiple threat actors exploited three chained vulnerabilities in Microsoft Exchange Server (ProxyShell) after their technical details were demonstrated at Black Hat and DEF CON 2021; the chain allows unauthenticated remote code execution on Exchange servers by combining server-side request forgery, privilege escalation, and arbitrary file write
ProxyShell is a chain of three Microsoft Exchange Server vulnerabilities — CVE-2021-34473 (SSRF/ACL bypass), CVE-2021-34523 (privilege escalation), and CVE-2021-31207 (arbitrary …
2021-08-10
[vendor] Poly Network (cross-chain DeFi bridge)
Vector: Cryptographic vulnerability in Poly Network's cross-chain smart contract: attacker exploited the _executeCrossChainTx function's keeper role privilege escalation across Ethereum, Binance Smart Chain, and Polygon to override ownership of the protocol's fund management contract
On August 10, 2021, an attacker exploited a critical vulnerability in Poly Network's cross-chain interoperability protocol to steal approximately $611 million across three …
2021-08-09
[vendor] Poloniex SEC settlement
Vector: Regulatory / legal action
Poloniex, a cryptocurrency exchange, agreed to pay more than $10.3 million in a settlement with the SEC. The SEC had alleged that Poloniex had flouted securities laws from 2017 …
2021-08-06
[vendor] Blockchain Credit Partners SEC settlement
Vector: Regulatory / legal action
The SEC charged two individuals with selling more than $30 million in unregistered securities in what they described as a defi project that bought "real world" assets like car …
2021-08-04
[vendor] Uulala SEC settlement
Vector: Regulatory / legal action
The company Uulala, which aimed to provide underbanked individuals with opportunities to build credit, settled with the SEC over charges that they ran an unregistered ICO that …
2021-07-23
[vendor] RUNE thefts
[loss] $76,000
Vector: Malicious code injection / supply chain
An attacker giving out free UniH tokens was able to exploit a bug in a non-standard token contract and steal RUNE tokens from unsuspecting victims. By baiting people into selling …
2021-07-20
[vendor] Norton Antivirus mines crypto
Norton, the makers of the popular Norton Antivirus software, started installing "Norton Crypto" on customers' machines when they install the popular Norton 360 antivirus and …
2021-07-16
[vendor] Circle isn't backed as they claim
Coinbase's USD Coin claimed that there was $1 "in a bank account" to back it, meaning that if everyone hypothetically tried to redeem their USDC at once at any given time, it would …
2021-06-16
[vendor] Titan stablecoin
Vector: Smart contract vulnerability exploit
The cryptocurrency "titan" dropped from $65 to $0.000000024 within a few hours, despite being a stablecoin that is supposed to be much less volatile than most cryptocurrencies. As …
2021-06-01
[vendor] Cisco routers / Fortinet VPN / various SOHO network devices
[cve] CVE-2021-40539 +1
Vector: CWE-77: Command Injection / exploitation of internet-facing SOHO routers and VPN devices to establish footholds
Chinese state-sponsored group Volt Typhoon (Bronze Silhouette) active since mid-2021, targeting US critical infrastructure sectors: communications, energy, transportation, …
2021-04-28
[vendor] Uranium Finance (Binance Smart Chain DeFi protocol) v2 liquidity migration contracts
Vector: Uranium Finance's v2 smart contracts contained a critical arithmetic error in the liquidity migration function; the attacker exploited the bug during the protocol's migration from v1 to v2, using flash loans to manipulate reserve balances and drain funds from liquidity pools; the exploit required only a small initial capital to trigger and was executed in a single transaction
On 28 April 2021, an attacker exploited a critical vulnerability in Uranium Finance — a decentralised exchange (DEX) and automated market maker (AMM) protocol built on Binance …
2021-02-05
[vendor] TeamViewer remote access software; water treatment SCADA/HMI
Vector: TeamViewer remote desktop software left installed and accessible on a water treatment plant HMI (Human Machine Interface) workstation; shared/weak credentials with no multi-factor authentication; attacker gained remote control of the operator's screen and mouse while the operator watched
On February 5, 2021, an unknown attacker gained remote access via TeamViewer to the HMI (Human Machine Interface) workstation of the City of Oldsmar, Florida's water treatment …
2021-02-03
[vendor] Tether pays penalty to New York
The stablecoin Tether swears up and down that it's fully backed by actual currency, but the New York Attorney General doesn't agree. Tether paid $18.5 million in penalties, was …
2021-01-03
[vendor] Microsoft Exchange Server (on-premises)
[malware] China Chopper webshell / HAFNIUM custom tooling
[cve] CVE-2021-26855 +3
Vector: CWE-918: Server-Side Request Forgery (SSRF auth bypass chained with post-auth arbitrary file write for webshell installation)
Chinese state-sponsored group HAFNIUM exploited four zero-days in on-premises Microsoft Exchange starting Jan 3 2021. CVE-2021-26855 (SSRF auth bypass) chained with CVE-2021-27065 …
2020-10-26
[vendor] Harvest Finance (DeFi yield aggregator)
Vector: Attacker used a large flash loan to manipulate the USDC/USDT price in Curve Finance's Y pool, which Harvest Finance relied on for pricing; by temporarily moving the oracle price, the attacker could deposit and withdraw stablecoins at artificially favorable exchange rates, extracting value in repeated cycles
On October 26, 2020, Harvest Finance — a DeFi yield aggregator managing over $1 billion in assets — suffered a flash loan economic attack resulting in approximately $34 million in …
2020-09-25
[vendor] KuCoin (Seychelles-based global cryptocurrency exchange)
Vector: Theft of private keys for KuCoin's hot wallets; the precise method of initial access was not disclosed, but the private keys for hot wallets holding Bitcoin, Ethereum, ERC-20 tokens, and other cryptocurrencies were compromised, enabling mass unauthorized withdrawals
On September 25, 2020, KuCoin detected large unauthorized outflows from its hot wallets across multiple blockchains including Bitcoin, Ethereum, Litecoin, XRP, Stellar, TRON, and …
2020-07-19
[vendor] GEDmatch DNA genealogy database
Vector: An attacker compromised GEDmatch's database and changed the privacy settings of all 1.45 million user profiles from 'opt-out' to 'opt-in' for law enforcement searches; separately, a distributed denial-of-service (DDoS) attack was used to distract from the breach; the full details of the intrusion vector were not disclosed
On 19-20 July 2020, GEDmatch — a popular free genealogy DNA comparison service with approximately 1.45 million registered users — suffered a cyberattack that changed the privacy …
2019-05-07
[vendor] Binance (world's largest cryptocurrency exchange by trading volume)
Vector: Coordinated attack combining phishing, viruses, and other techniques to steal API keys, two-factor authentication codes, and potentially other user information; attackers accumulated API keys and 2FA codes from a large number of Binance users over an extended period, then executed the withdrawal in a single large transaction that bypassed Binance's automated risk management systems by exploiting the user-level API permissions
On May 7, 2019, Binance CEO Changpeng Zhao (CZ) announced that hackers had stolen 7,000 BTC (worth approximately $40 million) from the exchange's hot wallet in a single large …
2018-08-11
[vendor] Bank ATM payment switch server
Vector: Attackers pre-positioned malware on Cosmos Bank's ATM payment switch infrastructure (the server that approves/declines ATM transactions); the malware created a fraudulent proxy switch that intercepted card authorization requests and returned approvals for compromised cloned cards, bypassing the legitimate Visa/RuPay networks
On August 11 and 13, 2018, Cosmos Co-operative Bank Ltd. of Pune, India — one of India's oldest cooperative banks — suffered a sophisticated two-weekend ATM cashout operation …
2018-05-24
[vendor] SWIFT financial messaging; bank endpoint workstations
[malware] KillMBR wiper (custom variant); SWIFT transaction injector
Vector: Lazarus Group-affiliated attackers gained access to Banco de Chile's internal network; deployed a custom MBR (Master Boot Record) wiping malware across ~9,000 workstations and 500 servers as a distraction; while IT teams responded to the destructive attack, attackers simultaneously submitted fraudulent SWIFT transfer instructions
On May 24, 2018, Banco de Chile — Chile's largest bank — suffered a sophisticated coordinated attack combining a destructive cyber operation with financial fraud. Attackers …
2017-12-06
[vendor] NiceHash (Slovenian cryptocurrency mining marketplace)
Vector: Social engineering of a NiceHash employee; attackers obtained the employee's credentials (likely via spearphishing), used them to access NiceHash internal systems, and ultimately gained access to the payment system's Bitcoin wallet private keys, draining the entire contents of the company's payment wallet in a single transaction
On December 6, 2017, NiceHash — a platform where users sell their computing power for cryptocurrency mining — halted operations after discovering that its internal payment system …
2017-06-01
[vendor] Schneider Electric Triconex Safety Instrumented System (SIS)
[malware] TRITON (TRISIS, HatMan)
Vector: Russian state-sponsored actors (attributed to the Central Scientific Research Institute of Chemistry and Mechanics / CNIIHM, Moscow) gained IT network access via spear-phishing, pivoted to the OT network, then developed a zero-day exploit targeting Schneider Electric Triconex Safety Instrumented System (SIS) controllers
TRITON (also known as TRISIS and HatMan) is the world's first known malware specifically designed to attack industrial Safety Instrumented Systems (SIS) — the last line of …
2017-01-01
[vendor] En Marche! presidential campaign (Emmanuel Macron, France)
Vector: APT28 (GRU / Fancy Bear) spearphishing targeting En Marche! campaign staff with credential-harvesting domains mimicking the campaign's email infrastructure; phishing domains registered beginning in March 2017
In the final hours before France's legally mandated media blackout ahead of the May 7, 2017 presidential election runoff, approximately 9GB of documents and emails allegedly stolen …
2016-12-17
[vendor] IEC 60870-5-101/104 SCADA; Siemens SIPROTEC relays (CVE-2015-5374)
[malware] Industroyer (CrashOverride); KillDisk
Vector: Sandworm (GRU Unit 74455) deployed Industroyer malware that natively spoke industrial communication protocols (IEC 60870-5-101/104, IEC 61850, OPC DA) to directly communicate with and manipulate power grid SCADA/ICS equipment without requiring attackers to understand specific OT configurations
On December 17, 2016, exactly one year after the first Ukraine power grid attack (BlackEnergy 2015), Russian military intelligence (GRU Sandworm team) deployed Industroyer against …
2016-08-13
[vendor] NSA Tailored Access Operations (TAO) toolset
[malware] EternalBlue; EternalRomance; FUZZBUNCH; DoublePulsar; DanderSpritz
[cve] CVE-2017-0144 +1
Vector: A group calling themselves 'The Shadow Brokers' claimed to have stolen cyberweapons from the NSA's Tailored Access Operations (TAO) unit; released NSA exploit tools in staged leaks from August 2016 through April 2017; method of original exfiltration from NSA never officially confirmed
Between August 2016 and April 2017, a group known as 'The Shadow Brokers' released staged leaks of what they claimed were NSA cyberweapon repositories stolen from the NSA's elite …
2016-08-02
[vendor] Bitfinex (Hong Kong-based cryptocurrency exchange, iFinex Inc.); BitGo (multi-signature wallet co-signer)
Vector: Attackers compromised BitGo's multi-signature co-signing service integrated with Bitfinex's wallet infrastructure; the exact initial access vector was never fully disclosed, but the attack involved manipulating Bitfinex's API to authorize fraudulent withdrawal transactions that BitGo's servers co-signed without detecting the anomaly
On August 2, 2016, Bitfinex — at the time the world's largest USD-denominated Bitcoin exchange — announced that 119,756 BTC had been stolen from customer accounts, worth …
2016-03-19
[vendor] Democratic National Committee (DNC) IT infrastructure; Hillary Clinton Campaign Chair John Podesta's Gmail
[malware] X-Agent (Sofacy) keylogger/credential harvester; X-Tunnel network tunneling tool; Mimikatz credential dumper
Vector: APT28 (GRU Unit 26165 / Fancy Bear) spearphishing via Google OAuth credential-harvesting pages; John Podesta clicked a link in a fake Google security alert email on March 19, 2016; DNC compromise involved separate APT28 intrusion beginning in approximately March 2016 alongside APT29 (Cozy Bear) intrusion from mid-2015
In 2016, two separate Russian GRU units conducted coordinated cyber intrusions against the Democratic Party and Clinton presidential campaign. APT29 (GRU Unit 29155 / Cozy Bear) …
2016-02-04
[vendor] SWIFT Alliance Access messaging software
[malware] EVTDIAG; MSOUTC; MSOUTC (SWIFT-specific malware suite)
Vector: Lazarus Group (DPRK) spearphishing targeted Bangladesh Bank employees; malware installed on bank's internal network gained access to the SWIFT Alliance Access software and credentials; attackers monitored bank operations for months before submitting fraudulent SWIFT transfer instructions
On the night of February 4–5, 2016, Lazarus Group (North Korean state-sponsored hackers) submitted 35 fraudulent SWIFT transfer instructions from Bangladesh Bank's account at the …
2016-02-04
[vendor] Bangladesh Bank SWIFT terminal / SWIFT Alliance Access software
[malware] EVTDIAG, MSOUTC, MSOUTC (Lazarus custom malware)
Vector: North Korean Lazarus Group gained access to Bangladesh Bank's SWIFT messaging terminals by compromising workstations at the bank using malware introduced via a malicious PDF; the attackers installed malware that modified SWIFT software to forge outgoing payment messages and delete evidence of the fraudulent transfers
In February 2016, North Korea's Lazarus Group executed the most audacious central bank heist in history by compromising Bangladesh Bank's SWIFT messaging system and fraudulently …
2016-01-01
[vendor] IBM AIX payment switch servers; bank ATM networks
[malware] FASTCash implant (AIX trojan)
Vector: Spearphishing targeting bank employees for initial access; lateral movement to payment switch application servers running IBM AIX; deployment of custom AIX malware that intercepted ATM transaction approval requests and returned fraudulent approvals for compromised cards even with zero balances; pre-positioned mule networks executed simultaneous global ATM withdrawals
FASTCash was a multi-year North Korean state-sponsored campaign (2016–ongoing) targeting bank payment switch servers — the AIX-based systems that approve or decline ATM …
2015-12-23
[vendor] Microsoft Office (macro); ICS SCADA systems
[malware] BlackEnergy3; KillDisk
Vector: Sandworm (GRU) sent spear-phishing emails with malicious Microsoft Word documents containing BlackEnergy3 macros to Ukrainian energy company employees; gaining access to IT networks before pivoting to SCADA systems; operators were locked out via KillDisk wiping workstations while attackers opened breakers via VPN
On December 23, 2015, coordinated cyberattacks against three Ukrainian electricity distribution companies — Prykarpattyaoblenergo, Chernivtsioblenergo, and Kyivoblenergo — caused …
2015-04-01
Vector: APT28 (Fancy Bear / GRU Unit 26165) spearphishing emails delivering trojanized links to Bundestag employees; malware installation enabled keylogging and credential harvesting; attackers then moved laterally across the 20,000-node parliamentary IT network for several weeks
Between approximately April and May 2015, Russian military intelligence (GRU) APT28 (Fancy Bear) conducted a sophisticated intrusion into the German Federal Parliament (Bundestag) …
2015-01-12
[vendor] Twitter, YouTube (Google)
Vector: Social media account compromise — attackers claiming affiliation with ISIS obtained credentials for the official U.S. Central Command (CENTCOM) Twitter and YouTube accounts, likely via phishing or credential reuse, and posted propaganda
On January 12, 2015, individuals calling themselves 'CyberCaliphate' and claiming affiliation with the Islamic State (ISIS) hijacked the official Twitter and YouTube accounts of …
2015-01-01
[vendor] TV broadcast encoding hardware; social media accounts
Vector: APT28 (Sandworm / GRU) spearphishing targeting TV5Monde employees beginning approximately January 2015; credential theft and lateral movement over approximately 3 months; pre-positioned access to broadcast encoding infrastructure; coordinated simultaneous attack on broadcast systems and social media accounts
On April 9, 2015, TV5Monde — France's international television network broadcasting to 200 million people in 160 countries — had all 11 of its TV channels knocked off the air …
2014-11-24
[malware] Destover (wiper/backdoor)
Vector: North Korea's Lazarus Group (Bureau 121) used spear-phishing to gain initial access to Sony Pictures' network, conducted months of reconnaissance, then deployed 'Destover' destructive malware (wiper) while simultaneously exfiltrating terabytes of data
On November 24, 2014, attackers identifying themselves as 'Guardians of Peace' (GOP) deployed the Destover destructive wiper malware across Sony Pictures' corporate network, wiping …
2014-04-07
[vendor] OpenSSL 1.0.1 through 1.0.1f (used by approximately 17% of all HTTPS web servers)
[cve] CVE-2014-0160
Vector: Critical buffer over-read vulnerability in OpenSSL's TLS heartbeat extension (RFC 6520) allowed remote unauthenticated attackers to read up to 64KB of memory per request from vulnerable servers, potentially exposing private keys, session tokens, and plaintext credentials
CVE-2014-0160 (Heartbleed) was a critical vulnerability in OpenSSL's TLS/DTLS heartbeat extension, introduced in OpenSSL 1.0.1 (released March 2012) and present in all versions …
2013-11-15
[vendor] Target Corporation POS systems
[malware] BlackPOS / Kaptoxa
Vector: CWE-1104: Use of Unmaintained Third-Party Components (phishing of HVAC vendor Fazio Mechanical for network credentials, then lateral movement to POS environment)
Attackers phished Fazio Mechanical (HVAC vendor) to steal Target network credentials in Nov 2013. Moved laterally from vendor-accessible HVAC network segment to POS environment due …
2011-09-01
[vendor] Mt. Gox (bitcoin exchange, Tokyo, operated by Tibanne Ltd., CEO Mark Karpelès)
Vector: Multiple attack vectors over multiple years: (1) 2011 auditor laptop compromise allowed private key theft and price manipulation; (2) ongoing transaction malleability exploitation allowed attackers to claim non-received Bitcoin withdrawals were unprocessed and have them re-sent; (3) internal control failures and alleged insider theft; Mt. Gox repeatedly processed duplicate withdrawal requests due to mishandling of Bitcoin transaction IDs
Mt. Gox was once the world's largest Bitcoin exchange, handling over 70% of global BTC transactions at its peak. On February 7, 2014, Mt. Gox suspended all Bitcoin withdrawals …
2011-03-01
[vendor] RSA SecurID (two-factor authentication tokens); Adobe Flash
[cve] CVE-2011-0609
Vector: Spear-phishing email with an Excel spreadsheet exploiting an Adobe Flash zero-day (CVE-2011-0609) was opened by an RSA employee; the embedded malware installed a backdoor enabling attackers to extract the SecurID token seed database
In March 2011, RSA Security (division of EMC) suffered a breach when a spear-phishing email titled '2011 Recruitment Plan' was opened by an employee. The Excel attachment exploited …
2009-06-01
[vendor] Microsoft Internet Explorer 6/7/8
[malware] Hydraq (Aurora backdoor)
[cve] CVE-2010-0249
Vector: Spear-phishing emails delivering a zero-day exploit for Internet Explorer (CVE-2010-0249, a use-after-free vulnerability in IE 6/7/8); watering hole attacks; lateral movement and data exfiltration once initial foothold established
Operation Aurora was a sophisticated, coordinated nation-state cyber espionage campaign originating in China and targeting at least 30 major corporations, with Google being the …
2009-06-01
[vendor] Siemens Step7 SCADA; Siemens S7-300/S7-400 PLCs; Microsoft Windows
[malware] Stuxnet
[cve] CVE-2010-2568 +2
Vector: USB drive air-gap bypass for initial delivery into the isolated Natanz network; exploited four Windows zero-day vulnerabilities (CVE-2010-2568, CVE-2010-2772, CVE-2010-2729, CVE-2010-2568 LNK file); targeted Siemens Step7 SCADA software and Siemens S7-315/S7-417 PLCs; manipulated centrifuge rotor speeds while forging normal readings to SCADA operators
Stuxnet is the first publicly known cyberweapon designed to cause physical destruction of industrial equipment. Jointly developed by the United States (NSA, CIA — under 'Operation …
2005-10-04
[vendor] MySpace social network
[malware] Samy worm (JavaScript XSS worm)
Vector: Reflected/stored cross-site scripting (XSS) vulnerability in MySpace user profiles exploited by a self-replicating JavaScript payload; the worm ran in any visitor's browser when they viewed an infected profile, automatically added the author as a friend, replicated itself to the visitor's own profile, and spread exponentially
On October 4, 2005, security researcher Samy Kamkar launched the Samy worm — the first self-replicating cross-site scripting (XSS) worm in history. The worm exploited an XSS …
2005-10-04
[vendor] MySpace social network
[malware] Samy worm (JS/Samy)
Vector: Stored cross-site scripting (XSS) — the worm exploited a flaw in MySpace's profile page rendering that allowed JavaScript injection despite MySpace's attempted input sanitization; the author used CSS style attributes to smuggle JavaScript that MySpace's filters failed to strip
On October 4, 2005, Samy Kamkar released a self-propagating JavaScript worm on MySpace, the then-dominant social network. The worm exploited a stored XSS vulnerability in MySpace …
2005-08-13
[vendor] Microsoft Windows 2000 Plug and Play service
[malware] Zotob (IRCBot variant)
[cve] CVE-2005-1983
Vector: Exploitation of MS05-039 (CVE-2005-1983), a critical buffer overflow vulnerability in the Windows Plug and Play service affecting Windows 2000 systems; the worm propagated automatically via TCP port 445 without requiring user interaction, exploiting unpatched systems within 4 days of the security patch release
The Zotob worm emerged on August 13, 2005 — just four days after Microsoft released the MS05-039 security patch for a critical Plug and Play buffer overflow vulnerability in …
2005-08-13
[vendor] Microsoft Windows 2000
[malware] Zotob (W32/Zotob, also Tpbot, Esbot, Rbot variants)
[cve] CVE-2005-1983
Vector: Remote code execution exploit (MS05-039) against the Windows Plug and Play service on unpatched Windows 2000 systems; the worm appeared within days of Microsoft's August 9, 2005 Patch Tuesday release, exploiting the vulnerability before most organizations could patch
The Zotob worm emerged on August 13, 2005 — just four days after Microsoft released the MS05-039 patch for a critical Plug and Play buffer overflow vulnerability in Windows 2000. …
2004-01-26
[vendor] Microsoft Windows
[malware] MyDoom (W32/Mydoom, Novarg, Mimail.R)
Vector: Email attachment with social engineering lures (fake mail delivery failure notices, rejected email messages); also spread via Kazaa P2P shared folders; installed a backdoor on TCP port 3127 for spam relay and DDoS
MyDoom, discovered on January 26, 2004, remains the fastest-spreading email worm in recorded history — a record unbroken as of 2026. Within the first 36 hours, MyDoom was …
2003-01-25
[vendor] Microsoft SQL Server 2000; Microsoft MSDE 2000
[malware] SQL Slammer (W32/SQLSlam, Sapphire)
[cve] CVE-2002-0649
Vector: Single-packet UDP buffer overflow (376 bytes total) against Microsoft SQL Server 2000 and MSDE 2000 (MS02-039); patch available 6 months prior; worm fit entirely in one UDP packet and required no TCP handshake, enabling maximum propagation speed
SQL Slammer, also known as Sapphire, is the fastest-spreading computer worm in recorded history. Launched at 05:30 UTC on January 25, 2003, the 376-byte worm doubled the number of …
2001-09-18
[vendor] Microsoft IIS; Microsoft Outlook; Microsoft Internet Explorer
[malware] Nimda (W32/Nimda, 'admin' reversed)
[cve] CVE-2001-0333 +1
Vector: Five simultaneous propagation vectors: (1) email attachment exploit; (2) infected IIS web servers serving malicious JavaScript to visitors; (3) open network shares; (4) IIS 4.0/5.0 directory traversal (Unicode/double decode vulnerabilities); (5) backdoors installed by Code Red II
Nimda (released exactly one week after the September 11 attacks) became the most widespread internet virus in history within 22 minutes of release, surpassing Code Red. Its five …
2001-07-13
[vendor] Microsoft IIS (Internet Information Services)
[malware] Code Red (W32/CodeRed)
[cve] CVE-2001-0500
Vector: Buffer overflow vulnerability in Microsoft IIS 4.0/5.0 Index Server (MS01-033 / CVE-2001-0500); patch available one month prior; worm propagated by scanning random IP addresses and exploiting unpatched IIS servers with no user interaction
Code Red exploited a buffer overflow in the IDQ.DLL component of Microsoft IIS web server software (documented in MS01-033). The worm required no user interaction — it scanned …
2000-05-04
[vendor] Microsoft Windows Script Host; Microsoft Outlook
[malware] ILOVEYOU (VBS/LoveLetter)
Vector: Email with subject 'ILOVEYOU' and attachment 'LOVE-LETTER-FOR-YOU.TXT.vbs'; VBScript executed automatically via Windows Script Host, overwrote files, propagated via Outlook to entire address book, and downloaded a password-stealing Trojan
On May 4-5, 2000, the ILOVEYOU worm began spreading from the Philippines, where computer science student Onel de Guzman had released it via a stolen internet access account. The …
1999-03-26
[vendor] Microsoft Word (macro); Microsoft Outlook
[malware] Melissa (W97M/Melissa)
Vector: Word document macro virus emailed as attachment with 'Important Message From [sender]' subject; the VBA macro auto-forwarded itself to the first 50 addresses in the victim's Outlook address book and defaced documents with Simpsons references
On March 26, 1999, David Lee Smith of Aberdeen, New Jersey posted the Melissa macro virus to the alt.sex Usenet newsgroup using a stolen AOL account. The virus was embedded in a …
