#crypto-security — Public Fediverse posts

LLMs won't break symmetric crypto

https://www.bfswa.blog/p/llms-wont-break-symmetric-crypto

Comments: https://news.ycombinator.com/item?id=49191365

#HackerNews #LLMs #SymmetricCrypto #CryptoSecurity #MachineLearning #CyberSecurity

A 2021 COLDCARD build error shrank seed entropy from 128 bits to 40, letting attackers drain 594 BTC from 500 wallets in just 15 minutes.

#COLDCARD #Bitcoin #HardwareWallet #CryptoSecurity #SeedPhrase

https://securityonline.info/coldcard-seed-flaw-594-btc-theft/?utm_source=mastodon&utm_medium=jetpack_social

And the Crypto Hacks keep on keeping on!

Crypto exchange AFX Trade that settles in dollar-pegged stablecoin USDC was robbed of ~ $24.15M on Wed >> essentially the bandit got away with
total value locked in the protocol!

The attackers were able to compromise the private signing keys (hot keys) held offchain by the bridge operators or validators. The hacked keys were then used to validate signatures authorizing (fooling) the SmartContract to execute the USDC withdrawal, and the contract executed the trade. https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised #Crypto #CryptoCurrencies #USDC #Arbitrum #AFXTrade #Hack #PrivateKeys #BlockChain #Layer-2-Network #Security #CryptoSecurity #SmartContract #Validators #StableCoin #Cryptography

CertiK becomes a validator on XDC Network, signaling a shift from passive auditing to active infrastructure roles in institutional crypto. https://hackernoon.com/auditors-becoming-validators-here-is-what-is-happening-in-institutional-crypto #cryptosecurity

Web-based cryptography is always snake oil

https://www.devever.net/~hl/webcrypto

#HackerNews #webcryptography #snakeoil #cybersecurity #techdebate #cryptosecurity

AI-powered phishing is now a financial threat surface. Google says Outsider Enterprise used Gemini-assisted workflows to scale fake sites, scam texts, and credential theft targeting financial accounts, including crypto users. The defender move is simple: verify links, harden MFA, monitor SMS abuse, and train against urgency traps.

Source: https://decrypt.co/371014/google-sues-chinese-crime-group-gemini-ai-phishing-scams #CyberSecurity #AI #CryptoSecurity #ZeroTrust

Buterin (Ethereum Founder) suggests that AI-assisted “formal verification” could help secure crypto networks, smart contracts, and cryptographic systems against software flaws.

“If you formally verify end-to-end, then you are proving not just that some description of the protocol is secure in theory, but that the specific piece of code that the user runs is secure in practice." https://decrypt.co/368226/ethereum-founder-vitalik-buterin-ai-verification-secure-crypto-networks #Crypto #CryptoSecurity #Ethereum #BlockChain #Buterin #AI #Verify #SmartContracts #Cryptography #Software #Security #SoftwareBugs

IRS Criminal Investigation warns AI is making crypto fraud more dangerous and effective. Criminals use advanced tools to create convincing, hard-to-detect scams. Stay vigilant. #CryptoSecurity #AI

🚨 BREAKING NEWS: Techies discover that using Obsidian plugins for social engineering is a bad idea! Who knew? 😂 Meanwhile, finance and crypto pros are accidentally downloading "PHANTOMPULSE" RAT, proving once again that clicking random links is a brilliant security strategy. 👏🔒
https://cyber.netsecops.io/articles/obsidian-plugin-abused-in-campaign-to-deploy-phantom-pulse-rat/ #ObsidianPlugins #SocialEngineering #CyberSecurity #TechFails #CryptoSecurity #HackerNews #ngated

AI is making crypto attacks faster and smarter. Learn the real security risks and practical steps to protect your wallet.

4. TL;DR

Crypto security risks have https://hackernoon.com/why-your-crypto-security-setup-is-already-outdated #cryptosecurity

🚨BREAKING: Web3 geniuses outsmarted by their own code! 🧠 Who could have guessed that combining fake tokens with naive governance could cost $285M? Oh right, everyone except them. 🙃 #CryptoSecurityFail
https://anonhaven.com/en/news/drift-protocol-hack-285-million-solana/ #Web3Fail #CryptoSecurity #GovernanceIssues #TokenScam #$285MLoss #HackerNews #ngated

Well, it’s good that someone is drawing a line in the Crypto sand.

Google accelerates its readiness timeline to prepare for “Q-day” with post-quantum cryptography (PQC) migration to 2029. Reminder: Q-day = the date when quantum computing becomes operational and is powerful enough to break the digital signatures that secure the Internet, crypto (blockchain + Ethereum), and just about every other Information system in use today.

The Bitcoin crypto network relies on ECDSA elliptic curve signatures. https://techaptitude.substack.com/p/ecdsa-cryptographys-role-in-securing With an exposed crypto signature public key, a quantum computer could derive the private key. And then, the crypto assets would be freely available to a hacker.

Android 17 will integrate ML-DSA, an algorithm standardized by the NIST to secure digital signatures. https://security.googleblog.com/2026/03/post-quantum-cryptography-in-android.html

https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/ #Crypto #PQC #PostQuantumCryptography #Cryptography #Google #Quantum #QuantumComputing #Q-Day #BlockChain #ECDSA #NIST #ML-DSA #Security #CryptoSecurity #Internet #TechAptitude

https://winbuzzer.com/2025/12/02/blockchain-ai-agents-now-exploit-zero-day-smart-contract-flaws-xcxwbn/

Blockchain: AI Agents Now Exploit Zero-Day Smart Contract Flaws

#DeFi #AI #Cybersecurity #Blockchain #SmartContracts #Anthropic #ZeroDay #CryptoSecurity #ClaudeOpus #GPT5 #Hacking #DeFi #AISafety #Cybercrime

Is the old crypto mantra of "Not my keys, not my crypto" actually still relevant? https://hackernoon.com/not-my-keys-not-my-crypto-maybe-its-time-for-an-upgrade #cryptosecurity

Shuffle Confirms CRM Breach Affecting Thousands of Crypto Accounts - TLDR:

Shuffle Crypto notifies users after Fast Track CRM breach exposes majority of user... - https://blockonomi.com/shuffle-confirms-crm-breach-affecting-thousands-of-crypto-accounts/ #third-partyrisk #userdataexposed #cryptosecurity #cryptobetting #phishingalert #shufflecrypto #noahdummett #databreach #fasttrack #security #defi

BNB Chain’s X Account Hacked as Inferno Drainer Pushes Phishing Links - TLDR:

BNB Chain’s official X account was hacked by Inferno Drainer, spreading phi... - https://blockonomi.com/bnb-chains-x-account-hacked-as-inferno-drainer-pushes-phishing-links/ #cryptosecurity #infernodrainer #fakeairdrops #twitterhack #cryptohack #security #bnbchain #bnbprice #phishing #binance #cz

Tether Pushes DeFi Frontline With New WDK Template Wallet Demo - TLDR:

Tether’s WDK wallet demo showed reusable UI components, non-custodial desig... - https://blockonomi.com/tether-pushes-defi-frontline-with-new-wdk-template-wallet-demo/ #non-custodialwallet #blockchaintools #cryptosecurity #cryptowallets #paoloardoino #stablecoins #wdkwallet #wallets #tether #defi #usdt

NGP Protocol Exploit on BNB Chain Drains $2M, Price Collapses as Funds Move Through Tornado Cash - TLDR:

NGP protocol exploited on BNB Chain, $2M drained via price oracle manipulat... - https://blockonomi.com/ngp-protocol-exploit-on-bnb-chain-drains-2m-price-collapses-as-funds-move-through-tornado-cash/ #priceoracleattack #flashloanattack #cryptosecurity #defiexploit #tornadocash #security #bnbchain #crime #ngp

Ledger Says Tangem Cards Can Be Brute-Forced Faster, Wallet Maker Disagrees - TLDR:

Ledger Donjon researchers revealed Tangem cards allow unlimited PIN guesses... - https://blockonomi.com/ledger-says-tangem-cards-can-be-brute-forced-faster-wallet-maker-disagrees/ #brute-forceattack #passwordsecurity #hardwarewallets #cryptosecurity #cryptowallet #security #ledger #tangem

Binance’s CZ Warns Crypto Firms About North Korean Hacker Tactics - TLDR:

Binance’s CZ warned that North Korean hackers pose as job candidates and re... - https://blockonomi.com/binances-cz-warns-crypto-firms-about-north-korean-hacker-tactics/ #northkoreanhackers #cryptosecurity #cryptohacks #security #binance #cz

Hackers Use Microsoft Teams to Hijack Crypto Wallets: What To Know - TLDR:

Hackers trick users with fake podcast invites before requesting screen cont... - https://blockonomi.com/hackers-use-microsoft-teams-to-hijack-crypto-wallets-what-to-know/ #remotecontrolattack #socialengineering #cryptosecurity #microsoftteams #walletdraining #cryptoscam #security #crime

Ethereum Co-Founder Vitalik Warns of AI Governance Risks as ChatGPT Security Flaw Surfaces - TLDR:

Vitalik warns AI governance models can be exploited with jailbreak prompts and mal... - https://blockonomi.com/ethereum-co-founder-vitalik-warns-of-ai-governance-risks-as-chatgpt-security-flaw-surfaces/ #cryptosecurity #vitalikbuterin #aigovernance #cryptorisks #technology #emailhack #security #ethereum #mcptools #chatgpt

🔎 Trust isn’t optional — In digital payments, trust is the real currency.

🔐 With Resonance, decentralized payments become clear, secure, and transparent — turning doubt into confidence and risk into opportunity.

👉Ready to experience payments without fear? Step into the future with Resonance — explore our latest blog to learn how.

https://neuronus.net/en/blog/the-smart-way-to-trust-online-payments-in-a-decentralized-world

#DecentralizedPayments #CryptoSecurity #DigitalTransactions #Web3Finance #Resonance #Neuronus #FutureOfPayments

Apple Enhances Crypto Wallet Safety on iPhone 17 with Memory Integrity Enforcement - TLDR:

Apple’s iPhone 17 debuts Memory Integrity Enforcement, boosting wallet signing saf... - https://blockonomi.com/apple-enhances-crypto-wallet-safety-on-iphone-17-with-memory-integrity-enforcement/ #memoryintegrityenforcement #spywareprotection #cryptosecurity #applesecurity #cryptowallets #walletsigning #technology #security #iphone17 #a19chip #apple