#cryptosecurity — Public Fediverse posts

LLMs won't break symmetric crypto

https://www.bfswa.blog/p/llms-wont-break-symmetric-crypto

Comments: https://news.ycombinator.com/item?id=49191365

#HackerNews #LLMs #SymmetricCrypto #CryptoSecurity #MachineLearning #CyberSecurity

LLMs won't break symmetric crypto

https://www.bfswa.blog/p/llms-wont-break-symmetric-crypto

Comments: https://news.ycombinator.com/item?id=49191365

#HackerNews #LLMs #SymmetricCrypto #CryptoSecurity #MachineLearning #CyberSecurity

A 2021 COLDCARD build error shrank seed entropy from 128 bits to 40, letting attackers drain 594 BTC from 500 wallets in just 15 minutes.

#COLDCARD #Bitcoin #HardwareWallet #CryptoSecurity #SeedPhrase

https://securityonline.info/coldcard-seed-flaw-594-btc-theft/?utm_source=mastodon&utm_medium=jetpack_social

And the Crypto Hacks keep on keeping on!

Crypto exchange AFX Trade that settles in dollar-pegged stablecoin USDC was robbed of ~ $24.15M on Wed >> essentially the bandit got away with
total value locked in the protocol!

The attackers were able to compromise the private signing keys (hot keys) held offchain by the bridge operators or validators. The hacked keys were then used to validate signatures authorizing (fooling) the SmartContract to execute the USDC withdrawal, and the contract executed the trade. https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised #Crypto #CryptoCurrencies #USDC #Arbitrum #AFXTrade #Hack #PrivateKeys #BlockChain #Layer-2-Network #Security #CryptoSecurity #SmartContract #Validators #StableCoin #Cryptography

And the Crypto Hacks keep on keeping on!

Crypto exchange AFX Trade that settles in dollar-pegged stablecoin USDC was robbed of ~ $24.15M on Wed >> essentially the bandit got away with
total value locked in the protocol!

The attackers were able to compromise the private signing keys (hot keys) held offchain by the bridge operators or validators. The hacked keys were then used to validate signatures authorizing (fooling) the SmartContract to execute the USDC withdrawal, and the contract executed the trade. https://www.coindesk.com/tech/2026/07/23/arbitrum-based-afx-trade-drained-of-usd24-million-after-bridge-keys-compromised #Crypto #CryptoCurrencies #USDC #Arbitrum #AFXTrade #Hack #PrivateKeys #BlockChain #Layer-2-Network #Security #CryptoSecurity #SmartContract #Validators #StableCoin #Cryptography

купила ledger вже після FTX, до того все на біржах тримала. zero-day вразливості - це коли твій баланс може зникнути за секунду, навіть якщо біржа здається надійною. тому тепер 70% на cold wallet, 30% на Binance для P2P і швидких угод. ризик завжди є, але треба контролювати хоча б те, що можеш

#zeroday #cryptosecurity

черговий злив даних на біржі - читала список, знайомі ніки попались. у мене принцип: більше 20% портфеля не лежить ніде, крім холодного гаманця. навіть Binance для мене це транзит, хоча P2P там зручний. по факту, якщо ти трейдиш активно - ти в зоні ризику завжди. я краще втрачу спред на виведенні, ніж прокинусь з нулем через злам

#databreach #cryptosecurity #kyc

CertiK becomes a validator on XDC Network, signaling a shift from passive auditing to active infrastructure roles in institutional crypto. https://hackernoon.com/auditors-becoming-validators-here-is-what-is-happening-in-institutional-crypto #cryptosecurity

CertiK becomes a validator on XDC Network, signaling a shift from passive auditing to active infrastructure roles in institutional crypto. https://hackernoon.com/auditors-becoming-validators-here-is-what-is-happening-in-institutional-crypto #cryptosecurity

Web-based cryptography is always snake oil

https://www.devever.net/~hl/webcrypto

#HackerNews #webcryptography #snakeoil #cybersecurity #techdebate #cryptosecurity

Web-based cryptography is always snake oil

https://www.devever.net/~hl/webcrypto

#HackerNews #webcryptography #snakeoil #cybersecurity #techdebate #cryptosecurity

AI-powered phishing is now a financial threat surface. Google says Outsider Enterprise used Gemini-assisted workflows to scale fake sites, scam texts, and credential theft targeting financial accounts, including crypto users. The defender move is simple: verify links, harden MFA, monitor SMS abuse, and train against urgency traps.

Source: https://decrypt.co/371014/google-sues-chinese-crime-group-gemini-ai-phishing-scams #CyberSecurity #AI #CryptoSecurity #ZeroTrust

AI-powered phishing is now a financial threat surface. Google says Outsider Enterprise used Gemini-assisted workflows to scale fake sites, scam texts, and credential theft targeting financial accounts, including crypto users. The defender move is simple: verify links, harden MFA, monitor SMS abuse, and train against urgency traps.

Source: https://decrypt.co/371014/google-sues-chinese-crime-group-gemini-ai-phishing-scams #CyberSecurity #AI #CryptoSecurity #ZeroTrust

🚀 CertiK, das Web3‑Security‑Startup, plant einen Börsengang – Ziel: ca. 2 Mrd USD Bewertung.
🔑 *Key Insight*: Durch den IPO will das Unternehmen öffentliches Kapital erschließen, um seine Forschung & globale Expansion zu pushen – ein Schritt, der die Dezentralisierung stärkt, aber den Markt gleichzeitig zentralisiert.
#Web3 #Dezentralisierung #CryptoSecurity #Börse #Privatsphäre

🔗 https://news.google.com/rss/articles/CBMingFBVV95cUxQUHRBUnd6Y3Y2bHY3aGllcHI0RkdKb3ZVaTNGb1JaRE1sSEdUaHoxMWNmdHVqQjNPRHlyaTdzcVFXdGNlM1lkLXJSTmpCTUtKSmczbjNFVl9qZzBLRGZHUmlnbERZeFJ2bU9wemZXRzA0cDg2N1Vfd3ZESjJuZ3hCSlp5R01IcG9xX05OUzc4bVBuc3pyNWJRVFZqSnZ6Zw?oc=5

Crypto market updates are not just about price.
Coinbase freezing $3M tied to Southeast Asia scam networks shows enforcement is moving on-chain. Spot $BTC ETF outflows show institutional liquidity can reverse fast. Spacecoin's Vietnam deal points to DePIN infrastructure demand.
The real lens: Custody, Compliance, Liquidity, and Security!
Source: https://www.coinbase.com/blog/fighting-scams-at-the-source⁠�
#BTC #CryptoSecurity #DePIN #Risk

تُظهر آخر أخبار DeFi أنه ليس كل الجسور آمنة بعد.

- استغلال Kelp على DAO Bridge تسبب في انخفاض Aave في جلسة متقلبة
- أثر التداول غير المصرح به على الثقة ومعدل العرض/الطلب
- الذراع الواسعة للغموض التقني يبرز أهمية بروتوكولات الأمان

المستثمرون يجب أن يبقوا على علم بالثغرات وأن يعتنقوا تدابير الحماية الموزعة.

#DeFi #DAO #Aave #DecentralizedFinance #CryptoSecurity 🎯

🔗 https://news.google.com/rss/articles/CBMiowFBVV95cUxOWTFldTJhYnIzWVNablV3cUdBY0FjbkMybFk0aGd1ZmVGNUJUSk9ja1QydUFkNzdqMTJ2RlhvQ2lZdWp4d3Z6MjJJd1o4M0pMNS0tTm0ybVAxRnNybW9LaUZwRzE1Qy1UdW1iYkVlUEtXVHFjRzBLdGxIaFdxcTlsVzJva1R6RjIxQzBOX01TSnpNanR0Q0dVeUE4Ni13dm1INUFn?oc=5

Check out today's BlockMap blog article " Avoiding Scams and Staying Safe in the Crypto Space":

https://blockmap.one/blog/avoiding-scams-and-staying-safe-in-the-crypto-space/

#Cryptocurrency #CryptoSecurity #CryptoScams #DeFi #Wallets

🚨 اختراق بروتوكول Squid Crypto وسرقة 3 ملايين دولار

🔍 أهم معلومة: الحادث حدث بعد دعم بروتوكول Ripple، ما يثير تساؤلات حول صلاحية الاعتماد على خدمات تجارية داخلية دون تدقيق كافٍ.

- تدقيق كود غير كافٍ ⇒ ثغرة
- سياسات الأمان غير معتمدة على اللامركزي
- التفاعل السريع مع الموردين ضروري 

يجب مراجعة بروتوكولات اللامركزية لضمان عدم إعادة الخطأ. 🌐🔐

#SquidCrypto #Ripple #Decentralization #PrivacyFirst #CryptoSecurity

🔗 https://news.google.com/rss/articles/CBMifkFVX3lxTE11cDNLOTBQRVhTLUZiQzlIYkd5d1NRX1pvMW1Yd0R5ekFOdng0eWtGQVZYYWtGOExnaDBTdXp3bm5VM0ptbnQ5bWpoYm96c2RqX05zbjI4SV82NXJzQkVpaFRfYXI3bURSUXZDNThub195SGdOVVZYYWVoMG5rQQ?oc=5

Crypto drainer alert 🚨

- A “crypto drainer” hijacks wallets via malicious contracts, phishing or weak key storage.
- Look out for unexplained withdrawals, sudden permission requests, or odd contract calls.
- Protect yourself: verify every transaction, keep keys offline, and monitor activity regularly.

#cryptosecurity #privacy #decentralization #wallets #infosec

🔗 https://news.google.com/rss/articles/CBMitwFBVV95cUxOQllURGJOZjBXUjREbHRjYkNNM0drdVEwNURDRElEbTNQX3J1Y0VfQWk5aHNuZ2FqT3VMQmpuSENhaXREckoydEpqUWx0Y0NuTHMyTlgyQ2FoSExONjE4VVEzOHlfRTNwYjVJTnlTQWs4UktuR0NLOFMxaU4wZUM1SmRDQXBmX3FtSHhtRVFPc21JUXBJVVRfYkxtQzUwX3N0ODN6ZUloSmFxUmFtSTZhaVFjekpwNzDSAbwBQVVfeXFMTWppX1YwSUFDMzhJNU8tdnFqYXlqVW10V1VNdUJELUUyWjZyZFJiUURNMzQzeVpqeXJmdzVCMW9QYWdhVFlZWGJJNk9wTVYxVjZXR0ExaG1LUWxIV28zdldhOVRUZVNJamlkSGJVV0EzNUFDR2J1bV9Ib3pmOTYzZC1vOEVoSkVfcEZBUXZfQmZ1UmZKU1RUdjl2TXdsMnE4N1JLS196bHUyb2k3czE1TzJkUHhvZ1FXX2pOVXI?oc=5

Buterin (Ethereum Founder) suggests that AI-assisted “formal verification” could help secure crypto networks, smart contracts, and cryptographic systems against software flaws.

“If you formally verify end-to-end, then you are proving not just that some description of the protocol is secure in theory, but that the specific piece of code that the user runs is secure in practice." https://decrypt.co/368226/ethereum-founder-vitalik-buterin-ai-verification-secure-crypto-networks #Crypto #CryptoSecurity #Ethereum #BlockChain #Buterin #AI #Verify #SmartContracts #Cryptography #Software #Security #SoftwareBugs

Buterin (Ethereum Founder) suggests that AI-assisted “formal verification” could help secure crypto networks, smart contracts, and cryptographic systems against software flaws.

“If you formally verify end-to-end, then you are proving not just that some description of the protocol is secure in theory, but that the specific piece of code that the user runs is secure in practice." https://decrypt.co/368226/ethereum-founder-vitalik-buterin-ai-verification-secure-crypto-networks #Crypto #CryptoSecurity #Ethereum #BlockChain #Buterin #AI #Verify #SmartContracts #Cryptography #Software #Security #SoftwareBugs

RE: https://flipboard.com/@decryptmedia/business-bo8f9nt3z/-/a-rudQEKAnRQ6V0JT7XKSKnQ%3Aa%3A2857978267-%2F0

Bitcoin Depot filing Chapter 11 is a warning shot for cash-to-crypto rails. Access is not enough. Crypto infrastructure needs compliance durability, fraud controls, liquidity discipline, and wallet security. Easy UX without resilient controls becomes a liability. #BTC #CryptoSecurity #ObsidianEnochUse
https://www.solo.to/ObsidianEnoch | Architecting the Future of Decentralized Trust

FBI reports Americans lost a record $11.37 billion to crypto scams in 2025, up 22% from 2024. Vigilance and enhanced security measures are essential in the digital financial landscape. #CryptoSecurity #Fraud

IRS Criminal Investigation warns AI is making crypto fraud more dangerous and effective. Criminals use advanced tools to create convincing, hard-to-detect scams. Stay vigilant. #CryptoSecurity #AI

IRS Criminal Investigation warns AI is making crypto fraud more dangerous and effective. Criminals use advanced tools to create convincing, hard-to-detect scams. Stay vigilant. #CryptoSecurity #AI

🚨 BREAKING NEWS: Techies discover that using Obsidian plugins for social engineering is a bad idea! Who knew? 😂 Meanwhile, finance and crypto pros are accidentally downloading "PHANTOMPULSE" RAT, proving once again that clicking random links is a brilliant security strategy. 👏🔒
https://cyber.netsecops.io/articles/obsidian-plugin-abused-in-campaign-to-deploy-phantom-pulse-rat/ #ObsidianPlugins #SocialEngineering #CyberSecurity #TechFails #CryptoSecurity #HackerNews #ngated

🚨 BREAKING NEWS: Techies discover that using Obsidian plugins for social engineering is a bad idea! Who knew? 😂 Meanwhile, finance and crypto pros are accidentally downloading "PHANTOMPULSE" RAT, proving once again that clicking random links is a brilliant security strategy. 👏🔒
https://cyber.netsecops.io/articles/obsidian-plugin-abused-in-campaign-to-deploy-phantom-pulse-rat/ #ObsidianPlugins #SocialEngineering #CyberSecurity #TechFails #CryptoSecurity #HackerNews #ngated

AI is making crypto attacks faster and smarter. Learn the real security risks and practical steps to protect your wallet.

4. TL;DR

Crypto security risks have https://hackernoon.com/why-your-crypto-security-setup-is-already-outdated #cryptosecurity

AI is making crypto attacks faster and smarter. Learn the real security risks and practical steps to protect your wallet.

4. TL;DR

Crypto security risks have https://hackernoon.com/why-your-crypto-security-setup-is-already-outdated #cryptosecurity

So before asking:

“How do I make money in crypto?”

A better question is:

“Do I know how to protect it?”

#Web3
#CryptoSecurity
#Blockchain
#CyberSecurity
#DigitalAssets
5/5

🚨BREAKING: Web3 geniuses outsmarted by their own code! 🧠 Who could have guessed that combining fake tokens with naive governance could cost $285M? Oh right, everyone except them. 🙃 #CryptoSecurityFail
https://anonhaven.com/en/news/drift-protocol-hack-285-million-solana/ #Web3Fail #CryptoSecurity #GovernanceIssues #TokenScam #$285MLoss #HackerNews #ngated

🚨BREAKING: Web3 geniuses outsmarted by their own code! 🧠 Who could have guessed that combining fake tokens with naive governance could cost $285M? Oh right, everyone except them. 🙃 #CryptoSecurityFail
https://anonhaven.com/en/news/drift-protocol-hack-285-million-solana/ #Web3Fail #CryptoSecurity #GovernanceIssues #TokenScam #$285MLoss #HackerNews #ngated

Well, it’s good that someone is drawing a line in the Crypto sand.

Google accelerates its readiness timeline to prepare for “Q-day” with post-quantum cryptography (PQC) migration to 2029. Reminder: Q-day = the date when quantum computing becomes operational and is powerful enough to break the digital signatures that secure the Internet, crypto (blockchain + Ethereum), and just about every other Information system in use today.

The Bitcoin crypto network relies on ECDSA elliptic curve signatures. https://techaptitude.substack.com/p/ecdsa-cryptographys-role-in-securing With an exposed crypto signature public key, a quantum computer could derive the private key. And then, the crypto assets would be freely available to a hacker.

Android 17 will integrate ML-DSA, an algorithm standardized by the NIST to secure digital signatures. https://security.googleblog.com/2026/03/post-quantum-cryptography-in-android.html

https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/ #Crypto #PQC #PostQuantumCryptography #Cryptography #Google #Quantum #QuantumComputing #Q-Day #BlockChain #ECDSA #NIST #ML-DSA #Security #CryptoSecurity #Internet #TechAptitude

Well, it’s good that someone is drawing a line in the Crypto sand.

Google accelerates its readiness timeline to prepare for “Q-day” with post-quantum cryptography (PQC) migration to 2029. Reminder: Q-day = the date when quantum computing becomes operational and is powerful enough to break the digital signatures that secure the Internet, crypto (blockchain + Ethereum), and just about every other Information system in use today.

The Bitcoin crypto network relies on ECDSA elliptic curve signatures. https://techaptitude.substack.com/p/ecdsa-cryptographys-role-in-securing With an exposed crypto signature public key, a quantum computer could derive the private key. And then, the crypto assets would be freely available to a hacker.

Android 17 will integrate ML-DSA, an algorithm standardized by the NIST to secure digital signatures. https://security.googleblog.com/2026/03/post-quantum-cryptography-in-android.html

https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/ #Crypto #PQC #PostQuantumCryptography #Cryptography #Google #Quantum #QuantumComputing #Q-Day #BlockChain #ECDSA #NIST #ML-DSA #Security #CryptoSecurity #Internet #TechAptitude

Resolv DeFi breach:
• $80M uncollateralized tokens minted
• $24.5M drained
• Stablecoin depegged to ~$0.26
• Root cause: compromised key + no mint cap
Design flaw → systemic risk.

https://www.technadu.com/resolv-defi-breach-results-in-24-5-million-theft-nd-minting-of-80-million-of-uncollateralized-usr/624232/

#DeFi #CryptoSecurity #Infosec

Ethereum isn’t waiting for quantum threats to become real—it’s building defenses now. How the Ethereum Foundation is ushering in post-quantum security. https://jpmellojr.blogspot.com/2026/03/crypto-group-ethereum-ushers-in-post.html
#Ethereum #PostQuantum #BlockchainSecurity #CryptoSecurity

A U.S. government contractor has been arrested for allegedly stealing $46M in cryptocurrency tied to the 2016 Bitfinex hack while working with the U.S. Marshals Service.
Investigators say privileged access was used to divert seized crypto assets.

https://www.technadu.com/us-government-contractor-arrested-in-46m-us-marshals-cryptocurrency-theft/622340/

Insider threat or weak custody controls?
#Cybersecurity #CryptoSecurity #Blockchain

A crypto operational mistake allegedly cost South Korea nearly $4.8M.

Authorities shared images celebrating seized assets from tax evaders - but one photo reportedly revealed the recovery phrase of a hardware wallet.
Within hours:
• Attacker funded gas fees with ETH
• 4M PRTG tokens transferred
• ~$4.8M gone
A reminder that OpSec failures can compromise even offline crypto storage.

Source: https://www.generation-nt.com/actualites/crypto-coree-sud-fisc-perte-seed-phrase-2071790

What safeguards should governments implement for seized digital assets?

Join the conversation and follow TechNadu for more cybersecurity and cybercrime coverage.

#CyberSecurity #CryptoSecurity #Blockchain #DigitalAssets #InfoSec #CryptoWallet #CyberCrime #OpSec #ThreatIntel

https://winbuzzer.com/2025/12/02/blockchain-ai-agents-now-exploit-zero-day-smart-contract-flaws-xcxwbn/

Blockchain: AI Agents Now Exploit Zero-Day Smart Contract Flaws

#DeFi #AI #Cybersecurity #Blockchain #SmartContracts #Anthropic #ZeroDay #CryptoSecurity #ClaudeOpus #GPT5 #Hacking #DeFi #AISafety #Cybercrime

Is the old crypto mantra of "Not my keys, not my crypto" actually still relevant? https://hackernoon.com/not-my-keys-not-my-crypto-maybe-its-time-for-an-upgrade #cryptosecurity

Shuffle Confirms CRM Breach Affecting Thousands of Crypto Accounts - TLDR:

Shuffle Crypto notifies users after Fast Track CRM breach exposes majority of user... - https://blockonomi.com/shuffle-confirms-crm-breach-affecting-thousands-of-crypto-accounts/ #third-partyrisk #userdataexposed #cryptosecurity #cryptobetting #phishingalert #shufflecrypto #noahdummett #databreach #fasttrack #security #defi

BNB Chain’s X Account Hacked as Inferno Drainer Pushes Phishing Links - TLDR:

BNB Chain’s official X account was hacked by Inferno Drainer, spreading phi... - https://blockonomi.com/bnb-chains-x-account-hacked-as-inferno-drainer-pushes-phishing-links/ #cryptosecurity #infernodrainer #fakeairdrops #twitterhack #cryptohack #security #bnbchain #bnbprice #phishing #binance #cz

Tether Pushes DeFi Frontline With New WDK Template Wallet Demo - TLDR:

Tether’s WDK wallet demo showed reusable UI components, non-custodial desig... - https://blockonomi.com/tether-pushes-defi-frontline-with-new-wdk-template-wallet-demo/ #non-custodialwallet #blockchaintools #cryptosecurity #cryptowallets #paoloardoino #stablecoins #wdkwallet #wallets #tether #defi #usdt

NGP Protocol Exploit on BNB Chain Drains $2M, Price Collapses as Funds Move Through Tornado Cash - TLDR:

NGP protocol exploited on BNB Chain, $2M drained via price oracle manipulat... - https://blockonomi.com/ngp-protocol-exploit-on-bnb-chain-drains-2m-price-collapses-as-funds-move-through-tornado-cash/ #priceoracleattack #flashloanattack #cryptosecurity #defiexploit #tornadocash #security #bnbchain #crime #ngp

Ledger Says Tangem Cards Can Be Brute-Forced Faster, Wallet Maker Disagrees - TLDR:

Ledger Donjon researchers revealed Tangem cards allow unlimited PIN guesses... - https://blockonomi.com/ledger-says-tangem-cards-can-be-brute-forced-faster-wallet-maker-disagrees/ #brute-forceattack #passwordsecurity #hardwarewallets #cryptosecurity #cryptowallet #security #ledger #tangem

Binance’s CZ Warns Crypto Firms About North Korean Hacker Tactics - TLDR:

Binance’s CZ warned that North Korean hackers pose as job candidates and re... - https://blockonomi.com/binances-cz-warns-crypto-firms-about-north-korean-hacker-tactics/ #northkoreanhackers #cryptosecurity #cryptohacks #security #binance #cz

Hackers Use Microsoft Teams to Hijack Crypto Wallets: What To Know - TLDR:

Hackers trick users with fake podcast invites before requesting screen cont... - https://blockonomi.com/hackers-use-microsoft-teams-to-hijack-crypto-wallets-what-to-know/ #remotecontrolattack #socialengineering #cryptosecurity #microsoftteams #walletdraining #cryptoscam #security #crime

Ethereum Co-Founder Vitalik Warns of AI Governance Risks as ChatGPT Security Flaw Surfaces - TLDR:

Vitalik warns AI governance models can be exploited with jailbreak prompts and mal... - https://blockonomi.com/ethereum-co-founder-vitalik-warns-of-ai-governance-risks-as-chatgpt-security-flaw-surfaces/ #cryptosecurity #vitalikbuterin #aigovernance #cryptorisks #technology #emailhack #security #ethereum #mcptools #chatgpt

🔎 Trust isn’t optional — In digital payments, trust is the real currency.

🔐 With Resonance, decentralized payments become clear, secure, and transparent — turning doubt into confidence and risk into opportunity.

👉Ready to experience payments without fear? Step into the future with Resonance — explore our latest blog to learn how.

https://neuronus.net/en/blog/the-smart-way-to-trust-online-payments-in-a-decentralized-world

#DecentralizedPayments #CryptoSecurity #DigitalTransactions #Web3Finance #Resonance #Neuronus #FutureOfPayments

Apple Enhances Crypto Wallet Safety on iPhone 17 with Memory Integrity Enforcement - TLDR:

Apple’s iPhone 17 debuts Memory Integrity Enforcement, boosting wallet signing saf... - https://blockonomi.com/apple-enhances-crypto-wallet-safety-on-iphone-17-with-memory-integrity-enforcement/ #memoryintegrityenforcement #spywareprotection #cryptosecurity #applesecurity #cryptowallets #walletsigning #technology #security #iphone17 #a19chip #apple