Zilliqa halted native transactions after discovering a vulnerability in its Ledger app's Schnorr signature generation, potentially allowing reconstruction of private keys from approximately five affected signatures, prompting a coordinated remediation plan.
Layer-1 blockchain Zilliqa warned of a vulnerability in its Ledger app that could allow attackers to recover users’ private keys. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and advised to await guidance, following a recent ZIL cold wallet theft.
Phantom and the Hyperliquid Policy Center are asking the CFTC to remove regulations they claim hinder fintech firms from partnering with registered derivatives markets. They propose a model where non-custodial wallets provide technical access to markets without triggering broker registration.
Humanity Protocol's H token crashed 76% after a $36 million hack on June 8, 2026. A compromised employee laptop exposed private keys, leading to theft and unauthorized minting, exposing operational security flaws despite advanced identity tech.
The Humanity Protocol, a decentralized identity project using palm biometrics, suffered a private key compromise resulting in losses exceeding $30 million. The H token plummeted 85% from $0.70 to $0.08, with the project’s founder confirming the incident and advising users to avoid the bridge and liquidity pools.
A New York lawsuit filed by Noah Doe and two LLCs seeks ownership of 39,069 dormant Bitcoin addresses, potentially holding $285 billion, raising questions about abandoned property laws and Bitcoin's legal treatment.
Stablecoin issuer StablR has reported an exploit resulting in its euro and US dollar stablecoins depegging. Blockchain security firm Blockaid stated that $2.8 million has been extracted so far due to a private key compromise.
StablR's euro and US dollar stablecoins have depegged after an exploit drained $2.8 million, reportedly due to a compromised private key in the minting multisignature account. This incident adds to a growing list of crypto hacks this month.
StablR's Euro and USD stablecoins (EURR, USDR) have depegged due to an exploit where a compromised private key allowed an attacker to mint millions in new tokens. Approximately $2.8 million was extracted after the attacker swapped the minted assets on decentralized exchanges.
THORChain lost $10.7M to a node operator exploiting a GG20 threshold signature vulnerability. Automatic checks halted further losses, and a patch was deployed. A community proposal (ADR-028) suggests absorbing losses via protocol liquidity and synth holders, avoiding RUNE sales.
Polymarket experienced a security exploit affecting a wallet used for internal top-up operations, potentially compromising a six-year-old private key. While at least $600,000 was drained, the company assures user funds and core infrastructure remain safe.
At Consensus 2026, Cardano's Charles Hoskinson said that “users should probably never have their private keys,” adding that “something should have the private keys for the users.” He argued that the secure chips already embedded in iPhones, Android phones, and Samsung devices outperform those in Ledger and Trezor devices, and that most crypto users already […] The post Cardano’s Charles Hoskinson says the future of crypto wallets will be inside iPhones and Androids appeared first on CryptoSlate.
Tagging @grok in an X post plus a few dots and dashes was all that was needed last night for a bad actor to pickpocket a verified crypto wallet without ever touching the private keys. Agentic token launchpad, Bankrbot reported on May 4 that it had sent 3 billion DRB on Base to the recipient […] The post Grok’s crypto wallet was just exploited by a tweet sent in morse code without any private key compromise appeared first on CryptoSlate.
Tagging @grok in an X post plus a few dots and dashes was all that was needed last night for a bad actor to pickpocket a verified crypto wallet without ever touching the private keys. Agentic token launchpad, Bankrbot reported on May 4 that it had sent 3 billion DRB on Base to the recipient […] The post How one trader used morse code to trick Grok into sending them billions of crypto tokens from its verified wallet appeared first on CryptoSlate.
Giancarlo Lelli won one Bitcoin from Project Eleven's Q-Day Prize on Apr. 24 for deriving a 15-bit elliptic curve private key from its public key using publicly accessible quantum hardware — the largest demonstration of this attack class that could threaten Bitcoin and Ethereum. While a 15-bit key is nowhere near Bitcoin's 256-bit security, Google cut ECDLP-256 resource estimates 20-fold in March and set a 2029 migration deadline, with Cloudflare matching that target.
Hackers have stolen over $17 billion across 518 crypto incidents over the past decade, with private key compromises being the leading attack vector, according to DefiLlama data. Around 22.3% of incidents stemmed from brute force private key attacks and 18.2% from unknown methods, while 10% involved multi-signature wallet phishing. The findings come after the industry's largest 2026 hack drained $290-293 million from Kelp DAO's rsETH bridge, with DeFi protocols losing $600 million in the past 60 days.
