Our coverage of hacks and security failures that affect crypto users, from exchange breaches to hijacked websites. Each article says what was confirmed, by whom, and what is still unknown.
The financial regulator said it will issue a no-action letter covering pre-emptive suspensions and told exchanges to monitor around the clock, two weeks after the Binance hack. The release does not list the letter's conditions or give a date for it.
The high-severity bug could stop a miner's node from producing blocks after a chain reorganization until it was restarted. All three were patched in October 2025.
Two accomplices sent to the victims' home were jailed for four and five years. The attempt failed when the victims did not open their door.
Initia says about $2.16 million of the assets is stuck on its paused network. It is the blockchain's second security incident in less than three weeks.
The open-source project says versions before 1.7.0 put funds at risk of theft, and that updating alone cannot shut out an attacker who already got in.
The cross-chain bridge says some users who visited across.to during the attack may have been affected and that all affected users will be made whole. Its smart contracts were not named as affected.
The exchange says the 'worse_query' flaw lets malicious apps read other apps' files. Apple's latest update notes do not mention it.
The FBI, Secret Service, and IRS investigators urged exchanges and DeFi services to block transactions tied to 628 addresses used to launder the stolen funds.
The Brazilian exchange says Pix withdrawals to customers' own accounts come next, once each customer re-verifies in its app, and trading and crypto transfers later. Its help-center FAQ gives no dates.
The exchange paused withdrawals on October 29, began reopening them on November 1 and said it would absorb the losses. Independent estimates of the haul range from about $6.36 billion to $6.43 billion.
Binance first said a compromised engineer's laptop may have been involved and that it found no evidence of leaked private keys. Its November 3 report described a months-long intrusion.
About 117,000 NEAR, worth around $430,000, passed through six home-made tokens launched between November 5 and 7. The amounts are small, but the technique is cheap and slows down investigators.
