Crypto Markets. Regulatory Clarity. No Noise.
April 2026 is now the most damaging month in crypto history, with CertiK reporting $630 million stolen across roughly 30 separate exploits confirmed by DeFiLlama. Two state-sponsored attacks accounted for the overwhelming majority of...
Grinex, the Russia-linked crypto exchange that absorbed users and liquidity from the sanctioned Garantex platform, suspended all operations on April 17 after attackers drained more than 1 billion rubles from 54 wallets. The exchange...
North Korean IT workers have been embedding themselves inside decentralized finance protocols for at least seven years, according to cybersecurity researcher Taylor Monahan, a developer at MetaMask. The disclosure lands days after Drift Protocol...
Drift Protocol has linked its $280 million exploit, executed on April 1, to a six-month social engineering campaign attributed with “medium-high confidence” to North Korean state-linked threat actors. The Solana-based perpetuals exchange published preliminary...
Drift Protocol, a perpetuals DEX built on Solana, has been exploited for an estimated $270 million in what appears to be the largest DeFi hack of 2026. The Drift team confirmed the attack on...
A wave of crypto security incidents reported between March 21 and 22, 2026 shows attackers converging on a single strategy: manipulate the user rather than break the code. From a fake FBI token circulating...
An attacker exploited a critical flaw in Resolv Labs’ USR minting contract on March 22, 2026, minting approximately 80 million unbacked USR tokens using no more than $200,000 in initial capital, then converting a...
Bitrefill, the crypto-to-gift-card platform, disclosed on March 17 that a cyberattack on March 1 drained funds from its hot wallets and exposed approximately 18,500 purchase records, with investigators pointing to North Korea’s Lazarus Group...
Bonk.fun, the Solana-based memecoin launchpad, was hit by a domain hijack on March 12 after attackers compromised a team account and deployed a wallet-draining script disguised as a routine terms-of-service prompt. The platform warned...
