Everything web3, crypto, defi, degen
In brief Crypto exchange Gate is adopting an “All in Web3” strategy to position itself as a “full Web3 operating system,” CEO Dr. Han told Decrypt. The platform has launched a suite of products designed to form a “cohesive, secure, and high-performance Web3 stack.” Gate has added a Perp DEX, tokenized stocks, on-chain token launchpad…
In brief Google Threat Intelligence Group researchers have uncovered North Korean hackers using EtherHiding malware. EtherHiding enables stealthy, untraceable malware delivery through smart contracts. The regime’s hackers have stolen over $2 billion so far in 2025 alone, most from the Bybit exchange breach. Google’s Threat Intelligence Group has warned that North Korea is using EtherHiding—a…
In brief Mitchell Amador, CEO of Immunefi, told Decrypt at Token2049 in Singapore that AI tools once limited to security firms are now accessible to groups like Lazarus, enabling massive attacks. Bug bounties have paid out over $100 million but have “hit the limits” as there aren’t “enough eyeballs” to provide necessary coverage, he said…
A large-scale hacking exploit targeting JavaScript code with malware that raised alarms earlier this week has managed to steal only $1,043 in cryptocurrency, according to data from Arkham Intelligence.Cybersecurity researchers at Wiz published analysis of a “widespread” supply chain attack yesterday, writing in a blog post that bad actors used social engineering to gain control…
In brief Shengsheng He was sentenced to 51 months for laundering nearly $37M stolen in a crypto investment scam. The funds were moved through a Bahamas-based shell company, converted to crypto, and sent to scammer wallets. The case is part of a wider DOJ crackdown on global crypto fraud and online money laundering. Shengsheng He,…
In brief GK8 researchers have discovered threat actors recruiting professional voice impersonators on underground forums to target U.S. crypto executives. The personalized “vishing” campaigns make operatives up to $20,000 monthly. Attackers possess curated datasets of executive personal information and use deepfake technology, voice changers, and sophisticated infrastructure to bypass traditional security measures. Cybercriminals are recruiting…
In brief An investor lost 783 Bitcoin—$91 million worth a the time—to a social engineering scam, according to on-chain sleuth ZachXBT. The threat actor allegedly used a coin-mixing service to try to cover their tracks. ZachXBT alleged that three individuals used similar tactics to steal $243 million worth of Bitcoin a year ago. A crypto…
In brief North Wales Police are investigating a $2.8 million (£2.1 million) Bitcoin theft in which a cybercriminal posed as a senior detective. The scammer claimed that the victim’s personal details had been found on the phone of someone recently arrested, before pressuring them to “secure their funds” via a phishing link. The force noted…
In brief CTM360 identified a “ClickTok” campaign using over 10,000 fake domains that mimic TikTok Shop to steal user credentials and distribute malware through phishing pages and trojanized apps. Scammers deploy fake Meta ads and AI-generated TikTok videos mimicking influencers to direct victims to fraudulent storefronts offering heavily discounted products paid for with cryptocurrency. The…
In brief Bengaluru police say hackers used a fake freelance job to trick a CoinDCX employee into installing malware on his office laptop, which was later exploited to steal $44 million (₹379 crore) from the exchange’s liquidity wallet. The employee, now in custody, claimed he was unaware of the breach; police say tracing the funds…
