A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
Within 48 hours, both CoinMarketCap and Cointelegraph were compromised, each incident using nearly identical tactics: inject malicious front-end code, push a “verify your wallet” notice, siphon funds.
Binance founder CZ took to X after the second breach, reminding traders that it’s now human error—one careless click—rather than faulty code that hackers bet on: “Information sites are the latest target. Think twice before authorizing any wallet connect.”
Security firm CertiK says 2025 thefts have already topped $2.1 billion, with wallet-phishing now the dominant vector. Co-founder Ronghui Gu sums it up: “Code is getting harder to exploit, so criminals pivot to people.”
Smart contracts may be maturing, but the weakest link has simply moved up the stack—to the person behind the screen.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.
A malicious open-source project on GitHub disguised as a Solana trading bot has compromised user wallets, according to a July 2, 2025, report by cybersecurity firm SlowMist.