
Tech Firms Move to Block 8 eMudhra Certificates Over Key Flaw
A weakness in how eMudhra generated private keys reportedly let attackers derive them and forge HTTPS certificates for any site, prompting major vendors to revoke eight certs.
We use cookies for anonymous analytics and ad measurement to improve the site. Cookie policy.
Original coverage across the crypto market, updated daily.

A weakness in how eMudhra generated private keys reportedly let attackers derive them and forge HTTPS certificates for any site, prompting major vendors to revoke eight certs.

Bitquery traced funds into XMR1 purchases on Hyperliquid but could not confirm that every affected wallet belonged to an NGRAVE user, CryptoSlate reports.

A government review flagged security deficiencies at 130 financial firms, prompting a proposed overhaul of cybersecurity assessments.

Figures shared by a Glassnode co-founder point to more than 6 million bitcoin in outputs with visible public keys, as Justin Drake urges prep for AI-era cryptographic attacks.

The exchange now says about $387.5 million in assets moved to attacker-controlled wallets, up from an earlier $351.6 million figure, with withdrawals resuming in stages from September 28.

Tectonic and Moonwell hit by price manipulation attacks, with combined losses estimated at over $84 million.

Attacker bought voting power to drain $8.5 million from Term Finance, highlighting governance risks.
DeFi lending protocol Term Labs suffers $8.5M governance exploit; PeckShield says attacker drained ETH and USDC.

Galaxy Research says an attacker recreated private keys offline and swept over 1,000 BTC from nearly 1,200 wallets.

Binance regularly tests its employees' security awareness through simulated attacks to prevent breaches.

Binance regularly tests employees with simulated attacks to improve security hygiene amid rising social engineering breaches.

BTC fell to $64,980 as Brent crude jumped 7% amid geopolitical risks following tanker attacks.

DeFi lending protocol Bonzo Lend lost over $9 million after an attacker exploited a vulnerability in a third-party Supra oracle contract on Hedera.
Attackers exploited weak seed phrases generated by the Ill Bloom bug, stealing $3.1 million from 431 wallets.

Proposed FCC rule requiring carriers to retain customer data could expand attack vectors for crypto theft.

The bot, responsible for 70% of Ethereum sandwich attacks from Nov 2024 to Oct 2025, lost $7.5M in an exploit.
Attacker exploited a proof verification flaw in Aztec Connect, draining over $2.1 million from the defunct protocol.

A Coinbase-convened panel urges Bitcoin to prepare for quantum attacks but is split on freezing vulnerable coins.

A campaign attack ad using AI-generated deepfake footage in Minnesota raises ethical and regulatory questions.
Syscoin paused its cross-chain bridge after an attacker exploited a validation issue to mint approximately 5 billion unauthorized SYS tokens.

Microsoft researchers warn that prompt injection attacks could allow hackers to steal credentials from GitHub via AI coding agents.