Cryptocurrency List - 2026 2025 2024 2021 2020 2019 2018
H AI APT Attack BigBrothers BotNet Congress Cryptocurrency Cyber CyberCrime Exploit Hack ICS Incindent IoT Mobil OS Phishing Ransom Safety Security Social Spam Virus Vulnerebility | 2026 2025 2024 2023
DATE |
NAME |
Info |
CATEG. |
WEB |
|
10.9.26 |
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto | The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi | Cryptocurrency | The Hacker News |
|
9.9.26 |
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution | A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least | Cryptocurrency | The Hacker News |
|
9.9.26 |
Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC | Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin's public record | Cryptocurrency | The Hacker News |
|
6.9.26 |
Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain | A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the BNB Smart Chain (BSC). | Cryptocurrency | BleepingComputer |
|
4.9.26 |
Cronos blockchain restarts after $74 million Tectonic exploit | The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. | Cryptocurrency | BleepingComputer |
|
2.9.26 |
Chrome Web Store extensions caught stealing crypto, browser data | Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal cryptocurrency, sensitive data, and browser history, as well as inject ClickFix lures. | Cryptocurrency | BleepingComputer |
|
1.9.26 |
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds | Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into | Cryptocurrency | The Hacker News |
| 28.8.26 | 19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code | Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six | Cryptocurrency | The Hacker News |
|
20.8.26 |
SafePal data breach impacts 39,798 customers, stolen info for sale | Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data. | Cryptocurrency | BleepingComputer |
|
18.8.26 |
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets | Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. | Cryptocurrency | The Hacker News |
|
16.8.26 |
Hackers breach govt webmail while running parallel crypto fraud | The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. | Cryptocurrency | BleepingComputer |
|
11.8.26 |
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers | Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean | Cryptocurrency | The Hacker News |
|
10.8.26 |
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials | Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer. | Cryptocurrency | The Hacker News |
|
8.8.26 |
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets | ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored | Cryptocurrency | The Hacker News |
|
6.8.26 |
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps | Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains . Introduced in | Cryptocurrency | The Hacker News |
|
2.8.26 |
Online ad firm Adform’s script compromised to steal cryptocurrency | Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an attacker. | Cryptocurrency | BleepingComputer |
|
2.8.26 |
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes | An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy | Cryptocurrency | The Hacker News |
|
1.8.26 |
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites | Attackers modified a JavaScript file served by advertising technology company Adform , turning it into a browser-side tool that rewrites | Cryptocurrency | The Hacker News |
|
30.7.26 |
Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin |
Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store. |
||
|
29.7.26 |
New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide |
Proofpoint uncovered Cruciferra, a crypter-as-a-service that helps hackers evade antivirus and deliver malware in multiple campaigns. |
||
|
26.7.26 |
Steam forum ClickFix attacks infect gamers with XMRig cryptominers |
Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. |
||
|
23.7.26 |
Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service | Cruciferra is a sophisticated crypter service used by multiple unrelated cybercriminal threat clusters. | Cryptocurrency | PROOFPOINT |
|
21.7.26 |
Hackers steal $23.7 million in crypto from Ostium in off-chain attack |
The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after compromising off-chain infrastructure used to feed prices into the protocol. |
||
|
19.7.26 |
Russian hackers trojanize WebEx, Zoom apps to push Starland malware |
A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency by deploying a new backdoor called Starland RAT. |
||
|
18.7.26 |
HelloNet campaign — new malicious modules launched through the ViPNet update system |
We identified targeted infection attempts against large Russian organizations using the ViPNet update system (a software suite for creating secure networks). |
||
|
14.7.26 |
Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross-Site Tracking Risks |
Researchers at KU Leuven tested 85 of the most popular crypto wallets that run as browser extensions and found that the wallets themselves |
||
|
12.7.26 |
Money launderer accused of stealing seized crypto while in prison |
A Bulgarian national has been charged with stealing $290,000 in government-seized cryptocurrency while serving 121 months in prison for helping launder millions stolen from American fraud victims |
||
|
12.7.26 |
Injective SDK on npm infected with cryptocurrency wallet stealer |
Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. |
||
|
30.6.26 |
Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses |
Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing |
||
|
29.6.26 |
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers |
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate |
||
|
27.6.26 |
The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $15 million loss after an attacker manipulated the opportunity-detection logic by creating fake cryptocurrency trading opportunities. |
|||
|
21.6.26 |
USB worm spreads crypto-stealing malware via Windows shortcut files |
Threat actors targeting cryptocurrency wallets have been distributing clipboard-stealing malware with self-spreading capabilities and using the Tor network to conceal communication. |
||
|
18.6.26 |
Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments |
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, |
||
|
12.6.26 |
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs |
Authorities in Europe have disrupted AudiA6 , a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks. Europol, |
||
|
7.6.26 |
The Windows version of the Hola Browser has been compromised in a supply chain attack that delivered an undeclared executable identified by researchers as a cryptocurrency miner. |
|||
|
7.6.26 |
U.S. sanctions Nobitex crypto exchange used by Iranian ransomware actors |
The U.S. Treasury's Office of Foreign Assets Control (OFAC) has announced sanctions against Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments related to terrorist activities. |
||
|
31.5.26 |
US charges Google security engineer with Polymarket insider trading |
A Google security engineer was charged with insider trading after winning $1.2 million using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. |
||
|
28.5.26 |
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware |
A new campaign orchestrated by a previously undocumented threat actor has targeted cryptocurrency organizations with an aim to facilitate digital |
||
|
27.5.26 |
Microsoft Defender Experts identified an active cryptojacking campaign in which malicious download sites are surfaced not only through traditional search engine poisoning, but also through AI chatbot interactions. This emerging delivery technique extends social engineering beyond conventional search results and increases the visibility of malicious software recommendations. |
|||
|
24.5.26 |
Inside a Crypto Drainer: How to Spot it Before it Empties Your Wallet |
Modern crypto drainers don't hack wallets. They trick users into approving malicious transactions. Flare explores how the Lucifer DaaS platform scales wallet theft through phishing and automation |
||
|
23.5.26 |
FBI: Americans lost over $388 million to scams using crypto ATMs in 2025 |
The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. |
||
|
10.5.26 |
Crypto gang member gets 6.5 years for role in $230 million heist |
A 20-year-old California man was sentenced to 78 months in prison for serving as a home invader and money launderer in a criminal ring that stole over $250 million in cryptocurrency. |
||
|
9.5.26 |
Telegram Mini Apps abused for crypto scams, Android malware delivery |
Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram's Mini App feature to run crypto scams, impersonate well-known brands, and distribute Android malware. |
||
|
4.5.26 |
Global Crackdown Arrests 276, Shuts 9 Crypto Scam Centers, Seizes $701M |
A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam |
||
|
3.5.26 |
Police dismantles 9 crypto scam centers, arrests 276 suspects |
A joint international operation involving U.S. and Chinese authorities arrested at least 276 suspects and shut down nine cryptocurrency investment fraud centers. |
||
|
2.5.26 |
Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining |
Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptominers on developers' servers. |
||
|
2.5.26 |
European police dismantles €50 million crypto investment fraud ring |
Austrian and Albanian authorities dismantled a criminal ring accused of running a large-scale cryptocurrency investment fraud operation that caused estimated losses of over €50 million ($58.5 million) to victims worldwide. |
||
|
2.5.26 |
Money launderer linked to $230M crypto heist gets 70 months in prison |
22-year-old Evan Tangeman of Newport Beach, California, was sentenced to 70 months in prison for laundering funds stolen in a massive $230 million cryptocurrency heist. |
||
|
27.4.26 |
Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud |
Cybersecurity researchers have disclosed details of a telecommunications fraud campaign that uses fake CAPTCHA verification tricks to dupe |
||
|
25.4.26 |
FakeWallet crypto stealer spreading through iOS apps in the App Store |
In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets. Once launched, these apps redirect users to browser pages designed to look similar to the App Store and distributing trojanized versions of legitimate wallets. |
||
|
25.4.26 |
26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases |
Cybersecurity researchers have discovered a set of malicious apps on the Apple App Store that impersonate popular cryptocurrency wallets in an |
||
|
23.4.26 |
China's Apple App Store infiltrated by crypto-stealing wallet apps |
A set of 26 malicious apps on Apple App Store impersonate popular wallets, such as Metamask, Coinbase, Trust Wallet, and OneKey, to steal recovery or seed phrases and drain them of cryptocurrency assets. |
||
|
22.4.26 |
A few weeks ago, my honeypot logged an incident that changed how I think about modern attacks. A |
|||
|
19.4.26 |
Grinex exchange blames "Western intelligence" for $13.7M crypto hack |
Kyrgyzstan-based cryptocurrency exchange Grinex has suspended its operations after suffering a $13.7 million hack attributed to Western intelligence agencies. |
||
|
18.4.26 |
Crypto-exchange Kraken extorted by hackers after insider breach |
The Kraken cryptocurrency exchange announced that a cybercrime group is trying to extort the company by threatening to release videos showing internal systems that host client data. |
||
|
18.4.26 |
Fake Ledger Live app on Apple’s App Store stole $9.5M in crypto |
A malicious Ledger Live app for macOS available from Apple's App Store has drained approximately $9.5 million in cryptocurrency from 50 victims in just a few days this month. |
||
|
12.4.26 |
Over 20,000 crypto fraud victims identified in international crackdown |
An international law enforcement action led by the U.K.'s National Crime Agency (NCA) has identified over 20,000 victims of cryptocurrency fraud across Canada, the United Kingdom, and the United States. |
||
|
12.4.26 |
Hackers steal $3.6 million from crypto ATM giant Bitcoin Depot |
Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin from its crypto wallets after breaching its systems last month. |
||
|
11.4.26 |
Drift $280M crypto theft linked to 6-month in-person operation |
The Drift Protocol says that the $280+ million hack it suffered last week was the result of a long-term, carefully planned operation that included building "a functioning operational presence inside the Drift ecosystem." |
||
|
10.4.26 |
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs |
Details have emerged about a now-patched security vulnerability in a widely used third-party Android software development kit (SDK) called |
||
|
8.4.26 |
Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign |
An active campaign has been observed targeting internet-exposed instances running ComfyUI, a popular stable diffusion platform, to enlist them into a |
||
|
4.4.26 |
Hacker charged with stealing $53 million from Uranium crypto exchange |
U.S. prosecutors have charged a Maryland man with stealing more than $53 million after hacking the Uranium Finance crypto exchange twice and laundering the proceeds through a cryptocurrency mixer. |
||
|
29.3.26 |
The United Kingdom's Foreign, Commonwealth and Development Office (FCDO) has sanctioned Xinbi, a Chinese-language cryptocurrency-based online marketplace that sells stolen data and satellite internet equipment to scam networks in Southeast Asia. |
|||
|
25.3.26 |
Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner |
An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that lead to the deployment of cryptocurrency |
||
|
19.3.26 |
AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code |
The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. |
||
|
9.3.26 |
UNC4899 Breached Crypto Firm After Developer AirDropped Trojanized File to Work Device |
The North Korean threat actor known as UNC4899 is suspected to be behind a sophisticated cloud compromise campaign targeting a cryptocurrency |
||
|
1.3.26 |
QuickLens Chrome extension steals crypto, shows ClickFix attack |
A Chrome extension named "QuickLens - Search Screen with Google Lens" has been removed from the Chrome Web Store after it was compromised to push malware and attempt to steal crypto from thousands of users. |
||
|
1.3.26 |
$4.8M in crypto stolen after Korean tax agency exposes wallet seed |
South Korea's National Tax Service accidentally exposed the mnemonic recovery phrase of a seized cryptocurrency wallet in an official press release, allowing hackers to steal 6.4 billion won ($4.8M) worth in cryptocurrency. |
||
|
19.2.26 |
Pastebin comments push ClickFix JavaScript attack to hijack crypto swaps |
Threat actors are abusing Pastebin comments to distribute a new ClickFix-style attack that tricks cryptocurrency users into executing malicious JavaScript in their browser, allowing attackers to hijack Bitcoin swap transactions and redirect funds to attacker-controlled wallets. |
||
|
15.2.26 |
Snail mail letters target Trezor and Ledger users in crypto-theft attacks |
Snail mail letters target Trezor and Ledger users in crypto-theft attacks |
||
|
13.2.26 |
North Korean hackers use new macOS malware in crypto-theft attacks |
North Korean hackers are running tailored campaigns using AI-generated video and the ClickFix technique to deliver malware for macOS and Windows to targets in the cryptocurrency sector. |
||
|
12.2.26 |
Fugitive behind $73M 'pig butchering' scheme gets 20 years in prison |
A dual Chinese and St. Kitts and Nevis national was sentenced to 20 years in prison in absentia for his role in an international cryptocurrency investment scheme (also known as pig butchering or romance baiting) that defrauded victims of more than $73 million. |
||
|
11.2.26 |
North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations |
The North Korea-linked threat actor known as UNC1069 has been observed targeting the cryptocurrency sector to steal sensitive data from Windows and |
||
|
8.2.26 |
Coinbase confirms insider breach linked to leaked support tool screenshots |
Coinbase has confirmed an insider breach after a contractor improperly accessed the data of approximately thirty customers, which BleepingComputer has learned is a new incident that occurred in December. |
||
|
8.2.26 |
Step Finance says compromised execs' devices led to $40M crypto theft |
Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company's team of executives. |
||
|
3.2.26 |
Crypto wallets received a record $158 billion in illicit funds last year |
Illegal cryptocurrency flows hit a record $158 billion in 2025, reversing a three-year trend of declining amounts from $86B in 2021 to $64B in 2024. |
||
|
5.1.26 |
Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act |
Ilya Lichtenstein, who was sentenced to prison last year for money laundering charges in connection with his role in the massive hack of cryptocurrency exchange Bitfinex in 2016, said he has been released early. |
||
|
4.1.26 |
Blockchain investigation firm TRM Labs says ongoing cryptocurrency thefts have been traced to the 2022 LastPass breach, with attackers draining wallets years after encrypted vaults were stolen and laundering the crypto through Russian exchanges. |
|||
|
4.1.26 |
Trust Wallet links $8.5 million crypto theft to Shai-Hulud NPM attack |
Trust Wallet believes the compromise of its web browser to steal roughly $8.5 million from over 2,500 crypto wallets is likely related to an "industry-wide" Sha1-Hulud attack in November. |
||
|
3.1.26 |
Hackers drain $3.9M from Unleash Protocol after multisig hijack |
The decentralized intellectual property platform Unleash Protocol has lost around $3.9 million worth of cryptocurrency after someone executed an unauthorized contract upgrade that allowed asset withdrawals. |
||
|
3.1.26 |
Trust Wallet says 2,596 wallets drained in $7 million crypto theft attack |
Trust Wallet says attackers who compromised its browser extension right before Christmas have drained approximately $7 million from nearly 3,000 cryptocurrency wallet addresses. |
||
|
3.1.26 |
A former Coinbase customer service agent was arrested in India for helping hackers earlier this year steal sensitive customer information from a company database. |
|||
|
3.1.26 |
Fake Grubhub emails promise tenfold return on sent cryptocurrency |
Grubhub users received fraudulent messages, apparently from a company email address, promising a tenfold bitcoin payout in return for a transfer to a specified wallet. |
||
|
3.1.26 |
Trust Wallet confirms extension hack led to $7 million crypto theft |
Several users of the Trust Wallet Chrome extension report having their cryptocurrency wallets drained after installing a compromised extension update released on December 24, prompting an urgent response from the company and warnings to affected users. Simultaneously, BleepingComputer observed a phishing domain launched by hackers. |