Exploit

An attacker drained roughly $1.73 million from Notional Finance’s legacy escrow contract early Friday, exploiting a coding flaw that made an enormous fabricated debt register as zero. The stolen DAI and USDC became about …

In brief Cronos stopped producing blocks on Sunday after an exploit at Tectonic, the largest lending protocol on the network. An onchain researcher estimated the loss at about $75 million, with roughly $6 million …

In brief Microsoft disclosed a critical remote code execution vulnerability affecting its Entra ID cloud identity service. CVE-2026-69836 received a CVSS score of 10.0 and requires no existing privileges or user interaction to exploit. …

Harmony is working with exchanges to freeze funds and is preparing a patch after claims that 2.8 billion unauthorized ONE hit trading platforms.

In brief Ledger says the Coldcard exploit is a warning for the hardware Bitcoin wallet industry but says its own devices were not affected. The company argues independently certified hardware random number generators are …

In brief The Coldcard exploit is ongoing, with Galaxy Research now tracking about $88.6 million stolen across 4,585 addresses in three waves. Galaxy’s Alex Thorn described the sweeps as deliberate and likely LLM-orchestrated, warning …