The $306M Phishing Tax: Why Crypto's Biggest Vulnerability Is No Longer Code
Hacken's Q1 2026 report shows phishing and social engineering drove $306M of $482M in crypto losses as attackers pivoted from Solidity exploits to human targeting. A single $282M hardware wallet scam exposed why even 18-audit protocols bleed capital when the human and infrastructure layers stay unprotected.
45 Seconds to Drain Your Wallet: Inside Ledger's MediaTek Dimensity 7300 Exploit
Ledger's Donjon team extracted seed phrases from Android hot wallets in 45 seconds by exploiting an unpatchable boot ROM flaw in MediaTek's Dimensity 7300 — the same chip powering the Solana Seeker.
Resolv Hack: How One AWS Key Minted $25M and Broke DeFi Again
A $100K deposit minted $25M in unbacked USR tokens after an attacker compromised a single AWS KMS key. The Resolv hack exposes how cloud infrastructure has become DeFi's weakest link.
Ketman Project: How 100 North Korean Operatives Slipped Inside Web3
An Ethereum Foundation-backed investigation identified 100 North Korean operatives embedded across 53 crypto projects — turning Web3's hiring funnel into its most exposed attack surface.
The $4.8M Press Release: How South Korea's Tax Agency Leaked a Seed Phrase and Got Saved by an Illiquid Token
South Korea's tax agency published a seized Ledger wallet's seed phrase in a press release. A $4.8M theft followed — and only the target token's terrible liquidity forced the attacker to send it back. A cautionary tale for every government now holding billions in crypto.
South Korea's $4.8M OpSec Catastrophe: How the National Tax Service Photographed Its Own Seed Phrase and Got Robbed Twice in 48 Hours
South Korea's National Tax Service published a seized Ledger wallet's seed phrase in a press photo — and lost $4.8M to two different thieves in 48 hours. A case study in why government crypto custody needs qualified custodians, MPC, and real SOPs.
Operation Atlantic: How Coinbase, the Secret Service, and the NCA Froze $12M in Stolen Crypto in One Week
Operation Atlantic united Coinbase, the US Secret Service, and the UK NCA to freeze $12M in stolen crypto and identify 20,000 victims across 30 countries in a single week — marking a shift from reactive investigation to real-time blockchain crime intervention.
Circle Had 6 Hours to Freeze $285M in Stolen USDC — It Did Nothing
Circle let $232M in stolen USDC flow through its own CCTP bridge for six hours during the $285M Drift Protocol hack — days after freezing 16 wallets in a civil case. The selective enforcement scandal exposes a governance crisis in the $308B stablecoin market.
DeFi's Q1 2026 Hack Report: $169M Stolen as Attackers Ditch Smart Contracts for Private Keys and Cloud Infrastructure
DefiLlama data shows $169M stolen from 34 DeFi protocols in Q1 2026 — down 89% YoY but masking a dangerous shift. The costliest attacks bypassed smart contracts entirely, targeting private keys (Step Finance $40M), cloud infrastructure (Resolv Labs $23M), and oracle systems (Drift Protocol $285M). Analysis of the evolving threat landscape and what protocols must do now.