DeFi2026-09-25 11:38:48Payy Network, Duelbits, and Meter lose more than $11 million in three attacks over one dayThree separate crypto security incidents hit in a single day, pushing combined losses past $11 million, according to Protos. Payy Network was the first to be exploited after its Ethereum bridge was drained of its full balance, with losses pegged at $1.8 million. The company said the stolen assets were users’ non-custodial deposits tied to Payy Network and Payy Wallet, and paused all transactions while the investigation continues. Duelbits, a crypto casino and sports betting platform, was then hit in what was described as a suspected private key compromise. Estimates climbed from $4.3 million to $5.9 million before co-founder Joe put the figure at about $7 million. He said the platform would remain offline until the team understood what happened, while adding that user funds were safe and hot wallets would be replenished before services resumed. Meter.io, an EVM blockchain, disclosed a separate bridge-related incident tied to a block validation flaw. The attacker minted unbacked MTR and MTRG, sold them on PancakeSwap, and bridged funds out, with reported losses of roughly $2.3 million. Meter paused its mainnet and bridge, said chain state had been preserved, and told users to stop all activity. The sell-off sent MTR and MTRG down almost 80% and 75%, respectively.410
Chainflip2026-09-13 12:53:44Chainflip says 736,442.17 USDT was stolen in Tron USDT exploit, restart targeted around MondayCross-chain protocol Chainflip disclosed an attack involving Tron USDT and said 736,442.17 USDT was stolen through six unauthorized payouts. The project also said 115,654.41 USDT tied to user swaps remains in the vault after payout failures, while all other funds were unaffected. According to Chainflip, the attacker abused a flaw related to Tron transaction memos by attaching custom memos to validator-signed transactions, causing the system to treat the same deposit as a separate swap and issue another refund. Chainflip said the attacker carried out eight operations over roughly 90 minutes and increased the amounts over time. The team said a fix has been completed, the stolen funds have been flagged with relevant institutions in an attempt to recover them, and operations are expected to resume as early as Monday. Chainflip also said it will cover losses suffered by affected users.930
Zeabur2026-09-10 01:55:12Zeabur says August security breach exposed database access and some user secretsCloud deployment platform Zeabur has released its full investigation into an August security incident that led to unauthorized access to part of its production database and the reading of some users’ project environment variables. According to the report, the attack began with a vulnerability in a user-deployed NextChat v2.16.1 service running in a Tokyo shared cluster. The intruder then moved through cached routing data containing legacy Zeabur API keys, obtained an administrator key, accessed internal services holding AWS credentials including a long-retained AWS root key, and eventually reached the production database through a maintenance job connected over a private network. Zeabur said the exposed data may have included third-party and AI service API keys, cloud access credentials, database connection details and passwords, GitHub tokens, JWT secrets, and application signing keys. It added that while attackers created new AI Hub access keys, usage and billing logs showed those keys were not used and generated no charges. The company has since disabled Legacy API Key authentication, rotated internal keys and passwords, cut the shared cluster’s path to the production database, added stronger authorization controls and alerts, and advised all users to replace any still-valid credentials that had been stored in environment variables.1160
security brea2026-09-05 21:43:40XRPH Wallet Hit by Security Breach, Loss Amount UnknownXRPH Wallet has experienced a security vulnerability that led to unauthorized transactions. Multiple users reported compromised accounts, resulting in losses of XRPH and XRPHAI tokens. The exact financial impact has not been determined. The development team is investigating the root cause and tracking stolen funds. XRP Healthcare has urged users to stop using the wallet immediately and is collaborating with partners to freeze and recover affected assets. The team promised to release detailed information after confirmation. The cause and scope are still under investigation. The news was reported by U.Today and Techub News.910
Rain2026-09-04 04:15:03Rain Hackers Move $1.1M Stolen Funds to Tornado CashThe attacker behind the Rain card contract exploit has cross-chain transferred approximately $1.1 million in stolen funds to Ethereum and washed them through the Tornado Cash mixer. Blockchain security firm Blockaid tracked the incident, which affected multiple crypto neobanks including Avici and Tria, impacting over 2,300 users. Rain has upgraded all vulnerable contract versions but has not yet released a full technical report explaining why some programs still used outdated contracts.950
Ledger2026-09-03 03:10:44Ledger Hit with US Class Action Over 2023 Security Breach, Customer Data Leak Led to Crypto TheftEncrypted hardware wallet maker Ledger faces a class action lawsuit in the United States over a 2023 security incident. The plaintiffs allege the breach exposed customer names, emails, and phone numbers, and that Ledger failed to timely and fully disclose the incident. Hackers used the leaked data to impersonate Ledger and trick users into approving fraudulent transactions, stealing crypto assets.990
Ledger2026-09-03 03:10:53Ledger Hit with Class Action in New York Over Incomplete Disclosure of Security BreachA class action lawsuit has been filed against Ledger in New York, alleging that the hardware wallet manufacturer failed to fully disclose a December 2023 security incident that exposed customers' personal information. Hackers used the leaked contact details to impersonate Ledger and trick customers into approving fraudulent transactions, leading to crypto asset theft, with data also appearing on the dark web.1050
Crypto.com2026-08-31 08:30:57Crypto.com-Linked Lending Platform Hit in Apparent Exploit, Losses May Top $74 MillionA digital asset lending platform linked to Crypto.com may have suffered losses exceeding $74 million after an attacker manipulated the price of a token used as collateral, according to blockchain security firm PeckShield. The attacker was able to borrow more than $74 million from the platform and has already withdrawn at least $6 million, the firm said. The exploit was tied to a price manipulation weakness involving the collateral token, leaving the platform exposed to heavy losses. At this stage, the name of the platform involved has not been disclosed. The extent of Crypto.com’s exposure also remains unclear. The incident was cited by Bloomberg Crypto in the source report.940
