News linked to this event type.
Ari Paul, founder and chief investment officer of digital asset investment firm BlockTower Capital, stated on social media that Coinbase caused his firm to lose $25 million several years ago. Paul accused Coinbase of concealing large-scale, repeated security breaches and refusing to return the related funds.
MistTrack monitoring indicates that a Bitget attacker recently attempted to transfer stolen funds through the cross-chain liquidity network Chainflip, but the deposit was rejected by the relevant broker (Broker). The platform did not freeze the funds, but instead executed a return to the originating address. MistTrack stated it will continue to track the subsequent flow of the stolen funds.
Cross-chain payment and transaction protocol Relay disclosed that a vulnerability in its API interface led to the exposure of pending transaction data. Between September 12 and 26, Maximal Extractable Value (MEV) searchers exploited this flaw to execute sandwich attacks, accumulating approximately $136,000 in profits.
According to Odaily, SlowMist founder Yu Xian posted on X platform that vulnerabilities in iOS versions prior to iOS 27 are being exploited by certain criminal groups to steal crypto wallets from iPhone users. He reminded users to promptly update their iPhone, iPad, Mac and other devices to the latest versions, exercise caution when installing apps from unknown sources, and be careful when opening unknown links through Safari and in-app browsers.
Odaily News: According to monitoring by Bitget CEO, Bitget was hacked on September 24, with approximately $387.5 million in funds stolen, a large portion of which was transferred across chains and primarily consolidated on Ethereum. A report released by NEAR Intents shows that its risk intelligence layer SHIELD detected over $50 million in suspected money laundering transfer attempts; of this, $166,000 in funds went through, while $503,000 was frozen during execution. The frozen funds remain restricted pending subsequent legal and recovery proceedings.
MEXC officials stated that following a recent user asset security incident that drew community attention, the platform promptly established a special task force and contacted the user to follow up on the resolution process. To date, MEXC has reached an agreement with the user regarding all related matters, and the incident has been properly resolved.
MEXC posted on X in response to a recent user asset security incident that drew community attention, stating that it immediately set up a dedicated task force after the incident occurred, got in touch with the user, and followed up throughout the entire process. Currently, MEXC has reached an agreement with the user on the relevant matters, and the incident has been properly resolved. MEXC stated that it will continue to prioritize user asset security and rights, responding promptly and properly handling related issues whenever users need assistance.
Odaily News: Cross-chain protocol Chainlink has released CCIP 2.0, allowing enterprises to add their own security checks for cross-blockchain transfers on top of its default network of 16 operator validators.The upgrade comes after Kelp DAO suffered a $292 million hack in April, an incident attributed to a LayerZero cross-chain bridge setup using a single validator; Kelp DAO subsequently migrated its rsETH token to Chainlink.Chainlink's risk management network no longer operates as a standalone security safeguard, and users who do not add their own validators will rely on one validation network rather than two. (CoinDesk)
According to the official announcement, Bitget has launched the "Companion Program," offering trading rewards, asset rewards, and exclusive benefits across different user segments, designed to reward those who have consistently provided trust and support throughout the recent security incident.
Odaily News NVIDIA has launched a suite of software security tools for AI agents, claiming that these tools could have prevented the hacking incident involving Hugging Face. Hugging Face is an AI programming hub, and NVIDIA acquired it for $13 billion months after it was breached by OpenAI's rogue AI agent. The tool, called OpenShell, leverages NVIDIA CPU hardware features to constrain AI agents and is partnering with Arm and Intel to ensure compatibility. Another system, Sentry, can cut off rogue agents attempting to escape their containers. NVIDIA CEO Jensen Huang has refused broad AI security regulation, treating rogue agents as an engineering problem. (Reuters)
On-chain investigator ZachXBT disclosed that illicit actors assisting a suspected North Korean hacker group with money laundering are currently publicly seeking order processing support on the Discord public servers and Telegram channels of relevant service platforms. The laundered funds originate from the $387 million security breach previously suffered by Bitget.
Odaily News: According to Bitget monitoring, Mandiant and SlowMist are continuing to support the investigation and on-chain tracing of this incident. Bitget has published the identified attacker addresses and related tracing data to support industry collaboration and asset recovery efforts.Bitget expects to complete its internal security report this week and will release further updates once the investigation findings are verified. Bitget stated that the September 24 incident was the first such security event in its 8 years of exchange operations.
加密货币交易平台 MEXC 官方就近期相关事件做出回应，表示平台已成立专项小组，并安排专人跟进相关账户情况及后续处理工作。MEXC 表示将持续推进处理流程，以保障用户的资产安全与相关权益。
Odaily reports, according to Lookonchain monitoring, the Bitget hacker (0xf7bC...96C3) swapped ETH for BTC via THORChain, having stolen $351.6 million.
According to a post by user @shuangfei8, their MEXC account was compromised on September 25 when attackers used forged identification documents to complete a security reset and breach the account within 10 minutes. Although MEXC subsequently froze the account and assisted in its recovery, it failed to revoke the API key created by the attacker during the period of unauthorized control. At 04:12 on September 27, merely 27 minutes after the 24-hour withdrawal restriction was lifted, the attacker exploited this residual API to bypass Google verification and email verification, draining 322,110 USDT and 9,133,999 ONE (totaling approximately $340,000) from the account across six separate transactions. The user has submitted a formal compensation claim to MEXC and attempted to report the incident to the police, demanding that the platform preserve logs, provide a written response regarding the security vulnerability, and return the stolen assets. Furthermore, multiple MEXC users have recently reported receiving suspicious emails resembling a "request to reset security settings," prompting users to immediately navigate to 【API Management】 to check for any unknown API keys.
According to The Block (@TheBlockCo), the Zano network was recently subjected to a Gateway Address vulnerability attack, resulting in the unauthorized minting of ZANO and fUSD that have since entered the market. To contain the losses, the team has urgently restarted the blockchain. The team is currently actively negotiating with affected projects and relevant counterparties regarding compensation for losses, and will publish a formal compensation and claims process in the near future.
Control over the X account of Jack Kong, founder of Nano Labs, a US-listed BNB crypto treasury company, has been regained. Previously, attackers sent a phishing email to a publicly used email address of his. AI misidentified the link in the email as an official X third-party verification link, and after the verification code sent by X to the linked email was entered into the spoofed page, the account was compromised. Scam content was briefly posted during the account takeover.
据国家安全部微信公众号发文，虚拟货币所谓"匿名交易""不可追踪"的特性不过是表象。区块链技术具备公开透明、数据不可篡改等核心特点，任何交易均永久留存于"公共账本"，专业机构可通过链上数据分析与大数据比对等手段溯源钱包地址背后的真实身份，还原资金流转全过程。 文章指出，虚拟货币已成为洗钱犯罪、网络攻击、境外间谍窃密等违法活动的重要工具。2026年 2 月，中国人民银行等多部门重申，比特币、以太币、泰达币等虚拟货币不得作为货币在市场流通，相关业务活动属非法金融活动，一律严格禁止。
DYORSWAP has released an "Official Statement Regarding the Fake GIWA Mainnet 9134 Incident," stating that the incident was not a DYOR contract vulnerability, but rather was caused by a fraudulent network impersonating GIWA Chain 9134. This network had a bridge and batcher similar to OP Stack, deployed on September 27, 2026, at 02:10:59 (UTC+8). Approximately 8.5 hours before deployment, the address received about 0.045 ETH from a ChangeHero-related address. Data shows that a total of 1,335 addresses bridged approximately 767.65 ETH to it, of which about 766.25 ETH was ultimately transferred out from the cross-chain bridge.DYORSWAP stated that it has already used its own funds to compensate affected users with over 200 ETH. Additionally, the team is still tracking the cross-chain bridge deployer, the source of funds, early test wallets, and the subsequent flow of the transferred funds.
Bitget announces that approximately $387.5 million has been stolen; the CEO's request for THORchain to compromise addresses was denied; Vitalik Buterin states that Ethereum is evolving into a "cryptographic world computer".