Crypto Hacks and Security

This page collects every CryptoTicker.io report on attacks and fraud in the crypto market: hacked exchanges, exploits in DeFi protocols and bridges, stolen NFTs, wallet drainers, phishing, abused token approvals and rug pulls. The newest cases are at the top.

A hack is rarely over after one day. Funds get moved, exchanges freeze accounts, projects announce reimbursements. We therefore keep ongoing cases up to date with dated updates, the latest one always at the top of the article.

How to protect yourself

  • Revoke approvals. Most wallet drainers and many protocol exploits reach your funds through approvals you once granted to a contract. Check them regularly, for example with revoke.cash or in the approvals section of your block explorer, and revoke what you no longer need.
  • A hardware wallet protects your key, not your approvals. It stops anyone from stealing your private key. It does not stop an approval you signed yourself if the contract behind it is exploited later. Only sign what you can read and understand on the device.
  • Check your exchange balance. After an exchange hack, what matters is whether the exchange covers customer losses and whether withdrawals work. Keep only what you need for trading on an exchange and look for a MiCA licence.
  • Never enter your seed phrase. No support agent, airdrop page or wallet update will ask for it. Links from direct messages and sponsored search results are a common way onto phishing sites.

All reports

Ongoing cases are kept up to date with dated updates.

Verpackung eines kleinen Elektronikgeraets mit aufgerissenem Sicherheitssiegel auf einem Ladentisch

Ledger Confirms Implant in a Hardware Wallet as Reports Reach Europe: What Is Behind It

Ledger confirms an unauthorised additional circuit board in a tampered device and traces the confirmed cases to a reseller in South-East Asia. One report from European retail is still open, which makes the purchase route of your own device the criterion.

yesterday

Münze mit dem USDD-Zeichen hinter einem verriegelten Stahlgitter

14.7 million swapped into USDD, 20 addresses frozen: what to check with your stablecoin

After the thefts among Ledger buyers, Tether has frozen more than 20 addresses and locked up around $10 million. Because part of the loot was swapped into USDD, the case shows exactly how far a stablecoin's freeze function reaches.

2 days ago

Drei Metallschlüssel auf einer Stahlwerkbank, zwei davon gemeinsam in einem Doppelzylinderschloss gedreht, der dritte liegt abseits

Bitget Wallet is not the exchange: one of two required key shares sits on Bitget's server

The attack on the Bitget exchange of September 24, 2026 hit the venue's hot and warm wallets, not the keys in users' wallets. What matters all the same is which variant you run: in the keyless wallet every signature needs a key share from the provider's server.

2 days ago

Gestanzte Edelstahlplatte zur Sicherung einer Wiederherstellungsphrase auf dunklem Schiefer, die Stanzfelder sind leer

Fake Ledger Site Tops Google Search: “Once the recovery phrase has been handed over, the wallet must be regarded as compromised”

A security researcher reports a rebuilt Ledger site high up in Google's results that asks for the 24-word phrase. Running alongside it are emails with an invented deadline of October 15.

4 days ago

Rotweißes Absperrband straff vor einer schweren Stahltür in einem dunklen Betonkorridor, hartes Seitenlicht einer Notleuchte, am Türrahmen ein kleines Metallschild mit eingraviertem Bitcoin-Zeichen

Revolut data breach: the bank pays for new ID documents for 680 customers, and what you can do now

Revolut will cover the fees for new identity documents where customers hit by the data theft need them. 680 accounts are affected, and for crypto holders a leaked KYC record weighs more heavily than a blocked card number.

4 days ago

Aufgebrochenes Stahl-Vorhängeschloss mit glatt durchtrenntem Bügel vor einer geschlossenen Stahltür, daneben eine Messingplakette mit eingraviertem Währungszeichen

XRP Ledger Closes a 2015 Flaw That Could Create XRP Out of Nothing: What It Means for Your Coins

The XRP Ledger has disclosed an overflow in its payment engine that sat in the code since 2015 and could have created spendable XRP far beyond the total supply. The flaw is closed with xrpld 3.4.1, with no indication of exploitation.

4 days ago

Aktenkoffer aus Leder mit offener Handschelle am Griff auf einer Holzbank im leeren Gerichtssaal, Bitcoin-Zeichen in das Messingschloss graviert

Guilty Verdict over a $53.3 Million DeFi Exploit: What Investors in Germany Need to Know

A Manhattan jury has treated the exploitation of a smart contract flaw as computer fraud, throwing out the “Code is Law” defence after a little over two hours. For holders in Germany, what counts above all is that MiCA does not cover decentralised pools and that nobody is liable when something goes wrong.

6 days ago

Zwei fast identische Metallmuenzen auf schwarzem Samt unter einer Juwelierslupe in einer behandschuhten Hand

Shiba Inu on Solana: two verified tokens carry the SHIB ticker, and what matters now

Shiba Inu has been trading on Solana since October 4. Two verified tokens now carry the same ticker there, and the one with the most holders is not Shiba Inu. How to recognise the canonical mint address, and why the familiar safety rule misleads here.

7 days ago

Aufgebrochenes Bügelschloss an einer schweren Stahltür in einem dunklen Technikgang, die Tür einen Spalt offen

$6 million out of a Base vault: what you can do now with your DeFi deposits

A vault on Base was drained of around 1,783 wstETH on October 4, 2026, about $6 million. The route ran through an entry on the permission list, not through a hole in Aave's protocol.

9 days ago

Leitstand eines Rechenzentrums bei Nacht mit erloschenen Monitoren und einem roten Warnlicht

Chainalysis attributes $387 million from the Bitget hack to North Korea: what matters now for investors in Germany

The analytics firm Chainalysis attributes the theft of around $387 million at Bitget to actors with ties to the DPRK and puts the annual total above one billion dollars. What that means for custody, choice of exchange and record-keeping in Germany.

9 days ago