Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

thehackernews.com Sep 8, 2026

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

Curated by Shubham · TechCapsules · Sep 8, 2026

AI-summarised brief · reviewed before publication

CrowdStrike has identified a financially motivated threat group, dubbed Slim Spider, conducting sophisticated attacks on Brazilian financial institutions since March 2026. The actors leveraged deep knowledge of Brazil’s instant‑payment system Pix, digital‑asset platforms, and cloud environments to infiltrate a major bank’s cloud infrastructure. Using custom Bash scripts, they harvested temporary cloud credentials, enumerated secrets in the cloud credential manager, and exfiltrated cryptocurrency custody keys. The group then employed the Foundry Ethereum toolkit’s “cast” utility and OpenSSL to derive wallet addresses and sign transactions without third‑party libraries. Further steps included deploying backdoors disguised as legitimate binaries, compromising Azure DevOps pipelines, and spreading implants across a Kubernetes cluster, including a “spi” implant mimicking the Pix infrastructure. An exposed C2 panel revealed compromised hosts across multiple banks, and the Go‑based backdoor MikeDor was also used to harvest data.

💡 Why It Matters

· By stealing custody credentials, Slim Spider can directly authorize crypto withdrawals, turning cloud misconfigurations into immediate monetary loss for banks and their customers.

Read full article on thehackernews.com

15 Best Cryptocurrency Apps in 2026 for Trading & Wallets

The article reviews the top cryptocurrency applications for 2026, categorizing them into trading platforms, portfolio trackers, and self‑custody wallets. It highlights Bybit’s futures platform, which logged over $11.48 billion in 24‑hour volume, underscoring the massive activity on major exchanges. For beginners, Coinbase and Kraken are recommended for their intuitive interfaces, while Binance, OKX and Bybit cater to advanced traders with extensive markets and derivatives tools. MEXC, Bitget and KuCoin appeal to users seeking low fees, a wide altcoin selection, or copy‑trading features. Portfolio tracking is covered by CoinStats, Delta and CoinMarketCap, each syncing multiple accounts with varying depth of analytics. Finally, MetaMask and Trust Wallet provide software self‑custody, whereas Ledger and Trezor deliver offline hardware security for long‑term holdings.

💡 The surge in trading volume and diversified app ecosystems shows crypto’s entrenched role in global finance, forcing users to navigate increasingly specialized tools.

analyticsinsight.net · Sep 8

Can Bitcoin be Hacked by Quantum Computers? Understanding the Quantum Threat to…

Bitcoin is currently secure against existing quantum computers, but future quantum machines could threaten its cryptographic foundations, specifically the private keys that authorize spending. Researchers are proactively developing quantum‑resistant solutions, with StarkWare demonstrating the first quantum‑safe Bitcoin transaction on mainnet in August 2023. The experiment, executed on block 964,199, protected a 10,000‑satoshi output without altering Bitcoin’s consensus rules, though it was non‑standard and costly. The risk mainly concerns addresses whose public keys have been exposed after spending, making them vulnerable to Shor’s algorithm. Bitcoin’s long‑term security will likely require protocol changes and widespread wallet upgrades before powerful quantum hardware emerges.

💡 The demonstration proves that quantum‑safe mechanisms can be deployed on Bitcoin’s existing network, offering a practical pathway to future-proof the currency. It signals a shift from theoretical risk to actionable defense, urging stakeholders to prepare for the inevitable quantum era.

techcrunch.com · Sep 8

A hacker stole $340M in a crypto heist, then returned most of…

A hacker stole roughly $340 million in bitcoins from Liquid Network’s wallet, a settlement platform used by multiple cryptocurrency exchanges. The theft, one of the largest crypto heists of the year, was carried out by a “white‑hat” hacker who exploited a software bug. Blockstream, the operator, paused operations and later fixed the vulnerability. About 3,400 of the 4,000 stolen bitcoins were returned, but roughly 600 coins, worth about $47 million, remain in the hacker’s possession. Operations will stay halted until further security upgrades are completed.

💡 The incident underscores the persistent vulnerability of even high‑profile crypto infrastructure, prompting a reevaluation of security protocols across the industry.

thehackernews.com · Sep 8

Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M…

A hacker group that claimed to be white‑hat stole nearly 4,000 BTC from the Liquid Network on September 6. The next day, 3,400 BTC (≈$265 million) were returned to the Liquid Federation address, leaving 598.5 BTC (≈$47 million) unreturned. The theft used a bug in Elements that created L‑BTC, which was then peg‑out to the main chain. Blockstream confirmed the return after patching its bridge nodes, but the Liquid sidechain remains paused and the incident is still active.

💡 The incident exposes a critical vulnerability in a major Bitcoin sidechain, underscoring the need for rigorous security audits and rapid response protocols in decentralized finance infrastructure.

chiangraitimes.com · Sep 8

UAE Crypto & Virtual Asset Law Updates: What Businesses Must Understand in…

The United Arab Emirates continues its pursuit of becoming a global hub for digital innovation and blockchain technology, necessitating strict regulatory compliance for crypto businesses. The country employs a multi-regulatory framework rather than a single authority. In Dubai, the Virtual Assets Regulatory Authority (VARA) enforces licensing under Law No. 4 of 2022, imposing fines or suspension for non-compliance. The Securities and Commodities Authority oversees mainland operations, mandating adherence to anti-money laundering laws and customer due diligence. Financial free zones like the Abu Dhabi Global Market and Dubai International Financial Centre maintain distinct, comprehensive regimes for digital assets. Companies must secure specific approvals, implement robust Know Your Customer policies, and adhere to strict marketing restrictions. Corporate governance requirements include internal compliance systems and risk management. Furthermore, jurisdictions mandate the segregation of client funds and secure custody arrangements. These evolving oversight frameworks aim to create a safe, transparent environment, treating crypto entities with compliance expectations similar to traditional financial institutions.

💡 Fragmented jurisdiction forces firms to navigate complex, overlapping compliance landscapes across Dubai, the mainland, and free zones. This regulatory patchwork increases operational costs while simultaneously signaling to global investors that the UAE prioritizes institutional-grade security over unchecked innovation.

siliconangle.com · Sep 8

Hackers steal $320M in bitcoin from Liquid Network, return most of it…

Hackers stole approximately $320 million in bitcoin from the Liquid Network over the weekend by exploiting a vulnerability in the Elements open-source project. The attackers utilized the peg-out authorization key to access SideSwap, the system managing deposits and withdrawals. Although the maintainers claimed the key itself was not compromised, the flaw allowed the theft of 4,000 bitcoin, representing 95% of the network’s reserve. In an unusual development, the hackers returned most of the stolen funds earlier today. They retained 598 bitcoin, valued at roughly $47 million, citing it as a bounty for exposing the security issue. The Liquid Network, launched in 2018 by Blockstream Inc., operates as a layer two Bitcoin sidechain. It relies on a centralized workflow involving about 80 organizations to verify transactions, differing from Bitcoin’s decentralized node verification. Other cryptocurrencies on the sidechain remained unaffected by the breach.

💡 The partial return of funds challenges the typical narrative of irreversible crypto theft, suggesting attackers may prioritize exposure over pure profit. This incident exposes critical risks in centralized sidechain architectures that depend on limited validator groups for security.