TechCapsules

LNbits, an open‑source Bitcoin Lightning wallet platform, warned all operators to shut down their servers after a series of attacks exploited a vulnerability in the software. One operator reported that an attacker used an unknown extension to siphon 2,285,545 satoshis (≈0.023 BTC) from his instance before the warning was issued. The project issued an initial advisory at 12:33 UTC, asking users to disable the Paywall add‑on, and followed with a full shutdown notice 80 minutes later. No patches had [...]

Keplr wallet users who logged in with Google or Apple accounts suffered theft after a vulnerability in Web3Auth, the provider of the social‑login service, was exploited. The flaw gave the attacker access to private keys, allowing funds to be moved from compromised wallets. Web3Auth responded by using the same breach path to transfer assets from at‑risk accounts into designated recovery wallets before the thief could act, a process coordinated with Keplr. The rescue operation covered more than [...]

Last week, hackers stole $6.3 billion from Binance wallets, the largest financial heist ever. Binance froze nearly $3 billion, but the breach still dominated headlines. Security researcher Christopher Lopez and others suspect the attack began on a Mac, echoing the $1.5 billion Bybit theft that also started on a developer’s Mac. Mac users, especially DevOps and crypto professionals, have faced increasing malware and social‑engineering attacks, raising concerns about platform security.

Binance disclosed that a $6.43 billion theft from its platform resulted from a coordinated, multi‑stage attack that began with a trojanized Homebrew installer used by a Wallet DevOps engineer in June 2026. The malware installed a malicious AI tool, exposing internal credentials. In September, attackers posed as a recruiter on a job‑hunting site, conducted fake interviews with a second engineer, and delivered a poisoned code repository that compromised his workstation. By October, the threat actors leveraged the compromised [...]

Binance announced it would resume withdrawals in a phased manner after a $6.3 billion hack that froze all deposits and withdrawals. The exchange reported covering 95 % of the stolen assets and is still sourcing the remaining, less liquid holdings. Binance confirmed it would absorb the financial loss and not pass it on to users. Withdrawals will restart gradually, with Bitcoin and Ethereum services partially suspended, and users may experience delays. The company will publish a detailed incident report [...]

The FBI announced that the North Korean‑aligned hacking collective known as TraderTraitor, also identified as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces and UNC4899, stole more than $6.43 billion in cryptocurrency across 11 blockchains. investigators from the FBI, U.S. Secret Service and IRS‑CI said the group primarily converted the loot into Ethereum before moving it through decentralized‑finance swaps and instant‑swap services for further laundering. Binance resumed phase‑one withdrawals after pausing them following the breach, noting that deposits remain unaffected. The theft [...]

On October 29, malicious code injected into Polymarket’s website hijacked a third‑party DebugBear page‑speed script and used signed‑in traders’ credentials to transfer their positions and funds to a hacker‑controlled wallet. The attack moved roughly $2.64 million worth of POL tokens from 33 wallets in under an hour, after which the funds were quickly split among three addresses. Polymarket identified the breach, removed the compromised script within an hour, cleared caches, reset sessions and paused trading. The company is refunding [...]

Trezor has warned that a Safe 5 hardware wallet purchased from reseller CryptoBilis contains an unauthorized circuit board that captures and transmits the recovery phrase via a cellular module. The device, sold through Tokopedia in August 2026, was reported by an Indonesian customer who noticed a weight difference and later discovered the board. Trezor is urging all CryptoBilis buyers since March 2026 to replace their wallets and is sending the suspect unit to its lab for examination. No [...]