MetaMask's validator key rotation after its Sept. 30 breach sends clients' staked ETH through exit and re-entry queues of about 45 days each. Joseph Lubin says self-custodied wallets were never within the attackers' reach, so the cost of the incident lands on staking clients.
Perspective Coverage
4 publishers
- Builder
- Builder 22%
- Operator
- Operator 44%
- Investor
- Investor 34%
Reality
- Evidence58
- Adoption60
- Hype gap+35
- Incentives50
- Confidence60
Japan froze the assets of Garantex, a Moscow crypto exchange that processed at least $96 billion, in Russia sanctions that took effect on October 2. Any exchange or payment firm that touches Garantex now carries Japanese legal risk on top of its US and EU exposure.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 54%
- Investor
- Investor 30%
Reality
- Evidence80
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence75
Chainalysis tied the $387 million Bitget hack to North Korea-linked hackers, saying it pushed their 2026 crypto theft past $1 billion. Its AI cut more than 20 hours of tracing to minutes, while the bill falls on a Bitget user fund the exchange puts above $464 million.
Perspective Coverage
3 publishers
- Builder
- Builder 32%
- Operator
- Operator 41%
- Investor
- Investor 27%
Reality
- Evidence70
- Adoption25
- Hype gap+35
- Incentives60
- Confidence65
Treasury's OFAC sanctioned 10 people over Ploutus ATM jackpotting, a scheme US officials tie to at least 1,500 attacks and $40.7 million in losses. Treasury calls the thefts a key revenue source for the Venezuelan criminal group Tren de Aragua.
Perspective Coverage
5 publishers
- Builder
- Builder 19%
- Operator
- Operator 56%
- Investor
- Investor 25%
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap+20
- Incentives55
- Confidence68
OFAC designated A7, a Russia-linked payments network that reportedly settled over $86 billion in its first year, a transnational criminal organization. FinCEN's same-day proposal to bar transfers through A7's sub-agents gives banks and crypto firms a new screening job aimed at intermediaries.
Perspective Coverage
6 publishers
- Builder
- Builder 17%
- Operator
- Operator 47%
- Investor
- Investor 36%
Reality
- Evidence70
- Adoption62
- Hype gap+15
- Incentives55
- Confidence70
Ostium is rebuilding its trading stack around Gateway, three months after an attacker holding legitimate oracle-signer credentials drained $23.75 million. The new system has to keep execution fast enough for institutional hedging and also show that stolen credentials can no longer push a false price through.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+35
- Incentives65
- Confidence45
Bitget says attackers stole $387.5 million after exploiting zero-days in two third-party security appliances. Investigators say the appliances' privileged access led the attacker to its production wallet server.
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence60
ESMA proposed a new regulated MiCA service for firms that give users access to DeFi, a sector the EBA and ESMA put at about 4% of global crypto value. Exchanges and wallet apps serving EU users would carry the compliance cost, while the protocol code itself stays outside the regime.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence40
Senate staff say Tether froze 5 of 39 Hezbollah-linked wallets Israel named in 2023 while $34.6 million left the rest. Treasury and the Justice Department can act on that freeze record more readily than on the report's 84% USDT share when they answer Blumenthal by Oct. 9.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+20
- Incentives60
- Confidence55
Bitget said a flaw in a third-party security product gave an attacker the internal credentials used to take about $388 million on September 24. With the product unnamed and no fix confirmed, other companies running it cannot yet check their own exposure.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence45
Bitget CEO Gracy Chen publicly asked THORChain to refuse service to the wallets that took $387.5 million, after Circle and Tether stopped nearly $318,000. Much of the rest now depends on a no-KYC swap protocol that has declined to block stolen funds in earlier hacks, including its own.
Perspective Coverage
3 publishers
- Builder
- Builder 38%
- Operator
- Operator 40%
- Investor
- Investor 22%
Reality
- Evidence57
- Adoption44
- Hype gap+12
- Incentives68
- Confidence55
Bitget says attackers took over a wallet backend system and fed its authorization process spoofed data, moving out $387.5 million without stolen keys. For teams running payouts, the data an approver trusts now belongs on the same review list as the keys.
Perspective Coverage
3 publishers
- Builder
- Builder 23%
- Operator
- Operator 40%
- Investor
- Investor 37%
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+18
- Incentives62
- Confidence60
Alloc Init's Shielded Bitcoin paper claims Zcash-style private transfers on Bitcoin with no soft fork or consensus change. Moving coins into and out of the pool still depends on witness encryption the authors have not finished.
Reality
- Evidence35
- Adoption0
- Hype gap+45
- Incentives50
- Confidence40
Chainalysis Government Solutions filed at the Court of Federal Claims on August 17 over a sole-source blockchain forensics award to TRM Labs. The contract's value has not been disclosed.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 44%
- Investor
- Investor 40%
Reality
- Evidence72
- Adoption58
- Hype gap−15
- Incentives75
- Confidence66
Operation Economic Outcast names nearly 60 targets, but the durable change is the standing authority to designate foreign firms in crypto, technology, gold, aviation and shipping.
Perspective Coverage
6 publishers
- Builder
- Builder 15%
- Operator
- Operator 52%
- Investor
- Investor 33%
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap+40
- Incentives60
- Confidence65
A 20-minute push on TONIC's price bought the attacker $74 million in borrows against it, but only about $6 million reached Ethereum before Cronos stopped producing blocks and rewound its own state.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 50%
- Investor
- Investor 28%
Reality
- Evidence68
- Adoption12
- Hype gap+20
- Incentives50
- Confidence62
Prosecutors valued the take at 4,100 bitcoin, more than $245 million, drained after one Washington holder granted Google Drive access and read out security codes; every other victim named in the case totals about $14.8 million.
Perspective Coverage
5 publishers
- Builder
- Builder 19%
- Operator
- Operator 49%
- Investor
- Investor 32%
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence64
Treasury puts Xinbi's throughput above $24bn since 2022 and TRM Labs says $36bn, but the Secret Service and Elliptic have frozen $52.8m, and the last two guarantee markets designated this way were replaced rather than removed.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 60%
- Investor
- Investor 18%
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap+25
- Incentives60
- Confidence65
The group calling itself iamnotavillain wants 6,000 Monero within 24 hours and Revolut says no demand has reached it. The data went out through a government email account the bank was obliged to answer.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence55
Manhattan prosecutors are examining whether Binance knowingly allowed trading that breached US sanctions on Iran, and the compliance numbers the exchange offers in response cover four named venues and about $4 million of flow.
Perspective Coverage
3 publishers
- Builder
- Builder 5%
- Operator
- Operator 45%
- Investor
- Investor 50%
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+40
- Incentives70
- Confidence60
Earlier coverage
- EvilTokens rented an AI-powered inbox-scanning tool and a device-code MFA bypass for a $1,500 fee plus $500 a month
Security · September 22, 2026 · 8 publishers
- Covering Bitget's $351 million hack would use three-quarters of its user protection fund
Invest · September 24, 2026 · 1 publisher
- TRM sizes this year's AI agent payments on x402 at $4 million at the outside
Invest · September 23, 2026 · 3 publishers
- BlackRock paper, co-written with ETF product executives, floats exchange-traded compute futures
Invest · September 23, 2026 · 1 publisher
- Cutting A7A5's route into liquid stablecoins took its daily volume down 96%
Invest · September 22, 2026 · 1 publisher
- Woman gets 18 months for false tax return over $2.6m in unreported income tied to $16m crypto case
Invest · September 21, 2026 · 1 publisher
- One valid signature emptied Fetch.ai's token converter of 8.7 million FET
Invest · September 20, 2026 · 1 publisher
- South Korea built its Polymarket gambling case out of public blockchain records
Invest · September 17, 2026 · 3 publishers
- CoinEx gives customers 98 days to empty a solvent exchange
Invest · September 16, 2026 · 3 publishers
- A 1.00% month puts tokenized RWAs about $4.8 billion behind their 2026 average pace
Invest · September 14, 2026 · 1 publisher
- TRM screens out $27 million of x402's $52.7 million before counting any agents
Invest · September 13, 2026 · 1 publisher
- Screening Xinbi's 52 blocked addresses catches about 35% of the $24bn Treasury counted
Invest · September 11, 2026 · 2 publishers
- Harmony offers validators nine times its DeFi TVL to switch off its own chain
Invest · September 7, 2026 · 3 publishers
- Symbiosis's attacker turned 2^62 fake syBTC into 4.39 real WBTC
Invest · September 11, 2026 · 1 publisher
- FinCEN tallies $12.7 billion in crypto scam losses across 33,000 reports from financial institutions
Security · September 10, 2026 · 1 publisher
- Iran's exporters swapped a state exchange rate for Tether's freeze button
Invest · September 9, 2026 · 1 publisher
- Liquid's $320M peg-out ran on an authorization key reported unbreached
Invest · September 6, 2026 · 1 publisher
- Ajna's oracle-free design loses $775,000 to its own liquidation arithmetic
Invest · August 29, 2026 · 1 publisher
- The $24M "AI mining" Ponzi: the wrapper was new, the payment schedule was not
Invest · August 25, 2026 · 3 publishers
- Five curators, $11.29B: the vault market where diversifying buys the same risk twice
Invest · August 25, 2026 · 1 publisher
- Maya's six-bug exploit cost $1.7M and 89% of CACAO. Every bug worked as written.
Invest · August 24, 2026 · 1 publisher
- Rust's arrayref hijack lasted 86 minutes, and Wiz ties it to North Korea
Invest · August 20, 2026 · 1 publisher
- Maya's $1.7M six-bug exploit: the balance monitor rings after the money is gone
Invest · August 19, 2026 · 1 publisher
- A 2022 oracle hack starts moving again, three days after Pando shut its books
Invest · August 18, 2026 · 1 publisher
- DOJ Flew a $165M Ponzi Case Home From Fiji, Which Resets the Affiliate Math
Invest · August 18, 2026 · 1 publisher
- Washington deputises private cyber firms, and hands their customers a liability question
Invest · August 17, 2026 · 1 publisher
- Chainalysis sues over ICE's $94.7M award to TRM Labs, and the filing is sealed
Invest · August 17, 2026 · 1 publisher
- Singapore's exchange raids stop looking like incident response
Invest · August 15, 2026 · 2 publishers