Security

A contractor brought in through a third-party provider worked on MetaMask code from March until Consensys cut off access in April and paused product releases. The company says it found no stolen assets, exposed data or malicious code.

Thai police made two arrests as Interpol's 97-country sweep logged 5,811 arrests and $293 million in intercepted assets.

Web3 security incidents cost the industry more than $1.31 billion across 344 events in the first half of 2026, according to CertiK's Hack3D H1 2026 Report, published Monday. Net losses stood near $1.2 billion after frozen and recovered funds, the blockchain security firm said. Headline totals show…

THORChain developers announced that one of six Asgard vaults was compromised, resulting in approximately $7.4M in unauthorized outbound transactions before the network halted signing activity.

LayerZero Labs acknowledged a Lazarus Group attack on internal RPCs and a multisig signer's unauthorized personal trade, impacting 0.36% of assets on the protocol.

The Security Council has been in the spotlight in recent weeks after its decision to freeze over 30K ETH connected to the Kelp bridge exploit.

Analysis of 2,665 LayerZero OApp contracts shows nearly half rely on single-validator security configurations, the same setup that exposed KelpDAO's rsETH to exploitation.

Bitcoin developers and researchers have proposed a mechanism to freeze coins vulnerable to quantum computing attacks as an incentive for users to upgrade their security.

CoW Swap's primary domain swap.cow.fi is currently inaccessible due to a lock, with the team working with security experts to regain control.

Security researcher Taylor Monahan claims North Korean IT workers have infiltrated more than 40 decentralized finance platforms, with the $280 million Drift Protocol exploit last week being the latest operation tied to the network.