$282.9M lost this week $2.0B lost in 30 days $95.2B lost this year
Hackers reportedly compromised a Ledger reseller, CryptoBilis, implanting hardware into devices to steal users' recovery phrases. Estimated losses range from $72 million to $93 million, with thefts occurring between October 9-10, 2026. Ledger confirmed an unauthorized hardware implant in at least one affected device and has instructed CryptoBilis to halt sales.
Tether has frozen a significant amount of USDT across addresses linked to an unspecified incident, according to MistTrack.io.
EQIBank had approximately 80% of its assets frozen as part of a seizure targeting Capstone Limited, leading to a material liquidity crisis for the bank. The seizure is linked to allegations of Capstone misrepresenting its business to banks and processing funds from impersonation fraud schemes.
Source: Protos (opens in a new tab)
An attacker moved approximately $6.07 million from Duelbits' hot wallets across five chains in a suspected private-key compromise. The platform was taken offline for investigation and system security, later reopening on September 27, 2026, with deposits and withdrawals enabled. This incident follows a similar $4.6 million theft in February 2024.
Source: Rekt News (opens in a new tab)
A Proof of Concept (PoC) details a reserve manipulation exploit in CrowdRingCircle's sell-destroy mechanism on BSC, which drained approximately 201.36K USDT.
An exploit on PositionManager on the BNB Chain resulted in the loss of approximately 32,080 USDT. The attack involved inflating share prices by manipulating the spot price of USDT/BTCB before depositing, allowing for the draining of the vault's own PancakeSwap V3 position.
DeFi project Abracadabra has proposed an orderly wind-down, citing a string of security incidents that have left its stablecoin MIM with no viable path back to parity. The protocol, which once had a $6 billion TVL, now has $22 million in outstanding MIM supply against only $900,000 in actionable backing, making MIM worth $0.04. The decision follows multiple past exploits totaling $21 million in bad debt, and recent accusations of treasury 'looting' involving significant asset movements.
Source: Protos (opens in a new tab)
Duelbits experienced a suspicious outflow of approximately $4.3 million in cryptocurrency across Ethereum and BNB Chain. The stolen funds were subsequently swapped by the attacker.
A report by Kairos Research examines GHO and sGHO as potential backing assets for USDe, noting that while GHO's peg has held and Aave is overcollateralized, there are concerns about exit liquidity. The report highlights an asymmetry between minting and redemption capacities in Aave's stability modules, with exit capacity being significantly lower than minting capacity, particularly on the Ethereum chain.
Russian intelligence actors are reportedly using Telegram and cryptocurrency to recruit young individuals across Europe for acts of sabotage and violence. Reports indicate offers of cryptocurrency, specifically USDT, were made for arson attacks, with one instance involving thousands of dollars offered for an attack on Sir Keir Starmer's house.
Source: Protos (opens in a new tab)
Blockaid detected an exploit on old Flamincome contracts by Flamingo Finance. An attacker used a flash loan of approximately $18M USDT, inflated the VaultYUSDT share price, and redeemed liquid aUSDT, resulting in about $345.9k USDT profit so far.
Source: Blockaid (opens in a new tab)
GHO Stewards are proposing parameter updates to address GHO's persistent discount below par. These include raising the Horizon borrow rate, adjusting GHO Stability Module (GSM) burn fees for USDC and USDT, and increasing GSM capacity on Monad Network to support greater GHO minting volume.
Cross-chain protocol Chainflip was exploited on its TRON USDT integration due to a logic vulnerability in TRON memo handling, resulting in duplicate refunds and an estimated loss of $736,442.17 USDT. The network has been paused, a fix is ready, and affected users are expected to be compensated.
WealthManagementV2 experienced a loss of 26,414 USDT. The root cause is suspected to be the illegal transfer of owner privileges, likely due to a leaked private key, allowing the attacker to set plans.
A report indicates that a two-key breach could grant hackers control over $91 billion in USDT. The specific mechanism and current status of this potential threat are not detailed in the provided text.
Source: CoinDesk (opens in a new tab)