Two brothers from Texas have pleaded guilty to kidnapping a Minnesota family and stealing $8 million in cryptocurrency. The pair held the family at gunpoint, forcing them to transfer the digital funds. This case highlights growing concerns around crypto-related crimes and the need for stronger digital asset security. Read more: [insert source link here] #CryptoCrime #DigitalSecurity #Cryptocurrency #FinancialSafety

#Crypto 🚨 Secret Network bridge drained $4.7M via infinite mint bug! ⚠️ Major hack exposes DeFi risks. SCRT set for sharp swings. Traders on alert? #CryptoNews #Hack

microsoft warns cryptobandits malware uses usb drives to access wallets, per cryptoslate. aster turned on fees 4d ago, routing 99% of 1m-7m usd daily rev to buybacks and burns. 460m usd total fees since launch, buyback tokens to veaster stakers and burned biweekly.

Talk about getting a taste of your own medicine! 🥪 Ethereum's biggest 'sandwich' bot just got exploited for $7.5 million. Looks like the hunter became the hunted. Always secure your assets! #DeFiSecurity

Ethereum MEV bot “JaredFromSubway” was reportedly drained for ~$7.5M (WETH/USDC/USDT). Attacker swapped to ETH and reportedly sent 1,000 ETH to Tornado Cash. #DeFi #Security

"Microsoft" baru baru ini memperingatkan tentang penyebaran malware jenis Crypto Clipper [ Trojan:Win32/CryptoBandits.A ] yang menginfeksi perangkat melalui flashdisk USB. Malware ini menyusup lewat file pintasan Shortcut untuk mencuri [ Kunci Pribadi Private Keys ] mengekstrak Seed Phrase dan membajak alamat wallet kripto saat pengguna melakukan transaksi. • Ancaman utama : Malware memanipulasi clipboard perangkat saat pengguna menyalin [ COPY ] alamat tujuan wallet kripto, MALWARE otomatis menggantinya dengan alamat milik peretas akibatnya dana yang dikirim korban akan berpindah ke dompet pelaku. • Penyebaran : Menggunakan drive USB sebagai media transmisi memanipulasi "file Shortcut LNK" dan mampu mengeksekusi kode dari jarak jauh. • Deteksi : Microsoft Defender Antivirus mendeteksi ancaman spesifik tersebut sebagai "Trojan:Win32/CryptoBandits.A". Untuk menjaga keamanan aset kripto anda dari ancaman ini disarankan untuk melakukan langkah pencegahan berikut. • Verifikasi Transaksi : Selalu periksa ulang alamat tujuan wallet kripto secara teliti sebelum mengonfirmasi dan mengirim dana. • Penyimpanan Aman : Simpan informasi penting seperti Seed Phrase dan Private Key secara offline. • Pembaruan Sistem : Pastikan Microsoft Defender atau perangkat lunak keamanan anda selalu diperbarui untuk mencegah infeksi malware. Hindari membuka file mencurigakan dari USB yang tidak terpercaya.

Why "token approval" is the worst idea in DeFi. ERC-20 got the token right and the hard part wrong. it standardized balances and transfers, but never a clean way for a contract to actually use your tokens. a plain transfer to a contract doesn't even tell it anything arrived. so they bolted on a hotfix: approve + transferFrom. Look at what that hotfix forces on you. to let a contract spend your tokens, you either: - approve it once for a huge or infinite amount, and now it can reach into your wallet whenever it wants, forever, until you remember to revoke. you're trusting a contract you probably never read. - OR approve the exact amount right before every action, which means a second transaction and a second gas fee on every single operation. Tust a stranger, or pay a tax on every move. those are the two choices, and the standard offers nothing better. so everyone picks door one and clicks "infinite," and the chain fills with wallets pointing loaded guns at themselves. Not theoretical. the jaredfromsubway MEV bot just lost millions this way. nothing was hacked. it handed out approvals chasing fake trades, and someone used transferFrom to walk the funds out. The worst part: a better design existed the whole time. transfer-and-call (ERC-223, ERC-1363) moves the exact amount and notifies the receiver in one transaction. no standing approval, no extra tx, no stranger holding a key to your account. it lost to ERC-20's head start, and now infinite approvals are load-bearing under all of DeFi. permit, permit2, account abstraction, every "fix" is a patch on a primitive that should never have shipped. We didn't get the safe option. we got the convenient one, and we've been paying for it since