Security

Security coverage from the StreamSage Security desk. Sources on every story. Page 4.

• Term Finance Permanently Shuts Meta Vaults After $8.5M Exploit

  PeckShield estimates the loss at $8.5 million, and Term Finance confirmed it is permanently ending the Meta Vaults product.

• 40 Fake Firefox Wallet Extensions Distribute Crypto-Stealing Malware

  The malicious add-ons impersonate OKX, Rabby and TronLink wallets to harvest user recovery phrases, according to Decrypt.

• Zilliqa post-mortem attributes 683M ZIL theft to hardware wallet entropy flaw

  The post-mortem states 683.13 million ZIL was proven stolen and that a bulk scan omitted the four-signature floor.

• BounceBit halts chain after 286M token exposure

  CryptoSlate reports that an authorization flaw led to a chain shutdown, with the token reissued at a 1:1 ratio.

• MANTRA halts chain after incident involving two project wallets

  The Dubai-licensed RWA Layer 1 has been frozen since Thursday evening; MANTRA says no user funds were taken.

• Coldcard Hack Losses Exceed $100 Million

  Bitcoin Magazine reports on the security incident and the licensing debate triggered by the failure of the self-custody wallet.

• Check Point finds 2,000 WordPress sites used in ransomware operation

  Researchers traced the StopAndProtect malware to 6,000 compromised IP addresses and recovered over 31,000 victim screenshots.

• Maya Protocol exploit drains $11 million from pools

  Bitcoin and other assets were removed from the DeFi platform in an exploit that reduced pool value by $11 million.

• Crypto firm halts Bitcoin purchases following data breach

  A cryptocurrency company has suspended Bitcoin purchases after a security incident, placing over 250,000 users at risk while the firm determines the extent of the compromise.

• SafePal breach exposed records of 39,798 buyers

  A flaw in an order-tracking plug-in leaked names, phone numbers and shipping addresses over 14 months.

• Harmony proposes rollback wiping 109,000 ONE transactions

  CoinTelegraph reports the plan follows an exploit and cites chain state consistency concerns.

• 54,000 Trezor and SafePal Wallet Users Hit by Data Leak

  CoinTelegraph reports the breach exposes 54,000 wallet owners to phishing risks, while CLARITY Act passage odds remain at 10% despite a White House meeting.

• SafePal confirms data breach exposed data for 40,000 users

  The wallet provider found the root cause in August after customers reported phishing attempts online as early as July.