‘Hackers Day’: 3 Crypto Protocols Drained of $35 Million in Just 24 Hours

A massive wave of exploits has wiped out $35 million from Bitcoin and Ethereum-linked protocols in a matter of hours. The attacks targeted cross-chain systems including Verus and B² Network, proving that even robust cryptography cannot protect protocols from flaws in key management and validation checks.

These coordinated attacks underscore a growing systemic risk within the DeFi landscape, specifically regarding upgrade powers and compromised keys. As interoperability expands, the industry faces a critical turning point in how validation checks and cross-chain security are implemented to prevent such catastrophic liquidity drains.

The Allbridge protocol has fallen victim to a significant cross-chain exploit, with losses estimated at approximately $2 million. The attacker successfully executed a bridge maneuver, moving stolen assets from the Solana network directly into the Ethereum ecosystem.

This breach underscores the ongoing security risks faced by cross-chain bridges and interoperability protocols. By swapping the stolen funds into ETH after the bridge transfer, the attacker aims to obfuscate the trail, highlighting a critical need for enhanced security measures within the decentralized finance landscape.

A dangerous new evolution of the RedHook malware is targeting Android devices, secretly hijacking phones to steal sensitive banking credentials. Cybersecurity firm Group-IB warns that this malware leverages Android’s own Wireless Debugging feature to grant hackers powerful remote control over infected smartphones.

This sophisticated malware attack highlights a growing trend where legitimate developer tools are weaponized to bypass traditional security. By exploiting these system features, attackers can access private data and financial information, making it essential for users to monitor their device permissions closely.

Justice has been served in a major blow to cybercriminals. Two hackers linked to the notorious Scattered Spider group have been sentenced to five years and six months in prison by UK authorities after pleading guilty to a massive cryptocurrency extortion and ransomware scheme.

Led by the National Crime Agency (NCA), the investigation uncovered a sophisticated operation that targeted dozens of corporations across the UK and the US. This sentencing marks a significant milestone in the fight against high-profile cybercrime groups and the growing threat of large-scale crypto-related extortion attacks.

A high-stakes kidnapping has rocked Ribeirão Preto after two men impersonated civil police officers to target an 18-year-old influencer. The criminals successfully coerced the victim into handing over approximately R$ 750,000 (roughly $150,000) in cryptocurrencies during a staged raid at a local hotel.

This brazen crime highlights the growing risks surrounding cryptocurrency theft and the use of social engineering by criminals. In a bizarre twist, the suspects actually encouraged a hotel employee to film the encounter to bolster their fake authority, inadvertently creating video evidence that may assist law enforcement in tracking the stolen crypto assets.

A devastating social engineering attack has targeted an 86-year-old resident in Virginia, resulting in a massive financial loss. After a fraudulent security alert appeared on her computer claiming a hacker was targeting her accounts, the victim was manipulated into transferring $11,500 to scammers posing as Wells Fargo employees.

This incident serves as a stark warning regarding the rising sophistication of phishing scams and fake security alerts. As cybercriminals increasingly use psychological pressure to bypass traditional security, understanding these digital fraud tactics is essential to protecting personal assets and preventing similar banking scams in the future.