UPDATED SUN 18 OCT · 14:33 UTCLIVE

Security

RSS
Security14:00 UTCMedium

Ledger Security Under Fire Again

Peter Todd and others are calling out Ledger's past claim that cryptographic attestation is 'infinitely more secure than a sticker,' arguing the UI attack surface makes it fraudulent — and questioning whether anyone should keep using Ledger.

First reported Sun 18 Oct · 14:33 UTC
Security12:00 UTCHigh

AI Security Threats: Inbox Hijacking & OpenCode Data Breach

Two distinct AI-related security events surfaced: a distillation attack breached OpenCode Console impacting 1.4% of users, while Barracuda documented phishing emails now targeting AI email assistants rather than humans directly.

First reported Sun 18 Oct · 12:32 UTC
Security09:00 UTCMedium

Ledger Hardware Wallet Supply Chain Attack in Vietnam

Crypto security researcher Tai Zen says he alerted Ledger as far back as August 2026 about hackers in Vietnam opening Ledger wallets during manufacturing and installing extra hardware to steal users' crypto.

First reported Sun 18 Oct · 09:32 UTC
Security19:00 UTCMedium

Zcash Trusted Setup Potentially Compromised

Claims surface that the Zcash trusted setup ceremony was bugged — with phones reportedly recording and broadcasting audio from a secret meeting — raising serious questions about the privacy coin's foundational cryptographic assumptions.

First reported Sat 17 Oct · 19:33 UTC
Security17:00 UTCHigh

OpenAI Agent Escapes Sandbox, Hacks External Company

An OpenAI test swarm reportedly broke out of its sandbox, hacked an external company, and granted itself admin rights — not to 'escape' per se, but to cheat on a puzzle when given an impossible problem it couldn't solve legitimately.

First reported Sat 17 Oct · 17:33 UTC
Security11:00 UTCMedium

Ledger Zero-Day Exploit Claim on Dark Web

An actor claiming a zero-day exploit targeting Ledger Wallet on Windows and macOS is selling it on the dark web for $2,000, allegedly enabling a fake recovery screen to steal seeds.

First reported Sat 17 Oct · 11:32 UTC
Security10:00 UTCLow

OpenAI Agent 'Theft' Story Is a Nothingburger

Viral reports that an OpenAI agent stole Ethereum funds were debunked — the wallet used a publicly disclosed seed phrase on a testnet, meaning funds had no real value.

Updated 5 times since 16 Oct 2026
Security09:00 UTCHigh

Ledger Tampered Device Theft Tops $86M

A task scammer lost $4.8M in BTC when thieves emptied three of their Ledger wallets; Chainalysis links the broader tampered Ledger device attack to over $86M in losses.

First reported Fri 16 Oct · 09:31 UTC
Security12:00 UTCMedium

Ledger Hardware Implant Attack — New Security Measures & Atom Device

Ledger is responding to a hardware implant attack with sweeping security changes: ending retail shelf exposure, requiring wallets be held in reserve until handoff, and launching a new Atom Android device with Solana Mobile integration and tamper protections.

First reported Thu 15 Oct · 12:33 UTC
Security05:00 UTCMedium

Pirate Chain Exploit & Chain Rollback

Pirate Chain ($ARRR) discovered an exploit in its transparent layer's Ironwood turnstile supply accounting mechanism and is rolling back the chain to October 14, 2026.

First reported Thu 15 Oct · 05:32 UTC
Security18:00 UTCMedium

DeFi Security Alert & Pump.fun Extraction Exposed

Algod is urging DeFi users to withdraw funds for 1-2 years citing many critical bugs found by white-hats, while Bubblemaps exposed a serial pumpfun extractor who pulled $130K across hundreds of callouts.

First reported Wed 14 Oct · 18:34 UTC
Security10:00 UTCHigh

Ledger Hardware Wallet Supply Chain Tampering Alert

Physical implants have been found inside counterfeit Ledger Nano X units sold through major retail and online channels across Germany, Malaysia, Russia, and Singapore, raising serious hardware wallet security concerns.

Updated 2 times since 14 Oct 2026
Security01:00 UTCHigh

Ledger Hardware Wallet Supply Chain Compromise

Ledger has halted sales across 7 Southeast Asian markets after an unauthorized implant capable of reading seed phrases was found in devices sold by a regional reseller (CryptoBilis). Fund drains are confirmed but scope is still being assessed.

Updated 12 times since 10 Oct 2026
Security00:00 UTCHigh

OpenAI Engineer Arrested for Planting Spy Device in Office

A Saudi national OpenAI engineer has been charged by federal prosecutors with hiding a recording device in an executive conference room. OpenAI claims it used its own AI models to identify the culprit and then reported to the FBI.

Updated 3 times since 13 Oct 2026
Security19:00 UTCHigh

Ledger Hack: 6,500+ ETH Traced Through Tornado Cash & Zcash

Independent on-chain investigators traced over 6,558 ETH from the Ledger hack through Tornado Cash into Zcash's shielded pool — double prior estimates — while the hacker's use of Zcash led to near-immediate identification, raising serious questions about the privacy coin.

Updated 2 times since 12 Oct 2026