Fake Flare Network Staking Site Drains $8.5M in XRP, Two Arrested
A cloned staking site, a fabricated Wikipedia entry, and a paid actor were enough to convince 71 investors to hand over 3.4 million XRP — a reminder that brand impersonation, not smart-contract exploits, remains crypto's most reliable attack surface.
Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem
An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.
Coldcard's 2021 Firmware Bug Drains $89M in Bitcoin — A Five-Year Blind Spot
A silent 2021 configuration error swapped Coldcard's hardware RNG for a predictable software fallback, and five years later attackers used it to drain more than $89 million in Bitcoin.
Taiko Bridge Drained $1.7M After SGX Signing Key Exposed on GitHub
An attacker leveraged a publicly committed SGX enclave key to forge withdrawal proofs on Taiko's Ethereum L2 bridge, draining $1.7 million before block production was halted on 22 June 2026.