
Bitget Attacker used Small Test Transfers before $388M Theft
Bitget's CEO says two small transfers tested the exchange's risk controls before $361M in larger withdrawals. A full incident report is pending.

Bitget's CEO says two small transfers tested the exchange's risk controls before $361M in larger withdrawals. A full incident report is pending.

CCIP 2.0 lets chains and apps add independent verifiers to bridge transfers, five months after a $292 million exploit.

Citi and Coinbase are bringing stablecoin payments to US businesses, with automatic conversion to fiat and settlement through Citi.

Hegota could be Ethereum’s last familiar hard fork. Its settled changes include stronger transaction inclusion and more account control.

Ethereum’s post-Hegota roadmap would shift more work into proofs, shorter slots and fewer onchain signatures, but major engineering gaps remain.

The Bitget hacker has moved about $83 million in stolen XRP from three wallets, while roughly $75 million remains across the original accounts that cannot be frozen on the XRP Ledger.

DoubleZero has launched a dedicated fiber market data feed for Hyperliquid, giving pro desks the DEX's full order book outside the public APIs.

IBM's Digital Asset Haven gains beta access to Swift's blockchain-based shared ledger for tokenized deposit transactions via ISO 20022, announced Sept 24, 2026.

Sui testnet v1.80.1 introduces protocol 137 with changes across execution, GraphQL, gRPC, archival services and validator infrastructure.

Solana's Alpenglow upgrade moved to public testnet, targeting 150ms finality against the current 12.8 seconds. The shift runs through Agave 4.3.

SlowMist found FOMO, a crypto-draining app, on Apple's App Store for 8 days. It exploited a WebKit flaw to steal seed phrases and private keys from iPhones.

White hats moved 52.37 BTC tied to the Coldcard entropy flaw into a Wyoming recovery trust. About 1,816 BTC remains in attacker wallets across four theft waves.

North Korea's WaterPlum stole at least $10.7M posing as crypto recruiters, infecting 30,000+ devices in 100+ countries, a four-country advisory said.

ECB's Pontes wholesale settlement bridge went live Sept 21 with four DLT operators, including Axiology, which runs XRPL-derived tech.

London-based crypto infrastructure provider Haruko confirmed a targeted cyberattack in the week of Sept.

Binance will pause deposits and withdrawals across its platform from 06:00 UTC on Sept. 22, 2026, for about an hour of infrastructure wallet maintenance. Token trading will not be affected.

Bitcoin Core 32 adds parallel validation reads and a mempool-based fee estimator. Draft release notes also flag mining compatibility changes, wallet updates and server limits.

Coinbase is bringing back the Coinbase Wallet name as it shifts toward multichain trading, putting its self-custodial strategy in direct competition with Robinhood Chain.

The DOJ and U.S. Treasury have targeted Xinbi Guarantee, restraining $52.8 million in crypto linked to the Chinese-language scam marketplace and disrupting its Telegram infrastructure.

CV Summit 2026 will bring global financial and technology leaders to Zurich on September 29 - 30 to discuss digital assets, AI, tokenization and the future of financial infrastructure.

Liquid Network has restarted block production after a $320 million Elements exploit drained roughly 4,000 BTC, but transactions and peg operations remain paused.

Trezor and BitBox have warned users about sophisticated phishing emails after suspected compromises involving third-party newsletter infrastructure made fraudulent security alerts appear legitimate.

Ethereum is targeting a quantum-resistant Layer 1 by December 2029 as the Ethereum Foundation ranks 62 Hegotá proposals and prioritizes FOCIL and Frame Transactions.

Liquid Network has recovered 3,400 BTC from the hackers behind its $320 million exploit, but roughly 598 BTC worth $47 million remains outstanding as security fixes continue.