hack

Harmony has just released a forensic update about the unauthorized ONE minting incident.
Initially, the market said around 4B ONE was minted. But the reconstruction now shows that the total forged cross-shard issuance reached ~3.01T ONE, through 6 transactions and 4 attacker wallets.
The most notable aspect lies in the cross-shard receipt replay vulnerability:
Can an attacker modify identifiers in Merkle proofs that have not been authenticated, causing already-processed receipts to be mistakenly understood by the system as never used → the receipt is verified again → the destination shard credits ONE without a corresponding debit on the source shard.

The biggest security stories in crypto aren't always the loudest ones.
Sometimes, there is no dramatic headline, no frozen platform, and no viral warning. There is simply an attack that never reaches users, funds that are recovered before they disappear, or a vulnerability that gets fixed before most people even know it existed.
That is the quieter side of crypto security — and throughout 2026, Binance has been putting significant resources behind it.
From recovering $145.9 million through its Ledger zero-dollar vulnerability program to intercepting DPRK-linked money laundering attempts, disrupting a governance attack through Brain Trust, and building security guardrails for AI Agent Wallets before new threats fully emerge, the pattern is consistent: defense is increasingly happening before the damage.
$145.9M Recovered Before It Became Someone Else's Problem
One of the most striking examples is Binance's work around the Ledger zero-dollar vulnerability.
Rather than waiting for stolen assets to become an irreversible loss, Binance's security infrastructure and response mechanisms helped recover $145.9 million associated with the vulnerability.
The headline number matters. But the bigger lesson is what it represents.
Crypto transactions are designed to move quickly. Once funds leave an address, reversing the transaction can be extremely difficult.
That makes detection, coordination, and response speed critical.
The best security system isn't necessarily the one that prevents every attack from being attempted.
It is the one that can recognize something abnormal, mobilize quickly, trace the movement of assets, and work toward recovery before the situation becomes permanent.
Following the Money: Disrupting DPRK-Linked Laundering Attempts
Crypto security is no longer simply about protecting an account from someone trying to steal a password.
It has become a global financial intelligence challenge.
Throughout 2026, Binance has continued working to identify and disrupt attempts linked to DPRK-associated money laundering activity.
This matters because sophisticated actors don't necessarily attack exchanges head-on.
They can move assets through multiple wallets, chains, services, and intermediaries in an attempt to make the original source harder to identify.
That creates a different kind of security battlefield: transaction intelligence.
The ability to detect suspicious patterns, connect seemingly unrelated transactions, and coordinate with relevant parties can become just as important as traditional account security.
For ordinary users, much of this activity is invisible.
And that's exactly the point.
When Governance Becomes the Attack Surface
Another reminder that crypto security is broader than wallets and private keys came from the governance side.
Binance's Brain Trust helped disrupt a governance attack — showing how attackers can potentially target decision-making mechanisms and community infrastructure rather than simply attempting to drain an address.
This is an important evolution.
As crypto infrastructure becomes more sophisticated, the attack surface expands.
It can include:
Smart contracts.
Wallets.
APIs.
Credentials.
Governance systems.
Human operators.
Third-party infrastructure.
Security therefore cannot be treated as a single product feature.
It has to become a system that continuously watches the entire ecosystem.
Preparing for AI Agent Wallets Before the Threat Arrives
Perhaps the most forward-looking development is happening around AI.
AI agents are moving from simply answering questions to performing actions.
An AI agent with access to a wallet could potentially execute transactions, interact with protocols, manage assets, or perform tasks automatically.
That creates enormous possibilities — and a completely new security model.
Instead of asking only:
“Is this transaction legitimate?”
security systems may increasingly need to ask:
“Should this AI agent be allowed to perform this action?”
“Does this transaction match the agent's intended behavior?”
“Is the destination trustworthy?”
“Has the agent's behavior suddenly changed?”
Binance has been working proactively on security guardrails for AI Agent Wallets, addressing these risks before the technology becomes fully mainstream.
That's an important distinction.
Reactive security waits for the first major exploit.
Proactive security tries to understand what could go wrong before the exploit exists.
The Security You Don't Notice Is Often the Security Working
This is where the story becomes bigger than individual numbers.
Crypto users tend to notice security when something goes wrong.
A hack happens.
A wallet gets drained.
A protocol gets exploited.
A suspicious transaction goes viral.
But successful security often produces the opposite result:
Nothing happens.
A suspicious transaction gets stopped.
A compromised asset gets traced.
A laundering route gets identified.
A governance attack gets disrupted.
A new technology gets security controls before attackers figure out how to exploit it.
There is no dramatic user experience for any of these events.
And that is precisely why security can be one of the most difficult areas to measure from the outside.
The New Security Standard Is Defense in Depth
The crypto industry has spent years talking about security as if there were one ultimate solution.
Cold storage.
Proof of reserves.
Multi-factor authentication.
Hardware wallets.
Smart-contract audits.
All of these matter.
But modern crypto security increasingly looks less like a single wall and more like a layered defense system.
One layer watches transactions.
Another monitors wallets.
Another analyzes behavioral patterns.
Another tracks illicit flows.
Another responds to emerging vulnerabilities.
And another prepares for technologies that haven't yet become mainstream attack vectors.
The objective isn't to claim that no attack will ever happen.
That's unrealistic in an industry where adversaries constantly adapt.
The objective is to make the cost of attacking the ecosystem higher, detect threats earlier, limit damage faster, and recover whenever possible.
Security Doesn't Have to Be Loud
The most important security milestone might not be the one that generates the most attention.
It could be the $145.9 million recovered.
The suspicious flow intercepted.
The governance attack disrupted.
The AI wallet threat addressed before it becomes a headline.
These are the stories happening behind the scenes.
And perhaps that's the real differentiator.
Because when security works properly, users don't necessarily see it.
They simply log in.
Trade.
Move assets.
Use new products.
And keep going.
The goal isn't to make security the headline.
The goal is to make security the baseline.
#CryptoSecurity #Aİ #Hack #CryptoWallet
$BTC