securityalert

⚠️ Bitget Security Update - $388M Hack

On Sep 24, Bitget detected unauthorized transfers from hot wallets.

💰 Impact: $351.6M initially, updated to $387.5-388M (includes Zcash & TRON)
🪙 Assets: ETH, XRP, BNB, AVAX, USDT, USDC - XRP biggest ($157M)
🔍 Cause: Backend wallet system compromised, transaction spoofing
🛡️ Status: Vulnerability fixed, cold wallets safe, Mandiant & SlowMist investigating

Withdrawal Resume Schedule:
• Sep 28 08:00 UTC - BTC
• Sep 29 - ETH (ETH, BSC, Arbitrum, Base, Optimism)
• Sep 30 - USDT
• Oct 2 - All other tokens & fiat

User funds are SAFU, Protection Fund $464M+ will cover losses.

Always keep funds in cold wallet / diversify exchanges. Not financial advice.

#Bitget2026 #CryptoNews🚀🔥 #SecurityAlert #XRP #ETH🔥🔥🔥🔥🔥🔥

$QNT $NEAR $BMY.US

Notional Finance has just recorded a serious security incident involving a margin (escrow) contract.

According to data from PeckShieldAlert, approximately $1.7 million in DAI and USDC was illicitly withdrawn. The attacker swapped this amount into 689.2 $ETH v and then moved the entire funds into Tornado Cash to erase the trail.

👀 Market Watch: $ETH , $USDC

Users should exercise caution and monitor official announcements from the project.

#SecurityAlert #CryptoNews

🚨 DYORSWAP confirms over 200 ETH paid in compensation after fake GIWA network scam. Upbit’s Dunamu says GIWA mainnet not live. ETH holders face phishing risks via spoofed chains. Stay alert—verify contract addresses before interacting. How do you protect yourself from fake network scams? #SecurityAlert

$ETH #TradingSignal #CryptoAnalysis

🚨 $340K API EXPLOIT SWEEPS $ONE AS FORGED DOCUMENT ATTACK BYPASSES 2FA! 💣

A brutal $340,000 compromise just exposed a dangerous loophole in off-chain account security. 🔍 Attackers leveraged forged verification documents to override security settings, but the real structural failure happened when lingering API keys remained active after the account freeze was lifted.

The instant the 24-hour withdrawal lock expired, exploiters drained over 322k USDT alongside 9.1M $ONE directly through the compromised API without prompting 2FA confirmations. ⚡ This sharp incident highlights why active key audits are just as vital as cold storage discipline.

💡 Have you inspected your active API management permissions today to guarantee zero rogue access? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #ONE #SecurityAlert #Crypto #RiskManagement

🛡️ ⚡

🔐 MY BINANCE ACCOUNT IS UNHACKABLE 🔐
Hackers are pulling, but my shield is STRONG! 🛡️

Here are my 5 Security Tips to keep your account SAFE:

1️⃣ Enable 2FA - Use Google Authenticator, not SMS.
2️⃣ Anti-Phishing Code - Set it in Binance Security settings.
3️⃣ Never Share - Binance will NEVER ask for your password.
4️⃣ Whitelist Address - Enable Withdrawal Whitelist.
5️⃣ Check URL - Always login at binance.com only.

Stay SAFU!
#SecurityAlert

PeckShieldAlert has just issued a warning about a serious security incident related to the Meter.io project.

Specifically, more than 1 billion tokens #MTRG đ were illicitly minted on the #BNBChain network. Shortly after this information was released, the price of #MTRG recorded a sharp drop of -74%.

👀 Market Watch:
$MTRG

Investors should be cautious and closely monitor official announcements from the project to stay updated on the situation.

#CryptoNews #SecurityAlert

🚨 Are your funds really safe? The recent million-dollar hack to Bitget for $352 million set off alarms across the crypto world. Although its CEO, Gracy Chen, said that users’ capital is backed by its protection fund, this event reminds us how important it is to choose platforms with the highest level of security infrastructure. [1, 2, 3, 4]
At Binance, protection is not a promise—it’s an active standard. With the SAFU fund (Safe Asset Fund for Users), strict real-time wallet monitoring, and 1:1 Proof of Reserves (PoR), your peace of mind is our top priority.
#SecurityAlert #SecurityTokenization

🔒 Your security first!

🚨 Bitget hacked for $351.6 million… and the industry unites

On September 24, Bitget suffered a breach affecting hot wallets worth approximately $351.6 million.

Private keys were not stolen; the attack targeted the backend system by forging transaction data.

Key points:
• Users’ funds are safe and fully covered by the Protection Fund (over $464 million).
• Cold wallets were not affected.
• Withdrawals are temporarily paused, while trading and deposits continue.

What stands out in this incident is the stance taken by industry leaders:
🔹 Binance (via Co-CEO Richard Teng): announced that Binance’s security team has been working closely with Bitget since the very first moment, sharing security information, tracking the movement of stolen funds, and supporting recovery efforts.
🔹 Bybit (via Ben Zhou): provided full support and activated the LazarusBounty platform to track the funds, confirming that Bitget had helped them previously in a similar incident.

This collaboration reminds us that exchange attacks are no longer a solitary matter… but a collective battle between the industry and the attackers.

What do you think? Is having Protection Funds enough, or is reliance on hot wallets still a major weakness?
#SecurityAlert #HackerNews #crypto #Binance #BTC

🚨 ONGOING SECURITY BREACH SURFACES AS ATTACKER DRAINS ANOTHER $8M FROM $CRYPTO POOLS! ⚠️

The exploit saga deepens as smart contract vulnerabilities remain actively exploited. 🚨 The attacker just siphoned an additional $8M out of protocol reserves, proving that compromised access key channels are still wide open.

Smart money is pulling back liquidity rapidly while watching order flow for sudden dump spikes or laundering routes through mixing services. 📉 When contract integrity breaks, immediate risk preservation trumps every technical pattern on the chart.

Stay nimble and keep an eye on active treasury movements before deploying fresh capital. 🔍 Are you pulling your capital to safety, or waiting to bid the eventual capitulation wick? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #Crypto #SecurityAlert #DeFi #RiskManagement #MarketUpdate

🚨 🛡️

🚨 $CRYPTO PLATFORM BREACH EXPOSES $351M LIQUIDITY DRAIN IN ADVANCED EXPLOIT 🔍

Preliminary investigation into the recent $351.6M exploit on a top-tier exchange points toward state-sponsored cyber footprint patterns. 📊 System-level access allowed direct fund transfers without compromising hot or cold wallet private keys, ruling out insider manipulation at this stage.

💡 Institutional infrastructure risk remains a crucial variable when assessing market-wide liquidity stability. 🔍 As order flow normalizes, monitoring exchange proof-of-reserves and system integrity becomes essential for managing systemic tail risk. 💬 How is this systemic security event impacting your allocation strategy across central order books? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #CRYPTO #SecurityAlert #MarketStructure #RiskManagement

🛡️ 🔍

🚨 $1.8M DRAINED FROM PAYY NETWORK AS ATTACKER ROUTES STOLEN FUNDS TO $ETH 💣

🔍 On-chain monitors just caught a slick exploit trail where privacy stablecoin protocol Payy Network suffered a $1.8M USDC drain. The attacker primed their wallet via Railgun privacy protocol, converted the hijacked stablecoins directly into $ETH , and fractured the payload across three distinct destination addresses.

📊 Privacy protocols continue to grant bad actors a crucial head start to wash liquidity before re-entering major layer-1 assets. Order flow never lies, and watching where these ETH clusters attempt to cash out next is vital for anticipating sudden localized sell pressure. 💬 Do privacy rails make on-chain defense an uphill battle, or is this just brutal market punishment for weak smart contracts? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #ETH #USDC #SecurityAlert #DeFi #Crypto

👁️ 🛡️

🚨 CRITICAL SECURITY WARNING FOR ALL $BTC AND CRYPTO HOLDERS ON IOS! ⚠️

A malicious third-party app called FomoPeek is actively exploiting iOS vulnerabilities to target crypto users. ⚠️ Security intelligence confirms the app gains elevated root privileges, exposing private keys, seed phrases, and exchange credentials stored on the device. 🛡️

If you installed this application, act immediately. Delete FomoPeek, update your iOS system software, and sweep your $ETH assets to a brand-new wallet generated on a safe device before unauthorized actors access your vault. 🏦

Tight device security protects your capital just as much as disciplined risk management. 💬 Have you checked your installed mobile apps today to verify your self-custody setup is secure? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #ETH #SecurityAlert #CryptoSecurity #SelfCustody

🚨 🛡️

🚨 SECURITY ALERT: FOMOPEEK IOS EXPLOIT RISKS SELF-CUSTODY $BTC AND SEED PHRASES ⚠️

Institutional risk management extends beyond chart structure down to device security. 🚨 Critical security advisories flag FomoPeek versions 1.1–1.2 on iOS containing malicious vector code capable of escalating privileges to compromise global operational security across your device. 🔍

This is not an isolated wallet breach; elevated local permissions expose private keys, seed phrases, and credential stores across all installed applications. 🛡️ Immediate mitigation requires purging the application, updating iOS, and rotating self-custody funds into newly generated keys on an uncompromised environment. 💡

💬 Have you audited your active iOS devices for this compromised application footprint today? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #SecurityAlert #SelfCustody #CryptoSecurity

🛡️ 💡

🚨 CRITICAL SECURITY WARNING FOR ALL $BTC HOLDERS USING FOMOPEEK APP! 🚨

A devastating iOS kernel exploit embedded in FomoPeek versions 1.1 through 1.2 is actively breaching device sandboxes to decrypt native Keychain data. 🚨 SlowMist and a top-tier exchange security team confirmed the malicious code executes automated remote commands, granting attackers full access to private keys and seed phrases. 🛡️

If you have ever touched this application, generate a fresh wallet on a clean device immediately and migrate your funds before liquidity is drained. 🔍 Security hygiene is the ultimate edge in crypto, and protecting your capital comes before catching the next leg up. 💬 Have you audited your wallet permissions and app access lately? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #SecurityAlert #Crypto #WalletSecurity #RiskManagement

🚨 🛡️

🚨 $BTC ALERT: FAKE HARDWARE WALLET WARNINGS SPREAD VIA EMAIL BREACH 🦈

📊 The breach centers on email infrastructure, not the wallets themselves. Trezor confirmed a compromised mail service, while BitBox flagged a shared newsletter provider targeting multiple Bitcoin firms. 📌 This supply‑chain slip allows attackers to masquerade as trusted brands, leveraging brand credibility to push fraudulent security alerts.

🔍 Treat any unexpected wallet security email as unverified: pause, cross‑check through official channels, and never act on urgent links or requests. 💡 The hardware remains secure, but the communication layer is now a high‑risk vector.

💬 How are you reinforcing verification steps for critical alerts? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #SecurityAlert #CryptoSafety #Phishing

🔥 💎

🚨 $BTC ALERT: FAKE HARDWARE WALLET EMAILS TARGETING USERS! 💥

🦈 Trezor confirmed its email service was breached, and BitBox flagged a shared newsletter provider that got hit. The attack rides on brand trust, not on the wallets themselves.

📊 The fake alerts can lure users into irreversible actions, so always double‑check through an independent channel before clicking any link. Verify the sender, scan the message for odd URLs, and treat any urgent request with skepticism. 🔍

💬 Are you double‑checking every security email before you act? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #SecurityAlert #HardwareWallet #CryptoSafety

🚀 🔥

🚨 CRITICAL SECURITY NOTICE REGARDING $BTC HOLDINGS AND TREZOR PHISHING ATTACK ⚠️

A major third-party newsletter breach has exposed 347,000 email addresses, triggering a sophisticated phishing vector targeting $BTC cold storage users. 🔒 Attackers are broadcasting fake security alerts regarding a non-existent entropy vulnerability to trick holders into revealing recovery phrases. 🔍

Hardware devices remain completely uncompromised, proving that institutional security architecture holds firm while social engineering remains the primary attack surface. 🛡️ Smart market participants recognize that operational security is just as vital as managing technical chart structure. 💡

Never input recovery keys into any software interface or email link under any circumstance. 🤔 Are your cold storage protocols fully isolated from social engineering traps? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTC #SecurityAlert #CryptoSecurity #Web3

🛡️ 👁️

🚨 CRYPTO SECURITY ALERT: LIQUID NETWORK INCIDENT

The crypto security space is watching a major incident involving the Liquid Network, where roughly 4,000 BTC worth around $320 million at the time was reportedly moved during an exploit.

What makes the story unusual is that the parties involved reportedly described themselves as white-hat security researchers.

According to reports, approximately 85% of the Bitcoin was later returned, while questions remain around the funds that have not been recovered.

🔐 Why this matters

The incident is another reminder that even established blockchain infrastructure can face security risks.

For the wider crypto industry, the key questions now are:

• What caused the vulnerability?
• Who was responsible for the transactions?
• Will the remaining funds be recovered?
• What security measures will prevent a repeat?

👀 Crypto security remains one of the biggest issues the industry needs to solve.
$NVDAB $ASTER
#SecurityAlert #CryptoSecurity #BinanceSquareTalks

🚨 ATOMICQUEUE CONTRACT FLAW EXPOSED IN ETHER.FI ATTACK — CHECK YOUR $ETH PERMISSIONS! 🚨

A vulnerability inside the AtomicQueue contract just hit ether.fi, resulting in an exploit of roughly 15.45 $ETH . 🔍 The breach stems from a missing access control check on the solver parameter within the solve function, allowing bad actors to manipulate call flows.

By exploiting previously granted ERC-20 token allowances, the attacker forced victim addresses to execute unauthorized transfer calls without signature verification. ⚠️ Technical slip-ups like unchecked approvals leave capital wide open to malicious actors scanning for unmonitored order flows.

💬 Are you regularly revoking old token approvals across your active DeFi protocols, or do you leave your allowances wide open? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #ETH #DeFi #SecurityAlert #Crypto

🚨 🛡️