{
  "@context": "https://schema.org",
  "@type": "Dataset",
  "name": "DeFi Incident Tracker",
  "alternateName": "DeFi security incident database",
  "description": "A source-linked record of DeFi exploits, suspicious events and protocol responses. Every record carries at least one primary source URL; confirmed and under-review states are kept separate.",
  "url": "https://defisafetytools.com/incidents/",
  "sameAs": [
    "https://defisafetytools.com/incidents/"
  ],
  "license": "CC BY 4.0 (attribution required, link back to the Incident Tracker)",
  "creator": {
    "@type": "Organization",
    "name": "DeFi Safety Tools",
    "url": "https://defisafetytools.com"
  },
  "isAccessibleForFree": true,
  "dateModified": "2026-11-08T01:46:33.053Z",
  "temporalCoverage": "2026-09-10T05:34:21.000Z/2026-11-08T01:18:32.000Z",
  "distribution": [
    {
      "@type": "DataDownload",
      "contentUrl": "https://defisafetytools.com/incidents.json",
      "encodingFormat": "application/json"
    },
    {
      "@type": "DataDownload",
      "contentUrl": "https://defisafetytools.com/incidents.csv",
      "encodingFormat": "text/csv"
    }
  ],
  "qualityProfile": {
    "total": 1249,
    "confirmed": 198,
    "resolved": 0,
    "underReview": 1051,
    "withLossEstimate": 403,
    "withSource": 1249,
    "flagged": 1218,
    "headlineLikeProtocols": 0,
    "note": "Records flagged protocol-may-be-headline are retained but marked: the source fed a news headline into the protocol field. They are not removed, so the dataset does not look cleaner than it is.",
    "fieldNotes": {
      "chain": "chain-unspecified means the source did not state a chain; it is not 'no chain'.",
      "lossUsd": "loss-unknown means no figure could be sourced. Estimates are never presented as confirmed.",
      "confidence": "0..1 reviewer confidence in the record's sourcing, not in the loss figure."
    }
  },
  "data": [
    {
      "id": "34ca09f8eeb7c5648eab",
      "protocol": "Gate CEO",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/05/gate-ceo-says-crypto-exchanges-must-prove-they-can-survive-a-hack-like-binance-s"
      ],
      "firstSeen": "2026-11-05T14:21:50.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "Lin Han says Gate holds enough assets in cold storage to cover customer balances even if its hot wallets are emptied. An independent audit is underway.",
      "revision": 11,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8baaece2655497c1662f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/05/what-is-tradertraitor-the-hacking-squad-behind-the-usd6-3-billion-binance-heist"
      ],
      "firstSeen": "2026-11-05T16:58:21.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The hacking group has been behind some of the crypto industry's most recent high-profile thefts.",
      "revision": 11,
      "sourceHeadline": "What is TraderTraitor, the hacking squad behind the $6.3 billion Binance heist?",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "09b8ee75af866db59ea7",
      "protocol": "Chainalysis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/chainalysis-cyberattack-password-hashes-live-tokens-exposed",
        "https://crypto-economy.com/chainalysis-says-cyberattack-exposed-password-hashes-and-tokens/"
      ],
      "firstSeen": "2026-11-06T06:54:34.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.",
      "revision": 8,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "571849e46fc234853981",
      "protocol": "Gnosis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/gnosis-pay-confirms-breach-of-consumer-card-system"
      ],
      "firstSeen": "2026-11-06T15:01:29.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The company says funds and its enterprise platform were unaffected, but has not disclosed how many customers were hit.",
      "revision": 7,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d3a71cf2a803f9e0dace",
      "protocol": "Gnosis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/gnosis-pay-breach-exposes-card-details-personal-data-crypto-wallet-information",
        "https://thedefiant.io/news/security/rotki-founder-says-gnosis-pay-exposed-his-address-card-and-wallet-details"
      ],
      "firstSeen": "2026-11-06T14:34:02.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The crypto debit card provider said customer funds remained safe despite the exposure of sensitive financial and personal information.",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "c81fc0782ed1c5c196b0",
      "protocol": "Gnosis",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/07/gnosis-pay-breach-exposes-card-numbers-home-addresses-and-linked-crypto-wallets"
      ],
      "firstSeen": "2026-11-07T16:51:00.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "One user said the exposed data tied his home address and card number to every crypto wallet linked to his account, raising the risk of targeted scams.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7228cd86837daa42d546",
      "protocol": "Unattributed",
      "sourceHeadline": "Houthis claim missile, drone attacks on Saudi oil, military sites",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-claim-missile-drone-attacks-on-saudi-oil-military-sites/"
      ],
      "firstSeen": "2026-11-07T17:22:22.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The attacks may heighten regional tensions, impacting market dynamics and potentially leading to further conflict escalation in the Middle East. The post Houthis claim missile, drone attacks on Saudi oil, military sites appeared first on Crypto Briefing .",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "62afb7f9ad2260baf8da",
      "protocol": "SEC vs. CFTC",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/regulation/sec-vs-cftc-who-regulates-crypto-in-the-us"
      ],
      "firstSeen": "2026-11-07T18:14:51.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The activity matters: securities offerings and trading, commodity derivatives and spot-market fraud fall under different powers. A proposal is not the same as an exemption or a law.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b6b47b6744ba6f99b140",
      "protocol": "Yemen’s Houthis",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yemens-houthis-attack-on-national-guard-camp-in-saudi-arabias-najran/"
      ],
      "firstSeen": "2026-11-07T15:38:11.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "The attack underscores escalating tensions, potentially destabilizing regional security and impacting future Saudi-Houthi negotiations and markets. The post Yemen’s Houthis: attack on national guard camp in Saudi Arabia’s Najran appeared first on Crypto Briefing .",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3ba2aff3ce21a700210b",
      "protocol": "Cosmos Batch",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/cosmos-batch-moves-2-266-staked-atom-from-six-accounts"
      ],
      "firstSeen": "2026-11-08T00:39:24.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "One delegator reported theft, while Web3Auth says some apparent wallet drains are protective recovery transfers.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a4590d6e214ee951a0a8",
      "protocol": "Viral ChatGPT Memory Prompt Shows a Big Risk",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/viral-chatgpt-memory-prompt-privacy-risk/"
      ],
      "firstSeen": "2026-11-08T01:18:32.000Z",
      "updatedAt": "2026-11-08T01:46:33.053Z",
      "summary": "A viral prompt shows what ChatGPT memory knows about users. Crypto holders face added phishing risk, while OpenAI offers ways to switch it off. The post Viral ChatGPT Memory Prompt Shows a Big Risk for Crypto Holders appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a11e60e1ce33b7b83b12",
      "protocol": "Unattributed",
      "sourceHeadline": "Binance CFO steps down nine days after record hack; co-CEO says transition was planned six months ago",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/business/2026-11-07-binance-cfo-steps-down-nine-days-after-record-hack-co-ceo-says-transition-was-planned-six-months-ago-435992"
      ],
      "firstSeen": "2026-11-07T21:57:58.000Z",
      "updatedAt": "2026-11-07T22:15:11.325Z",
      "summary": "Co-CEO Yi He said Ng is departing to pursue a new venture, under a transition plan put in place over the past six months.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4e0131e426897d75d979",
      "protocol": "Unattributed",
      "sourceHeadline": "Loopscale Reopens All Vaults After Attack-Related Freeze",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/loopscale-reopens-all-vaults-after-attack-related-freeze"
      ],
      "firstSeen": "2026-11-07T21:46:26.000Z",
      "updatedAt": "2026-11-07T22:15:11.325Z",
      "summary": "The restart includes the USDC Genesis Vault and lifts its remaining loan-management restrictions. Loopscale says a technical post-mortem will follow.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e05ad279ce088acc1856",
      "protocol": "US sanctions",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/us-sanctions-hit-41-companies-accused-of-keeping-prince-groups-scam-network-running/"
      ],
      "firstSeen": "2026-11-07T20:30:48.000Z",
      "updatedAt": "2026-11-07T22:15:11.325Z",
      "summary": "Treasury says the network concealed ownership and sustained Prince Group operations, while US rules require covered assets to be blocked. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ddd852ff5be8f1fc99fe",
      "protocol": "Unattributed",
      "sourceHeadline": "Ex-FBI counterintelligence agent stole almost $2.5M in crypto",
      "chain": "Not specified",
      "technique": "Under review",
      "lossUsd": 2500000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/ex-fbi-counterintelligence-agent-stole-almost-25m-in-crypto"
      ],
      "firstSeen": "2026-11-07T14:16:00.000Z",
      "updatedAt": "2026-11-07T18:15:36.080Z",
      "summary": "Yaroch paid off his debts and intended to use the proceeds to finance a new life in Portugal, where he planned to buy a vineyard.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "311a4797498862488c05",
      "protocol": "Unattributed",
      "sourceHeadline": "Bitcoin Developer Proposes a Quantum Trap for Hackers",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-quantum-hackers-traps-old-wallets/"
      ],
      "firstSeen": "2026-11-07T13:01:51.000Z",
      "updatedAt": "2026-11-07T13:29:09.945Z",
      "summary": "What if someone hacked your Bitcoin wallet and ended up paying you for the theft? That is the idea behind a proposal from Bitcoin Core developer Cory Fields. As Bitcoin prepares for Q-Day, when powerful quantum computers could break its current cryptography, Fields wants to make stealing vulnerable coins a costly gamble. On November 4, The post Bitcoin Developer Proposes a Quantum Trap for Hackers appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c26cb8ca1a6e8a9b52bb",
      "protocol": "Unattributed",
      "sourceHeadline": "Binance recovery, US crypto bill talks, Bitcoin ETF exits | Weekly recap",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/weekly-recap-binance-recovery-crypto-bill-bitcoin-etf/"
      ],
      "firstSeen": "2026-11-07T07:57:19.000Z",
      "updatedAt": "2026-11-07T13:29:09.945Z",
      "summary": "In this week’s edition of the weekly recap, Binance explained how attackers stole $6.34 billion, Democrats discussed a different approach to U.S. crypto regulation, and Bitcoin funds returned to outflows. The Nov. 1–7 news cycle also brought progress on retirement-plan…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "11941ff60a10964f8b48",
      "protocol": "TRM Labs",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/agentes-ia-dinero-responsabilidad-trm-labs/"
      ],
      "firstSeen": "2026-11-07T08:33:00.000Z",
      "updatedAt": "2026-11-07T13:29:09.945Z",
      "summary": "Hackers norcoreanos robaron cerca de 6.3 mil millones de dólares de Binance la semana pasada tras engañar a empleados mediante una falsa entrevista de trabajo. Incluso aprovecharon una herramienta interna de IA. La mayor parte del dinero desapareció en solo 20 minutos. El hack de Binance mostró lo rápido que los criminales pueden mover miles El post TRM Labs: El KYC para los agentes de IA debe empezar por la persona detrás de ellos fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "99d98bdac9af9a37c638",
      "protocol": "Unattributed",
      "sourceHeadline": "Polymarket investigates suspicious bets placed hours before NYT/Siena polls",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/polymarket-investigates-suspicious-poll-bets/"
      ],
      "firstSeen": "2026-11-07T10:35:09.000Z",
      "updatedAt": "2026-11-07T13:29:09.945Z",
      "summary": "Polymarket's investigation highlights potential vulnerabilities in prediction markets, raising concerns about insider trading and market integrity. The post Polymarket investigates suspicious bets placed hours before NYT/Siena polls appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "27b40ac051f4714fea44",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-report-reveals-6-34b-attack-risk-linked-to-north/"
      ],
      "firstSeen": "2026-11-07T12:34:49.000Z",
      "updatedAt": "2026-11-07T13:29:09.945Z",
      "summary": "Binance's report highlights a significant cyber attack risk of $6.34B attributed to North Korean hackers. The post Binance Report Reveals $6.34B Attack Risk Linked to North appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "36d33ed508a571d9cf14",
      "protocol": "How Polygon",
      "chain": "Polygon",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/how-polygon-would-return-70-million-stolen-pol-to-recovery-wallets/"
      ],
      "firstSeen": "2026-11-06T08:14:49.000Z",
      "updatedAt": "2026-11-07T06:31:06.879Z",
      "summary": "Two thefts left millions of POL in five blocked addresses. A Polygon proposal would move those balances into recovery wallets by changing the network’s rules at a specific block. Getting the tokens there would resolve one part of the recovery.…",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "17f09bd3897aa7dd946e",
      "protocol": "Unattributed",
      "sourceHeadline": "Zero-click iOS exploits drain $4M USDT from active TRON wallets",
      "chain": "Tron",
      "technique": "Exploit",
      "lossUsd": 4000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/zero-click-ios-exploits-drain-4m-usdt-from-active-tron-wallets/"
      ],
      "firstSeen": "2026-11-07T03:30:04.000Z",
      "updatedAt": "2026-11-07T06:31:06.879Z",
      "summary": "The 365-address TRON network includes 89 TRX-only losses, while just one theft matches a published iPhone-owner account. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "842c03898935f6e3d57e",
      "protocol": "Unattributed",
      "sourceHeadline": "Monetary Authority of Singapore Flags Risks After Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/monetary-authority-of-singapore-flags-risks-after-binance-hack/"
      ],
      "firstSeen": "2026-11-07T05:13:35.000Z",
      "updatedAt": "2026-11-07T06:31:06.879Z",
      "summary": "The Monetary Authority of Singapore issues a warning about crypto trading risks in light of the recent Binance hack. The post Monetary Authority of Singapore Flags Risks After Binance Hack appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f285129a99c33277703f",
      "protocol": "Binance hack is ‘cyber war,’ TRM Labs executive",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/interview/trm-labs-binance-hack-interview"
      ],
      "firstSeen": "2026-11-06T10:40:57.000Z",
      "updatedAt": "2026-11-07T06:31:06.879Z",
      "summary": "TRM Labs executive Ari Redbord called for governments to take offensive action against North Korean hackers following the record $6.3 billion Binance theft.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "8c2fc432de5d86c98cf5",
      "protocol": "Unattributed",
      "sourceHeadline": "blknoiz06 Accuses villainmonkey of Fraud in $MOTHER Promotion",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/blknoiz06-accuses-villainmonkey-of-fraud-in-mother-promotion/"
      ],
      "firstSeen": "2026-11-07T01:50:49.000Z",
      "updatedAt": "2026-11-07T06:31:06.879Z",
      "summary": "blknoiz06 has called out villainmonkey as a scammer, denying past partnerships and responding to allegations regarding $MOTHER. The post blknoiz06 Accuses villainmonkey of Fraud in $MOTHER Promotion appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "717bb15bb300ec76a308",
      "protocol": "Floki",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/floki-takes-trading-bot-offline-amid-exploit-investigation"
      ],
      "firstSeen": "2026-11-05T17:17:51.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "The team plans to move affected users to new wallets and warns against further deposits into bot wallets.",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ecf510b65973af9c160f",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-cuts-off-trading-platform-signalplus-after-hackers-break-in-with-a-fake-teams-invite/"
      ],
      "firstSeen": "2026-11-06T16:30:48.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "SignalPlus later reported an attack, losses below $82,000 and reimbursement underway, while Deribit also disabled connected keys. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7f43ada047f10c79e51b",
      "protocol": "Binance hack is ‘cyber war,’ TRM Labs executive",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/interview/trm-labs-binance-hack-interview"
      ],
      "firstSeen": "2026-11-06T10:40:57.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "TRM Labs executive Ari Redbord called for governments to take offensive action against North Korean hackers following the record $6.3 billion Binance theft.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ac40cb3e476f91b58c44",
      "protocol": "US Treasury",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 41100000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/us-treasury-may-hit-411t-debt-cap-by-february-bloomberg/"
      ],
      "firstSeen": "2026-11-06T21:05:06.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "The potential debt cap breach could lead to tighter fiscal policies, impacting Treasury yields and influencing broader economic stability. The post US Treasury may hit $41.1T debt cap by February: Bloomberg appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b20208cec82491384729",
      "protocol": "Unattributed",
      "sourceHeadline": "Security Assessment for frxUSD Ecosystem Contracts Reveals",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/security-assessment-for-frxusd-ecosystem-contracts-reveals/"
      ],
      "firstSeen": "2026-11-06T23:29:49.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "Frax Finance confirms frxUSD's security assessment found no critical vulnerabilities, boosting confidence in the ecosystem. The post Security Assessment for frxUSD Ecosystem Contracts Reveals appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "df4fa506e52978a02fbf",
      "protocol": "TRM Labs",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6360000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/trm-labs-offensive-action-north-korea-binance/"
      ],
      "firstSeen": "2026-11-06T23:35:41.000Z",
      "updatedAt": "2026-11-07T00:16:50.842Z",
      "summary": "The call for offensive cyber operations against North Korean hackers highlights the need for proactive measures in global cybersecurity strategy. The post TRM Labs calls for offensive action against North Korean hackers after $6.36 billion Binance theft appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c11428544cd9d783295a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 2470000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/former-fbi-agent-pleads-guilty-to-2-47-million-crypto-theft"
      ],
      "firstSeen": "2026-11-05T21:53:55.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Prosecutors say Patrick Steven Yaroch used credentials tied to 35 FBI investigations, compromising cases and intelligence sources and methods.",
      "revision": 4,
      "sourceHeadline": "Former FBI Agent Pleads Guilty to $2.47 Million Crypto Theft",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5928012e6682f4c3f7d9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1279,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382632/openai-linux-security-flaws-exploit"
      ],
      "firstSeen": "2026-11-05T19:16:03.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "An automated OpenAI system produced working exploits and draft fixes at roughly $1,279 per flaw, raising new questions about how cheaply AI can find holes in critical software at scale.",
      "revision": 4,
      "sourceHeadline": "OpenAI Found 948 Linux Security Flaws—And Figured Out How to Exploit Them",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "da38ef50a44a52a5c7a7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binances-hack-questions-hot-wallet-risk-controls",
        "https://crypto-economy.com/tradertraitor-had-about-eight-weeks-inside-binance/"
      ],
      "firstSeen": "2026-11-06T10:40:57.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Experts say blockchain records show repeated wallet drains but cannot establish Binance’s internal signing controls or transaction limits.",
      "revision": 2,
      "sourceHeadline": "Binance’s $6.3B hack leaves questions over hot wallet safeguards",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "1e756b0af089ee98baf4",
      "protocol": "$3.1B in Stolen Binance Crypto Has Yet",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 3100000000,
      "lossBasis": "aggregate",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/elliptic-3-1b-in-stolen-binance-crypto-still-untouched/",
        "https://decrypt.co/382711/3-1b-in-stolen-binance-crypto-has-yet-to-be-laundered-elliptic"
      ],
      "firstSeen": "2026-11-06T14:04:18.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "The attackers have used more than 20,000 wallets on 16 blockchains so far, but the bulk of the stolen ETH and Bitcoin hasn't moved.",
      "revision": 2,
      "qualityFlags": []
    },
    {
      "id": "cef8a3ff599cf6a5e781",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/fbi-agent-drains-crypto-wallets-tied-to-35-investigations-steals-2-47-million-and-plans-portugal-escape/"
      ],
      "firstSeen": "2026-11-06T11:10:46.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Patrick Steven Yaroch used credentials tied to 35 investigations for about 100 fraudulent transfers, according to DOJ. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 2,
      "sourceHeadline": "FBI agent drains crypto wallets tied to 35 investigations, steals $2.47 million and plans Portugal escape",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e5b4e6e7639cd3cdd35a",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/loopscale-partly-restores-loan-functions-keeps-vault-withdrawals-frozen"
      ],
      "firstSeen": "2026-11-06T00:42:07.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Repayments and collateral withdrawals remain disabled for USDC Genesis-funded loans as the Solana lender details two attack paths.",
      "revision": 2,
      "sourceHeadline": "Loopscale Partly Restores Loan Functions, Keeps Vault Withdrawals Frozen",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "42dbd9ca7846576026f7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hack-puts-crypto-exchanges-cold-wallet-ratio-under-spotlight"
      ],
      "firstSeen": "2026-11-06T05:07:00.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Coinbase says it keeps more than 99% of customer assets offline, while Gate reports 88.26% of its total assets are kept in cold storage.",
      "revision": 2,
      "sourceHeadline": "Crypto exchanges tout cold storage ratios after Binance attack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "288e0cf88d05c4381fe8",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 48600000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382670/mercado-bitcoin-hack-contained-blockchain-data",
        "https://www.coindesk.com/business/2026/11/05/mercado-bitcoin-hack-continued-hours-after-exchange-said-attack-was-contained-report-finds"
      ],
      "firstSeen": "2026-11-05T10:44:54.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Fresh forensic analysis traces $48.6 million across 11 blockchains and finds thousands of customer deposit addresses drained hours after the Brazilian exchange said it had stopped the breach on Monday.",
      "revision": 2,
      "sourceHeadline": "Mercado Bitcoin Said Its Hack Was Contained, But Blockchain Data Tells a Different Story",
      "qualityFlags": []
    },
    {
      "id": "31dc903761717b95b577",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/11/05/u-s-justice-department-assembles-force-to-shield-against-foreign-ai-threats"
      ],
      "firstSeen": "2026-11-05T18:59:45.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "The new DOJ task force will aid the recently designated U.S. \"SI Force\" by warding off bad actors backed by other nations, criminal groups or corporate fraud.",
      "revision": 2,
      "sourceHeadline": "U.S. Justice Department assembles force to shield against foreign AI threats",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fb6d4116d32de69294ca",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 82000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-deribit-revoke-signalplus-api-fake-teams-attack"
      ],
      "firstSeen": "2026-11-05T19:02:19.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "SignalPlus said attackers compromised an engineer’s computer in a breach that resulted in losses of less than $82,000, which the crypto trading platform pledged to reimburse in full.",
      "revision": 2,
      "sourceHeadline": "Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "2d528ebc59c3fd5d0733",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/defi/gauntlet-restricts-v1-vault-deposits-after-reported-op-reth-vulnerability"
      ],
      "firstSeen": "2026-11-05T17:51:32.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "The risk curator is also pausing allocations and reducing LayerZero-bridged asset exposure, while saying no exploit has been reported to its knowledge.",
      "revision": 2,
      "sourceHeadline": "Gauntlet Restricts V1 Vault Deposits After Reported op-reth Vulnerability",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a55801b075202436cfec",
      "protocol": "Gnosis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/gnosis-pay-confirms-data-breach-as-hackers-access-customer-information/",
        "https://www.theblock.co/news/defi/2026-11-06-gnosis-pay-data-breach-legacy-debit-card-system-435934"
      ],
      "firstSeen": "2026-11-06T15:25:49.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Gnosis Pay disclosed a data breach after unauthorized access to its legacy debit card system on Nov. 3. Customer funds were not affected.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "b08fffe09bd7481a8a60",
      "protocol": "Unattributed",
      "sourceHeadline": "US Sanctions 45 More Targets Tied to Alleged Crypto Scam Empire Prince Group",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/us-treasury-sanctions-prince-group-scams/",
        "https://decrypt.co/382730/us-sanctions-45-more-targets-tied-to-alleged-crypto-scam-empire-prince-group",
        "https://thedefiant.io/news/regulation/us-sanctions-45-more-targets-linked-to-prince-group"
      ],
      "firstSeen": "2026-11-06T17:42:31.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "OFAC targeted offshore companies and associates it says helped Prince Group executives hide assets and dodge earlier sanctions.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "d2c042491f1051ea6525",
      "protocol": "Elliptic",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 2850000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-11-06-binance-hackers-swap-stolen-tokens-124-million-bitcoin-exchange-plans-withdrawal-reopenings-435930"
      ],
      "firstSeen": "2026-11-06T18:06:59.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Elliptic says little of the stolen crypto has likely been cashed out, while $2.85 billion remains frozen.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "59f93a92dcd0f7e6758d",
      "protocol": "Unattributed",
      "sourceHeadline": "Binance hack sparks heavy outflows as futures traders stay: Santiment",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hack-santiment-outflows-bitcoin-futures/"
      ],
      "firstSeen": "2026-11-06T20:10:00.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Binance’s $6.34 billion hack has driven heavy cryptocurrency withdrawals and some of Bitcoin’s most negative social sentiment on record, while futures traders have maintained billions of dollars in positions, according to Santiment. Santiment’s Nov. 6 report examined exchange flows, social…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "f5b98d3b6a786ce75795",
      "protocol": "Binance Hackers Swap $50 Million in XRP, Mostly",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 50000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-hackers-swap-50-million-in-xrp-mostly-into-bitcoin-elliptic-says"
      ],
      "firstSeen": "2026-11-06T11:06:26.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Bitcoin obtained from other stolen assets nearly doubled in a day to 1,650 BTC, while the main ETH and bitcoin holdings remain untouched.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "d10e4910684d55cab3de",
      "protocol": "Gnosis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/gnosis-pay-customer-data-breach-legacy-card-system/"
      ],
      "firstSeen": "2026-11-06T18:33:43.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Gnosis Pay disclosed a customer data breach on Nov. 6 affecting the legacy system behind its branded payment cards, saying funds were unaffected and extra security checks would remain in place until the platform’s planned December closure. According to Gnosis…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "acad59e2556db0b25ec9",
      "protocol": "Vals",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/vals-open-ai-models-close-hacking-gap/"
      ],
      "firstSeen": "2026-11-06T18:51:03.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Open AI models' growing capabilities challenge the effectiveness of access controls, raising security and policy concerns globally. The post Vals finds open AI models closing the hacking gap with gated frontier systems appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ae282bfd6fd8a3b21bc2",
      "protocol": "Unattributed",
      "sourceHeadline": "Google DeepMind’s AI agents expose two weaknesses in legacy 1024-bit RSA",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/google-deepmind-ai-rsa-1024-bit-weaknesses/"
      ],
      "firstSeen": "2026-11-06T17:53:19.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "AI's ability to rapidly identify cryptographic vulnerabilities could accelerate the need for stronger encryption standards globally. The post Google DeepMind’s AI agents expose two weaknesses in legacy 1024-bit RSA appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bb2e444c7696d7b1004d",
      "protocol": "Trail of Bits",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/trail-of-bits-warns-of-wallet-vulnerabilities/"
      ],
      "firstSeen": "2026-11-06T19:19:49.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Trail of Bits reveals critical vulnerabilities in wallet signing services, urging security checks. The post Trail of Bits Warns of Wallet Vulnerabilities appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aa3c4030581313946c1a",
      "protocol": "Unattributed",
      "sourceHeadline": "Vitalik Buterin tells crypto exchanges to prioritize survival after Binance hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/vitalik-buterin-exchanges-survival-binance-hack/"
      ],
      "firstSeen": "2026-11-06T17:05:23.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "Buterin's call for crypto exchanges to prioritize survival over competition highlights potential regulatory shifts and increased security demands. The post Vitalik Buterin tells crypto exchanges to prioritize survival after Binance hack appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eab3732ba86676994d6f",
      "protocol": "Unattributed",
      "sourceHeadline": "Binance hackers had 8-week intrusion window before $6.3B exploit: SEAL",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hackers-8-weeks-access-63b-exploit-security-alliance"
      ],
      "firstSeen": "2026-11-06T11:26:30.000Z",
      "updatedAt": "2026-11-06T20:32:40.176Z",
      "summary": "The cybersecurity company flagged similar multi-stage intrusion patterns behind other high-profile crypto heists, including the $388 million Bitget hack.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "cae78946fa4b0a4f0ebb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/zachxbt-french-bank-credit-mutuel-arkea-133m-crypto-theft",
        "https://crypto-economy.com/zachxbt-links-credit-mutuel-arkea-to-133m-crypto-theft/",
        "https://decrypt.co/382486/zachxbt-names-french-bank-credit-mutuel-arkea-as-alleged-victim-of-133m-crypto-theft",
        "https://www.coindesk.com/business/2026/11/04/zachxbt-names-french-bank-credit-mutuel-arkea-as-suspected-victim-of-usd133-million-crypto-theft",
        "https://www.theblock.co/news/web3/2026-11-03-french-bank-credit-mutuel-arkea-exploited-zachxbt-432607"
      ],
      "firstSeen": "2026-11-04T03:35:30.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "The French bank said the attack allowed \"fraudulent operations\" but did not mention crypto, and is still assessing the amounts.",
      "revision": 8,
      "sourceHeadline": "Crédit Mutuel Arkéa",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "b7e6ff05b498d594ce72",
      "protocol": "SignalPlus",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/signalplus-hack-82k-binance-deribit-api-keys/"
      ],
      "firstSeen": "2026-11-05T20:35:03.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading platform. According to SignalPlus’s Nov. 5 incident statement, the attack affected…",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3627a50c8a4622da2fed",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hackers-8-weeks-access-63b-exploit-security-alliance",
        "https://cryptobriefing.com/binance-hackers-eight-weeks-access-theft/"
      ],
      "firstSeen": "2026-11-06T11:26:30.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "The cybersecurity company flagged similar multi-stage intrusion patterns behind other high-profile crypto heists, including the $388 million Bitget hack.",
      "revision": 1,
      "sourceHeadline": "Binance hackers had 8 weeks of access before $6.3B",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "501ac44b4753b79e6fc7",
      "protocol": "Former FBI Agent Pleads Guilty to Stealing $2.5M",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 2500000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/former-fbi-agent-pleads-guilty-247m-crypto-theft/",
        "https://decrypt.co/382695/former-fbi-agent-pleads-guilty-to-stealing-2-5m-in-crypto-from-35-investigations"
      ],
      "firstSeen": "2026-11-06T10:57:06.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "Patrick Yaroch drained wallets using credentials the FBI had collected, then asked ChatGPT for advice on starting a new life in Europe.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "011ed76a2721952ca664",
      "protocol": "XRP",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 50000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/xrp-sees-50-million-shift-amidst-binance-hack-developments/",
        "https://thedefiant.io/news/hacks/binance-hackers-swap-50-million-in-xrp-mostly-into-bitcoin-elliptic-says"
      ],
      "firstSeen": "2026-11-06T11:06:26.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "XRP has begun moving as $50 million is swapped, primarily through THORChain, following Binance hack news. The post XRP Sees $50 Million Shift Amidst Binance Hack Developments appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a179f8110014ce01c79d",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/cz-urges-iphone-users-to-update-ios/"
      ],
      "firstSeen": "2026-11-06T11:49:23.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "Binance co-founder Changpeng “CZ” Zhao urged iPhone users, particularly crypto holders, to update iOS as warnings circulate around the DarkSword exploit chain. In a November 6 post, Zhao stressed that wallet applications cannot update a device’s operating system and linked the issue to self-custody responsibility. The warning highlights the risk of leaving devices exposed to ... Read more.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3ebe50d9e6616c95709b",
      "protocol": "South Korea’s GOPAX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/gopax-halts-trading-withdrawals-hacking-threat/"
      ],
      "firstSeen": "2026-11-06T12:26:12.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "GOPAX suspends crypto trading, deposits and withdrawals after a hacking threat, moves assets to cold storage and offers manual withdrawals through support.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c21b90f8815cd9c05a9f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 7610000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/north-korean-hackers-7-billion-2026/"
      ],
      "firstSeen": "2026-11-06T12:00:00.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "North Korean hackers stole $7.61 billion in crypto in 2026, BitOK finds. Major attacks hijacked signers, and $4.75 billion escaped freezes. The post North Korean Hackers Took $7.61 Billion in 2026 Without Breaking Any Code appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "North Korean Hackers Took $7.61 Billion in 2026 Without",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "07e973e231fb4f659e74",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 2470000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/ex-fbi-agent-pleads-guilty-to-2m-crypto-theft/"
      ],
      "firstSeen": "2026-11-06T14:31:31.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "Former FBI agent Patrick Steven Yaroch pleaded guilty to wire fraud and money laundering after admitting he stole cryptocurrency using credentials available through FBI systems. From December 2024 onward, Yaroch carried out about 100 fraudulent transfers tied to 35 separate FBI investigations, generating approximately $2.47 million in illicit proceeds. The scheme involved wallets linked to ... Read more.",
      "revision": 1,
      "sourceHeadline": "Ex-FBI Agent Pleads Guilty to $2.47M Crypto Theft",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "429eff3dfd4bbbdbd2d3",
      "protocol": "GOPAX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/gopax-halts-crypto-trading-withdrawals-cold-storage"
      ],
      "firstSeen": "2026-11-06T10:47:33.000Z",
      "updatedAt": "2026-11-06T14:34:11.117Z",
      "summary": "South Korea’s GOPAX suspended trading, deposits and standard withdrawals after a hacking threat, with manual withdrawals available through support.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "41e19f42af3f82b57827",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-11-04-bitcoin-price-midterm-elections-binance-hack-recovery-433030"
      ],
      "firstSeen": "2026-11-04T20:09:58.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "Bitcoin rose 3.5% to $80,500 and ether jumped 6% after Democrats won Congress, while Bitwise says the Binance hack had limited market impact.",
      "revision": 6,
      "sourceHeadline": "Bitcoin rebounds past $80,000 as markets shrug off midterms",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e1bddbaca27c50446fb3",
      "protocol": "Binance, Polymarket",
      "chain": "Polygon",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/polygon-hard-fork-binance-polymarket-6-8m-hack-recovery",
        "https://crypto.news/polygon-hard-fork-recover-stolen-binance-polymarket/",
        "https://cryptobriefing.com/polygon-hard-fork-recover-stolen-pol/"
      ],
      "firstSeen": "2026-11-05T04:38:45.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "Polygon block producers have already frozen the stolen tokens, but a proposed hard fork would allow the funds to be recovered and returned to their owners.",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "efb31e4f06acf2be06fe",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/credit-mutuel-arkea-resumes-operations-133m-crypto-theft",
        "https://www.theblock.co/news/business/2026-11-04-french-bank-confirms-cyberattack-434372"
      ],
      "firstSeen": "2026-11-05T04:01:16.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "The bank said customer funds were unaffected after attackers accessed its systems through a service provider’s platform.",
      "revision": 4,
      "sourceHeadline": "Crédit Mutuel Arkéa resumes operations after attack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "18c3997731b46825ade7",
      "protocol": "Vitalik Buterin",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/vitalik-buterin-warns-crypto-exchanges-must-focus-on-survival-after-binance-hack/"
      ],
      "firstSeen": "2026-11-05T11:32:15.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "Ethereum co-founder Vitalik Buterin has warned that cryptocurrency exchanges must prioritize surviving cyberattacks over competing for market share during the next two years, as recent security breaches expose weaknesses in centralized systems. In an interview with Moneycontrol during his visit…",
      "revision": 3,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "32c6ef77b42fc58c122a",
      "protocol": "Unpatched Bitcoin Lightning nodes",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/unpatched-bitcoin-lightning-nodes-face-channel-draining-bug/"
      ],
      "firstSeen": "2026-11-06T04:30:28.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "The v26.06.10 update adds channel checks and remote-command fixes, while maintainers also advise restricting and replacing unaccounted-for credentials. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "878d2cee0e309a682061",
      "protocol": "Chainalysis",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/chainalysis-confirms-user-data-exposure-in-security-breach/"
      ],
      "firstSeen": "2026-11-06T05:54:01.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "Chainalysis has confirmed a significant data breach, exposing user credentials and passwords. Here's why this matters. The post Chainalysis Confirms User Data Exposure in Security Breach appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c75d9fbc1a08455373c8",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/cory-fields-quantum-landmines-bitcoin-theft/"
      ],
      "firstSeen": "2026-11-06T01:35:06.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "Fields' proposal highlights the need for innovative deterrents in Bitcoin's security, emphasizing economic disincentives over cryptographic upgrades. The post Cory Fields proposes quantum landmines to deter Bitcoin theft appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Cory Fields proposes quantum landmines to deter Bitcoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e61ddc7995607d2a9128",
      "protocol": "Oil prices set for 12% weekly",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/oil-prices-set-for-12-weekly-drop-despite-tanker-attacks-in-gulf/"
      ],
      "firstSeen": "2026-11-06T06:19:01.000Z",
      "updatedAt": "2026-11-06T06:32:40.435Z",
      "summary": "The 12% drop in oil prices highlights market confidence in geopolitical de-escalation, potentially stabilizing future energy costs. The post Oil prices set for 12% weekly drop despite tanker attacks in Gulf appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1903081463a803c1190c",
      "protocol": "Mercado Bitcoin",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/mercado-bitcoin-plans-view-only-reopening-on-nov-9-after-hack"
      ],
      "firstSeen": "2026-11-04T23:36:50.000Z",
      "updatedAt": "2026-11-06T00:07:09.290Z",
      "summary": "The exchange says it will use company funds to replace affected assets, while withdrawals and trading await security clearance.",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6f211804080c094ad6ea",
      "protocol": "Fed, OCC check US banks after Binance hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/michael-saylor-ai-hackers-binance-hack/",
        "https://cointelegraph.com/news/fed-occ-check-us-banks-binance-hack-security-risks"
      ],
      "firstSeen": "2026-11-05T18:32:45.000Z",
      "updatedAt": "2026-11-06T00:07:09.290Z",
      "summary": "US regulators reportedly contacted banks following last week’s $6.3 billion Binance security hack, while experts raised concerns about transaction security and crypto risks.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "54d66681b29311b26f5b",
      "protocol": "Solana-Based Loopscale",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/solana-based-loopscale-hit-by-attack-no-deposit-losses-reported/"
      ],
      "firstSeen": "2026-11-05T19:57:56.000Z",
      "updatedAt": "2026-11-06T00:07:09.290Z",
      "summary": "TL;DR: The lending protocol Loopscale temporarily suspended all operations on November 5 after detecting a coordinated campaign of API attacks. The platform’s infrastructure received more than 30,000 malicious requests per day specifically targeting its SOL and USDC Genesis Vaults. The technical team confirmed that no deposit losses were recorded for users and that the impacted ... Read more.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5a56ba4e1135aeddaaed",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/coinbase-security-measures-after-binance-hack/",
        "https://cointelegraph.com/markets/crypto-market-recovery-grayscale-binance-hack-temporary-setback",
        "https://crypto-economy.com/coinbase-keeps-99-of-customer-assets-in-cold-storage-after-6-3b-binance-hack/",
        "https://crypto.news/binance-hack-could-have-been-prevented-coinex-founder/"
      ],
      "firstSeen": "2026-11-04T04:47:12.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "Zach Pandl highlighted institutional custody safeguards as crypto markets recovered some losses following the record $6.3 billion Binance hack.",
      "revision": 5,
      "sourceHeadline": "Binance hack may be ‘temporary setback’ for crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9fb2cc4820cdde84da83",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-revokes-signalplus-api-keys-after-potential-security-issue/",
        "https://decrypt.co/382599/binance-cuts-off-signalplus-api-keys-over-potential-security-issue-at-trading-platform",
        "https://thedefiant.io/news/security/binance-revokes-signalplus-api-keys-after-security-warning"
      ],
      "firstSeen": "2026-11-05T10:58:21.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "The exchange said its own systems and user funds are unaffected, a week after it lost $6.4 billion in a hack blamed on North Korea.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "76ef52bba91d3904bfe5",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 2000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/strategys-100-strc-comeback-could-turn-a-cash-drain-into-fresh-bitcoin-buying-power/"
      ],
      "firstSeen": "2026-11-05T18:30:02.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "Strategy's STRC preferred stock briefly returned to $100 on Nov. 4, potentially restoring a funding channel for Bitcoin purchases after months of cash-consuming share buybacks. The company announced on Nov. 4 that its STRC security had reached $100, prompting executive chairman Michael Saylor to declare: “We're ₿ack.” The recovery followed about $2 billion in share… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "sourceHeadline": "Strategy’s $100 STRC comeback could turn a cash drain",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "b980cd52dce617e9ecbb",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 391000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/05/mercado-bitcoin-hack-continued-hours-after-exchange-said-attack-was-contained-report-finds"
      ],
      "firstSeen": "2026-11-05T10:44:54.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "The same attacker took about $391,000, mostly from wallets Bitquery ties to BitMart, whose founder confirmed a Nov. 2 hack and suspects a link.",
      "revision": 1,
      "sourceHeadline": "Mercado Bitcoin hack continued hours after exchange said",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "3902267eb515b687aa71",
      "protocol": "Binance",
      "chain": "Arbitrum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-frozen-eth-arb-recovery-proposal/"
      ],
      "firstSeen": "2026-11-05T16:07:11.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "Binance asked Arbitrum’s DAO on Nov. 5 to release 8,425.997 ETH and 74.56 million ARB frozen after its hot-wallet exploit, beginning a governance process the exchange expects to take seven weeks or longer. Binance submitted the proposal through its Binance_Post_Listing…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "92c823cf51371fcf5821",
      "protocol": "Fed and OCC Check U.S. Banks After Binance Hack",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/fed-and-occ-check-u-s-banks-after-binance-hack/"
      ],
      "firstSeen": "2026-11-05T16:41:55.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "TL;DR Federal Reserve and OCC supervisors contacted U.S. banks after Binance’s $6.3 billion hack, asking about unusual activity, service disruptions and vulnerabilities in their systems. Banks are running diagnostics and preparing reviews, but the outreach does not establish that any U.S. bank was breached or vulnerable to the same attack methods. Regulators are monitoring spillover ... Read more.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d175ed3c70c72223690d",
      "protocol": "India",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/india-warns-ai-assisted-hackers-are-stealing-crypto-wallet-keys/"
      ],
      "firstSeen": "2026-11-05T17:30:59.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "CERT-In’s CRAFTY FALCON advisory reports re-targeting after incomplete remediation and includes stolen crypto wallet keys among the campaign’s effects. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f397d4d07e6823e6745a",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 1100000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/cz-warns-trust-wallet-users-of-fake-website-as-1-1m-exploit-emerges/"
      ],
      "firstSeen": "2026-11-05T07:38:00.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "Binance co-founder Changpeng Zhao has warned cryptocurrency users about a fraudulent Trust Wallet website designed to trick visitors into connecting their wallets, as separate reports have raised concerns about a $1.1 million exploit targeting iPhone users. Security researcher Anurag, who…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1a5eed55a871244ecc79",
      "protocol": "Google study",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/google-study-rag-poisoning-vulnerabilities/"
      ],
      "firstSeen": "2026-11-05T18:27:54.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "AI search systems face significant vulnerabilities from simple query-echoing attacks, challenging the reliability of retrieval methods. The post Google study finds five fake documents can wreck AI search retrieval appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eacf4614e87f8fb43d02",
      "protocol": "FATF traces over $100 million in victim funds",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/fatf-traces-100m-scam-compound-crypto-wallet/"
      ],
      "firstSeen": "2026-11-05T18:19:01.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "The FATF report highlights the urgent need for global cooperation and stronger crypto regulations to combat sophisticated scam operations. The post FATF traces over $100 million in victim funds to a single scam compound’s crypto wallets appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b979cd192cab1abdd7d2",
      "protocol": "Morning Minute",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382603/morning-minute-democrat-sweep-pumps-crypto-as-clarity-act-resurfaces"
      ],
      "firstSeen": "2026-11-05T13:14:05.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "The Dems are already talking compromise on the Clarity Act and their requests all seem logical - does the bill have new life?",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bdaa0d4b4815a79df73e",
      "protocol": "TRM Labs",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/ai-agents-money-liability-trm-labs/"
      ],
      "firstSeen": "2026-11-05T11:40:57.000Z",
      "updatedAt": "2026-11-05T18:40:47.390Z",
      "summary": "North Korean hackers stole around $6.3 billion from Binance last week after tricking employees through a fake job interview. They even exploited an internal AI tool. Most of the money was gone within 20 minutes. The Binance hack exposed how quickly criminals can move billions. Meanwhile, as AI agents begin making payments themselves, financial institutions The post TRM Labs: KYC for AI Agents Must Start With the Human Behind Them appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "148a6a6d97cbf951595f",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382397/liquid-network-restores-full-bitcoin-backing-two-months-after-320m-exploit",
        "https://thedefiant.io/news/security/liquid-restores-full-bitcoin-backing-after-elements-exploit",
        "https://www.coindesk.com/markets/2026/11/03/liquid-s-bitcoin-ious-are-fully-backed-again-after-a-usd320-million-exploit",
        "https://www.theblock.co/news/ecosystems/2026-11-03-liquid-network-restores-full-bitcoin-backing-following-exploit-432387"
      ],
      "firstSeen": "2026-11-03T00:12:59.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Blockstream CEO Adam Back said the sidechain's defenses have been hardened, and warned developers not to trust AI-suggested fixes blindly.",
      "revision": 8,
      "sourceHeadline": "Liquid Network Restores Full Bitcoin Backing Two Months",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "6f1935351a3f4436c5a0",
      "protocol": "Morning Minute",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382410/morning-minute-tom-lee-calls-the-binance-hack-bullish-for-ethereum"
      ],
      "firstSeen": "2026-11-03T13:11:47.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Meanwhile, both the BTC ETFs and ETH ETFs bleed outflows in the Binance hack aftermath, dragging down prices.",
      "revision": 8,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f8ebb71a53bae84f7cfc",
      "protocol": "Epidemic",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382423/epidemic-hacked-freezers-spreads-europe"
      ],
      "firstSeen": "2026-11-03T17:04:46.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "A suspected hacking wave has pushed supermarket freezers into defrost mode across ten European countries, with temperatures reportedly hitting 50°C. Nobody knows who's behind it or why it spread.",
      "revision": 7,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b89745274ee7cf87d9c1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382420/five-ways-north-korea-breaks-into-crypto-firms-and-how-binance-was-hacked"
      ],
      "firstSeen": "2026-11-03T17:30:54.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "From AI deepfakes to poisoning code libraries: here's how North Korean hackers get inside crypto companies.",
      "revision": 7,
      "sourceHeadline": "Five Ways North Korea Breaks Into Crypto Firms—and How",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b355d35b108b2ed31bdb",
      "protocol": "BitMart Founder",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/bitmart-founder-confirms-hack-during-restructuring"
      ],
      "firstSeen": "2026-11-04T04:56:34.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Bitquery traced about $391,000 in outflows mostly from BitMart-linked wallets to an address used in the Mercado Bitcoin attack.",
      "revision": 5,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4c5549a8da99bf5a3059",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-expands-proof-of-reserves-to-44-tokens-after-hack"
      ],
      "firstSeen": "2026-11-04T15:38:12.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "The exchange says it has replenished about 98% of affected assets, but the new cryptographic proof is unfinished and withdrawals are not fully reopened.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c7d1ed7707c7c35bc91a",
      "protocol": "Arthur Hayes",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/arthur-hayes-ai-ipo-dilution-liquidity/",
        "https://cryptobriefing.com/arthur-hayes-ai-dilution-bitcoin-liquidity/"
      ],
      "firstSeen": "2026-11-05T04:59:09.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Arthur Hayes says AI IPO dilution could shrink bank balance sheets and drain the dollar liquidity behind crypto's rally. The post Arthur Hayes: Can AI IPO Dilution Choke Bank Liquidity and Hit Bitcoin? appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8b59877f14947ea94c1f",
      "protocol": "Privacy Cash",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1200000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/privacy-cash-pauses-deposits-binance-hack/",
        "https://thedefiant.io/news/defi/privacy-cash-pauses-deposits-after-binance-hack"
      ],
      "firstSeen": "2026-11-04T16:06:00.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Privacy Cash has temporarily paused deposits following the Binance hack, saying it will strengthen wallet screening after investigators traced about $1.2 million in theft-linked funds into its privacy pools. Privacy Cash announced the suspension in a Nov. 4 post, directly…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "01160de09fc67b21f528",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 1100000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/cz-warns-trust-wallet-users-of-fake-website-as-1-1m-exploit-emerges/"
      ],
      "firstSeen": "2026-11-05T07:38:00.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Binance co-founder Changpeng Zhao has warned cryptocurrency users about a fraudulent Trust Wallet website designed to trick visitors into connecting their wallets, as separate reports have raised concerns about a $1.1 million exploit targeting iPhone users. Security researcher Anurag, who…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "4a0a8a2694e31e957464",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoins-next-upgrade-bip-54-could-fix-four-longstanding-flaws-developer-says/"
      ],
      "firstSeen": "2026-11-05T05:43:34.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Bitcoin developer Matt Corallo has estimated an 80% chance that BIP-54, a proposed upgrade designed to fix four longstanding vulnerabilities in the network, will become Bitcoin’s next soft fork. According to a November 4 Decrypt report, Corallo discussed the proposal…",
      "revision": 1,
      "sourceHeadline": "Bitcoin’s next upgrade BIP-54 could fix four longstanding",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7bb0dd9805db2bcbf436",
      "protocol": "BitMart founder",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitmart-hack-security-staffing-crypto-exchange-restructuring"
      ],
      "firstSeen": "2026-11-04T22:31:58.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "The crypto exchange’s founder warned of security staffing shortages amid restructuring as analysts flagged suspicious transfers potentially linked to the Mercado Bitcoin hack.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6a1669f941e5cebf3694",
      "protocol": "CERT-In",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/cert-in-crafty-falcon-crypto-exchanges/"
      ],
      "firstSeen": "2026-11-05T06:27:09.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "India’s cyber agency CERT-In says an AI-assisted hacker group has stolen wallet keys from crypto exchanges. The same group is triggering unauthorized transfers through fintech payment systems. CERT-In rated its November 4 warning Critical and named the actor CRAFTY FALCON. The agency says financial firms continue to report successful attacks. How CRAFTY FALCON Turns Firms’ The post CERT-In Warns AI-Powered Hacker Group Is Hitting India's Crypto and Fintech Firms appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "819b839bfd478ef6fb73",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/xrp-ledger-fixes-unauthorized-token-minting-bug/"
      ],
      "firstSeen": "2026-11-05T09:08:23.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "XRP Ledger activated a fix for a token-minting permission flaw affecting issued assets, including stablecoins. XRP was unaffected; no exploit is confirmed.",
      "revision": 1,
      "sourceHeadline": "XRP Ledger fixes bug that could allow unauthorized token",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a66f134f574ad71137a6",
      "protocol": "South Korea delays Binance hack sanctions talks",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/south-korea-binance-hack-north-korea-sanctions/"
      ],
      "firstSeen": "2026-11-05T08:20:47.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "South Korea has not begun Binance hack sanctions talks as its Foreign Ministry reviews measures against North Korea following the FBI's $6B theft claim.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3667812a9b2410f4a1b5",
      "protocol": "Tendril exploit drains roughly $555K in USDT",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 555000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/tendril-exploit-555k-usdt-loss-bnb-chain/"
      ],
      "firstSeen": "2026-11-05T07:31:41.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "The exploit highlights the critical need for rigorous auditing and secure coding practices in DeFi to prevent vulnerabilities in custom token logic. The post Tendril exploit drains roughly $555K in USDT after sell hook flaw appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d912e04f7b9078d09346",
      "protocol": "OpenAI",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-ai-finds-948-linux-flaws/"
      ],
      "firstSeen": "2026-11-05T08:31:04.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "The rapid identification and exploitation of Linux vulnerabilities by AI highlights the urgent need for proactive security measures and timely patching. The post OpenAI says its AI found 948 Linux flaws and wrote an exploit for every one appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5f7f646434e0eb5d426e",
      "protocol": "OpenAI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/11/05/openai-says-its-ai-can-break-into-linux-at-scale-here-s-what-it-means-for-crypto"
      ],
      "firstSeen": "2026-11-05T08:26:26.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "OpenAI says its AI found 948 Linux flaws and wrote a working attack for each one. Crypto security voices say decentralization leaves the industry better placed than most to cope.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b3b55492790c5c5915f3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/uk-investment-scams-banks-wirex-fraud/"
      ],
      "firstSeen": "2026-11-05T09:48:11.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "A scammer no longer needs to break into your bank account to steal your money. An investment advert on Instagram or a convincing WhatsApp message can be enough to persuade you to send it yourself. That shift is showing up in the UK’s fraud figures. Investment scams cost UK victims £221.5 million in 2025, up The post The £221 Million Scam Epidemic Hiding on Social Media appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "The £221 Million Scam Epidemic Hiding on Social Media",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "26ce802cc62c2bb88658",
      "protocol": "Circle CEO",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/circle-ceo-stablecoin-freeze-tools-banks/"
      ],
      "firstSeen": "2026-11-05T02:30:00.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "Circle CEO Jeremy Allaire says stablecoin freeze tools outdo banks after the $6.3 billion Binance hack, but gaps remain. The post Circle CEO Says Freeze-and-Seize Tools Give Stablecoins an Edge Over Correspondent Banking appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c76d66432025f03fc98f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/xrp-ledger-rolls-out-critical-upgrade-to-boost-network-security-and-defi-capabilities/"
      ],
      "firstSeen": "2026-11-04T22:31:17.000Z",
      "updatedAt": "2026-11-05T10:44:14.769Z",
      "summary": "The XRP Ledger (XRPL) network activated the technical amendment fixCleanup3_4_0 after reaching over 94% consensus among its trusted validators. The update fixes a potential vulnerability in delegated token issuance permissions and directly optimizes the operation of automated market makers (AMM) and on-chain lending protocols. Now activated on the XRP Ledger! and hardened. 😈 https://t.co/IJLKO9mwT8 pic.twitter.com/g7c8aod5VD ... Read more.",
      "revision": 1,
      "sourceHeadline": "XRP Ledger Rolls Out Critical Upgrade to Boost Network",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0ac346969040bff94a5d",
      "protocol": "BitMart founder",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitmart-hack-security-staffing-crypto-exchange-restructuring"
      ],
      "firstSeen": "2026-11-04T22:31:58.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "The crypto exchange’s founder warned of security staffing shortages amid restructuring as analysts flagged suspicious transfers potentially linked to the Mercado Bitcoin hack.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bc761864dd9cfa8c0d7a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/french-bank-resumes-transfers-after-133-million-attack-but-leaves-crypto-loss-unconfirmed/"
      ],
      "firstSeen": "2026-11-05T02:30:38.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "Arkéa says attackers used its own account through a provider's platform, while a separate $108.8 million USDC trail leaves the bank-to-crypto link unproven. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "sourceHeadline": "French bank resumes transfers after $133 million attack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "edc2a615a22eb8790f3d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 30000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/taylor-monahan-30m-bank-hack-tracing/"
      ],
      "firstSeen": "2026-11-04T23:12:16.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "The incident underscores the urgent need for faster collaboration between banks and exchanges to prevent stolen funds from being laundered through crypto. The post Taylor Monahan on the $30M bank hack that exchanges couldn’t freeze appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Taylor Monahan on the $30M bank hack that exchanges",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "294fa8db95ed8561c2fb",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-great-consensus-cleanup-bip-54/"
      ],
      "firstSeen": "2026-11-04T22:50:53.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "BIP-54's implementation could enhance Bitcoin's security, potentially paving the way for future protocol innovations and stability improvements. The post Bitcoin’s Great Consensus Cleanup soft fork targets legacy vulnerabilities appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Bitcoin’s Great Consensus Cleanup soft fork targets legacy",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9ce46c5868ce2261c765",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 377000000000,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/medidas-seguridad-coinbase-tras-hack-binance/"
      ],
      "firstSeen": "2026-11-04T22:23:00.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "Coinbase detalla cómo protege $377 mil millones en criptoactivos de clientes después del hack de $6.3 mil millones a Binance. Mira lo que pasa por alto. El post Coinbase revela cómo protege las criptomonedas de los usuarios fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Coinbase revela cómo protege las criptomonedas de los",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 377000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "39b0d72841a37e04b2b6",
      "protocol": "India",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/india-warns-ai-powered-hackers-targeting-crypto-exchanges-at-machine-speed"
      ],
      "firstSeen": "2026-11-05T01:51:21.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "India’s cybersecurity agency says a threat actor is escalating an AI-assisted hacking campaign targeting crypto exchanges and other financial firms.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "91c3007cfde7477b90dd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/blockaid-40m-funding-binance-hack/"
      ],
      "firstSeen": "2026-11-05T02:15:22.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "The Binance hack underscores the critical need for enhanced security measures in crypto exchanges, influencing future investment in security tech. The post Blockaid secures $40M in funding commitments after $6.3B Binance hack appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Blockaid secures $40M in funding commitments after $6.3B",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "2baa093743fd367c9f10",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/openai-genero-948-exploits-de-root-para-linux-con-un-gasto-de-usd-12-millones/"
      ],
      "firstSeen": "2026-11-05T01:03:23.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "OpenAI afirma que un pipeline autónomo produjo 948 exploits funcionales de escalada de privilegios para el kernel de Linux, tras identificar 2.308 fallos candidatos. La ejecución costó más de USD $1,2 millones, mientras que solo 104 vulnerabilidades estaban corregidas o en proceso de parcheo al anunciarse los resultados.",
      "revision": 1,
      "sourceHeadline": "OpenAI generó 948 exploits de root para Linux con",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7a3ff71a02bc84d9af50",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-autonomous-pipeline-linux-kernel-exploits/"
      ],
      "firstSeen": "2026-11-04T23:16:56.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "OpenAI's system highlights the urgent need for enhanced security measures and rapid patching to mitigate potential widespread vulnerabilities. The post OpenAI’s autonomous pipeline built 948 Linux kernel root exploits for about $1.2 million appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "OpenAI’s autonomous pipeline built 948 Linux kernel root",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "83afa72abcd52671c36f",
      "protocol": "Binance tracked assets",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-assets-rise-after-hack/"
      ],
      "firstSeen": "2026-11-05T01:37:07.000Z",
      "updatedAt": "2026-11-05T02:44:04.237Z",
      "summary": "Binance's swift asset recovery post-hack highlights its resilience and underscores the critical importance of maintaining user trust in crypto exchanges. The post Binance tracked assets climb $3.4 billion in two days after post-hack withdrawal restart appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "97e4e500f9661bf28c66",
      "protocol": "Privacy Cash",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1200000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/privacy-cash-pauses-deposits-binance-hack/",
        "https://thedefiant.io/news/defi/privacy-cash-pauses-deposits-after-binance-hack"
      ],
      "firstSeen": "2026-11-04T16:39:50.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Privacy Cash has temporarily paused deposits following the Binance hack, saying it will strengthen wallet screening after investigators traced about $1.2 million in theft-linked funds into its privacy pools. Privacy Cash announced the suspension in a Nov. 4 post, directly…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "08bedd96006e4b1c5bb1",
      "protocol": "Aave and Lido",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1700000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/aave-and-lido-lose-1-7b-in-massive-defi-capital-drop-after-the-binance-hack/"
      ],
      "firstSeen": "2026-11-04T19:50:13.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Stablecoin contraction was evident before the breach, while Aave's temporary freeze showed how collateralized loans can coexist with scarce withdrawal cash. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "7626bd464861f434c096",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitcoin-rockets-above-80000-for-first-time-since-binance-hack-despite-democrats-sweep-but-a-historical-crash-looms/"
      ],
      "firstSeen": "2026-11-04T18:20:58.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Bitcoin surged more than 5% from its election-night low to reclaim $80,000 for the first time since Binance's record hack. The cryptocurrency extended its recovery from approximately $75,600 on Wednesday, shaking off concerns that Democrats' takeover of Congress would undermine President Donald Trump's crypto-friendly agenda. According to CoinGlass data, this rally liquidated $453.32 million in… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "sourceHeadline": "Bitcoin rockets above $80,000 for first time since Binance",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2fe4778ec00bb0d094c3",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/coinbase-binance-hack-customers-cold-storage/"
      ],
      "firstSeen": "2026-11-04T15:18:55.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Coinbase has said Binance’s $6.34 billion hot-wallet hack has had no impact on its systems or customer funds, with more than 99% of customer assets reportedly held in cold storage. According to TechFlow’s Nov. 4 account of a Coinbase blog…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b325020577a003424688",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382570/coinbase-99-percent-customer-crypto-offline-binance-hack"
      ],
      "firstSeen": "2026-11-04T20:46:03.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Coinbase told customers it wasn’t affected by the $6.4 billion Binance hack and detailed its security controls, including offline storage for over 99% of assets, split private keys and kill switches.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "061ed0c50f2ce784d44d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/super-micro-q1-fy27-results-stock-muted/"
      ],
      "firstSeen": "2026-11-04T20:23:34.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Despite record sales, Super Micro's reliance on a single customer and cash flow issues highlight potential vulnerabilities in its growth strategy. The post Super Micro posts a record Q1 FY27, but investors keep their enthusiasm in check appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Super Micro posts a record Q1 FY27, but investors",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "06df9fd0d9fac5f021ee",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/ecosystems/2026-11-04-coinbase-security-cold-storage-binance-hack-432880"
      ],
      "firstSeen": "2026-11-04T16:58:42.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "Coinbase says 99% of customer assets are in cold storage and it wasn't affected by the $6.3 billion Binance hack.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f2780d82a902fa96889c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/lightning-labs-releases-lnd-mitigation-for-critical-linux-flaw"
      ],
      "firstSeen": "2026-11-04T18:47:43.000Z",
      "updatedAt": "2026-11-04T22:08:05.738Z",
      "summary": "LND v0.20.7-beta and v0.21.6-beta disable Multipath TCP by default, but operators still need a patched kernel to fix the underlying vulnerability.",
      "revision": 1,
      "sourceHeadline": "Lightning Labs Releases LND Mitigation for Critical Linux",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2922d3788dd522a9277b",
      "protocol": "Bitmine",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382340/bitmine-buys-more-ethereum-tom-lee-binance-hack-bullish",
        "https://www.theblock.co/news/business/2026-11-02-bitmine-adds-8573-eth-tom-lee-flags-muted-binance-hack-reaction-432307"
      ],
      "firstSeen": "2026-11-02T14:40:53.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The chairman laid out six reasons the market’s “muted” 4% ETH drop after the record Binance theft shows crypto is “increasingly resilient,” as the firm’s stash neared its 5% supply goal.",
      "revision": 8,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "871694c56086d6190e32",
      "protocol": "Brazil's Largest Exchange Mercado Bitcoin",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382341/mercado-bitcoin-halts-withdrawals-40-million-hack",
        "https://www.coindesk.com/business/2026/11/02/brazil-s-mercado-bitcoin-halts-withdrawals-after-usd40-million-drained-across-10-chains"
      ],
      "firstSeen": "2026-11-02T15:53:29.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Brazil's largest crypto exchange paused deposits and withdrawals after a security incident. Tether froze more than 4.5 million USDT tied to the attack.",
      "revision": 5,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "981e9accd9de82e1b125",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-details-months-long-campaign-behind-6-34-billion-hack"
      ],
      "firstSeen": "2026-11-03T14:43:08.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The exchange says 98% of impacted tokens have been replenished; its report explains why pausing withdrawals did not stop every outflow.",
      "revision": 4,
      "sourceHeadline": "Binance Details Months-Long Campaign Behind $6.34 Billion",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b0921e16c2b4481ce192",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/brazils-largest-crypto-exchange-mercado-bitcoin-hacked/",
        "https://crypto-economy.com/fbi-attributes-6b-binance-theft-to-north-korea/",
        "https://crypto.news/cz-thanks-secret-service-for-freezing-funds-after-6b-binance-hack/",
        "https://decrypt.co/382316/fbi-blames-north-korea-for-6b-binance-hack-as-exchange-reopens-withdrawals",
        "https://www.coindesk.com/markets/2026/11/02/bitcoin-eases-to-usd77-900-as-binance-customers-pull-usd3-6-billion-after-withdrawals-reopen",
        "https://www.theblock.co/news/regulation/2026-11-02-kim-jong-un-sister-rejects-fbi-claims-linking-north-korea-binance-hack-432344"
      ],
      "firstSeen": "2026-11-02T05:19:28.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "North Korea is now reportedly saying it was not behind the hack, despite the FBI finding that North Korean hackers were behind the heist.",
      "revision": 3,
      "sourceHeadline": "Kim Jong-Un’s sister rejects FBI claims linking North Korea",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "542000e0fc35b9c17e9c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 6340000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-stopped-57-north-korean-cyber-threats-but-fell-for-a-fake-job-interview/"
      ],
      "firstSeen": "2026-11-04T01:10:53.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Binance said it thwarted 57 suspected North Korea-linked cyber threats in 2026, yet a fake interview compromised one of its engineers. The disclosure, in the exchange's Nov. 3 security report, reveals how attackers used a recruitment scam involving staged interviews, fabricated identities, and malicious software to access systems involved in the $6.34 billion cryptocurrency theft… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 2,
      "sourceHeadline": "Binance stopped 57 North Korean cyber threats but fell",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "30dc96148621e5a7118b",
      "protocol": "UK",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/uk-warns-ai-ransomware-attack-on-infrastructure-highly-likely-by-2028",
        "https://decrypt.co/382411/uk-says-ai-powered-ransomware-attack-on-critical-infrastructure-highly-likely-by-2028"
      ],
      "firstSeen": "2026-11-03T03:58:45.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The National Cyber Security Centre said AI will expose security flaws \"tolerated for far too long,\" and called time on \"tech on the cheap.\".",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "ca94e8bad14a84c57d67",
      "protocol": "Polkadot",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1380000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptoslate.com/polkadot-lost-1-38-million-after-hacker-exploited-security-flaw-fixed-four-months-earlier/",
        "https://thedefiant.io/news/hacks/polkadot-treasury-lost-1-38-million-after-xcm-patch-missed-production"
      ],
      "firstSeen": "2026-11-04T14:50:52.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The attacker resumed on October 26 with its own relayer before the XCM fix; a later upgrade corrected supply without changing balances. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "c2fa7d0a40bc29c26400",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/south-korea-orders-massive-crypto-wallet-lockdown-following-the-binance-hack/"
      ],
      "firstSeen": "2026-11-04T08:20:08.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The FSC also requested stronger transfer monitoring, response staffing and reserves, while exchange implementation and any new custody threshold remain unspecified. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "sourceHeadline": "South Korea orders massive crypto wallet lockdown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "03d20d67090e6e92cd0c",
      "protocol": "BitMart",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitmart-confirms-hack-suspects-same-group-behind-mercado-bitcoin-attack/"
      ],
      "firstSeen": "2026-11-04T05:46:18.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Cryptocurrency exchange BitMart has confirmed suffering another security breach on November 2, with its preliminary investigation suggesting that the attackers may be responsible for the recent hack of Brazil’s Mercado Bitcoin. In a November 3 statement on X, BitMart founder…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2b3e32ec9292c02ce70f",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/coinbase-binance-hack-customers-cold-storage/"
      ],
      "firstSeen": "2026-11-04T15:18:55.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Coinbase has said Binance’s $6.34 billion hot-wallet hack has had no impact on its systems or customer funds, with more than 99% of customer assets reportedly held in cold storage. According to TechFlow’s Nov. 4 account of a Coinbase blog…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3534a0bd12fcd5d28a6a",
      "protocol": "Why rising XRP whale counts are a fake bullish",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/why-rising-xrp-whale-counts-are-a-fake-bullish-signal/"
      ],
      "firstSeen": "2026-11-04T13:40:13.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Bitquery traced stolen Binance XRP into six accounts above one million tokens, while their effect on Santiment's dataset remains unconfirmed. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a719eafe4951593eb0b0",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 11000000000,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-reports-11-billion-withdrawn-in-46-hours-as-zhao-says-few-funds-went-to-rivals/"
      ],
      "firstSeen": "2026-11-04T11:10:32.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "Binance reported about $11 billion in withdrawals between 06:00 UTC on Nov. 1 and 04:00 UTC on Nov. 3, after reopening services following its record $6 billion hack on Oct. 29. Deposits of about $6 billion offset just over half the withdrawals, leaving roughly $5 billion in net outflows over the same period, according to… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox.",
      "revision": 1,
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 11000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "a2c7235a103371083d70",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coinbase-ai-agent-stops-deepfake-musk-scam/"
      ],
      "firstSeen": "2026-11-04T15:08:03.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "AI-driven scam prevention highlights the need for robust security measures as deepfake technology poses increasing risks to digital platforms. The post Coinbase’s scam-prevention chat agent stops deepfake Musk giveaway during Tesla demo appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Coinbase’s scam-prevention chat agent stops deepfake Musk",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "00892c29635dc1da1955",
      "protocol": "Binance hackers",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hackers-move-81-stolen-solana-route-thorchain"
      ],
      "firstSeen": "2026-11-04T09:15:55.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "The Binance attackers moved most of the stolen SOL and continued laundering funds through THORChain after the protocol resumed swaps.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8eba010e99895cc272ed",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/north-korea-rejects-us-talks-fbi-binance-hack/"
      ],
      "firstSeen": "2026-11-04T08:32:28.000Z",
      "updatedAt": "2026-11-04T16:11:36.734Z",
      "summary": "North Korea's Kim Yo Jong rejects U.S. talks under current conditions, citing the FBI's $6 billion Binance hack accusation and demanding a policy change.",
      "revision": 1,
      "sourceHeadline": "North Korea rejects U.S. talks, cites FBI’s $6B Binance",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "7ce0977e6d8d88099ec8",
      "protocol": "Morning Minute",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382332/morning-minute-the-binance-hack-leads-to-mass-outflows-while-fbi-opens-probe"
      ],
      "firstSeen": "2026-11-02T13:34:02.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Uptober was far from it, with the Binance hack punctuating a red month. Will November be better? Or will the Binance hack hang over crypto?",
      "revision": 7,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b32429fd55b607b4667c",
      "protocol": "North Korea",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/kim-yo-jong-fbi-binance-hack-provocation/",
        "https://coinfomania.com/north-korea-denies-involvement-in-6-3b-binance-hack/",
        "https://cointelegraph.com/news/north-korea-denies-role-in-63b-binance-hack-points-finger-at-us",
        "https://crypto.news/binance-completes-reserve-proof-for-10-tokens-after-6-3b-hack/",
        "https://cryptobriefing.com/north-korea-denies-involvement-in-6-3b-binance-hack-calls-fbi-claims-absurd/",
        "https://cryptoslate.com/bnbs-99-million-etf-inflows-came-almost-entirely-before-binances-hack/",
        "https://thedefiant.io/news/hacks/north-korea-rejects-fbi-blame-for-6-3-billion-binance-hack"
      ],
      "firstSeen": "2026-11-02T07:30:52.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Pyongyang has pushed back against the FBI’s attribution of the Binance attack, with Kim Yo Jong calling the US allegations politically motivated.",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "0da801cdbbb794bb8f09",
      "protocol": "South Korea",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/south-korea-urges-exchanges-to-boost-cold-storage-after-binance-hack"
      ],
      "firstSeen": "2026-11-03T01:32:39.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "South Korean crypto exchanges are already required to hold at least 80% of customer crypto in cold wallets, but the regulator is urging more.",
      "revision": 5,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6958e2d00bc60aa29a47",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/defi/2026-11-02-mercado-bitcoin-hack-46-million-brazil-exchange-432333"
      ],
      "firstSeen": "2026-11-02T20:19:49.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Brazil's largest crypto exchange Mercado Bitcoin confirmed earlier Monday a security incident and paused withdrawals.",
      "revision": 4,
      "sourceHeadline": "Mercado Bitcoin, Brazil’s largest crypto exchange",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "58e7893c7a7716b83944",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-says-thinly-traded-tokens-are-delaying-full-replacement-of-stolen-assets/"
      ],
      "firstSeen": "2026-11-03T19:10:35.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Binance attributes its last reported 5% replenishment gap to less-liquid assets, while its November 3 withdrawal plan reopens routes progressively. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "42f8f122595a36bf8f0e",
      "protocol": "THORChain Refused",
      "chain": "Tron",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/podcasts-and-videos/podcast/thorchain-refused-to-block-the-usd387m-bitget-hacker-here-s-why-or-chad-barraford"
      ],
      "firstSeen": "2026-11-03T18:07:04.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Bitget lost $387.5 million in a hack and asked THORChain to block the attacker’s addresses. THORChain said no. Weeks later, Tether froze four THORChain vaults on Tron holding 1.45 million USDT, then unfroze them three hours later. And in May, THORChain itself lost $10.7 million to a GG20 flaw.",
      "revision": 2,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "64d86ee371774f9d4f26",
      "protocol": "BitMart",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/bitmart-confirms-hack-suspects-same-group-behind-mercado-bitcoin-attack/",
        "https://cryptobriefing.com/bitmart-reports-minor-hack-amid-wind-down/"
      ],
      "firstSeen": "2026-11-04T04:56:11.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "The hack underscores vulnerabilities in crypto exchanges during restructuring, potentially impacting user trust and repayment plans amid security gaps. The post BitMart confirms hack as analyst links breach to Mercado Bitcoin attack appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "53f8c4393d75998e4fa6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 133000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/zachxbt-french-bank-credit-mutuel-arkea-133m-crypto-theft",
        "https://cryptobriefing.com/zachxbt-credit-mutuel-arkea-133m-exploit/",
        "https://www.theblock.co/news/web3/2026-11-03-french-bank-credit-mutuel-arkea-exploited-zachxbt-432607"
      ],
      "firstSeen": "2026-11-04T02:36:39.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "The French bank has not confirmed its alleged involvement in the crypto theft, which ZachXBT said could have resulted in losses exceeding $133 million.",
      "revision": 1,
      "sourceHeadline": "ZachXBT identifies French bank as alleged victim of $133M",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "6172d4959efa8fbdcfc9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/corevault-flash-loan-oracle-attack-bnb/"
      ],
      "firstSeen": "2026-11-04T02:36:35.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "The attack highlights vulnerabilities in DeFi protocols, emphasizing the need for robust oracle security to prevent future financial exploits. The post Flash-loan oracle attack inflates CoreVault redemptions 33x, drains 160.26 BNB appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Flash-loan oracle attack inflates CoreVault redemptions",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c3339245cd07f90dc647",
      "protocol": "Binance's Teng",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-teng-says-industry-learn/"
      ],
      "firstSeen": "2026-11-04T02:35:00.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "Binance co-CEO Teng says the industry must learn from the Binance hack. See whether new crypto features raise risk. The post Binance's Teng Says Industry Must Learn From Hack: Do New Crypto Features Raise Risk? appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1c8701cac17cc5da7f54",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 76000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/prediccion-precio-bitcoin-noviembre-2026/"
      ],
      "firstSeen": "2026-11-03T10:16:00.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "La predicción del precio de Bitcoin para noviembre de 2026 depende de los $76,000. Descubre lo que indican los datos on-chain y los gráficos tras el hack de Binance. El post Predicción del precio de Bitcoin para noviembre de 2026: un nivel de precio sigue siendo clave fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Predicción del precio de Bitcoin para noviembre de 2026",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "5432526d28cc4e28bc71",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hack-could-have-been-prevented-coinex-founder/"
      ],
      "firstSeen": "2026-11-04T04:47:12.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "CoinEx founder Haipo Yang cites three alleged security failures behind Binance's $6.3B hack as Richard Teng reports 98% asset replenishment.",
      "revision": 1,
      "sourceHeadline": "Binance’s $6.3B hack could have been prevented, CoinEx",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "9ca2351d5b2b23bd8739",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/north-korea-denies-binance-hack-us-talks/"
      ],
      "firstSeen": "2026-11-04T03:13:47.000Z",
      "updatedAt": "2026-11-04T07:57:51.400Z",
      "summary": "The denial and diplomatic standoff highlight the complex interplay between cybercrime, international relations, and global security dynamics. The post North Korea reiterates denial over $6.3B Binance theft, says US talks unnecessary appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "North Korea reiterates denial over $6.3B Binance theft",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "46b742a068a00e242e58",
      "protocol": "North Korea",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-fake-job-interview/",
        "https://beincrypto.com/tom-lee-crypto-bull-market-stablecoins/",
        "https://cointelegraph.com/news/binance-fake-job-interviews-compromised-ai-tool-hack",
        "https://crypto-economy.com/binance-sees-5-3b-net-outflows-after-6-3b-hack/",
        "https://crypto.news/south-korea-demands-stronger-crypto-safeguards-following-binance-hack/",
        "https://cryptobriefing.com/insurance-gaps-crypto-binance-hack/",
        "https://cryptoslate.com/bybit-and-bitget-see-crypto-deposits-surge-following-binances-6-3-billion-hack/",
        "https://cryptoslate.com/north-korea-denies-role-in-6-billion-binance-hack-after-fbi-accusation/",
        "https://decrypt.co/382394/north-korea-denies-6-3b-binance-hack-calls-fbi-finding-a-political-provocation",
        "https://thedefiant.io/news/hacks/binance-lacks-cyber-insurance-for-6-3-billion-hack-bloomberg-law-reports",
        "https://www.coindesk.com/business/2026/11/03/north-korea-denies-role-in-usd6-4-billion-binance-hack-after-fbi-points-to-tradertraitor",
        "https://www.coindesk.com/business/2026/11/03/what-happens-if-north-korea-steals-wall-street-s-tokenized-assets-next",
        "https://www.coindesk.com/tech/2026/11/03/south-korea-s-president-says-country-needs-a-cybersecurity-czar-following-usd6-3-billion-binance-hack"
      ],
      "firstSeen": "2026-11-03T05:24:11.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "Kim Yo Jong suggested the U.S. itself could be behind the theft, as Binance said hourly deposits had begun to exceed withdrawals.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "4b238d099c57ed004608",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-hack-fake-interviews-ai-tool-signing-service/",
        "https://cryptoslate.com/binance-relied-on-ai-to-fight-fraud-before-hackers-exploited-internal-tool-in-6-billion-theft/",
        "https://thedefiant.io/news/hacks/fake-job-interview-opened-path-to-6-34-billion-hack-binance-says",
        "https://www.theblock.co/news/business/2026-11-03-binance-hack-incident-report-north-korea-fake-job-interview-ai-tool-432406"
      ],
      "firstSeen": "2026-11-03T14:57:12.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "Binance's incident report said hackers used a fake job interview and an internal AI tool to gain access to systems involved in the theft.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "2e6e2fc0eda67ed1de05",
      "protocol": "Crypto Docs Host GitBook",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/gitbook-suffers-ai-agent-attack-security-measures-implemented/",
        "https://decrypt.co/382465/crypto-docs-gitbook-ai-agent-security-breach"
      ],
      "firstSeen": "2026-11-03T19:46:03.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "GitBook says attackers accessed infrastructure credentials in an AI-assisted breach, prompting a shutdown and emergency token resets.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "126b6f65c833b0179ba5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/custodia-ceo-binance-hack-changes-crypto/",
        "https://cryptoslate.com/north-korea-denies-role-in-6-billion-binance-hack-after-fbi-accusation/"
      ],
      "firstSeen": "2026-11-03T17:10:03.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "The FBI blames North Korea for the $6B Binance hack. Custodia CEO Caitlin Long gives 2 reasons it changes crypto. The post 2 Reasons Custodia CEO Thinks the $6B Binance Hack Changes Crypto appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "2 Reasons Custodia CEO Thinks the $6B Binance Hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "7d4a308299698ac082d0",
      "protocol": "North Korean Leader’s Sister",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/north-korean-leaders-sister-denies-involvement-in-6-4b-binance-hack/"
      ],
      "firstSeen": "2026-11-04T00:56:14.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "TL;DR: Disputed amount: The attack drained an estimated $6.4 billion in digital assets across multiple blockchains. Official attribution: The FBI formally identified the North Korean state-sponsored group TraderTraitor as the technical executor of the breach. Pyongyang’s stance: Kim Yo Jong stated through the state news agency KCNA that the U.S. accusation constitutes a political provocation ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "02a0529b888eae22875c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-hack-tokenized-assets-north-korea/"
      ],
      "firstSeen": "2026-11-03T23:06:26.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "The Binance hack underscores the urgent need for enhanced security measures and regulatory frameworks to protect tokenized assets globally. The post Binance hack highlights risks of tokenized assets amid North Korean thefts appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance hack highlights risks of tokenized assets amid North",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2037669b500c37914b69",
      "protocol": "US Embassy",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/us-embassy-warns-of-potential-houthi-attacks-on-saudi-airports/"
      ],
      "firstSeen": "2026-11-03T22:41:28.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "Heightened Houthi threats could destabilize Saudi aviation, impacting regional security and global market perceptions of Middle Eastern stability. The post US Embassy warns of potential Houthi attacks on Saudi airports appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "47fc5b28b8cee63ee7cb",
      "protocol": "Apple",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/apple-warns-rogue-ai-agents-security/"
      ],
      "firstSeen": "2026-11-03T22:14:06.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "Apple's expanded focus on AI risks highlights growing concerns over security vulnerabilities and competitive pressures from AI advancements. The post Apple warns rogue AI agents could threaten its business security appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d989a53cc57c54bc5354",
      "protocol": "Solana’s Yakovenko",
      "chain": "Solana",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/solana-yakovenko-phishing-crypto-security-threat/"
      ],
      "firstSeen": "2026-11-03T17:29:33.000Z",
      "updatedAt": "2026-11-04T01:14:40.976Z",
      "summary": "Solana co-founder Anatoly Yakovenko has warned that phishing and social engineering pose the biggest threat to crypto users, recommending a dedicated iOS device in Lockdown Mode paired with a multisignature wallet as a low-cost security setup. According to Yakovenko’s post…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "945dd4aa065ec9606b96",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/solflare-enters-bunker-mode-after-crypto-attacks/"
      ],
      "firstSeen": "2026-11-03T05:50:13.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Solflare restricts code access after recent crypto attacks and extends its validator migration deadline to November 30 following a staking security incident.",
      "revision": 3,
      "sourceHeadline": "Solflare enters ‘bunker mode’ after crypto attacks",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "321a2f8344f10d114f92",
      "protocol": "Tether",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/tether-freezes-1-5-billion-in-30-minutes-after-binance-hack-but-729-million-escapes/"
      ],
      "firstSeen": "2026-11-03T12:00:53.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Tether describes immobilized USDT, while US precedents show separate decisions governing custody, ownership and return. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3e020ac71407f85cce77",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 133000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/zachxbt-eu-crypto-theft-133m-alleged-cover-up",
        "https://crypto.news/zachxbt-alleges-cover-up-as-suspected-crypto-theft-tops-133m/",
        "https://thedefiant.io/news/hacks/kraken-restricts-accounts-amid-suspected-133-million-plus-eu-theft"
      ],
      "firstSeen": "2026-11-03T08:18:22.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Crypto.com also took steps to block funds tied to the suspected theft, while Kraken said its systems and customer accounts were not compromised.",
      "revision": 1,
      "sourceHeadline": "Kraken restricts accounts linked to suspected $133M EU",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a63249c2b2d2930b6ead",
      "protocol": "South Korea Weighs 99% Cold Wallet",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/south-korea-weighs-99-cold-wallet-rule-after-binance-hack/",
        "https://crypto.news/south-korea-demands-stronger-crypto-safeguards-following-binance-hack/",
        "https://thedefiant.io/news/hacks/binance-lacks-cyber-insurance-for-6-3-billion-hack-bloomberg-law-reports"
      ],
      "firstSeen": "2026-11-03T07:39:48.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "TL;DR South Korea is considering increasing the minimum cold wallet storage requirement for crypto exchanges from 80% to approximately 99%. The Financial Services Commission is reviewing stricter custody standards following a reported $6.3 billion Binance-related security incident. The proposal could strengthen investor protection while encouraging exchanges to improve asset segregation, custody infrastructure, and operational security. ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "dd2ab18fa865d6f9410b",
      "protocol": "Solana Co-Founder",
      "chain": "Solana",
      "technique": "Phishing",
      "lossUsd": 713000000,
      "lossBasis": "aggregate",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/solana-co-founder-warns-phishing-is-cryptos-biggest-security-threat/",
        "https://crypto.news/solana-yakovenko-phishing-crypto-security-threat/"
      ],
      "firstSeen": "2026-11-03T17:29:33.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "TL;DR Solana co-founder Anatoly Yakovenko identifies phishing and social engineering as the biggest security threats facing cryptocurrency users. Yakovenko recommends combining a dedicated iPhone with Apple’s Lockdown Mode and a multisignature wallet to strengthen personal protection. Chainalysis recorded $713 million in personal wallet theft during 2025, with Solana accounting for approximately 26,500 victims. Solana co-founder ... Read more",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "27ae1dddbb9da8a7e49a",
      "protocol": "Brazil's Biggest Bitcoin Exchange",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 40000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382459/brazil-mercado-bitcoin-will-refund-users-40-million-hack",
        "https://www.coindesk.com/business/2026/11/03/mercado-bitcoin-pledges-to-cover-all-user-losses-after-near-usd40-million-hack"
      ],
      "firstSeen": "2026-11-03T08:56:48.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Mercado Bitcoin says customers won't pay for a hack that drained tens of millions. Withdrawals on the exchange remain frozen with no restart date.",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "460809b833df2a1bbf6a",
      "protocol": "Tom Lee proyecta mercado alcista tras el hack de",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/tom-lee-mercado-alcista-cripto-stablecoins/"
      ],
      "firstSeen": "2026-11-03T18:44:00.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "El presidente de BitMine, Tom Lee, dice que la respuesta moderada del mercado cripto al hack de Binance de 6.3 mil millones de dólares es una señal de mercado alcista. Sin embargo, los datos de stablecoins y de sentimiento muestran que el dinero y la confianza muestran una historia diferente. Ethereum (ETH) se negociaba a El post Tom Lee proyecta mercado alcista tras el hack de Binance, pero los datos de stablecoins no están de acuerdo fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7b8f9ee2327b70941244",
      "protocol": "Binance hacker",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hacker-sol-privacy-cash-798k/"
      ],
      "firstSeen": "2026-11-03T18:23:13.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "An address linked to the Binance hacker has deposited nearly $798,000 in Solana into Privacy Cash as the exchange reports progress replacing assets stolen in its $6.34 billion breach. Onchain Lens said in a Nov. 3 post that the hacker-linked…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "cab78d94dfc30159a248",
      "protocol": "Citi",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/citi-bitcoin-etf-clients-billion-outflows/"
      ],
      "firstSeen": "2026-11-03T15:30:56.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Citi Wealth pitches Bitcoin ETFs to clients as US funds lose $1 billion in two days after the Binance hack. The post Citi Sells Clients on Bitcoin ETFs Despite $1 Billion Outflows appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "33dda4dd6a74e71c7537",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-57-north-korea-threats-98-percent-replenished/"
      ],
      "firstSeen": "2026-11-03T16:40:44.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Binance says it blocked 57 suspected North Korea-linked cyber threats in 2026 and has replaced 98% of the tokens stolen in its $6.34 billion hack. Binance co-founder and co-CEO Yi He outlined the attempted intrusions in a Nov. 3 post…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f5368a1f9076b8b07f08",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 11000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/mercado-bitcoin-promises-no-customer-asset-losses-after-hack"
      ],
      "firstSeen": "2026-11-03T00:56:08.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "The exchange says $11 million has been blocked, but its assurance does not specify a funding source or reimbursement deadline.",
      "revision": 1,
      "sourceHeadline": "Mercado Bitcoin Promises No Customer Asset Losses After Hack",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "e63cea4f458f8403c1a9",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/perspectiva-bitcoin-midterms-eeuu-2026/"
      ],
      "firstSeen": "2026-11-03T15:59:00.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Bitcoin afronta las midterms en Estados Unidos con un problema. Wall Street está sacando dinero, los traders están apostando por más pérdidas, y el exchange de criptomonedas más grande del mundo se está recuperando de un hack récord de 6.3 mil millones de dólares. La votación del 3 de noviembre ahora podría añadir otra capa El post ¿Cómo se perfila Bitcoin frente a las midterms en EEUU? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "¿Cómo se perfila Bitcoin frente a las midterms en",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d49ab0f20f6b6c8bfb08",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6430000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382355/north-korea-laundering-binance-hack-loot-new-wallet-every-25-seconds"
      ],
      "firstSeen": "2026-11-02T18:46:03.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "$2.85 billion of the $6.43 billion stolen from Binance has been frozen or seized, compared with about 3% in the Bybit hack, as North Korea’s automated laundering spans 12,000 wallets.",
      "revision": 1,
      "sourceHeadline": "North Korea Is Laundering Binance Hack Loot at One",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "70c6d108c94ce30df96a",
      "protocol": "GitBook",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/gitbook-ai-cyberattack-api-tokens-secrets/"
      ],
      "firstSeen": "2026-11-03T19:15:57.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "GitBook has urged customers to replace API tokens and integration secrets after an attack involving AI agents compromised infrastructure credentials and potentially exposed customer data. According to GitBook’s incident notice, the attacker gained unauthorized access to some infrastructure credentials at…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ec010fcd87dfd8bdb087",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/binance-hack-entrevista-trabajo-falsa/"
      ],
      "firstSeen": "2026-11-03T20:13:00.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "Una entrevista de trabajo falsa ayudó a hackers a robar 6.3 mil millones de dólares de Binance. Los atacantes pasaron meses infiltrándose en el exchange, utilizando tácticas sobre las que otras empresas de criptomonedas ya habían advertido mucho antes del ataque. El 3 de noviembre, Binance reveló que el ataque del 29 de octubre comenzó El post Binance revela detalles impactantes sobre el hack: entrevistas de trabajo falsas y meses de acceso fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Binance revela detalles impactantes sobre el hack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ca32094c13aaa5a4285a",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/regulation/2026-11-03-cz-calls-for-crypto-security-alliance-ai-driven-attacks-accelerate-binance-hack-432458"
      ],
      "firstSeen": "2026-11-03T20:43:38.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "In his first interview since the Binance hack, Changpeng Zhao says AI is accelerating cyberattacks and calls for industry security alliance.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6fc11847161f78128c7b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/gitbook-revokes-all-personal-api-tokens-after-breach"
      ],
      "firstSeen": "2026-11-03T17:18:50.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "The company says an attack used AI agents and may have exposed integration credentials and questions submitted by documentation visitors.",
      "revision": 1,
      "sourceHeadline": "GitBook Revokes All Personal API Tokens After Breach",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "715b512f4292fa90df19",
      "protocol": "South Korea asks its biggest banks how a major",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/03/south-korea-asks-its-biggest-banks-how-a-major-crypto-hack-would-hit-them"
      ],
      "firstSeen": "2026-11-03T14:42:30.000Z",
      "updatedAt": "2026-11-03T20:56:13.920Z",
      "summary": "In its first such survey, the BOK also asked about a crypto price crash, losses at another firm, and each firm’s crypto teams, budgets and investments.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e05c0ba6d49c1743bac7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/hackers-hijack-defi-websites-name-com/",
        "https://www.theblock.co/news/defi/2026-10-31-hackers-hijack-a-dozen-defi-websites-all-registered-with-name-com-and-steal-about-138000-432251"
      ],
      "firstSeen": "2026-10-31T15:26:27.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "All 12 hijacked domains are registered through Name.com, according to registry records accessed by The Block, suggesting a compromise.",
      "revision": 12,
      "sourceHeadline": "Hackers hijack a dozen DeFi websites, all registered",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "6bff76751fcbc3e21ebc",
      "protocol": "Tether",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/tether-freezes-usdt-mercado-bitcoin-breach/",
        "https://cryptoslate.com/tether-freezes-4-5-million-as-mercado-bitcoin-hacker-holds-46-million-in-crypto/",
        "https://thedefiant.io/news/hacks/tether-says-it-froze-over-4-5-million-usdt-tied-to-mercado-bitcoin-incident"
      ],
      "firstSeen": "2026-11-02T15:17:24.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Tether froze more than 4.5 million USDT linked to Mercado Bitcoin’s Nov. 2 security incident, as the Brazilian exchange suspended deposits and withdrawals while investigating suspicious fund movements. Tether CEO Paolo Ardoino announced the freeze while sharing Mercado Bitcoin’s official…",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "472a43f31c99ceb17c1c",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/trezor-wallet-passphrase-limit-128-characters-coldcard-attacks",
        "https://crypto-economy.com/trezor-raises-passphrase-limit/"
      ],
      "firstSeen": "2026-11-02T10:46:59.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Trezor cited July’s Coldcard attacks, in which strong passphrases helped protect some users whose wallet recovery information was compromised.",
      "revision": 4,
      "sourceHeadline": "Trezor lifts password ceiling after Coldcard’s $100M wallet",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "040be39566eb8bb4daa6",
      "protocol": "Core Fork",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/core-fork-recovers-68-15-million-core-after-b14g-hack"
      ],
      "firstSeen": "2026-11-02T12:30:35.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The recovery covers about 70% of affected tokens, but users have not been repaid and no claims process is open.",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c5131420191fa0c17e72",
      "protocol": "Relay",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/relay-reports-route-disruptions-in-bid-to-block-binance-hack-funds"
      ],
      "firstSeen": "2026-11-02T15:49:45.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The bridge says no user action is needed and is working with Binance and law enforcement to screen hacker-linked addresses.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e5b46a3a8bb4f6beb99e",
      "protocol": "UK",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/uk-warns-ai-ransomware-attack-on-infrastructure-highly-likely-by-2028",
        "https://cryptobriefing.com/ncsc-ai-ransomware-critical-infrastructure-2028/"
      ],
      "firstSeen": "2026-11-03T03:58:45.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The warning comes as UK cyber officials also flag growing threats from state-backed hackers targeting government officials and politicians.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "f9c9b8a33c04e6e4b5d0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "aggregate",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-misses-november-luna-classic-burn/",
        "https://decrypt.co/382401/binance-misses-monthly-luna-classic-burn-for-first-time-since-2023"
      ],
      "firstSeen": "2026-11-03T12:15:29.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "LUNC holders are waiting for Binance’s November burn, but it hasn’t arrived as the exchange recovers from a record $6.3 billion hack.",
      "revision": 1,
      "sourceHeadline": "Binance Misses Monthly Luna Classic Burn for First Time",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "aa256b6c0670e2562535",
      "protocol": "Mercado Bitcoin pledges to cover all user losses",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 11000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/mercado-bitcoin-promises-no-customer-asset-losses-after-hack",
        "https://www.coindesk.com/business/2026/11/03/mercado-bitcoin-pledges-to-cover-all-user-losses-after-near-usd40-million-hack"
      ],
      "firstSeen": "2026-11-03T00:56:08.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Partners like Tether, Circle, and Chainalysis helped freeze $11M of the stolen assets.",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "d3d79569e590d5d6641f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 133000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/zachxbt-eu-crypto-theft-133m-alleged-cover-up",
        "https://crypto-economy.com/zachxbt-finds-27m-in-extra-withdrawals/",
        "https://crypto.news/zachxbt-alleges-cover-up-as-suspected-crypto-theft-tops-133m/",
        "https://thedefiant.io/news/hacks/kraken-restricts-accounts-amid-suspected-133-million-plus-eu-theft"
      ],
      "firstSeen": "2026-11-03T08:18:22.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Crypto.com also took steps to block funds tied to the suspected theft, while Kraken said its systems and customer accounts were not compromised.",
      "revision": 1,
      "sourceHeadline": "Kraken restricts accounts amid suspected $133M EU crypto",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "9622c6b50c6aa74d7ac2",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 76000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/prediccion-precio-bitcoin-noviembre-2026/"
      ],
      "firstSeen": "2026-11-03T10:16:00.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "La predicción del precio de Bitcoin para noviembre de 2026 depende de los $76,000. Descubre lo que indican los datos on-chain y los gráficos tras el hack de Binance. El post Predicción del precio de Bitcoin para noviembre de 2026: un nivel de precio sigue siendo clave fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Predicción del precio de Bitcoin para noviembre de 2026",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "a9ed014324af0a331be7",
      "protocol": "¿Se acerca un rally de alivio para XRP? Esto",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/xrp-nuevas-wallets-demanda-eeuu-prima-coinbase/"
      ],
      "firstSeen": "2026-11-03T08:50:00.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "XRP tuvo uno de sus días más fuertes del año en cuanto a nuevas wallets. Sin embargo, compradores de Estados Unidos en Coinbase y en ETF spot están disminuyendo su actividad. Esta división mantiene a XRP cerca de 1.25 dólares, una caída de casi 16% en el último mes. El hack récord a Binance la El post ¿Se acerca un rally de alivio para XRP? Esto dicen los datos de wallets y el sentimiento del mercado fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fe245ff484650f9a71de",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 11000000000,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/03/binance-net-outflows-reach-usd5-3b-after-record-hack-though-ceo-cites-recovery"
      ],
      "firstSeen": "2026-11-03T12:57:28.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Nearly $11 billion left the exchange over 46 hours, although CEO Richard Teng said hourly deposits were beginning to exceed withdrawals.",
      "revision": 1,
      "sourceHeadline": "Binance net outflows reach $5.3 billion after record hack.",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 11000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5d1931d303414b01944f",
      "protocol": "Crypto Recovery Services",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/crypto-recovery-services-what-to-check-before-paying"
      ],
      "firstSeen": "2026-11-03T14:17:54.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Tracing stolen crypto is different from getting it back. US consumers should verify a provider’s identity, written deliverables, fees and access to sensitive data.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8e6cbb88432f836a519f",
      "protocol": "Bitcoin Shows Resilience After Major Hack",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bitcoin-shows-resilience-after-major-hack-says-crypto/"
      ],
      "firstSeen": "2026-11-03T13:29:56.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Bitcoin demonstrates strength in the wake of a significant exchange hack, highlighting market resilience. The post Bitcoin Shows Resilience After Major Hack, Says Crypto appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7640198c7efa82ea9bf3",
      "protocol": "Unspecified subject",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/top-3-altcoins-primera-semana-noviembre-2026/"
      ],
      "firstSeen": "2026-11-03T11:42:00.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "HYPE, PEPE y STX ponen a prueba niveles clave de Retroceso de Fibonacci tras el hack de Binance. Consulta las altcoins a seguir esta semana. El post Top 3 altcoins a observar en la 1ra semana de noviembre de 2026 fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a3687694d128f514c624",
      "protocol": "Liquid Network",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/liquid-network-restores-bitcoin-reserves-exploit/"
      ],
      "firstSeen": "2026-11-03T11:55:08.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Liquid Network restores full Bitcoin backing after a September exploit, with 602 BTC replaced as questions remain over funding and direct withdrawals.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "acdde09eb26143fc6e91",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/xrp-new-wallets-us-demand-coinbase-premium/"
      ],
      "firstSeen": "2026-11-03T07:00:00.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "XRP logged one of its strongest days for new wallets this year. Yet, US buyers on Coinbase and in spot exchange-traded funds (ETFs) are pulling back. The split leaves XRP near $1.25, down almost 16% over the past month. The record Binance hack last week added fresh pressure across the market. New XRP Wallets Keep The post Is an XRP Relief Rally Coming? Wallet and Sentiment Data Explained appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Is an XRP Relief Rally Coming? Wallet and Sentiment",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d4a5e8380a5e35e76c64",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/us-strikes-iran-qeshm-island-midterms/"
      ],
      "firstSeen": "2026-11-03T06:37:56.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The US struck Iran’s Qeshm Island on Monday, US officials told the Wall Street Journal. Iranian state media reported several explosions on the island, which sits near the Strait of Hormuz. According to the BBC, officials said the strikes answered Iran’s Islamic Revolutionary Guard Corps (IRGC) firing on a US aircraft. The attack came on The post Is the US-Iran War Restarting? US Reportedly Strikes Qeshm Island on Midterm Eve appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Is the US-Iran War Restarting? US Reportedly Strikes Qeshm",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b82b113553d505585e75",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 3240000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hacker-bitcoin-coinjoin-stolen-funds/"
      ],
      "firstSeen": "2026-11-02T18:02:09.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The Binance hacker has begun mixing stolen funds through CoinJoin, moving roughly $2.2 million in Bitcoin through privacy transactions following the exchange’s multibillion-dollar theft. Elliptic’s Nov. 2 report traced the first mixing to 05:55 UTC on Nov. 1. Bitcoin obtained…",
      "revision": 1,
      "sourceHeadline": "Binance hacker mixes $2.2m in Bitcoin as $3.24b remains",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "f3c9ffed18033824cebe",
      "protocol": "Mercado Bitcoin hacker",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 46000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/mercado-bitcoin-hacker-moves-8m-in-eth-is-tornado-cash-next/"
      ],
      "firstSeen": "2026-11-03T07:14:15.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "The hacker behind the $46 million Mercado Bitcoin breach has transferred approximately $8 million worth of Ethereum to new wallets, while blockchain investigators have identified more than $9 million in stolen assets that have been frozen. Blockchain analytics platform Arkham…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4b4b3adc1f6cdb10cce7",
      "protocol": "Unattributed",
      "chain": "Arbitrum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/arbitrum-moved-stolen-binance-funds-returning-them-takes-a-vote/"
      ],
      "firstSeen": "2026-11-03T10:48:24.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "Arbitrum’s Security Council used a temporary contract upgrade to move cryptocurrency linked to the Binance hack. Its emergency action stopped the attacker from moving those assets, but deciding their destination belongs to a separate governance process. Arbitrum’s Security Council has…",
      "revision": 1,
      "sourceHeadline": "Arbitrum moved stolen Binance funds. Returning them",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "95e2145508dd8eb1c5f5",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/03/cz-warns-of-more-ai-driven-hacks-following-binance-s-historic-usd6-4-billion-heist"
      ],
      "firstSeen": "2026-11-03T14:22:09.000Z",
      "updatedAt": "2026-11-03T14:38:15.284Z",
      "summary": "While investigators found no evidence that AI agents laundered the stolen Binance funds, Zhao stressed that automated tools are lowering the barrier for complex breaches.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6f3c88b55f75627d8b00",
      "protocol": "Brazil's Largest Exchange Mercado Bitcoin",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/brazils-largest-crypto-exchange-mercado-bitcoin-hacked/",
        "https://crypto-economy.com/mercado-bitcoin-suspends-withdrawals/",
        "https://cryptobriefing.com/mercado-bitcoin-suspends-deposits-withdrawals-40m/",
        "https://decrypt.co/382341/mercado-bitcoin-halts-withdrawals-40-million-hack",
        "https://www.coindesk.com/business/2026/11/02/brazil-s-mercado-bitcoin-halts-withdrawals-after-usd40-million-drained-across-10-chains",
        "https://www.theblock.co/news/defi/2026-11-02-mercado-bitcoin-hack-46-million-brazil-exchange-432333"
      ],
      "firstSeen": "2026-11-02T13:58:49.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Brazil's largest crypto exchange paused deposits and withdrawals after a security incident. Tether froze more than 4.5 million USDT tied to the attack.",
      "revision": 3,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "49080393faf20dd7efeb",
      "protocol": "No proof of AI in North Korean hackers",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/11/02/no-proof-of-ai-in-north-korean-hackers-move-of-stolen-binance-funds-through-thousands-of-wallets"
      ],
      "firstSeen": "2026-11-02T11:57:45.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Elliptic tracked thousands of transfers, failed swaps and repeated transactions that suggest the hackers relied on scripts rather than AI agents.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "94304cdcd6360b75a1ec",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/pokemon-cards-theft-uk-home-burglaries/"
      ],
      "firstSeen": "2026-11-02T23:11:40.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Police in Dorset are investigating a series of local burglaries. Thieves stole Pokémon cards, jewellery, watches, and cash worth about £10,000 ($13,400) from several nearby homes. The thefts reveal how a booming collectible market has turned rare cards into valuable targets. Why Burglars Are Targeting Pokémon Cards in Dorset The break-ins hit homes on Oakhurst The post Pokémon Cards Are So Valuable, Thieves Are Breaking Into UK Homes appeared first on BeInCrypto .",
      "revision": 2,
      "sourceHeadline": "Pokémon Cards Are So Valuable, Thieves Are Breaking",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d06cb1b6d12bacb29717",
      "protocol": "NEAR Intents Chief",
      "chain": "Tron",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/near-intents-chief-reveals-3-critical-rules-crypto-wallets-must-follow-to-survive/"
      ],
      "firstSeen": "2026-11-02T21:51:52.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "TL;DR: A security incident impacted the Binance platform, resulting in estimated losses of $6.3 billion in late October 2026. The cyber group TraderTraitor channeled $242 million through the Tron network during the first 48 hours following the attack. Approximately $3.5 billion remains under the attackers’ control after emergency freezes were applied across various protocols. Alex ... Read more",
      "revision": 2,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d012e56a8c9330ab580a",
      "protocol": "Tom Lee Signals a Bottom in AI Stocks",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/tom-lee-signals-a-bottom-in-ai-stocks-as-crypto-shows-strength/",
        "https://cryptoslate.com/tom-lee-calls-ethereums-4-post-hack-fall-bullish-but-the-bybit-comparison-has-a-catch/"
      ],
      "firstSeen": "2026-11-03T01:05:23.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "TL;DR: The semiconductor stock index recorded a 17% drop during October 2026, while the S&P 500 fell less than 1% over the same period. Bitcoin recorded a pullback of approximately 4% to hover around $76,400 following reports of a $6.3 billion vulnerability on Binance. Spot Bitcoin exchange-traded funds (ETFs) in the United States registered net ... Read more",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "789eed0add969cb4632a",
      "protocol": "$49M",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 49000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/49m-mercado-bitcoin-hacked-10m-frozen-in-quick-response/",
        "https://thedefiant.io/news/hacks/chainalysis-puts-mercado-bitcoin-hack-at-49-million-across-17-chains"
      ],
      "firstSeen": "2026-11-03T00:56:08.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Mercado Bitcoin suffered a major security breach, leading to the theft of $49 million. Quick actions helped freeze $10 million. The post $49M: Mercado Bitcoin Hacked, $10M Frozen in Quick Response appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "3cf5f60d7952e536c662",
      "protocol": "Kim Yo Jong",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/kim-yo-jong-denies-north-koreas-role-in-6-3-billion/",
        "https://crypto.news/north-korea-denies-role-in-6-3b-binance-hack/"
      ],
      "firstSeen": "2026-11-03T03:22:56.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Kim Yo Jong has denied North Korea's involvement in the $6.3 billion Binance hack, challenging U.S. accusations. The post Kim Yo Jong Denies North Korea’s Role in $6.3 Billion appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "6c5639c3f4750d2110dd",
      "protocol": "Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-safu-btc-balance-halves-recovery-unclear"
      ],
      "firstSeen": "2026-11-02T13:21:47.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Binance’s SAFU Bitcoin wallet now holds about 7,500 BTC after a 7,499 BTC transfer linked to the hack, with no timeline for restoring the $1 billion fund.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "853111bc17317d77acdf",
      "protocol": "Bitcoin Price Outlook For November 2026",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 76000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-price-prediction-november-2026/"
      ],
      "firstSeen": "2026-11-03T02:00:00.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Bitcoin price prediction for November 2026 hinges on $76,000. See what on-chain data and charts signal after the Binance hack. The post Bitcoin Price Outlook For November 2026: One Price Level Remains Critical appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "c362575586931662ba2a",
      "protocol": "MercadoBitcoin",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 46000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/mercadobitcoin-hacked-for-46m-over-9m-in-assets-frozen/"
      ],
      "firstSeen": "2026-11-03T04:39:34.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "MercadoBitcoin has suffered a significant hack, with $46 million stolen and $9 million frozen. This incident could shake trader confidence across multiple altcoins. The post MercadoBitcoin Hacked for $46M, Over $9M in Assets Frozen appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b7e6df497f9148384bd3",
      "protocol": "3 Altcoins to Watch in the First Week",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/top-3-altcoins-first-week-november-2026/"
      ],
      "firstSeen": "2026-11-03T00:57:54.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "HYPE, PEPE, and STX test key Fibonacci levels after the Binance hack. See the altcoins to watch this week. The post 3 Altcoins to Watch in the First Week of November 2026 appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c0b0fa2dde46d1dfb76e",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/liquid-restores-full-bitcoin-backing-after-elements-exploit"
      ],
      "firstSeen": "2026-11-03T00:12:59.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "Full reserves meet a condition for restarting direct federation withdrawals, which were last reported under enhanced operational controls.",
      "revision": 1,
      "sourceHeadline": "Liquid Restores Full Bitcoin Backing After Elements Exploit",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f0ac400baf81ea1037a0",
      "protocol": "Financial markets show signs of strain as the AI",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/financial-markets-strain-ai-trade-cracks/"
      ],
      "firstSeen": "2026-11-03T05:38:25.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "The AI trade's instability could amplify financial market volatility, impacting global economies, especially those with fiscal vulnerabilities. The post Financial markets show signs of strain as the AI trade starts to crack appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bb2ff2fb266354466970",
      "protocol": "Unattributed",
      "chain": "Arbitrum",
      "technique": "Security incident",
      "lossUsd": 30000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/11/03/arbitrum-s-council-moved-usd30-million-of-binance-hack-funds-without-the-hacker-s-key"
      ],
      "firstSeen": "2026-11-03T05:25:12.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "A 12-person committee briefly rewrote one of Arbitrum’s core contracts to spend from an address it held no key for, then put the code back. It’s the second time this year.",
      "revision": 1,
      "sourceHeadline": "Arbitrum’s council moved $30 million of Binance hack funds",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4db994f31b66ce92225b",
      "protocol": "Ethereum Foundation",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ethereum-foundation-evm-fast-challenge-block-limits/"
      ],
      "firstSeen": "2026-11-03T04:34:38.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "The challenge's outcome could enhance Ethereum's security and efficiency by establishing predictable verification costs and mitigating attack risks. The post Ethereum Foundation launches evm.fast challenge to verify block limits appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "639ce8f8f72082d4c515",
      "protocol": "CFTC Chair",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/cftc-chair-calls-for-u-s-regulations-on-offshore-exchanges/"
      ],
      "firstSeen": "2026-11-03T04:40:57.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "CFTC Chair Michael Selig emphasizes the need for U.S. regulations following the Binance hack. This could reshape the compliance landscape for offshore exchanges. The post CFTC Chair Calls for U.S. Regulations on Offshore Exchanges appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a0fc33f048b5b44a3176",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-warns-of-second-wave-of-crypto-theft-as-6-3-billion-hack-recovery-continues/"
      ],
      "firstSeen": "2026-11-03T00:30:20.000Z",
      "updatedAt": "2026-11-03T06:35:09.901Z",
      "summary": "The November 2 update says the full proof is complete, while replenishment remains about 95% and broader token coverage is planned. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dadfb8f462473c4f343a",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/binance-announces-recovery-of-90-stolen-assets-users-not/",
        "https://cointelegraph.com/news/binance-hack-90-percent-replenished",
        "https://thedefiant.io/news/hacks/binance-says-90-of-stolen-assets-replenished-targets-nov-1-restart"
      ],
      "firstSeen": "2026-10-31T14:40:51.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Less-liquid tokens make up the remaining shortfall as Binance continues buying replacement assets through market and over-the-counter trades.",
      "revision": 10,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6dd9452d5df2fdd102ad",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/11/02/bitcoin-claws-back-toward-usd79-000-as-markets-shake-off-crypto-s-biggest-hack"
      ],
      "firstSeen": "2026-11-02T04:42:22.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "ZEC led the majors and oil slid on a report that Trump wants to give Iran diplomacy more time, with U.S. midterm elections on Tuesday.",
      "revision": 3,
      "sourceHeadline": "Bitcoin claws back toward $79,000 as markets shake",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ec991772195051ef4d67",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-outlook-us-midterm-elections-2026/"
      ],
      "firstSeen": "2026-11-02T15:05:56.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Bitcoin is heading into America’s midterm elections with a problem. Wall Street is pulling money out, traders are betting on further losses, and the world’s largest crypto exchange is recovering from a record $6.3 billion hack. The November 3 vote could now add another layer of uncertainty to an already nervous market. Bitcoin briefly fell The post How Bitcoin Looks Heading Into a High-Stakes US Midterm Election Week appeared first on BeInCrypto .",
      "revision": 2,
      "sourceHeadline": "How Bitcoin Looks Heading Into a High-Stakes US Midterm",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "57c5cd804c0a8eebf89f",
      "protocol": "Relay",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/relay-reports-route-disruptions-in-bid-to-block-binance-hack-funds"
      ],
      "firstSeen": "2026-11-02T15:49:45.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The bridge says no user action is needed and is working with Binance and law enforcement to screen hacker-linked addresses.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "83f18389673fde7491a4",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/markets/bitcoin-binance-hack-strive-ceo"
      ],
      "firstSeen": "2026-10-31T15:26:46.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Strive CEO Matt Cole says the Binance hack has not changed his long-term case for Bitcoin, but cautions it is too early to call a market bottom.",
      "revision": 2,
      "sourceHeadline": "Bitcoin held up better than expected after Binance hack",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e1a56887eff6d65d16d0",
      "protocol": "Binance Hacker",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/binance-hacker-moves-2-2m-in-stolen-bitcoin-through-coinjoin-to-obscure-funds/",
        "https://crypto.news/binance-hacker-bitcoin-coinjoin-stolen-funds/"
      ],
      "firstSeen": "2026-11-02T18:02:09.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "TL;DR Approximately 28 BTC, worth $2.2 million, entered 18 CoinJoin transactions between November 1 and November 2. Elliptic continues to track $3.24 billion in assets linked to the October 29 Binance theft across multiple blockchains. Binance has allocated more than $6.34 billion in company resources to replace affected assets, while blockchain investigators monitor movements. The ... Read more",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "a89430c1d2153e87eb63",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6430000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/elliptic-reveals-north-koreas-rapid-laundering-of-stolen/",
        "https://decrypt.co/382355/north-korea-laundering-binance-hack-loot-new-wallet-every-25-seconds"
      ],
      "firstSeen": "2026-11-02T18:46:03.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "$2.85 billion of the $6.43 billion stolen from Binance has been frozen or seized, compared with about 3% in the Bybit hack, as North Korea’s automated laundering spans 12,000 wallets.",
      "revision": 1,
      "sourceHeadline": "North Korea Is Laundering Binance Hack Loot at One",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "0c32d35ee0ca774c53a2",
      "protocol": "Mystery $106 Million Crypto Theft",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 106000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/eu-entity-106-million-crypto-exchange-hack/",
        "https://decrypt.co/382383/mystery-106-million-crypto-theft-eu-entity-binance-hack",
        "https://thedefiant.io/news/hacks/zachxbt-flags-suspected-106-million-plus-theft-from-eu-entity",
        "https://www.coindesk.com/tech/2026/11/02/eu-entity-suspected-of-losing-usd106-million-from-crypto-exchange-accounts-zachxbt-says"
      ],
      "firstSeen": "2026-11-02T12:38:09.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Onchain investigator ZachXBT says an unidentified EU entity lost more than $106 million from centralized exchange accounts on Sunday,.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "85e6f52f06fa5644c7b3",
      "protocol": "FBI Blames North Korea for $6B Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382316/fbi-blames-north-korea-for-6b-binance-hack-as-exchange-reopens-withdrawals",
        "https://www.coindesk.com/markets/2026/11/02/bitcoin-eases-to-usd77-900-as-binance-customers-pull-usd3-6-billion-after-withdrawals-reopen",
        "https://www.theblock.co/news/regulation/2026-11-02-kim-jong-un-sister-rejects-fbi-claims-linking-north-korea-binance-hack-432344"
      ],
      "firstSeen": "2026-11-02T10:36:19.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Binance saw $3.64 billion in net outflows in the first nine and a half hours after reopening withdrawals, or 2.1% of its assets, it said.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "7401b50c2485813690c4",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 46000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/mercado-bitcoin-hack"
      ],
      "firstSeen": "2026-11-02T19:05:35.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Brazil’s exchange Mercado Bitcoin paused deposits and withdrawals after a security breach, saying customer funds and data were safe.",
      "revision": 1,
      "sourceHeadline": "Mercado Bitcoin wallets show post-hack transfers after $46M",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "8611d2757450970b3784",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/mercado-bitcoin-breach-wallet-sends-2-800-eth-onward"
      ],
      "firstSeen": "2026-11-02T19:35:40.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Other transfers moved 2.24 million USDC and 1.7 million TRX, while deposits and withdrawals remained suspended.",
      "revision": 1,
      "sourceHeadline": "Mercado Bitcoin Breach Wallet Sends 2,800 ETH Onward",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aee45d5ebf37977148c0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/ai-hackers-threat-bitcoin-quantum-computing-swan"
      ],
      "firstSeen": "2026-11-02T21:54:41.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The Swan Bitcoin founder warned that hackers are using large language models to exploit security flaws with just a few prompts.",
      "revision": 1,
      "sourceHeadline": "AI poses greater threat to Bitcoin than quantum computing",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2ef6475c152401e7f0ba",
      "protocol": "Live updates",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/11/02/live-updates-binance-records-usd6-billion-outflows-after-starting-withdrawals-less-then-4-of-total-holdings"
      ],
      "firstSeen": "2026-11-02T08:49:30.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The Nasdaq flipped from a 1% gain to a 1% decline on Monday even as interest rates pulled back and oil plunged on hopes for Middle East peace.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "47a160bfcbc34710565b",
      "protocol": "South Korea",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/south-korea-calls-emergency-crypto-meeting-as-north-korean-hacking-threats-escalate/"
      ],
      "firstSeen": "2026-11-02T18:49:15.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "TL;DR South Korea’s Financial Services Commission (FSC) summoned major cryptocurrency exchanges to review security measures following the $6.4 billion Binance theft. The FBI attributed the attack to North Korea’s TraderTraitor group, which reportedly converted stolen assets into Ethereum. Regulators are examining cold-wallet reserves and cybersecurity weaknesses as North Korean hackers increasingly integrate artificial intelligence into ... Read more",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "8b8557527074f5d1928b",
      "protocol": "Tom Lee",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382357/tom-lee-calls-bottom-ai-stock-selloff-crypto"
      ],
      "firstSeen": "2026-11-02T19:46:02.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The Fundstrat strategist says constraints on AI spending have slowed growth without ending the boom, while crypto’s response to the Binance hack suggests sellers may already be exhausted.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ecb2af5f1ac7b3c3aa6a",
      "protocol": "$6.43B",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6430000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/6-43b-binances-exposure-to-stolen-funds-raises-sanctions/"
      ],
      "firstSeen": "2026-11-02T22:23:02.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Binance's exposure to $6.43 billion in stolen assets poses significant sanctions risks for crypto firms. Here's why it matters. The post $6.43B: Binance’s Exposure to Stolen Funds Raises Sanctions appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "8f99d6736a57be07d6b8",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 106000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/zachxbt-flags-suspected-106m-crypto-theft-as-solana-bot-faces-possible-786k-drain"
      ],
      "firstSeen": "2026-11-02T21:16:24.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "A European entity may have lost $106 million from exchange accounts, while a wallet associated with a Solana arbitrage bot may have lost another $786,000.",
      "revision": 1,
      "sourceHeadline": "Crypto investigators flag suspected $106M theft, $786K",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "5adc88c8c5cc669385d9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382375/claude-built-linux-exploit-bug-ubuntu"
      ],
      "firstSeen": "2026-11-02T20:36:03.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Anthropic says Claude wrote an attack that can take over a Linux server with no password. Red Hat patched on Sunday, but Ubuntu still has no fix.",
      "revision": 1,
      "sourceHeadline": "Claude-Built Linux Exploit Targets Bug That Ubuntu Still",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "434957fe59525a1d4166",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/malicious-airdrop-app-slips-into-official-crypto-store-targets-wallet-recovery-phrases/"
      ],
      "firstSeen": "2026-11-02T20:46:23.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "TL;DR: Cybersecurity researchers identified a fraudulent app simulating token airdrop distributions within an official application catalog. The malicious software required the manual entry of 12- or 24-word seed phrases as a mandatory requirement to process alleged reward claims. Technical reports confirmed that the cryptographic credentials were transmitted directly to remote servers controlled by the attackers. ... Read more",
      "revision": 1,
      "sourceHeadline": "Malicious Airdrop App Slips Into Official Crypto Store",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "64ff078ba78033c038d4",
      "protocol": "Corea del Norte niega el hack a Binance y",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/kim-yo-jong-fbi-binance-hack-provocacion/"
      ],
      "firstSeen": "2026-11-02T21:21:25.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Kim Yo-jong califica la investigación del FBI sobre el hack a Binance como una \"provocación política\" mientras los $6.3 mil millones permanecen en listas bloqueadas de Estados Unidos. El post Corea del Norte niega el hack a Binance y califica la investigación del FBI de fabricada fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "8d4bc7c3beeeb74b5de4",
      "protocol": "Arbitrum cae 5,43% el 2 de noviembre de 2026",
      "chain": "Arbitrum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/analisis/arbitrum-cae-543-el-2-de-noviembre-de-2026-y-el-temor-por-un-exploit-presiona-a-arb/"
      ],
      "firstSeen": "2026-11-02T23:49:17.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "ARB retrocede 5,43% y cotiza por debajo de sus promedios móviles cortos en una sesión marcada por la preocupación sobre la seguridad de protocolos del ecosistema Arbitrum. El reporte de pérdidas en bóvedas de Premia Labs ofrece un catalizador plausible, pero el volumen menor al promedio y la falta de datos de derivados aconsejan no confundir presión vendedora con capitulación confirmada.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eadec1eae27299774f67",
      "protocol": "Opsek founder",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/opsek-founder-binance-hack-prior-access/"
      ],
      "firstSeen": "2026-11-02T20:58:10.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The incident underscores the need for exchanges to adopt an \"assume compromise\" mindset, focusing on internal access controls and staff devices. The post Opsek founder says Binance attackers may have had access for weeks before the hack appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8eabea10e299a9d44245",
      "protocol": "Crypto wallet revenues",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/crypto-wallet-revenues-drop-60-h1-2026/"
      ],
      "firstSeen": "2026-11-02T22:45:34.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "The decline in crypto wallet revenues highlights the sector's vulnerability to market fluctuations, urging a reevaluation of revenue models. The post Crypto wallet revenues drop 60% in H1 2026, 1kx report finds appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "97c85c88c5fb66997f7e",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/morgan-stanley-cuts-coinbase-target-to-120-as-earnings-recovery-outlook-weakens"
      ],
      "firstSeen": "2026-11-02T20:22:23.000Z",
      "updatedAt": "2026-11-02T23:52:05.401Z",
      "summary": "Slowing trading activity and fallout from the Binance hack are clouding Coinbase’s revenue prospects, prompting Morgan Stanley to lower its rating on the stock.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "874855b056380b9c89ae",
      "protocol": "Inside the largest crypto hack on record",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-bitcoin-ath-experts-react/",
        "https://crypto.news/bitcoin-etfs-440-million-inflows-binance-hack/",
        "https://thedefiant.io/news/hacks/chainalysis-links-6-4-billion-binance-hack-to-north-korea",
        "https://www.coindesk.com/markets/2026/10/30/usd6-billion-binance-hack-sends-bitcoin-ether-tumbling-standard-chartered-sees-more-losses-ahead",
        "https://www.theblock.co/news/business/2026-10-30-binance-hack-largest-crypto-hack-north-korea-432225"
      ],
      "firstSeen": "2026-10-30T03:36:11.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Investigators tie the $6B Binance hack to North Korea. Here's how hot-wallet signing infrastructure was compromised and where funds went.",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "d06fedbe1458e2159d8c",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hackers-solana-new-phase-laundering-chainalysis",
        "https://crypto.news/binance-completes-reserve-proof-for-10-tokens-after-6-3b-hack/",
        "https://cryptobriefing.com/binance-zero-knowledge-proof-of-reserves/"
      ],
      "firstSeen": "2026-11-02T12:40:45.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Crypto exchange Gate said it froze two linked accounts as US investigators urged platforms to block transactions tied to the $6.3 billion theft.",
      "revision": 1,
      "sourceHeadline": "Binance hackers begin swapping stolen Solana tokens",
      "qualityFlags": []
    },
    {
      "id": "ba648ae65a2c5a8c696d",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1610000000,
      "lossBasis": "aggregate",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/markets/bitcoin-etfs-october-red-binance-hack-outflows",
        "https://www.theblock.co/news/markets/2026-11-01-spot-bitcoin-etfs-largest-four-months-following-binance-hack-432270"
      ],
      "firstSeen": "2026-11-02T04:11:05.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "US spot Bitcoin ETFs ended October with $515 million in net withdrawals, while Ether funds posted a record $1.61 billion in monthly outflows.",
      "revision": 1,
      "sourceHeadline": "Bitcoin ETFs sink into October outflows with $643M exit",
      "qualityFlags": []
    },
    {
      "id": "e5e174f0b3a325939024",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/binance-confirms-completion-of-latest-proof-of-reserves/",
        "https://www.theblock.co/news/business/2026-11-02-binance-zero-knowledge-proof-of-reserves-snapshot-hack-recovery-432321"
      ],
      "firstSeen": "2026-11-02T16:50:56.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Binance users can now independently verify 1:1 backing for BTC, ETH, BNB, SOL, XRP and more as it replenishes 95% of assets lost in record hack.",
      "revision": 1,
      "sourceHeadline": "Binance completes latest proof of reserves as it works",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "38b7b66bde0e6c5a61cd",
      "protocol": "$106 Million Crypto Theft",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 106000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/eu-entity-106-million-crypto-exchange-hack/",
        "https://thedefiant.io/news/hacks/zachxbt-flags-suspected-106-million-plus-theft-from-eu-entity"
      ],
      "firstSeen": "2026-11-02T12:38:09.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "ZachXBT flags a suspected $106 million theft from an EU entity's exchange accounts as funds race into ETH and Monero. The post $106 Million Crypto Theft Hits EU Entity With Multiple Exchange Accounts appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "8e79be998061ce7be5ac",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptoslate.com/solana-validators-told-to-act-immediately-as-critical-linux-vulnerability-emerges/",
        "https://thedefiant.io/news/security/anza-urges-solana-validators-to-act-on-critical-linux-flaw"
      ],
      "firstSeen": "2026-11-02T00:23:12.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Ubuntu’s main 24.04 kernel repair was still pending on Nov. 2, leaving affected operators a separate host-security task. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Solana validators told to act immediately as critical Linux",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "b620584f1d531b95fc72",
      "protocol": "Bitcoin",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-key-events-midterms-rate-hikes/"
      ],
      "firstSeen": "2026-11-02T12:00:55.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Bitcoin (BTC) and crypto markets face 3 key events this week. US voters elect a new Congress, 3 central banks weigh rate hikes, and Friday brings the October jobs report. The markets enter the week still recovering. A record $6.3 billion hack at Binance pushed Bitcoin to a six-week low on Friday. Bitcoin’s $100,000 Hopes The post Bitcoin Faces 3 Big Tests During the First Week of November appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1c6a35be106c6bf6fd82",
      "protocol": "Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-safu-btc-balance-halves-recovery-unclear"
      ],
      "firstSeen": "2026-11-02T13:21:47.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Binance’s SAFU Bitcoin wallet now holds about 7,500 BTC after a 7,499 BTC transfer linked to the hack, with no timeline for restoring the $1 billion fund.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4ff4fdfb733aa8ab9a32",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 3240000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/elliptic-flags-first-bitcoin-mixing-of-binance-hack-proceeds"
      ],
      "firstSeen": "2026-11-02T11:19:01.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "The analytics firm traced roughly 12,000 wallets across 11 blockchains and put remaining linked balances at $3.24 billion.",
      "revision": 1,
      "sourceHeadline": "Elliptic Flags First Bitcoin Mixing of Binance Hack Proceeds",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "e363315c3ac236e68874",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hacked-for-6-3-billion/"
      ],
      "firstSeen": "2026-11-02T06:30:37.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Following Binance's $6.3 billion hack, UE Crypto promotes cloud mining contracts, daily earnings and renewable energy infrastructure to investors.",
      "revision": 1,
      "sourceHeadline": "Binance, the world’s largest cryptocurrency exchange",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "50ed9e4a408a9a3a21e7",
      "protocol": "A secure wallet",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/a-secure-wallet-a-compromised-seller-what-cryptobilis-exposed/"
      ],
      "firstSeen": "2026-11-02T10:24:00.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Ledger’s confirmed implant findings and Trezor’s subsequent warning concern devices bought through the same reseller. The investigations put the route from manufacturer to customer alongside the security of the chip inside the wallet. Trezor has warned customers about a suspected…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "68bb699a94a45b860413",
      "protocol": "Why stealing billions from a crypto exchange",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/02/why-crypto-exchange-hacks-can-be-harder-to-contain-versus-global-banks"
      ],
      "firstSeen": "2026-11-02T08:32:01.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "The $6.3 billion Binance breach has revived a debate over whether crypto exchanges are less secure than banks or simply harder to protect once hackers get inside.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0e96186ddeb9d2609a9d",
      "protocol": "Bitcoin ETFs",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 643000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/11/02/bitcoin-etfs-lost-usd643-million-in-outflows-friday-and-2026-is-barely-green-now"
      ],
      "firstSeen": "2026-11-02T06:46:41.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "The first trading day after the Binance hack saw the biggest ETF outflow since June 25.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "875bdd71810902d5c0aa",
      "protocol": "Sible Network",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/sible-network-suspends-multi-account-mining-sybil/"
      ],
      "firstSeen": "2026-11-02T07:43:43.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Sible Network suspends its three-account phone mining plan after Sybil attack concerns, reaffirming its one-person, one-account policy for SIB users.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cdd2dd19453a6c77085d",
      "protocol": "Trezor",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/trezor-passphrase-limit-128-characters-coldcard-thefts/"
      ],
      "firstSeen": "2026-11-02T11:45:42.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Trezor expands wallet passphrases to 128 characters after Coldcard thefts exposed weak recovery phrases, while warning users about passphrase risks.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5c3b1bb1e9f2913a3aa8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 11870000000,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/lazarus-group-crypto-theft-north-korea-gdp/"
      ],
      "firstSeen": "2026-11-02T13:52:43.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "North Korea's crypto theft highlights the growing role of cybercrime in state revenue, impacting global financial stability and security. The post North Korea’s Lazarus Group has stolen $11.87 billion in crypto, equal to 45% of the country’s GDP appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "North Korea’s Lazarus Group has stolen $11.87 billion",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 11870000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d82a06462d31575bab9f",
      "protocol": "Binance USDT reserves",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-usdt-holdings-fall-proof-of-reserves-october-2026/"
      ],
      "firstSeen": "2026-11-02T11:20:25.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Binance reports a 7.95% decline in USDT holdings to 29.48 billion tokens as its October 31 reserve snapshot covers 10 assets following the hack.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "db0df205b5667ebc87e5",
      "protocol": "Richard Teng",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/richard-teng-warns-binance-users-about-withdrawal-scams/"
      ],
      "firstSeen": "2026-11-02T16:32:56.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Richard Teng warns Binance users about withdrawal scams, urging caution as operations resume. The post Richard Teng Warns Binance Users About Withdrawal Scams appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "360f7ae408fc163243c3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/cefi/binance-restores-usd-withdrawals-as-post-hack-reopening-expands"
      ],
      "firstSeen": "2026-11-02T08:09:37.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "The exchange says all 15 initial crypto network groups have reopened, but withdrawals for several other tokens remain suspended.",
      "revision": 1,
      "sourceHeadline": "Binance Restores USD Withdrawals as Post-Hack Reopening",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f3659d0ba01bb7753c32",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-63b-record-hack-sparks-pre-election-political-chatter"
      ],
      "firstSeen": "2026-10-31T08:30:00.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Some political and administration figures tried to make hay of the biggest-ever crypto heist.",
      "revision": 1,
      "sourceHeadline": "Binance $6.3B record hack sparks pre-election political",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "27880f7874b1723fee7f",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/thorchain-halts-swaps-ethereum-reorg-binance-hackers/"
      ],
      "firstSeen": "2026-11-02T09:30:07.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "THORChain halted swaps on 10 networks after an Ethereum reorg caused a 10 ETH refund error, temporarily disrupting transfers tied to the Binance hack.",
      "revision": 1,
      "sourceHeadline": "THORChain’s 10 ETH refund error disrupts Binance hackers’",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e339b7ab38b589e0cba0",
      "protocol": "Binance hack fallout, U.S. midterms and jobs",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/11/02/binance-hack-fallout-u-s-midterms-and-jobs-report-crypto-week-ahead"
      ],
      "firstSeen": "2026-11-02T09:04:49.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Your look at what’s coming in the week starting Nov. 2.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ff6b84a24e2051eb467c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bank-of-korea-31-financial-firms-crypto-risk-survey/"
      ],
      "firstSeen": "2026-11-02T09:04:04.000Z",
      "updatedAt": "2026-11-02T16:59:29.132Z",
      "summary": "Bank of Korea surveys 18 banks and 13 securities firms about crypto hacks, market crashes and financial exposure, with responses due November 4.",
      "revision": 1,
      "sourceHeadline": "Bank of Korea questions 31 financial firms over crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cde21a7a06e7088ba430",
      "protocol": "Zcash grants group offers $124M",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/zcash-grants-46m-proposal-governance-backlash"
      ],
      "firstSeen": "2026-10-30T11:36:23.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Zcash Community Grants proposed redirecting about $124 million in existing and future funding toward mining rewards, but critics say the plan fails to address governance and accountability concerns.",
      "revision": 14,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "92aabedfd25c74f00c11",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/382269/crypto-kidnapping-texas-brothers-15-year-prison",
        "https://www.theblock.co/news/regulation/2026-10-30-texas-brothers-sentenced-15-years-8-million-crypto-robbery-minnesota-432221"
      ],
      "firstSeen": "2026-10-30T16:26:07.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Raymond and Isiah Garcia held a Minnesota family at gunpoint for more than nine hours, forcing the father to transfer over $8 million in crypto, in one of the clearest “wrench attack” prosecutions yet.",
      "revision": 13,
      "sourceHeadline": "$8 Million Crypto Kidnapping Lands Texas Brothers 15-Year",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "bd8aad0c918b00bcc5aa",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-reports-more-breach-points-in-6-3-billion-attack",
        "https://www.coindesk.com/tech/2026/10/30/binance-uncovers-wider-breach-in-usd6-3-billion-exploit-targets-sunday-withdrawal-restart"
      ],
      "firstSeen": "2026-10-30T08:36:52.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "CEO Richard Teng said hackers erased evidence and bypassed security checks. Binance plans to publish its proof of reserves Monday.",
      "revision": 13,
      "sourceHeadline": "Binance uncovers wider breach in $6.3 billion exploit",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "8716a8f774687c4762d6",
      "protocol": "Elon Musk, CZ Trade Blows Over SpaceX Shares",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-bitcoin-ath-experts-react/",
        "https://cointelegraph.com/markets/coinbase-leads-crypto-stock-selloff-shares-tumble",
        "https://crypto.news/bitcoin-etfs-440-million-inflows-binance-hack/",
        "https://decrypt.co/382236/elon-musk-cz-trade-blows-spacex-shares-binance-hack",
        "https://thedefiant.io/news/hacks/binance-attacker-used-eip-7702-to-bypass-wallet-controls-teng-says",
        "https://www.coindesk.com/markets/2026/10/30/wall-street-analysts-urge-investors-to-buy-crypto-stocks-on-weakness-after-usd6-3-billion-binance-hack",
        "https://www.theblock.co/news/business/2026-10-30-binance-hack-largest-crypto-hack-north-korea-432225"
      ],
      "firstSeen": "2026-10-30T00:11:26.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "After Musk appeared to mock Binance’s $6.3 billion hack, CZ reminded him that the exchange’s $500 million bet on his Twitter takeover is now worth over $1 billion in SpaceX shares.",
      "revision": 11,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "3eb34d8c758426b422ed",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-hack-fed-cftc-weekly-crypto-recap/",
        "https://cryptobriefing.com/binance-safu-partial-deployment-breach/",
        "https://www.coindesk.com/business/2026/10/31/binance-says-it-has-replaced-90-of-stolen-crypto-after-massive-usd6-3-billion-breach"
      ],
      "firstSeen": "2026-10-31T06:11:07.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Binance is absorbing all losses through corporate funds, futures reserves, and SAFU, keeping user balances intact.",
      "revision": 8,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "6ff645c54ba3a437d833",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/markets/bitcoin-binance-hack-strive-ceo"
      ],
      "firstSeen": "2026-10-31T15:26:46.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Strive CEO Matt Cole says the Binance hack has not changed his long-term case for Bitcoin, but cautions it is too early to call a market bottom.",
      "revision": 8,
      "sourceHeadline": "Bitcoin held up better than expected after Binance hack",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cfba8debb3f358cdc29b",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-confirms-7-499-btc-safu-transfer-after-hack"
      ],
      "firstSeen": "2026-10-31T16:22:42.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The exchange says it has replenished 90% of the amount lost and pledges to rebuild its emergency fund to about $1 billion.",
      "revision": 8,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5727b57d2d82dd13126f",
      "protocol": "b14g",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/b14g-says-97-million-core-drained-pauses-contracts"
      ],
      "firstSeen": "2026-10-31T16:46:50.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The Bitcoin staking protocol says exchanges froze about 9 million CORE and that staked BTC was unaffected.",
      "revision": 8,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f8eb5e0fe98dc2351e57",
      "protocol": "FBI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-coinbase-security-assessment/",
        "https://cryptoslate.com/fbi-blames-north-korea-for-6-billion-binance-hack-urges-thorchain-to-block-stolen-funds/",
        "https://www.coindesk.com/policy/2026/10/31/fbi-confirms-north-korea-s-role-in-usd6-billion-binance-hack-asks-defi-community-to-block-btc-eth-sol-addresses"
      ],
      "firstSeen": "2026-11-01T01:10:00.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "While the FBI listed hundreds of addresses in its notice, Chainalysis said the Binance attackers have already used \"thousands addresses,\" and expects this number to continue growing.",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "f2e0ef0a5abfea365a63",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 500,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-hack-launderers-reach-solana-after-draining-500-million-on-tron-chainalysis-says"
      ],
      "firstSeen": "2026-11-01T17:08:41.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The firm says the Tron operation spanned more than 1,000 addresses and over 3,000 deposits before funds dispersed across chains.",
      "revision": 3,
      "sourceHeadline": "Binance-Hack Launderers Reach Solana After Draining $500",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "6a5b0b71b1f9b3ce029f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-scammers-used-secs-website-to-lure-investors-into-alleged-130-million-fraud/"
      ],
      "firstSeen": "2026-11-01T20:00:49.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The SEC’s complaint seeks a targeted future filing bar, alongside monetary relief for alleged fraud. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 3,
      "sourceHeadline": "Crypto scammers used SEC’s website to lure investors",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0a4bb6d68c85515f5aba",
      "protocol": "A Nasdaq-listed company",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/next-technology-holding-may-sell-bitcoin/",
        "https://www.coindesk.com/markets/2026/10/31/a-nasdaq-listed-company-may-sell-usd450-million-bitcoin-citing-binance-hack-and-quantum-fears"
      ],
      "firstSeen": "2026-10-31T12:49:47.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Next Technology Holding cited exchange security and quantum computing risks in authorizing sales or loans against its 5,833 BTC. It says none of the coins are held at Binance.",
      "revision": 7,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "2eca3d429e6605059075",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382230/israel-extradites-alleged-nomad-bridge-exploiter-to-us-over-2-8m-theft-report"
      ],
      "firstSeen": "2026-10-30T13:00:09.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Israel's Supreme Court ruled that exploiting a coding flaw can count as computer intrusion, even when the software allowed the transaction.",
      "revision": 2,
      "sourceHeadline": "Israel Extradites Alleged Nomad Bridge Exploiter to US",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ef18607e16d407bc1e71",
      "protocol": "BTCPay Server",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/btcpay-server-hot-wallet-thefts-older-versions",
        "https://crypto.news/btcpay-server-warns-of-wallet-drains-urges-server-shutdowns/"
      ],
      "firstSeen": "2026-11-02T05:34:02.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "BTCPay Server urged operators to shut down their servers after receiving reports of unauthorized attackers draining funds from hot wallets.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "55d5bd095682ac173885",
      "protocol": "A Decade Ago, a $6.3 Billion Hack",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-bitwise-hougan-bitcoin-history/",
        "https://crypto.news/binance-hack-reimbursement-alone-is-not-enough-says-joni-zhuleku/"
      ],
      "firstSeen": "2026-11-02T00:40:00.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Bitwise CIO Matt Hougan says the Binance hack would have sunk the exchange a decade ago. Past hacks hit Bitcoin short term. The post A Decade Ago, a $6.3 Billion Hack Would Have Sunk Binance & BTC, Bitwise CIO Says appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "74c4b881e61920372304",
      "protocol": "Binance hacker",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 279000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hacker-sol-bitcoin-swaps-relay-protocol/"
      ],
      "firstSeen": "2026-11-01T09:42:45.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Binance hacker reportedly moves $46.4M in stolen SOL through Relay Protocol for Bitcoin swaps after converting $279M in altcoins.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "8546ab277b5cae949cf3",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/11/02/strangers-are-begging-the-binance-hacker-for-bitcoin-one-help-me-bro-at-a-time"
      ],
      "firstSeen": "2026-11-02T05:18:12.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The 19 wallets holding 18,270 stolen BTC have taken in nothing since Thursday except payments worth under a dollar, each carrying a message, from pleas to laundering pitches to a token shill.",
      "revision": 1,
      "sourceHeadline": "Strangers are begging the Binance hacker for bitcoin, one",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "95ee9adfc060d85182fa",
      "protocol": "Spot bitcoin ETFs",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 643000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-11-01-spot-bitcoin-etfs-largest-four-months-following-binance-hack-432270"
      ],
      "firstSeen": "2026-11-02T04:11:05.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "US spot bitcoin ETFs shed $643 million on Friday, marking their largest single-day outflow since June 25, following Thursday's Binance's hack.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "e2410883a8ed4065b9e4",
      "protocol": "Binance Hack Update",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-hack-update-40m-xrp-transferred-to-unknown-wallet/"
      ],
      "firstSeen": "2026-11-02T05:02:31.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "A significant transfer of 40 million XRP from the Binance hack has sparked community interest. The post Binance Hack Update: 40M XRP Transferred to Unknown Wallet appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "19129079e0fb5f8aad3d",
      "protocol": "BTCPayServer",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/btcpayserver-faces-security-breach-as-hot-wallets-compromised/"
      ],
      "firstSeen": "2026-11-02T04:12:42.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Unauthorized attackers are draining hot wallets on BTCPayServer instances, prompting urgent action from users. The post BTCPayServer Faces Security Breach as Hot Wallets Compromised appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7accb720949c9346c775",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-hacker-wallets-op-return-messages/"
      ],
      "firstSeen": "2026-11-02T05:22:41.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "The incident highlights the immutable transparency of blockchain, where stolen assets remain visible yet untouchable, affecting user trust. The post Binance hacker’s frozen-in-place Bitcoin stash is drawing begging notes and token shills appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance hacker’s frozen-in-place Bitcoin stash is drawing",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a4be3b614804ec08f052",
      "protocol": "Unattributed",
      "chain": "Tron",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-hack-leads-to-242-million-movement-via-tron/"
      ],
      "firstSeen": "2026-11-02T03:42:14.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Tron blockchain facilitates the transfer of $242 million linked to the Binance hack, stirring market interest. The post Binance Hack Leads to $242 Million Movement via Tron appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Binance Hack Leads to $242 Million Movement via Tron",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a598dc4838bbf094400e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/cz-thanks-secret-service-for-freezing-funds-after-6b-binance-hack/"
      ],
      "firstSeen": "2026-11-02T05:19:28.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Binance founder Changpeng Zhao has thanked the U.S. Secret Service and federal investigators for helping freeze stolen cryptocurrency following the more than $6 billion hack of the exchange last week. In a November 2 post on X, Zhao, commonly known…",
      "revision": 1,
      "sourceHeadline": "CZ thanks Secret Service for freezing funds after $6B",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b542246a53dfb1a0f1d1",
      "protocol": "3 Crypto Earnings",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-earnings-block-circle-riot/"
      ],
      "firstSeen": "2026-11-02T06:00:00.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Block, Circle and Riot Platforms report third-quarter earnings this week, covering a July-to-September stretch when crypto prices climbed. The reports land days after Binance disclosed a $6.3 billion hack. All three stocks also closed lower on Friday. Block Opens the Week After Its Last Beat Sent Shares Lower Block goes first, and its crypto exposure The post 3 Crypto Earnings Reports to Watch For First Week of November appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "12d8f253e8117db28baa",
      "protocol": "THORChain founder rejects",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/36b-flees-binance-on-reopen-thorchain-co-founder-opposes-coin-freeze-hodlers-digest"
      ],
      "firstSeen": "2026-11-01T23:09:13.000Z",
      "updatedAt": "2026-11-02T06:47:24.099Z",
      "summary": "Binance has reopened withdrawals following the world’s biggest ever hack, and THORChain co-founder argues it should not halt the protocol to comply with FBI demands.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0daf400f3e239a60318c",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/daybook-us/2026/10/30/here-s-how-big-bitcoin-traders-responded-after-the-binance-hack-hit"
      ],
      "firstSeen": "2026-10-30T11:51:26.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Your day-ahead look for Oct. 30, 2026",
      "revision": 13,
      "sourceHeadline": "Here's how big bitcoin traders responded after the Binance",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0273699ef06250680eb6",
      "protocol": "Aave market",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/aave-market-freezes-binance-hacker-usdt-eth-loan/"
      ],
      "firstSeen": "2026-10-30T16:32:23.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Aave’s market freezes have drawn scrutiny after a social media post claimed a Binance-linked attacker deposited $60 million in stolen USDT and borrowed roughly 19,762 ETH before issuer freezes took effect. Emilio, posting on X, said the intervention was intended…",
      "revision": 12,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "166187953cde1646510d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382230/israel-extradites-alleged-nomad-bridge-exploiter-to-us-over-2-8m-theft-report"
      ],
      "firstSeen": "2026-10-30T13:00:09.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Israel's Supreme Court ruled that exploiting a coding flaw can count as computer intrusion, even when the software allowed the transaction.",
      "revision": 12,
      "sourceHeadline": "Israel Extradites Alleged Nomad Bridge Exploiter to US",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9471a82f1ef0babaa534",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/chainalysis-hacka-agentes-ia-datos-clientes/"
      ],
      "firstSeen": "2026-10-31T17:52:00.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Chainalysis, la firma que rastrea a los ladrones de criptomonedas, dice que agentes de IA ayudaron a un atacante a obtener nombres de clientes, correos electrónicos y cargos laborales. El post Chainalysis, la firma que caza hackers de criptomonedas, sufre hack con agentes de IA fue visto por primera vez en BeInCrypto .",
      "revision": 6,
      "sourceHeadline": "Chainalysis, la firma que caza hackers de criptomonedas",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e2b3d12725cd4e8f4e65",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-restores-withdrawals-after-hack/",
        "https://cointelegraph.com/news/binance-net-outflows-surge-to-58b-as-withdrawals-resume-after-record-hack",
        "https://cryptoslate.com/tracked-binance-wallets-record-2-5-billion-in-outflows-as-withdrawals-reopen-after-hack/",
        "https://decrypt.co/382309/bitcoin-etf-investors-exits-record-binance-hack",
        "https://www.theblock.co/news/business/2026-11-01-binance-sees-3-64-billion-in-net-outflows-after-reopening-withdrawals-following-record-hack-432259"
      ],
      "firstSeen": "2026-11-01T11:35:28.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Bitcoin ETFs saw $643.2 million in outflows Friday, the first full trading session after the $6.4 billion Binance hack, ending October with roughly $516 million in net outflows.",
      "revision": 3,
      "sourceHeadline": "Bitcoin ETF Investors Head for the Exits After Record",
      "qualityFlags": []
    },
    {
      "id": "f43f4758c2e84c6aa9ff",
      "protocol": "Talis Protocol",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/talis-protocol-pauses-listings-nft-exploit/"
      ],
      "firstSeen": "2026-11-01T15:11:14.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "The exploit highlights vulnerabilities in NFT marketplaces, prompting a need for enhanced security measures and trust restoration in digital asset platforms. The post Talis Protocol pauses listings after NFT exploit nets attacker about $3,100 appeared first on Crypto Briefing .",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c809ccf1e91826814bf7",
      "protocol": "A Nasdaq-listed company",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/31/a-nasdaq-listed-company-may-sell-usd450-million-bitcoin-citing-binance-hack-and-quantum-fears"
      ],
      "firstSeen": "2026-10-31T12:49:47.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Next Technology Holding cited exchange security and quantum computing risks in authorizing sales or loans against its 5,833 BTC. It says none of the coins are held at Binance.",
      "revision": 2,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "015f628782fe04992e62",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 8000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/hackeo-binance-evaluacion-seguridad-coinbase/"
      ],
      "firstSeen": "2026-11-01T21:00:00.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Hackers se llevaron más de $8 mil millones de Binance, Bybit y Bitget. Mira en qué se diferencia la custodia de Coinbase y dónde aún está expuesta. El post ¿Es seguro Coinbase tras el monumental hack de Binance? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "¿Es seguro Coinbase tras el monumental hack de Binance?",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "da2d18c093acfc19c51d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/36b-flees-binance-on-reopen-thorchain-co-founder-opposes-coin-freeze-hodlers-digest"
      ],
      "firstSeen": "2026-11-01T23:09:13.000Z",
      "updatedAt": "2026-11-02T00:36:34.177Z",
      "summary": "Binance has reopened withdrawals following the world’s biggest ever hack, and THORChain co-founder argues it should not halt the protocol to comply with FBI demands.",
      "revision": 1,
      "sourceHeadline": "Billions flee Binance on reopen, THORChain founder opposes",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "edf8df452c6cae1a8243",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1790000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-10-29-binance-investigating-hack-suspicious-outflows-5-billion-432171"
      ],
      "firstSeen": "2026-10-29T21:49:16.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "Tether and Circle froze $1.79 billion in USDT and USDC after billions moved out of Binance hot wallets. Binance says it is investigating.",
      "revision": 12,
      "sourceHeadline": "Binance investigating hack as suspicious outflows reach",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "4c15466297d5089ac2fd",
      "protocol": "Unattributed",
      "chain": "Tron",
      "technique": "Security incident",
      "lossUsd": 242000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/analyst-traces-140-million-in-binance-loot-through-four-tron-exit-routes",
        "https://www.theblock.co/news/defi/2026-11-01-north-korean-hackers-launder-242-million-of-binance-loot-via-tron-as-fbi-presses-thorchain-analyst-432257"
      ],
      "firstSeen": "2026-11-01T18:25:48.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "Crypto bridges Relay, THORChain, Chainflip and Symbiosis moved about $140 million of stolen funds off Tron, with Relay handling the most at $48 million.",
      "revision": 1,
      "sourceHeadline": "North Korean hackers launder $242 million of Binance loot",
      "qualityFlags": []
    },
    {
      "id": "bd5c448023b42cbfaf21",
      "protocol": "OneKey founder",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": 62000000000,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/onekey-founder-warns-blackrocks-bitcoin-etf-could-be-a-north-korean-target/"
      ],
      "firstSeen": "2026-11-01T16:30:46.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "North Korean hackers could target BlackRock's $62 billion Bitcoin exchange-traded fund (ETF), crypto wallet maker OneKey founder Yishi Wang warned. “I suspect IBIT is already on North Korea's shortlist,” Wang said, following the $6 billion Binance hack that US authorities attributed to North Korea's TraderTraitor operation. The warning puts fresh attention on Coinbase, which serves… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 62000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "b17c3cfc6a685b815d3c",
      "protocol": "Threshold",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 136300000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/threshold-says-tbtc-operators-patched-or-went-offline-over-linux-flaw"
      ],
      "firstSeen": "2026-11-01T18:55:06.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "Threshold also disclosed a separate incident that drained about 0.5 ETH from an operator’s fee-paying account. Aave’s frozen Ethereum Core reserve holds about $136.3 million of tBTC.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "5387b96726bd2abc73a1",
      "protocol": "Solana Mobile",
      "chain": "Solana",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/solana-mobile-confirms-security-breach-in-dapp-publishing/"
      ],
      "firstSeen": "2026-11-01T19:44:26.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "Solana Mobile confirms a security breach allowed unauthorized access, promoting a malicious app that compromised user data. The post Solana Mobile Confirms Security Breach in dApp Publishing appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "be340476dbf6b46d4d99",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/fbi-attributes-6-billion-plus-binance-hack-to-north-korea"
      ],
      "firstSeen": "2026-10-31T21:46:33.000Z",
      "updatedAt": "2026-11-01T20:47:51.142Z",
      "summary": "The bureau named TraderTraitor and sought blocks on the laundering trail, while Binance kept Nov. 1 as its withdrawal restart target.",
      "revision": 1,
      "sourceHeadline": "FBI Attributes $6 Billion-Plus Binance Hack to North Korea",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "673a5806de7d6921f7dd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.9,
      "sourceUrls": [
        "https://www.sec.gov/newsroom/press-releases/2026-110-two-entities-charged-130-million-fraud-scheme-used-false-sec-filings-boost-investor-confidence"
      ],
      "firstSeen": "2026-10-29T16:42:37.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "The Securities and Exchange Commission today charged two foreign-operated, Colorado-incorporated entities, BG Wealth Sharing Ltd and DSJ Exchange Pty Ltd, for orchestrating a fraud scheme that used false SEC filings to boost confidence in their…",
      "revision": 11,
      "sourceHeadline": "Two Entities Charged in $130 Million Fraud Scheme",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "18c3cf8ee44567375fd9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/fbi-links-north-korea-to-6b-binance-hack-urges-action/",
        "https://cryptobriefing.com/fbi-links-6b-binance-hack-to-north-koreas-tradertraitor-group/",
        "https://thedefiant.io/news/hacks/fbi-attributes-6-billion-plus-binance-hack-to-north-korea"
      ],
      "firstSeen": "2026-10-31T14:46:06.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "The hack underscores the urgent need for enhanced cybersecurity measures in the crypto industry, potentially affecting market stability. The post FBI links $6B Binance hack to North Korea’s TraderTraitor group appeared first on Crypto Briefing .",
      "revision": 4,
      "sourceHeadline": "FBI links $6B Binance hack to North Korea’s TraderTraitor",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "32595428992fad10b9e9",
      "protocol": "Riyadh airport",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/riyadh-airport-sees-94-flight-cancellations-after-houthi-missile-attacks/"
      ],
      "firstSeen": "2026-11-01T01:53:12.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "The high flight cancellations at Riyadh airport highlight ongoing regional instability, potentially affecting Saudi airspace security and market dynamics. The post Riyadh airport sees 94% flight cancellations after Houthi missile attacks appeared first on Crypto Briefing .",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "96cdd781566df05618a7",
      "protocol": "North Korean hackers",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/north-korean-hackers-relay-protocol-38m/"
      ],
      "firstSeen": "2026-11-01T01:46:21.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "The incident highlights vulnerabilities in cross-chain protocols, potentially prompting stricter regulations and compliance scrutiny in the crypto sector. The post North Korean hackers move $38M through Relay Protocol in 7 hours appeared first on Crypto Briefing .",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4debe51fc0ddfefdc8a3",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-says-phase-one-of-withdrawals-opens-after-63b-hack",
        "https://crypto.news/binance-restores-usdt-usdc-eth-bnb-withdrawals/",
        "https://cryptobriefing.com/trump-north-korea-binance-hack/",
        "https://thedefiant.io/news/hacks/binance-begins-reopening-withdrawals-with-bitcoin-after-6-3-billion-hack",
        "https://www.coindesk.com/markets/2026/11/01/binance-opens-crypto-withdrawals-in-phases-starting-with-bitcoin-following-usd6-3-billion-hack"
      ],
      "firstSeen": "2026-11-01T06:25:43.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "The crypto exchange said it has begun phased withdrawals after the record hack the FBI has blamed on North Korea.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "da6ceecab91a4e60580d",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": 1470000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/zero-token-withdrawals-let-a-hacker-drain-97-million-core-from-bitcoin-staking-platform-b14g/"
      ],
      "firstSeen": "2026-11-01T13:20:52.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "Bitcoin staking platform b14g suffered a $1.47 million exploit on Oct. 31, losing approximately 97 million CORE tokens. The attacker drained 91 staking positions in a single transaction by submitting withdrawal requests for zero CORE, according to an investigation by blockchain analytics firm Bitquery. The staking platform confirmed the unauthorized withdrawals and said it had… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Zero-token withdrawals let a hacker drain 97 million CORE",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "7e063bd262a0d3b4a54d",
      "protocol": "Premia Labs",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 464600,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/premia-labs-464k-arbitrum-exploit-chainflip-near-intents/"
      ],
      "firstSeen": "2026-11-01T12:14:18.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "Premia Labs reportedly loses $464,600 in an Arbitrum vault exploit, with stolen funds moved through Ethereum, Chainflip and NEAR Intents into BTC.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "ec8a50f3ee2ffd506399",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/retiros-de-binance-reabren-2-mil-millones-bitcoin/"
      ],
      "firstSeen": "2026-11-01T11:46:57.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "Los retiros en Binance se reabrieron y se movieron 2 mil millones de dólares en pocas horas. ¿Fueron los clientes, y Bitcoin tendrá un rally? El post Binance reanuda los retiros de criptomonedas tras hack récord: el 95% de las pérdidas están cubiertas fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Binance reanuda los retiros de criptomonedas tras hack",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "96f209dd94a0af82f0ba",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-tapped-its-insurance-fund-after-the-hack-whats-left/"
      ],
      "firstSeen": "2026-11-01T10:05:58.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "Binance has drawn on a reserve used to absorb losses from bankrupt futures positions as it replaces stolen cryptocurrency. The exchange says it moved only excess funds, while published balances give traders a partial view of the protection that remains.…",
      "revision": 1,
      "sourceHeadline": "Binance tapped its insurance fund after the hack. What’s",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5a16e62446931426b8f7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/gta-6-podria-ahorrarte-5000-millonario/"
      ],
      "firstSeen": "2026-11-01T12:55:54.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "Un videojuego de 100 dólares podría ahorrarte 5,000 dólares. Ese es el consejo financiero poco común que el inversor millonario Mark Tilbury está dando a las personas antes del lanzamiento de Grand Theft Auto (GTA) 6. En un video viral, Tilbury sostiene que pasar las noches en la Vice City ficticia de GTA 6 podría El post Millonario dice que GTA 6 podría ahorrarte $5,000: ¿Cómo? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Millonario dice que GTA 6 podría ahorrarte $5,000",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e1750c54a46ade3a95d4",
      "protocol": "Millionaire",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/gta-6-could-save-you-5000-millionaire/"
      ],
      "firstSeen": "2026-11-01T12:40:38.000Z",
      "updatedAt": "2026-11-01T16:18:25.273Z",
      "summary": "A $100 video game could save you $5,000. That is the unlikely financial advice millionaire investor Mark Tilbury is giving people ahead of Grand Theft Auto 6’s release. In a viral video, Tilbury argues that spending evenings in GTA 6’s fictional Vice City could be far cheaper than spending them in real bars and restaurants. The post Millionaire Says GTA 6 Could Save You $5,000. How? appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3765d430f2724cf64713",
      "protocol": "Polymarket’s traders",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/polymarkets-traders-lost-funds-through-a-website-supplier-how-safe-is-the-trading-screen/"
      ],
      "firstSeen": "2026-10-30T11:36:01.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Polymarket’s October 29 breach reached traders through a compromised website supplier. Researchers found code that tried to use logged-in accounts to sell positions and move assets, exposing the trust traders place in the screen they use to manage their money.…",
      "revision": 10,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c357deae79201c2b5e82",
      "protocol": "FBI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/10/31/fbi-confirms-north-korea-s-role-in-usd6-billion-binance-hack-asks-defi-community-to-block-btc-eth-sol-addresses"
      ],
      "firstSeen": "2026-11-01T01:10:00.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "While the FBI listed hundreds of addresses in its notice, Chainalysis said the Binance attackers have already used \"thousands addresses,\" and expects this number to continue growing.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ca06fe3613683ebb1d0e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/fbi-blames-north-korea-for-record-63b-binance-hack",
        "https://crypto.news/binance-reopens-bitcoin-withdrawals-after-hack/",
        "https://thedefiant.io/news/hacks/binance-begins-reopening-withdrawals-with-bitcoin-after-6-3-billion-hack"
      ],
      "firstSeen": "2026-11-01T06:25:43.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "US agency seeks private-sector help to block further money-laundering of stolen digital assets.",
      "revision": 1,
      "sourceHeadline": "FBI blames North Korea for record $6.3B Binance hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "2df25f974fd9a5910a41",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-reopens-bitcoin-withdrawals-following-major-security/"
      ],
      "firstSeen": "2026-11-01T08:02:17.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Binance has reopened Bitcoin withdrawals after a security breach halted operations. This move could shift user behavior significantly. The post Binance Reopens Bitcoin Withdrawals Following Major Security appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Binance Reopens Bitcoin Withdrawals Following Major Security",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6a2675ff5d6838d65615",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-bitcoin-network-first-withdrawal-batch/"
      ],
      "firstSeen": "2026-11-01T06:10:33.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Binance's cautious phased reopening post-hack highlights the critical need for robust security measures and transparency in crypto exchanges. The post Binance picks Bitcoin network for first batch of withdrawal reopenings after hack appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance picks Bitcoin network for first batch of withdrawal",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c6f1e06d785b4067c71f",
      "protocol": "Binance Hack",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-hack-sees-ethereum-dumping-of-279m-in-altcoins/"
      ],
      "firstSeen": "2026-11-01T08:03:25.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "A Binance hacker dumped over $279M in altcoins, impacting Ethereum significantly. This incident raises concerns about market stability. The post Binance Hack Sees Ethereum Dumping of $279M in Altcoins appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d9db56bef991f87b78c4",
      "protocol": "OneKey founder",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/onekey-founder-older-iphone-chip-vulnerabilities/"
      ],
      "firstSeen": "2026-11-01T05:33:04.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Legacy device vulnerabilities highlight the critical need for updated security practices, impacting crypto asset safety and user trust. The post OneKey founder warns older iPhones have unpatchable chip vulnerabilities appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "118f5834866e8afb1577",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/hack-binance-bitcoin-maximo-historico-expertos-reaccionan/"
      ],
      "firstSeen": "2026-10-31T23:22:00.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "El hack de Binance de $6.3 mil millones divide a los expertos. Charles Edwards no posee Bitcoin, mientras que Santostasi y Cowen se oponen. El post ¿Por qué el próximo máximo histórico de Bitcoin parece lejano tras el hack de Binance? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "¿Por qué el próximo máximo histórico de Bitcoin parece",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "623deae3e52b9a8079d9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 437000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/attacker-drains-about-437-000-in-collateral-from-premia-vaults"
      ],
      "firstSeen": "2026-11-01T04:25:39.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "The attack moved vault collateral into option pools before withdrawing it as liquidity, according to Blockaid.",
      "revision": 1,
      "sourceHeadline": "Attacker Drains About $437,000 in Collateral From Premia",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6f9b12fcfc57b45abea5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-restores-usdc-usdt-eth-bnb-withdrawals/"
      ],
      "firstSeen": "2026-11-01T08:44:22.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Binance's swift recovery and financial resilience post-breach may bolster user trust but highlights ongoing security challenges in crypto exchanges. The post Binance restores USDC, USDT, ETH, and BNB withdrawals after hot wallet breach appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance restores USDC, USDT, ETH, and BNB withdrawals",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7e6bb4ca4cd58c403e89",
      "protocol": "Elliptic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/elliptic-reveals-binance-hack-laundering-operation-details/"
      ],
      "firstSeen": "2026-11-01T08:33:44.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Elliptic's latest findings reveal alarming automated laundering from the recent Binance hack, highlighting ongoing security risks. The post Elliptic Reveals Binance Hack Laundering Operation Details appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bae08348a5c8533270d6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-updates-proof-of-reserves-addresses/"
      ],
      "firstSeen": "2026-11-01T06:52:32.000Z",
      "updatedAt": "2026-11-01T09:10:59.511Z",
      "summary": "Binance's wallet update aims to restore trust post-breach, but full recovery hinges on successful withdrawals and cryptographic verification. The post Binance updates Proof of Reserves addresses, will route all withdrawals through new wallets appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance updates Proof of Reserves addresses, will route all",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d7bfac56caf980fc995f",
      "protocol": "Synthetix",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/synthetix-recovers-8-4-million-snx-stolen-in-binance-hack"
      ],
      "firstSeen": "2026-10-30T10:53:40.000Z",
      "updatedAt": "2026-11-01T02:07:21.334Z",
      "summary": "The protocolDAO says the tokens are secured in its Safe and will be returned when Binance requests them.",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c0e210695f02a209af3e",
      "protocol": "Name.com restores hijacked domains after attack",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/name-com-restores-hijacked-defi-domains/"
      ],
      "firstSeen": "2026-10-31T19:54:45.000Z",
      "updatedAt": "2026-11-01T02:07:21.334Z",
      "summary": "The incident highlights vulnerabilities in DeFi's reliance on traditional internet infrastructure, urging enhanced security measures for domain management. The post Name.com restores hijacked domains after attack hit at least 12 DeFi front ends appeared first on Crypto Briefing .",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "284033ddc571440301aa",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/hack-binance-bitcoin-maximo-historico-expertos-reaccionan/"
      ],
      "firstSeen": "2026-10-31T23:22:00.000Z",
      "updatedAt": "2026-11-01T02:07:21.334Z",
      "summary": "El hack de Binance de $6.3 mil millones divide a los expertos. Charles Edwards no posee Bitcoin, mientras que Santostasi y Cowen se oponen. El post ¿Por qué el próximo máximo histórico de Bitcoin parece lejano tras el hack de Binance? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "¿Por qué el próximo máximo histórico de Bitcoin parece",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "2a6180123137c9c838bc",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/chainalysis-flags-defi-receipt-token-route-in-binance-hack"
      ],
      "firstSeen": "2026-10-31T11:47:58.000Z",
      "updatedAt": "2026-11-01T02:07:21.334Z",
      "summary": "A separate onchain example shows USDT deposited into JustLend, transferred as jUSDT and redeemed by another wallet.",
      "revision": 1,
      "sourceHeadline": "Chainalysis Flags DeFi Receipt-Token Route in Binance Hack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7a382dc19d51acec5ed6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/fbi-links-dprk-to-binance-hack-asks-virtual-asset-providers/"
      ],
      "firstSeen": "2026-11-01T00:46:25.000Z",
      "updatedAt": "2026-11-01T02:07:21.334Z",
      "summary": "The FBI has linked North Korea to a significant breach of Binance, urging immediate action from virtual asset service providers. The post FBI Links DPRK to Binance Hack, Asks Virtual Asset Providers appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "FBI Links DPRK to Binance Hack, Asks Virtual Asset",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fc17653bbe4ae053b921",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 643000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/inversores-retiran-643-millones-bitcoin-etfs/"
      ],
      "firstSeen": "2026-10-31T15:03:00.000Z",
      "updatedAt": "2026-10-31T22:47:06.710Z",
      "summary": "Los inversores retiraron $643 millones de los ETF spot de Bitcoin un día después del hackeo récord a Binance. Esto es lo que significa para los fondos. El post Inversores retiran $643 millones de los ETF spot de Bitcoin tras el mayor hack de criptomonedas de la historia fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Inversores retiran $643 millones de los ETF spot de",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "24dbf3b15d6c12e92679",
      "protocol": "Chainalysis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/chainalysis-reports-thorchain-delayed-laundering-of-stolen/"
      ],
      "firstSeen": "2026-10-31T21:41:52.000Z",
      "updatedAt": "2026-10-31T22:47:06.710Z",
      "summary": "THORChain has reportedly delayed the laundering of stolen Binance funds, according to Chainalysis. This incident raises serious security concerns. The post Chainalysis Reports THORChain Delayed Laundering of Stolen appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2cb068dcc8155aa45cb3",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5570000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto"
      ],
      "firstSeen": "2026-10-29T21:36:24.000Z",
      "updatedAt": "2026-10-31T22:47:06.710Z",
      "summary": "An on-chain tally puts the suspected Binance drain at $5.57 billion across three blockchains, as Tether and Circle froze $1.8 billion.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "21349c69677f41b0e143",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-linked-wallet-faces-possible-exploit-blockchain-researcher-warns"
      ],
      "firstSeen": "2026-10-29T21:24:36.000Z",
      "updatedAt": "2026-10-31T22:47:06.710Z",
      "summary": "Binance pledged to cover all losses after a $6.3 billion hack, with about $3 billion in assets frozen by the exchange and its partners.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "217a3411a8593cbbea14",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/chainalysis-flags-defi-receipt-token-route-in-binance-hack"
      ],
      "firstSeen": "2026-10-31T06:48:33.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "A separate onchain example shows USDT deposited into JustLend, transferred as jUSDT and redeemed by another wallet.",
      "revision": 2,
      "sourceHeadline": "Chainalysis Flags DeFi Receipt-Token Route in Binance Hack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fc32b43ddfb7612922f7",
      "protocol": "Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-hack-158-2m-trx-funds-shifted-to-new-wallet/"
      ],
      "firstSeen": "2026-10-31T01:42:07.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "A significant transfer of stolen TRX from the Binance hack has raised alarms across the crypto community. The post Binance Hack: 158.2M TRX Funds Shifted to New Wallet appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ef765da2e362c94cf5dd",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 643000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/inversores-retiran-643-millones-bitcoin-etfs/"
      ],
      "firstSeen": "2026-10-31T15:03:00.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "Los inversores retiraron $643 millones de los ETF spot de Bitcoin un día después del hackeo récord a Binance. Esto es lo que significa para los fondos. El post Inversores retiran $643 millones de los ETF spot de Bitcoin tras el mayor hack de criptomonedas de la historia fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Inversores retiran $643 millones de los ETF spot de",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "a7718cf4a788e26aef39",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/chainalysis-hacka-agentes-ia-datos-clientes/"
      ],
      "firstSeen": "2026-10-31T00:46:00.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "Chainalysis, la firma que rastrea a los ladrones de criptomonedas, dice que agentes de IA ayudaron a un atacante a obtener nombres de clientes, correos electrónicos y cargos laborales. El post Chainalysis, la firma que caza hackers de criptomonedas, sufre hack con agentes de IA fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Chainalysis, la firma que caza hackers de criptomonedas",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f8d3b0cf2f7961c298a8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 14000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/11/01/a-stolen-iphone-usd14-000-in-losses-and-london-s-crypto-theft-problem"
      ],
      "firstSeen": "2026-10-31T16:09:30.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "Two strangers befriended Magnus Ahmad outside a London bar. Hours later, thieves had emptied his crypto wallets, accessed his bank accounts and disabled his laptop.",
      "revision": 1,
      "sourceHeadline": "A stolen iPhone, $14,000 in losses and London's crypto",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "4aedb93aa3052fff4c13",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382194/binance-hack-exit-ramps-defi-exchange-ethereum"
      ],
      "firstSeen": "2026-10-29T22:57:48.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "Etherscan records show wallets tied to the suspected Binance hack swapping freezable stablecoins for Ethereum on decentralized exchanges.",
      "revision": 1,
      "sourceHeadline": "Binance Hacker Hunts for Exit Ramps as DeFi Exchanges",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ed5230b1b090d56d3075",
      "protocol": "Chainalysis breach exposed customer",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/chainalysis-breach-customer-names-emails-roles/"
      ],
      "firstSeen": "2026-10-31T16:45:59.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "The company urges vigilance for unexpected authentication prompts as it determines which customer records were accessed. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "92d5d2eba14ae31839c5",
      "protocol": "Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382306/binance-hack-everything-you-need-to-know"
      ],
      "firstSeen": "2026-10-31T01:35:31.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "Attackers tied to North Korea drained roughly $6.4 billion from the world’s largest crypto exchange. Here’s what we know about how it happened, who’s behind it, and what comes next.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b31308407ff8830f2850",
      "protocol": "THORChain",
      "chain": "Ethereum",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/thorchain-pauses-ethereum-reorg-double-refund/"
      ],
      "firstSeen": "2026-10-31T18:02:48.000Z",
      "updatedAt": "2026-10-31T19:30:55.657Z",
      "summary": "The incident highlights the vulnerability of cross-chain protocols to blockchain reorgs, impacting their reliability and complicating illicit finance tracking. The post THORChain pauses operations after Ethereum reorg triggers double refund appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0c547e9cf01914199329",
      "protocol": "Polymarket suspended trading",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/polymarket-suspends-trading-user-funds-compromised"
      ],
      "firstSeen": "2026-10-29T19:23:03.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The prediction markets platform halted trading on Thursday after it reported one of its third party providers had been compromised.",
      "revision": 9,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d7041d9e63317bcddf0e",
      "protocol": "USDT0",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/usdt0-freezes-6-19-million-tokens-linked-to-binance-exploit"
      ],
      "firstSeen": "2026-10-30T09:43:25.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The network also restored USDT transfers between Tron and Ethereum after a precautionary pause.",
      "revision": 6,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "64fc6c0cb261db7b2b23",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/cz-says-binance-hack-leaves-2-billion-gap-points-to-spacex-shares"
      ],
      "firstSeen": "2026-10-30T09:44:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Binance has pledged to cover all losses from SAFU and company funds; Zhao did not spell out how the shares would finance reimbursements.",
      "revision": 5,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "46a1acf44bc93e4fab4c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/defi/unit-delays-all-deposits-and-withdrawals-after-binance-breach"
      ],
      "firstSeen": "2026-10-30T08:26:05.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Guardian screening can prevent transfers from completing as Binance says partners have frozen about $3 billion in affected assets.",
      "revision": 5,
      "sourceHeadline": "Unit Delays All Deposits and Withdrawals After Binance",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e543760c0b9a95880dcd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-63b-record-hack-sparks-pre-election-political-chatter",
        "https://crypto.news/binance-hack-recovery-withdrawals-proof-of-reserves/",
        "https://www.coindesk.com/business/2026/10/31/the-usd6-3-billion-binance-hack-paradox-centralization-made-the-hack-possible-but-also-saved-usd3-billion"
      ],
      "firstSeen": "2026-10-31T07:46:17.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Some political and administration figures tried to make hay of the biggest-ever crypto heist.",
      "revision": 1,
      "sourceHeadline": "Binance $6.3B record hack sparks pre-election political",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "03fd5bd26f723ec9bba1",
      "protocol": "Investors Pull $643 Million From Bitcoin ETFs",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 643000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/investors-pull-643-million-bitcoin-etfs/",
        "https://crypto.news/bitcoin-etfs-643-million-outflows-october-30/",
        "https://cryptobriefing.com/spot-bitcoin-etfs-643-million-outflows/",
        "https://cryptoslate.com/bitcoin-etfs-643-million-outflows-weekly-reversal/"
      ],
      "firstSeen": "2026-10-31T05:46:28.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Investors pulled $643 million from Bitcoin ETFs a day after the record Binance hack. Here is what it means for the funds. The post Investors Pull $643 Million From Bitcoin ETFs After the Biggest Crypto Hack in History appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "8d6f0e91b7498402b94a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-hack-fed-cftc-weekly-crypto-recap/",
        "https://cryptobriefing.com/binance-safu-partial-deployment-breach/"
      ],
      "firstSeen": "2026-10-31T06:11:07.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The breach highlights the critical need for robust security measures and contingency planning in crypto exchanges to protect user assets. The post Binance expects to partially deploy SAFU fund within 24 hours after $6.3 billion breach appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance expects to partially deploy SAFU fund within 24",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "2468f4d1adc812e93d3d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/launchonsf-restores-website-stepdrainer-attack/"
      ],
      "firstSeen": "2026-10-31T11:46:36.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The attack highlights vulnerabilities in web trust systems, urging enhanced security measures to protect user interactions in DeFi platforms. The post LaunchOnSF restores website as StepDrainer attack spreads to 10 more sites appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "LaunchOnSF restores website as StepDrainer attack spreads",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "833321e604d58e365c4f",
      "protocol": "DeFi DNS attack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/defi-dns-attack-12-sites-step-drainer/"
      ],
      "firstSeen": "2026-10-31T11:00:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "A Halloween attack has targeted at least 12 DeFi websites, with Blockaid identifying the Step Drainer toolkit across affected pages and teams warning users against connecting wallets or signing transactions. Blockaid’s initial warning named Flap and Kintsu as targets of…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "08da712764a7258c8326",
      "protocol": "Aave wasn’t",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/aave-wasnt-hacked-why-did-its-users-face-restrictions/"
      ],
      "firstSeen": "2026-10-31T12:00:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "A Binance-linked attacker borrowed from Aave before emergency controls took effect. The response stopped new deposits as lenders withdrew, pushed up borrowing costs and reopened a debate over how much disruption emergency safeguards should impose on other users. Aave has…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3ecb657835e96e0615cf",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/crypto-self-custody-gains-importance-as-cybersecurity-threats-expose-digital-risks/"
      ],
      "firstSeen": "2026-10-31T10:00:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "TL;DR Rising cybersecurity threats are reinforcing the case for stronger digital asset protection, with AI-assisted tools making vulnerability discovery faster and attacks potentially easier to execute. Bitcoin self-custody gives users direct control over their private keys, reducing reliance on centralized platforms while placing greater responsibility on individual holders. Hardware wallets, multifactor authentication, unique passwords, and ... Read more",
      "revision": 1,
      "sourceHeadline": "Crypto Self-Custody Gains Importance As Cybersecurity",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "468fe2310ce97af7f652",
      "protocol": "La IA acelera los ciberataques y eleva el riesgo",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/criptomonedas/la-ia-acelera-los-ciberataques-y-eleva-el-riesgo-para-miles-de-millones-en-criptomonedas/"
      ],
      "firstSeen": "2026-10-31T14:35:50.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Las herramientas de inteligencia artificial están haciendo más rápidas y baratas tareas como el phishing, el reconocimiento de sistemas y el robo de credenciales, justo cuando las criptomonedas concentran activos de alto valor. Aunque Binance y Bitget reportaron incidentes de gran escala sin atribuirlos públicamente a la IA, investigadores advierten que los agentes autónomos ya permiten a operadores individuales coordinar ataques que antes requerían equipos completos.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "caade260b08c5a0a0eb8",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-hack-recovery-withdrawals/"
      ],
      "firstSeen": "2026-10-31T14:58:56.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Binance's proactive fund recovery and user protection measures may bolster trust and resilience in the crypto exchange ecosystem. The post Binance says 90% of hacked funds covered as withdrawal restart nears appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "03c854ad9ba28a2e046e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/chainalysis-hacked-ai-agents-client-data/"
      ],
      "firstSeen": "2026-10-31T12:25:56.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Chainalysis, the firm that tracks crypto thieves, says AI agents helped an attacker take client names, emails, and job roles. The post Chainalysis, the Firm That Hunts Crypto Hackers, Got Hacked With AI Agents appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Chainalysis, the Firm That Hunts Crypto Hackers, Got",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4955bbfbd7cb92e58cc1",
      "protocol": "Chainalysis",
      "chain": "Tron",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/business/2026-10-31-chainalysis-says-hacker-using-offensive-agentic-techniques-accessed-its-customers-names-and-emails-432244"
      ],
      "firstSeen": "2026-10-31T13:27:17.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The firm has also been tracking Binance’s separate multibillion-dollar hack, and said the attackers are using a Tron protocol to dodge stablecoin freezes.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d8d533b94aa2eb7e2d83",
      "protocol": "Why AI Models Cheat",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382274/why-ai-models-cheat-reward-hacking-explained"
      ],
      "firstSeen": "2026-10-31T13:01:03.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "From boat-racing bots to OpenAI models inside Hugging Face, here's how AI reward hacking works and why it matters.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f788072a99d9825490b8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-attacks-on-riyadh-airport-disrupt-gulf-aviation-stability/"
      ],
      "firstSeen": "2026-10-31T09:37:17.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The attacks highlight vulnerabilities in Gulf aviation, potentially affecting regional airspace management and future operational stability. The post Houthi attacks on Riyadh airport disrupt Gulf aviation stability appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Houthi attacks on Riyadh airport disrupt Gulf aviation",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "849f864da380f910c2d6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 783000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/zklink-exploit-results-in-783k-loss-revealed-by-slowmist/"
      ],
      "firstSeen": "2026-10-31T14:51:50.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "zkLink has suffered a significant exploit resulting in a loss of approximately $783K. Here's what this means moving forward. The post zkLink Exploit Results in $783K Loss, Revealed by SlowMist appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "zkLink Exploit Results in $783K Loss, Revealed by SlowMist",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "89388cc4e06b812bc7ec",
      "protocol": "Step Drainer Attack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/step-drainer-attack-expands-to-stonkfun-and-others/"
      ],
      "firstSeen": "2026-10-31T14:24:07.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The Step Drainer attack has affected StonkFun and nine other sites, prompting infrastructure changes. The post Step Drainer Attack Expands to StonkFun and Others appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cd15e67e1ce242c5d484",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/como-ocurrio-hack-binance/"
      ],
      "firstSeen": "2026-10-31T11:17:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "El 29 de octubre de 2026, un atacante vació unos 6.15 mil millones de dólares de Binance en 31 minutos, uno de los mayores robos de la historia cripto, o mejor dicho, de la historia de Internet. Binance primero estimó pérdidas de 6.3 mil millones de dólares; la empresa de análisis blockchain BitOK, haciendo un El post ¿Cómo ocurrió el hack de Binance? Investigación detallada del robo de $6 mil millones fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "¿Cómo ocurrió el hack de Binance? Investigación detallada",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e2f4fc7ecdfc49f5259b",
      "protocol": "Texas brothers sentenced to 15 years in prison",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/texas-brothers-sentenced-to-15-years-in-prison-for-armed-crypto-robbery-kidnapping"
      ],
      "firstSeen": "2026-10-31T13:37:49.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Home invasions became the most common form of crypto wrench attacks worldwide during the first half of 2026, rising to 20 incidents from one.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "118b0372e390b09a85dc",
      "protocol": "Bitcoin turns 18",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/bitcoin-turns-18-has-the-original-rebel-grown-up"
      ],
      "firstSeen": "2026-10-31T14:27:52.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "In typical Bitcoin style, the number one cryptocurrency turns 18 today, amid AI-driven security threats, quantum fears and the biggest exchange hack in crypto history.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9ac99cab325ca503fb4b",
      "protocol": "Unspecified subject",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/top-3-altcoins-ath-fin-semana-25-26-julio-2/"
      ],
      "firstSeen": "2026-10-31T09:20:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "HYPE, LEO y WBT cotizan cerca de máximos históricos a pesar del hack de Binance. Consulta los niveles clave a vigilar este fin de semana. El post Top 3 altcoins que podrían registrar ATH este fin de semana fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "863c4d1f0930ab706d8f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/chainalysis-discloses-cyberattack-user-data/"
      ],
      "firstSeen": "2026-10-31T09:04:57.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The breach highlights the vulnerability of even specialized cybersecurity firms to AI-driven attacks, emphasizing the need for enhanced defenses. The post Chainalysis discloses cyberattack exposing customer names and emails appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Chainalysis discloses cyberattack exposing customer",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eddac4f4e07ef0a07ee1",
      "protocol": "Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382306/binance-hack-everything-you-need-to-know"
      ],
      "firstSeen": "2026-10-31T15:01:02.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Attackers tied to North Korea drained roughly $6.4 billion from the world’s largest crypto exchange. Here’s what we know about how it happened, who’s behind it, and what comes next.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "03248e58f901941df9c9",
      "protocol": "Tron Blockchain Used in $6.4B Binance Exploit",
      "chain": "Tron",
      "technique": "Exploit",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/tron-blockchain-used-in-6-4b-binance-exploit/"
      ],
      "firstSeen": "2026-10-31T15:13:44.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "The Tron blockchain has been implicated in tactics used by Binance exploiters to evade stablecoin freezes. The post Tron Blockchain Used in $6.4B Binance Exploit appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "65d6c8ece8c87018287d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-addresses-tracked-in-elliptics-new-public-exploit/"
      ],
      "firstSeen": "2026-10-31T13:58:08.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Elliptic has unveiled a public blocklist for Binance exploit addresses, enhancing security measures for users. The post Binance Addresses Tracked in Elliptic’s New Public Exploit appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Binance Addresses Tracked in Elliptic’s New Public Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "87499efb323a44a5c4b8",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-says-90-of-stolen-assets-replenished-targets-nov-1-restart"
      ],
      "firstSeen": "2026-10-31T14:40:51.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Its new reserves page reports full backing for major tokens, while the complete cryptographic proof is expected by Nov. 3.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "221b13e837846717b49f",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-whitepaper-18-anniversary-custody-debate/"
      ],
      "firstSeen": "2026-10-31T09:10:00.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Bitcoin’s whitepaper turned 18 on Oct. 31, bringing fresh attention to Satoshi Nakamoto’s proposal for payments without trusted intermediaries days after Binance reported a $6.3 billion theft. Satoshi Nakamoto’s original announcement, preserved in the mailing-list archive, described an electronic cash…",
      "revision": 1,
      "sourceHeadline": "Bitcoin whitepaper turns 18 as $6.3B hack fuels custody",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "d72d9baa714d21b73be4",
      "protocol": "Binance covers 90% of $6B hack losses",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-covers-90-of-6b-hack-losses-plans-withdrawals-nov-1/"
      ],
      "firstSeen": "2026-10-31T04:29:32.000Z",
      "updatedAt": "2026-10-31T15:17:19.552Z",
      "summary": "Binance's recovery efforts may boost market confidence and stabilize liquidity, potentially influencing Bitcoin prices amid market volatility. The post Binance covers 90% of $6B hack losses, plans withdrawals Nov 1 appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eeca3eae6562137a3baa",
      "protocol": "Polymarket",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/polymarket-security-issue-third-party-breach/",
        "https://www.coindesk.com/markets/2026/10/29/polymarket-suspends-trading-after-third-party-breach-leads-to-user-losses"
      ],
      "firstSeen": "2026-10-29T18:39:56.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Polymarket said one of its third-party providers was breached after users reported seeing their accounts drained.",
      "revision": 8,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c52435c2ebf8a099f19f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/polymarket-to-refund-3-9m-after-malicious-script-drains-726-trader-wallets/"
      ],
      "firstSeen": "2026-10-30T21:47:34.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "TL;DR: A malicious script injected through a third-party vendor drained $2.7 million from 726 wallets on October 29, 2026. The platform rolled out a total compensation package of $3.9 million to cover both the drained assets and collateral losses caused by the operational downtime. As of the morning of October 30, 2026, 689 accounts have ... Read more",
      "revision": 3,
      "sourceHeadline": "Polymarket to Refund $3.9M After Malicious Script Drains 726",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b18b0aefea9fbe44d300",
      "protocol": "Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/29/potential-multi-billion-binance-hack-hitting-crypto-markets"
      ],
      "firstSeen": "2026-10-29T21:12:45.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Crypto prices are sliding on the news, with bitcoin falling back to $77,000, though Binance's co-CEO said it would cover all losses.",
      "revision": 2,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5871e9266e467ad2e2b9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/trump-cautions-on-digital-currency-after-binances-6-3b/",
        "https://crypto.news/binance-hack-recovery-withdrawals-proof-of-reserves/"
      ],
      "firstSeen": "2026-10-31T07:46:17.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Donald Trump raises concerns over digital currencies while addressing Binance's reported hack. His comments reflect broader apprehensions in the crypto market. The post Trump Cautions on Digital Currency After Binance’s $6.3B appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Trump Cautions on Digital Currency After Binance’s $6.3B",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8be920a0867f5b29ec4d",
      "protocol": "Bitcoin stolen from Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/31/bitcoin-stolen-from-binance-tops-tesla-s-holdings-and-is-over-twice-el-salvador-s-reserve"
      ],
      "firstSeen": "2026-10-31T05:01:32.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "The 18,270 BTC haul is worth about $1.4 billion and comes within 442 coins of SpaceX’s disclosed holdings. Blockchain investigators link the attack to North Korea.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "71376e4ed9f467af9449",
      "protocol": "North Korea linked to 89% of 2026 crypto hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/north-korea-crypto-hack-losses-2026-chainalysis/"
      ],
      "firstSeen": "2026-10-31T07:59:48.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "North Korea-linked hackers have accounted for nearly 89% of reported cryptocurrency hack losses in 2026, according to Chainalysis, as Pyongyang has dismissed international sanctions targeting its revenue and weapons programs. Chainalysis published the figures on Oct. 30, drawing on reported…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4214037edbb725bc282e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/britain-boosts-military-support-for-saudi-arabia-amid-houthi-attacks/"
      ],
      "firstSeen": "2026-10-31T07:56:07.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "The UK's increased military support for Saudi Arabia may alter regional power dynamics, potentially curbing Houthi advances and affecting alliances. The post Britain boosts military support for Saudi Arabia amid Houthi attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Britain boosts military support for Saudi Arabia amid Houthi",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7e1088c626e48a4270e4",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binances-recovery-efforts-for-stolen-assets-gain-momentum/"
      ],
      "firstSeen": "2026-10-31T04:51:35.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Binance's recovery strategy for stolen assets is underway, highlighted by significant deposits. The post Binance’s Recovery Efforts for Stolen Assets Gain Momentum appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Binance’s Recovery Efforts for Stolen Assets Gain Momentum",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e8d051e04b6109cf3e3c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/westpac-limits-crypto-exchange-deposits-driven-by-fraud-rules/"
      ],
      "firstSeen": "2026-10-31T07:50:36.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "From December 1, 2026, the bank may combine payments to identified exchanges across relevant accounts and methods under one monthly limit. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Westpac limits crypto exchange deposits driven by fraud",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8d84d46442cbd2aafa62",
      "protocol": "Binance’s $6.3B breach, Fed rate",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-hack-fed-cftc-weekly-crypto-recap/"
      ],
      "firstSeen": "2026-10-31T06:11:07.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "In this week’s edition of the weekly recap, Binance has reported a $6.3 billion breach, the Federal Reserve has held interest rates steady, and the CFTC has advanced plans for voluntary crypto exchange registration. Binance pledges to cover losses after…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c69b3f7d864381cb010b",
      "protocol": "Flap and Kintsu",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/flap-and-kintsu-confirm-dns-hijacks-affecting-multiple/"
      ],
      "firstSeen": "2026-10-31T06:10:07.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Blockaid reports ongoing frontend attacks targeting multiple crypto projects, including Flap and Kintsu. Users are urged to take precautions. The post Flap and Kintsu Confirm DNS Hijacks Affecting Multiple appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cc9914ea64b304ac8cd0",
      "protocol": "Senator Lummis",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/senator-lummis-clarity-act-could-aid-crypto-firms-in-hacks-like-6b-binance/"
      ],
      "firstSeen": "2026-10-31T04:29:32.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "Senator Lummis discusses the CLARITY Act's potential to help crypto firms after the $6B Binance hack. Passage at 5.8% YES for Mike Lee's vote. The post Senator Lummis: CLARITY Act could aid crypto firms in hacks like $6B Binance incident appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "728596f4a9c51eb07a3d",
      "protocol": "Crypto exchanges",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/crypto-exchanges-urge-swift-security-upgrades-after-6b-binance-breach/"
      ],
      "firstSeen": "2026-10-31T00:54:58.000Z",
      "updatedAt": "2026-10-31T08:49:43.829Z",
      "summary": "The Binance breach highlights the urgent need for enhanced security in crypto exchanges, potentially leading to increased regulatory scrutiny. The post Crypto exchanges urge swift security upgrades after $6B Binance breach appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d56ffd68745a5c71da8d",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 80000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-price-falls-binance-hack-liquidations/"
      ],
      "firstSeen": "2026-10-30T07:33:43.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "Bitcoin price falls to $78,419 as the Binance hack triggers heavy crypto liquidations, with traders watching $80,000 resistance and $76,300 support.",
      "revision": 4,
      "sourceHeadline": "Why is Bitcoin price falling today as Binance hack",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "1024a7aa59d6a000ecfc",
      "protocol": "Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptoslate.com/trumps-crypto-firm-joins-tether-circle-and-ripple-in-2-6-billion-stablecoin-freeze-as-binance-hack-outflows-near-6-billion/",
        "https://www.coindesk.com/business/2026/10/29/potential-multi-billion-binance-hack-hitting-crypto-markets"
      ],
      "firstSeen": "2026-10-29T21:12:45.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "Crypto prices are sliding on the news, with bitcoin falling back to $77,000, though Binance's co-CEO said it would cover all losses.",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "1c495421dbfb102c10ef",
      "protocol": "120 million TRX from the Binance hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/crypto-alert-120m-trx-from-binance-hack-moves-to-new-wallet/",
        "https://cryptobriefing.com/binance-hack-120m-trx-unknown-wallet/"
      ],
      "firstSeen": "2026-10-31T01:10:41.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "The incident highlights the challenges of recovering non-freezable assets, prompting calls for enhanced security and potential shifts to decentralized exchanges. The post 120 million TRX from the Binance hack moves to an unknown wallet appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "555c9f7ad95f2ec7a638",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/cftc-federal-option-centralized-exchanges/",
        "https://cryptobriefing.com/cftc-proposes-federal-registration-option-for-leveraged-crypto-exchanges/"
      ],
      "firstSeen": "2026-10-30T20:36:54.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "A $6 billion Binance theft makes the CFTC's voluntary federal option for centralized exchanges harder to ignore. Here is why. The post Why CFTC's Federal Option for Centralized Exchanges Just Got Harder to Ignore appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Why CFTC's Federal Option for Centralized Exchanges Just Got",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "10275fade0bf80f5c99d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/crypto-community-reacts-to-6-3b-binance-hack-sharing/",
        "https://cryptobriefing.com/crypto-exchanges-security-binance-hack/"
      ],
      "firstSeen": "2026-10-31T00:14:07.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "The Binance hack underscores the urgent need for enhanced security and collaboration in the crypto industry as it integrates with mainstream finance. The post Crypto exchanges tighten security after $6.3 billion Binance hack appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Crypto exchanges tighten security after $6.3 billion",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "ccd8a0c0e71a4ead9c84",
      "protocol": "Bitcoin Is Down, But These 3 Altcoins",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/3-altcoins-all-time-highs-this-weekend-october-market-selloff/"
      ],
      "firstSeen": "2026-10-31T01:08:46.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "HYPE, LEO, and WBT trade near all-time highs despite the Binance hack. See the key levels to watch this weekend. The post Bitcoin Is Down, But These 3 Altcoins Could Hit New Highs This Weekend appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a5d026f26bcf54012e59",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bitgos-belshe-addresses-institutional-concerns-over-crypto/"
      ],
      "firstSeen": "2026-10-30T23:48:07.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "BitGo's Mike Belshe emphasizes ongoing vulnerabilities in the crypto market, reflecting institutional concerns. The post BitGo’s Belshe Addresses Institutional Concerns Over Crypto appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "BitGo’s Belshe Addresses Institutional Concerns Over Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "17c936bf6c070458f383",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/digital-chamber-pushes-for-stricter-crypto-exchange-rules-after-major-hack/"
      ],
      "firstSeen": "2026-10-30T23:48:22.000Z",
      "updatedAt": "2026-10-31T02:16:47.666Z",
      "summary": "A few hours after the $6.3 billion hack on Binance, the Digital Chamber sent an urgent letter to Congressional leaders requesting targeted legislation to regulate cryptocurrency exchanges. The initiative calls on lawmakers to act immediately to require mandatory segregation of customer assets, qualified custody, bankruptcy protections, and regular independent audits. The demand arises from the ... Read more",
      "revision": 1,
      "sourceHeadline": "Digital Chamber Pushes for Stricter Crypto Exchange",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "94e3b9b305e3530a9b71",
      "protocol": "Elon Musk, CZ Trade Blows Over SpaceX Shares",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-bitcoin-ath-experts-react/",
        "https://beincrypto.com/how-did-binance-hack-happen/",
        "https://cointelegraph.com/markets/coinbase-leads-crypto-stock-selloff-shares-tumble",
        "https://crypto-economy.com/coinbase-drops-12-and-strategy-falls-6-amid-binance-hack/",
        "https://crypto-economy.com/ethereums-eip-7702-under-scrutiny-after-6-4b-binance-hack-what-you-need-to-know/",
        "https://crypto.news/bitcoin-etfs-440-million-inflows-binance-hack/",
        "https://cryptobriefing.com/circle-freezes-usdc-binance-breach/",
        "https://cryptobriefing.com/trump-reviews-record-binance-hack/",
        "https://decrypt.co/382236/elon-musk-cz-trade-blows-spacex-shares-binance-hack",
        "https://www.coindesk.com/markets/2026/10/30/wall-street-analysts-urge-investors-to-buy-crypto-stocks-on-weakness-after-usd6-3-billion-binance-hack",
        "https://www.theblock.co/news/business/2026-10-30-binance-hack-largest-crypto-hack-north-korea-432225"
      ],
      "firstSeen": "2026-10-30T00:11:26.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "After Musk appeared to mock Binance’s $6.3 billion hack, CZ reminded him that the exchange’s $500 million bet on his Twitter takeover is now worth over $1 billion in SpaceX shares.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "5c94582315f4a29558eb",
      "protocol": "Secret Service, FBI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6340000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-5-billion-replacement-crypto-in-custody",
        "https://crypto-economy.com/fbi-and-secret-service-join-binance-investigation-into-massive-6-4b-crypto-theft/",
        "https://decrypt.co/382268/secret-service-fbi-binance-hack-probe",
        "https://thedefiant.io/news/hacks/binance-s-teng-targets-sunday-withdrawal-restart-after-hack",
        "https://www.theblock.co/news/ecosystems/2026-10-30-binance-says-it-has-6-34-billion-ready-to-cover-hack-losses-432208"
      ],
      "firstSeen": "2026-10-30T11:02:14.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Binance says it has set aside $6.34 billion to cover losses from the breach and the FBI and Secret Service are now working with the exchange as investigators trace the stolen funds.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "b2d5b5f3b8249885b7e1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/binance-faces-record-hack-of-6b-raising-security-concerns/",
        "https://cryptobriefing.com/us-investigates-6b-binance-hack-amid-calls-for-crypto-regulation/",
        "https://cryptoslate.com/binance-breach-points-6-billion-hack/",
        "https://www.coindesk.com/policy/2026/10/29/crypto-s-longtime-foe-north-korea-s-lazarus-group-likely-behind-binance-hack-blockchain-sleuths"
      ],
      "firstSeen": "2026-10-30T03:36:11.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Security researchers suggested that the hermit kingdom's Lazarus Group was behind Thursday's nearly $6 billion hack of the world's largest crypto exchange.",
      "revision": 3,
      "sourceHeadline": "Crypto's longtime foe, North Korea's Lazarus Group, likely",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "78a9feb3812db2896670",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5570000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/binance-security-breach-tether-and-circle-freeze-1-8b-in-usdt-and-usdc/",
        "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto",
        "https://thedefiant.io/news/hacks/tether-freezes-971-million-usdt-in-wallet-linked-to-suspected-binance-drain"
      ],
      "firstSeen": "2026-10-29T19:30:18.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "An on-chain tally puts the suspected Binance drain at $5.57 billion across three blockchains, as Tether and Circle froze $1.8 billion.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "29a34d43d48ee2e8d7d5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6360000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/microsoft-uncovers-north-korean-hackers-growing-use-of-ai-after-binance-breach/",
        "https://cryptoslate.com/binance-hack-began-with-a-296-million-xrp-drain-after-36-hour-preparation/"
      ],
      "firstSeen": "2026-10-30T02:54:36.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "TL;DR: Microsoft documented high adoption of artificial intelligence by state-sponsored cyber threat actors linked to the North Korean regime. On-chain analytics firms such as TRM Labs attributed the $6.36 billion breach across ten blockchains suffered by Binance to the TraderTraitor unit. Microsoft’s technical report does not link the use of AI tools to the direct ... Read more",
      "revision": 2,
      "sourceHeadline": "Microsoft Uncovers North Korean Hackers’ Growing Use of AI",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0f1179371f285704e5dc",
      "protocol": "Worried About Crypto Hacks?",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382282/crypto-hacks-buy-bitcoin-proxies-stock-market-wall-street"
      ],
      "firstSeen": "2026-10-30T20:06:03.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Analysts at Cantor Fitzgerald, TD Cowen and Compass Point say the record $6.4 billion theft is a Binance security failure, not a crypto-wide threat, pointing clients toward proxies like Coinbase, Robinhood, and Strategy.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "e1c7a992014e5ed78e69",
      "protocol": "Wall Street analysts",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-hack-crypto-stocks-buying-opportunity/"
      ],
      "firstSeen": "2026-10-30T20:11:10.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "The Binance hack highlights the resilience of crypto markets, as analysts see potential growth despite security vulnerabilities and risks. The post Wall Street analysts call the Binance hack selloff a buying opportunity for crypto stocks appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "73819258471120fe1038",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/binance-hackers-deploy-never-seen-before-laundering-tactics-to-conceal-6-3-billion-theft/"
      ],
      "firstSeen": "2026-10-30T20:30:08.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Hackers behind Binance's $6.3 billion breach are using previously unseen laundering tactics while rapidly converting stolen assets into other cryptocurrencies. On Oct. 30, blockchain analytics firm Chainalysis said that investigators identified thousands of transactions executed within short periods, suggesting the attackers used automation to obscure the movement of stolen funds. The discovery comes as Elliptic… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Binance hackers deploy never-seen-before laundering tactics",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e04dcccae7e70045c419",
      "protocol": "Binance hackers raced",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/binance-hackers-raced-to-move-billions-before-could-be-frozen"
      ],
      "firstSeen": "2026-10-30T22:00:00.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Attackers raced to convert stolen stablecoins into crypto that issuers could not freeze as industry players like Tether and Circle moved to immobilize billions of dollars in assets.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b5ba20f54ef1836fbc20",
      "protocol": "Eleanor Terrett",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/eleanor-terrett-says-binance-customer-funds-are-safe/"
      ],
      "firstSeen": "2026-10-30T21:20:07.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Eleanor Terrett clarifies Binance's claims regarding customer fund safety after assets were drained from a hot wallet. The post Eleanor Terrett Says Binance Customer Funds Are Safe appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1f2043a3cb259cc57ba0",
      "protocol": "Chainalysis",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/chainalysis-north-korea-hacks-89-percent-losses/"
      ],
      "firstSeen": "2026-10-30T21:14:05.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "The surge in North Korea-linked crypto hacks highlights escalating cybersecurity threats, necessitating enhanced global cooperation and defense strategies. The post Chainalysis: North Korea-linked hacks account for nearly 89% of crypto hack losses in 2026 appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "21799ff3b8be5eaeb7db",
      "protocol": "CoreWeave shares",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coreweave-shares-fall-10-on-financing-worries-tech-sector-selloff/"
      ],
      "firstSeen": "2026-10-30T22:42:27.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "CoreWeave's financial struggles highlight broader tech sector vulnerabilities, potentially signaling increased market volatility and credit risk. The post CoreWeave shares fall 10% on financing worries, tech sector selloff appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ba33205dd24f38854931",
      "protocol": "North Korea May Be Linked to Binance Hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/north-korea-may-be-linked-to-binance-hack-says-trump/"
      ],
      "firstSeen": "2026-10-30T21:32:07.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "President Trump is investigating potential North Korean involvement in the Binance hack, which has raised significant concerns in the crypto community. The post North Korea May Be Linked to Binance Hack, Says Trump appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fe86a9feda3b065d58eb",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-linked-wallet-faces-possible-exploit-blockchain-researcher-warns"
      ],
      "firstSeen": "2026-10-29T21:24:36.000Z",
      "updatedAt": "2026-10-30T22:56:17.816Z",
      "summary": "Binance pledged to cover all losses after a $6.3 billion hack, with about $3 billion in assets frozen by the exchange and its partners.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5abc5986f56d43c752e1",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hack-security-ethereum-eip-7702-role"
      ],
      "firstSeen": "2026-10-30T11:00:10.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Security experts said attackers could have drained Binance’s wallets without EIP-7702, but the Ethereum upgrade may have helped bypass withdrawal safeguards.",
      "revision": 2,
      "sourceHeadline": "EIP-7702 didn’t cause Binance hack, but may have amplified",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "48cbe96ae2d555e3e3c2",
      "protocol": "Polymarket",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/polymarket-suffers-second-multimillion-dollar-security-breach-in-just-four-months/"
      ],
      "firstSeen": "2026-10-30T10:30:57.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "June's reported theft and October's recovered code reveal recurring exposure inside the trading interface, while broader security changes remain unclear. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "db5faca8a2d8d354c41d",
      "protocol": "Binance hack could accelerate shift to DEXs",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 100,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-hack-could-accelerate-shift-to-dexs-standard-chartered"
      ],
      "firstSeen": "2026-10-30T03:47:01.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Standard Chartered’s Geoffrey Kendrick said the breach could accelerate a shift toward decentralized trading and strengthen his case for Uniswap’s UNI token reaching $100 by 2030.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ab63f42198fce1bf3330",
      "protocol": "Binance hack",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-hack-eip-7702-wallet-attack/",
        "https://thedefiant.io/news/hacks/binance-attacker-used-eip-7702-to-bypass-wallet-controls-teng-says"
      ],
      "firstSeen": "2026-10-30T01:11:20.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Binance hack investigation finds one of 50 Ethereum authorizations enabled a hot wallet breach, as the exchange reports $6.3 billion affected and $3 billion frozen.",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "5960f1d6559c309d5b24",
      "protocol": "Binance Hack",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382257/binance-hack-why-bitcoin-didnt-crash"
      ],
      "firstSeen": "2026-10-30T18:45:03.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Binance lost about $6.4 billion, the largest crypto hack on record, yet Bitcoin fell about 3%, against nearly 11% in 2018 when the exchange was last attacked.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "649d33849bfa6313c011",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-ethereum-xrp-crash-as-crypto-liquidations-top-1-5b/"
      ],
      "firstSeen": "2026-10-30T14:40:43.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Bitcoin, Ethereum, XRP and other major cryptocurrencies have suffered heavy losses as a reported $6.3 billion Binance hack rattled investors and triggered more than $1.5 billion in liquidations across the crypto market. According to CoinGlass data, roughly $1.55 billion in…",
      "revision": 1,
      "sourceHeadline": "Bitcoin, Ethereum, XRP crash as crypto liquidations",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "73330887bbbdf0da3df1",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/is-binance-facing-its-own-ftx-moment-bitcoin-experts-push-back-against-panic/"
      ],
      "firstSeen": "2026-10-30T18:39:27.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "TL;DR: Binance estimated the financial impact of the cyberattack at approximately $6.3 billion. The price of Bitcoin registered an intraday drop toward $76,000 following the disclosure of the incident. Stablecoin issuers froze over $2.3 billion in assets linked to the flagged addresses. The price of Bitcoin dropped abruptly after the Binance hack of over $6.3 ... Read more",
      "revision": 1,
      "sourceHeadline": "Is Binance Facing Its Own FTX Moment? Bitcoin Experts",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "73d3972b56239076bf0d",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-dips-below-80000-rising-rates-stablecoins/"
      ],
      "firstSeen": "2026-10-30T16:02:09.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Bitcoin's decline highlights its vulnerability to macroeconomic shifts, with rising rates and liquidity issues impacting broader market sentiment. The post Bitcoin dips below $80,000 as rising rates and stablecoin caution weigh on demand appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Bitcoin dips below $80,000 as rising rates and stablecoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "832df31109b4e1eaf0c9",
      "protocol": "1INCH",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/markets/1inch-slides-13-extending-losses-beyond-bitcoin-and-ether"
      ],
      "firstSeen": "2026-10-30T16:04:19.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "1inch said its token was among assets stolen from Binance and that blocking attacker access to its apps cannot freeze the tokens themselves.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9e04372d667cac576766",
      "protocol": "Bitcoin fell after the Fed’s",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitcoin-fell-after-the-feds-pause-but-blaming-interest-rates-misses-the-binance-shock/"
      ],
      "firstSeen": "2026-10-30T14:00:23.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "he Federal Reserve asked for more information before changing interest rates. Eighteen and a half hours later, the economy supplied it: growth was strong, inflation remained elevated, and households were spending more without buying much more. But before investors could settle what that combination meant for Bitcoin, a Binance security breach raised a more immediate… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "302b64fe1d52fbc49ea5",
      "protocol": "Coinbase and Strategy Sink After Binance Breach",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/markets/coinbase-and-strategy-sink-after-binance-breach"
      ],
      "firstSeen": "2026-10-30T13:59:22.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Both stocks extended their opening losses, outpacing Bitcoin’s 4.65% decline and the S&P 500’s 1.24% drop over the same window.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "605bed0fe571b3a3ad1b",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/crypto-stocks-plunge-bitcoin-falls-39-peak/"
      ],
      "firstSeen": "2026-10-30T16:21:50.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The volatility of crypto stocks highlights their vulnerability to broader market trends and sector-specific incidents, impacting investor sentiment. The post Crypto stocks plunge as Bitcoin holds up better despite 39% drop from peak appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Crypto stocks plunge as Bitcoin holds up better despite",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d9cac73b2599243f817a",
      "protocol": "NASDAQ 100",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/nasdaq-100-drops-4-erasing-13t-bitcoin-falls-below-77k/"
      ],
      "firstSeen": "2026-10-30T17:20:27.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The market's downturn highlights vulnerabilities in tech and crypto sectors, potentially affecting investor confidence and future valuations. The post NASDAQ 100 drops 4%, erasing $1.3T; Bitcoin falls below $77K appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1bb713656236af8a2de0",
      "protocol": "BNB Chain",
      "chain": "BNB Chain",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bnb-chain-unaffected-binance-security-incident/"
      ],
      "firstSeen": "2026-10-30T16:35:12.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The incident underscores the importance of distinguishing between exchange vulnerabilities and blockchain integrity, impacting user trust and market stability. The post BNB Chain confirms networks unaffected by Binance security incident appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "99fc05a201a6ca20c001",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 628000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/liquidaciones-cripto-temor-hackeo-binance/"
      ],
      "firstSeen": "2026-10-29T21:02:59.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Las liquidaciones cripto alcanzaron los $628 millones en una hora mientras el miedo a un hack de Binance hundió el precio de Bitcoin (BTC) por debajo de los $79,000. Quién perdió y por qué. El post Las liquidaciones cripto superan los 628 millones de dólares en una hora mientras el miedo a un hack en Binance hunde el precio de Bitcoin fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Las liquidaciones cripto superan los 628 millones de dólares",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "1cc3c3c2a165c7fda9f4",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5570000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto"
      ],
      "firstSeen": "2026-10-29T21:13:35.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "An on-chain tally puts the suspected Binance drain at $5.57 billion across three blockchains, as Tether and Circle froze $1.8 billion.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b7ee27b9f43cf1f4c273",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/infrastructure/ethereum-draft-would-let-wallets-permanently-disable-eip-7702-delegation"
      ],
      "firstSeen": "2026-10-30T16:54:23.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Accounts would keep their addresses and ordinary transaction capabilities, but the opt-out would not protect funds from a stolen private key.",
      "revision": 1,
      "sourceHeadline": "Ethereum Draft Would Let Wallets Permanently Disable",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "21f3c54dbe0d5aa1da4f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 389000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/ripple-transfers-389-million-in-xrp-amid-binance-hack-fallout/"
      ],
      "firstSeen": "2026-10-30T18:48:13.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "TL;DR Ripple moved a combined 310 million XRP, worth approximately $389 million, across three transactions on October 30. The transfers occurred hours after Ripple confirmed its assistance in tracking and freezing assets connected to Binance’s security breach. On-chain data has not established a direct connection between the XRP movements and the Binance incident, leaving the ... Read more",
      "revision": 1,
      "sourceHeadline": "Ripple Transfers $389 Million in XRP Amid Binance Hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "bd480af4de46c5319b55",
      "protocol": "Binance hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/30/binance-hack-drained-wallets-backing-customer-assets-reserve-data-shows"
      ],
      "firstSeen": "2026-10-30T00:17:10.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Binance’s own reserve data lists the drained wallets as backing customer balances, leaving its ether backing an estimated 6% short until the exchange replaces what was stolen.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "14c6af69a30c5d6b92d1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-hack-becomes-largest-crypto-theft-on-record/"
      ],
      "firstSeen": "2026-10-30T17:33:46.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The Binance hack is now confirmed as the largest in crypto history, exceeding previous records. This event raises significant concerns about security in the sector. The post Binance Hack Becomes Largest Crypto Theft on Record appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Binance Hack Becomes Largest Crypto Theft on Record",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "53eee9e72d18a6c33442",
      "protocol": "Changpeng Zhao",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/changpeng-zhao-urges-elon-musk-to-stop-trolling-over-binance-hack/"
      ],
      "firstSeen": "2026-10-30T18:12:04.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "Changpeng Zhao, founder of Binance, asked Elon Musk to stop mocking the exchange’s recent hack, after the billionaire posted laughing and fire emojis on X as some users compared the incident to FTX’s collapse. Zhao responded that he respected Musk, but that it was not the time for jokes. He also pointed out that Binance ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c60efafcd071fac90491",
      "protocol": "Curve founder Michael Egorov",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6360000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/risk-privileged-keys-centralized-exchanges/"
      ],
      "firstSeen": "2026-10-30T16:45:46.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The Binance breach underscores the need for DeFi's decentralized protocols to mitigate centralized exchange risks and enhance crypto security. The post Curve founder Michael Egorov says Binance’s $6.36B breach shows why crypto needs DeFi appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dc91e455950d86eab741",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/michael-saylor-backs-binance-repayment-pledge/"
      ],
      "firstSeen": "2026-10-30T16:11:22.000Z",
      "updatedAt": "2026-10-30T18:49:26.341Z",
      "summary": "The breach highlights the urgent need for enhanced security measures in the crypto industry, potentially reshaping trust and regulatory standards. The post Michael Saylor backs Binance’s pledge to repay users after record breach appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Michael Saylor backs Binance’s pledge to repay users",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a530dccb8a90aa3f52b0",
      "protocol": "Polymarket fixes vendor",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/polymarket-restricts-trading-users-report-drained-wallets/"
      ],
      "firstSeen": "2026-10-29T18:41:38.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Polymarket has said it has fixed an issue affecting its international platform after a third-party provider was compromised, while StarPlatinum has alleged that users lost $2.68 million. Polymarket’s incident notice records the disruption at 18:05 UTC and classifies it as…",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "79567cf1d5a1a81b8033",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/binance-labeled-wallet-swept-minutes-after-eip-7702-delegation"
      ],
      "firstSeen": "2026-10-29T21:04:09.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Delegated code on Binance 14 could move its own assets and exercise ownership of another wallet. The records do not establish how that permission was obtained.",
      "revision": 3,
      "sourceHeadline": "How Wallet Permissions Linked Two Accounts in the Suspected",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "59e63b2224ad6650bece",
      "protocol": "Binance hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/30/binance-hack-drained-wallets-backing-customer-assets-reserve-data-shows"
      ],
      "firstSeen": "2026-10-30T00:17:00.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Binance’s own reserve data lists the drained wallets as backing customer balances, leaving its ether backing an estimated 6% short until the exchange replaces what was stolen.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fca76e93abb8013a06b6",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-wallet-outflows-widen-to-three-accounts-in-suspected-hack"
      ],
      "firstSeen": "2026-10-29T21:22:00.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Tether says it froze more than 1.567 billion USDT as Binance investigates large wallet outflows and conducts security checks.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "42f7ade7d5b517e58e6c",
      "protocol": "Elon Musk is Trolling the Binance Hack, and CZ",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 2000000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/cz-elon-musk-spacex-shares-binance-hack-gap/",
        "https://thedefiant.io/news/hacks/cz-says-binance-hack-leaves-2-billion-gap-points-to-spacex-shares"
      ],
      "firstSeen": "2026-10-30T09:44:00.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "CZ puts the Binance hack gap at $2 billion and points to SpaceX shares as cover. Lockups and Musk's trolling complicate it. The post Elon Musk is Trolling the Binance Hack, and CZ Reminds Him of SpaceX Investment appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "73acc34cc78d7a6c3d1b",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/how-did-binance-hack-happen/",
        "https://cointelegraph.com/news/binance-fbi-recover-assets-hack",
        "https://crypto-economy.com/bitcoin-falls-below-77000-as-6b-binance-breach/",
        "https://crypto.news/binance-buys-back-stolen-altcoins-after-hack/",
        "https://cryptobriefing.com/binance-reserve-fund-cover-breach/",
        "https://decrypt.co/382203/binance-finds-additional-points-of-breach-in-6-3b-hack",
        "https://thedefiant.io/news/defi/unit-delays-all-deposits-and-withdrawals-after-binance-breach",
        "https://www.coindesk.com/business/2026/10/30/binance-arranges-usd6-34-billion-to-cover-losses-from-record-crypto-hack",
        "https://www.theblock.co/news/ecosystems/2026-10-30-binance-says-it-has-6-34-billion-ready-to-cover-hack-losses-432208"
      ],
      "firstSeen": "2026-10-30T00:11:26.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "CEO Richard Teng said the attack was \"not a single 'one-click' action,\" as Binance confirmed about $3 billion has been frozen.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "11e80ad768a039d1a6d4",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-5-billion-replacement-crypto-in-custody",
        "https://thedefiant.io/news/hacks/binance-says-it-has-reserved-over-6-34-billion-to-cover-hack-losses"
      ],
      "firstSeen": "2026-10-30T11:02:14.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "The exchange said it set aside more than $6.34 billion to cover losses and would include the assets in its next proof-of-reserves report.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "2ea546624afe8e0ec594",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/hyperliquido-sube-cripto-cae-ice-druckenmiller/"
      ],
      "firstSeen": "2026-10-30T11:39:00.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "El mercado cripto cae por temores de hack en Binance mientras Hyperliquid sube por noticias de ICE, Druckenmiller y Elon Musk. El post Todas las criptomonedas se desplomaron, excepto Hyperliquid: ¿Por qué? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Todas las criptomonedas se desplomaron, excepto Hyperliquid",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5feff9202ae734a6edb2",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382194/binance-hack-exit-ramps-defi-exchange-ethereum"
      ],
      "firstSeen": "2026-10-29T22:57:48.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Etherscan records show wallets tied to the suspected Binance hack swapping freezable stablecoins for Ethereum on decentralized exchanges.",
      "revision": 1,
      "sourceHeadline": "Binance Hacker Hunts for Exit Ramps as DeFi Exchanges",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1114278a4a870f2469be",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-spacex-stake-cover-hack-losses-cz/"
      ],
      "firstSeen": "2026-10-30T09:58:07.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Binance's strategy to cover hack losses without user impact highlights the challenges of asset liquidity and regulatory scrutiny in crypto finance. The post Binance may use $1B SpaceX-linked stake to cover hack losses, CZ says appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Binance may use $1B SpaceX-linked stake to cover hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3845618107be57c172c8",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/binance-finds-multiple-breach-points-after-hack/"
      ],
      "firstSeen": "2026-10-30T11:03:20.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "TL;DR Security Timeline: Binance first disclosed a security issue on Thursday, later freezing billions in assets and suspending withdrawals as investigators assessed the scale of the breach and worked with law enforcement partners. Attack Details: Initial findings suggest a compromised DevOps engineer’s laptop gave attackers access to submit unauthorized withdrawal transactions, though Richard Teng said ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "97e8e9ab750ac14204c9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Malware",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/malware-habria-permitido-a-un-jugador-ver-las-cartas-de-rivales-en-partidas-de-poker-en-linea/"
      ],
      "firstSeen": "2026-10-30T12:11:02.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Un reportaje citado por Engadget describe una presunta campaña de malware contra jugadores de póker en línea: el programa MeshAgent habría permitido a un tramposo ver pantallas ajenas y obtener una ventaja irregular. Las respuestas de las plataformas habrían sido dispares, desde prohibiciones y herramientas de revisión hasta el rechazo de reembolsos.",
      "revision": 1,
      "sourceHeadline": "Malware habría permitido a un jugador ver las cartas",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e6d3c555ceae03c40b9d",
      "protocol": "Binance’s Yi He",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-yi-he-hack-losses-spacex-shares/"
      ],
      "firstSeen": "2026-10-30T10:37:20.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Binance's ability to cover hack losses with revenue highlights its financial resilience, but regulatory scrutiny on security practices may intensify. The post Binance’s Yi He says revenue can cover hack losses without selling SpaceX shares appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1f7b9a5a2142a8b33cb7",
      "protocol": "Morning Minute",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6400000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382225/morning-minute-binances-6-4b-hack-overshadows-hyperliquids-biggest-day"
      ],
      "firstSeen": "2026-10-30T12:22:04.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Just as Hyperliquid opened the door to a fully regulated perps offering inside the U.S., Binance suffered the biggest hack in crypto history.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "80e468814b679475c45f",
      "protocol": "Here’s how an Ethereum upgrade helped drain part",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 6000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/30/here-s-how-one-ethereum-permission-let-an-attacker-drain-usd2-5-billion-from-binance"
      ],
      "firstSeen": "2026-10-30T11:35:16.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "On Ethereum, the attacker used a 2025 upgrade built to make ordinary wallets smarter, armed with 50 signatures from Binance's own wallet.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "ca34ed5e9fd6aab1624a",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-linked-wallet-faces-possible-exploit-blockchain-researcher-warns"
      ],
      "firstSeen": "2026-10-29T21:20:10.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Binance pledged to cover all losses after a $6.3 billion hack, with about $3 billion in assets frozen by the exchange and its partners.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5dde4d208002eff6b33a",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 2500000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/ethereums-eip-7702-used-to-sweep-2-5b/"
      ],
      "firstSeen": "2026-10-30T13:01:00.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "TL;DR Binance 14 was delegated to attacker-controlled code through EIP-7702, enabling one transaction to sweep about $2.5 billion in ETH and tokens. The attacker used 50 valid authorizations covering consecutive nonces. EIP-7702 required Binance 14 signatures, leaving the source of those signatures central to the investigation. Researchers say EIP-7702 may have amplified the drain but ... Read more",
      "revision": 1,
      "sourceHeadline": "Ethereum’s EIP-7702 Used to Sweep $2.5B From Binance Hot",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "9accc5807b38bacb302c",
      "protocol": "Elliptic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6430000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/elliptic-confirms-6-43b-stolen-in-binance-hack/"
      ],
      "firstSeen": "2026-10-30T12:33:07.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Elliptic reveals that $6.43 billion in cryptoassets was stolen from Binance, marking a historic theft. The firm believes North Korea-linked actors are involved. The post Elliptic Confirms $6.43B Stolen in Binance Hack appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "db020fa99e30d55b7e12",
      "protocol": "ThaiSEC_News",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/thaisec_news-issues-alert-on-fraudulent-investment-schemes/"
      ],
      "firstSeen": "2026-10-30T12:45:09.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "The Thai SEC has issued a warning regarding scammers impersonating its logo. This alert is crucial for investors to remain vigilant. The post ThaiSEC_News Issues Alert on Fraudulent Investment Schemes appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b33ba7662399fc763a43",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/binance-esta-siendo-hackeada-fondos-de-clientes/"
      ],
      "firstSeen": "2026-10-29T20:49:22.000Z",
      "updatedAt": "2026-10-30T13:28:48.570Z",
      "summary": "Más de $2 mil millones salieron de los hot wallets de Binance hacia una dirección financiada por Tornado Cash. ¿Están seguros los fondos de los clientes? Lo que muestra la blockchain. El post Binance confirma hack de $6.3 mil millones, el más grande de la historia fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Binance confirma hack de $6.3 mil millones, el más",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "63fddc21c8fd1bf5ea5a",
      "protocol": "Coinbase Customer Data",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/coinbase-analytics-provider-customer-data",
        "https://decrypt.co/382009/coinbase-customer-data-hit-in-analytics-vendor-breach-funds-not-impacted"
      ],
      "firstSeen": "2026-10-28T07:42:55.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "The incident at analytics firm Amplitude hit a \"small subset\" of Coinbase customers, the exchange said, without saying how many.",
      "revision": 9,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "ab86b9b8944ce810db30",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.9,
      "sourceUrls": [
        "https://thedefiant.io/news/regulation/sec-charges-bg-wealth-and-dsj-exchange-in-alleged-130-million-crypto-fraud",
        "https://www.sec.gov/newsroom/press-releases/2026-110-two-entities-charged-130-million-fraud-scheme-used-false-sec-filings-boost-investor-confidence"
      ],
      "firstSeen": "2026-10-29T16:42:37.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "The agency says investors lost more than $100 million after the firms promised risk-free trading returns and used false filings to claim SEC approval.",
      "revision": 3,
      "sourceHeadline": "SEC Charges BG Wealth and DSJ Exchange in Alleged",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "f8b2bcfdc9440538903b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/bubblemaps-traces-2-7-million-outflow-from-polymarket-breach"
      ],
      "firstSeen": "2026-10-29T19:40:31.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Trading is back online and Polymarket has pledged full reimbursement, while a trader cited in the tracing says he moved funds to safety.",
      "revision": 3,
      "sourceHeadline": "Bubblemaps Traces $2.7 Million Outflow From Polymarket",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5385685d74ff8bbed4bd",
      "protocol": "Polymarket",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/polymarket-says-issue-fixed-pledges-to-make-affected-users-whole"
      ],
      "firstSeen": "2026-10-29T18:41:34.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "The platform blamed a compromised third-party provider but kept trading halted while it worked to restore service.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f7986e85d00e9b1bf40a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1790000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-10-29-binance-investigating-hack-suspicious-outflows-5-billion-432171"
      ],
      "firstSeen": "2026-10-29T21:49:00.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Tether and Circle froze $1.79 billion in USDT and USDC after billions moved out of Binance hot wallets. Binance says it is investigating.",
      "revision": 2,
      "sourceHeadline": "Binance investigating hack as suspicious outflows reach",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3e2986b0a19ed7d2cbec",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitcoin-whipsaws-below-79000-as-binance-hot-wallet-reportedly-drained-by-tornado-cash-linked-wallet/"
      ],
      "firstSeen": "2026-10-29T22:45:24.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Bitcoin hit an intraday low of $78,297 on Binance spot on Oct. 29 and sat near $79,126 at press time, as large transfers left Binance-labeled wallets. Binance shared on X that the exchange is “aware of reports of a potential security issue and are actively investigating.” It added: “Our security teams are reviewing all relevant… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 2,
      "sourceHeadline": "Bitcoin whipsaws below $79,000 as Binance hot wallet",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6ea1f76b9f5ba24f7599",
      "protocol": "Over $600M in Crypto Positions Wiped Out in One",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/over-600m-in-crypto-positions-wiped-out-in-one-hour-amid-binance-hack-fears/"
      ],
      "firstSeen": "2026-10-30T00:06:37.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "TL;DR: Over $600 million in cryptocurrency derivatives positions were liquidated within an hour this October 29, 2026. On-chain analysts and market reports tracked abnormal outflows from exchange-linked wallets ranging between $5.57 billion and approximately $5.84 billion. Analytics firms and stablecoin issuers began monitoring addresses after recording massive transfers to unidentified external wallets. Fears over a ... Read more",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "831891245bd94a4d577d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/north-korea-linked-to-63b-binance-hack-by-crypto-investigators",
        "https://crypto.news/binance-hack-eip-7702-wallet-attack/",
        "https://thedefiant.io/news/hacks/chainalysis-links-6-4-billion-binance-hack-to-north-korea",
        "https://www.coindesk.com/markets/2026/10/30/usd6-billion-binance-hack-sends-bitcoin-ether-tumbling-standard-chartered-sees-more-losses-ahead"
      ],
      "firstSeen": "2026-10-30T00:11:26.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "TRM Labs says it has high confidence in the attribution, while ZachXBT identified stolen funds from the Binance and Bitget hacks converging at the same address.",
      "revision": 1,
      "sourceHeadline": "North Korea’s TraderTraitor linked to $6.3B Binance hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "3d222566fa2d8e709812",
      "protocol": "Live updates",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6300000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-circle-tether-freeze-hot-wallets/",
        "https://cointelegraph.com/news/binance-linked-wallet-faces-possible-exploit-blockchain-researcher-warns"
      ],
      "firstSeen": "2026-10-29T21:24:36.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Follow live updates as Binance says $6.3 billion in assets have been stolen in a major hack. Around $3 billion in stolen funds have been frozen.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a16bedc4607a627abc62",
      "protocol": "Binance Exploit-Linked Wallet",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-exploit-linked-wallet-moves-14-040-eth-to-another-holding-address"
      ],
      "firstSeen": "2026-10-30T05:01:18.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Two of the largest tracked wallets still hold about 197,460 ETH and 137,602 ETH, while the transfer recipient holds roughly 19,740 ETH.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "563a17a88a39d92d465e",
      "protocol": "Every Crypto is Down, Except HyperLiquid. Why?",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/hyperliquid-rises-crypto-falls-ice-druckenmiller/"
      ],
      "firstSeen": "2026-10-30T03:54:17.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Crypto sells off on Binance hack fears while Hyperliquid rises on news from ICE, Druckenmiller and Elon Musk. The post Every Crypto is Down, Except HyperLiquid. Why? appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "abd567a3cd8d4bed4883",
      "protocol": "Bitcoin",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 77000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/markets/2026-10-29-bitcoin-slides-below-77000-binance-hack-432183"
      ],
      "firstSeen": "2026-10-30T02:22:31.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "BNB lost 7.1%, while Binance Co-CEO Yi He pledged that the exchange will cover all user losses resulting from the hack.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "53c6c545200674d34ddf",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/binance-hack-s-bitcoin-sits-unspent-across-19-addresses"
      ],
      "firstSeen": "2026-10-30T05:00:29.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Another 233.46 million XRP remains in one account, leaving investigators a visible trail but no issuer-controlled freeze option for either asset.",
      "revision": 1,
      "sourceHeadline": "Binance Hack’s Bitcoin Sits Unspent Across 19 Addresses",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "75d16d54bf01ffe4707c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/hyperliquid-goes-mainstream-during-major-exchange-hack/"
      ],
      "firstSeen": "2026-10-30T04:45:52.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Hyperliquid's mainstream launch coincides with a significant exchange hack, raising industry concerns. The post Hyperliquid Goes Mainstream During Major Exchange Hack appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Hyperliquid Goes Mainstream During Major Exchange Hack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "354dd75904c1eda34eaf",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-security-breach-devops/"
      ],
      "firstSeen": "2026-10-30T04:33:35.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "This incident underscores the critical need for robust cybersecurity measures and highlights the potential vulnerabilities in digital asset exchanges. The post Binance says compromised DevOps engineer’s laptop may have enabled $6.3B security incident appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0097ddd82e3c7238b8cd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 2000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/potential-binance-hack-sparks-alarm-after-billions-in-crypto-are-moved/"
      ],
      "firstSeen": "2026-10-29T20:49:22.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Maximum tension across the crypto ecosystem over reports of abnormal outflows exceeding $2 billion from Binance hot wallets. The incident, detected on the afternoon of Thursday, October 29, involved massive transfers of ETH and other linked assets, raising suspicions of a potential hack. Despite widespread alarm, spokespersons linked to the exchange stated that user balances ... Read more",
      "revision": 1,
      "sourceHeadline": "Potential Binance Hack Sparks Alarm After Billions in Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5a4275364f507fa17e03",
      "protocol": "Hackers drain 9,400 SOL from bot wallets",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/hackers-drain-9400-sol-from-bot-wallets-and-a-copied-key-is-blamed/"
      ],
      "firstSeen": "2026-10-30T03:50:49.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Owner-key signatures and old bot wallets reveal the stakes of service controls, while @BloomTrading denies private-key compromise. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "76228f555286621b71e9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/30/institutional-crypto-investors-rush-to-pull-funds-from-exchanges-after-binance-hack"
      ],
      "firstSeen": "2026-10-30T03:56:40.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "The withdrawals suggest the fallout from the multibillion-dollar breach is spreading beyond Binance.",
      "revision": 1,
      "sourceHeadline": "Institutional crypto investors rush to pull funds",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "743de5b3bacd3882ec8a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/30/coindcx-halts-new-crypto-futures-bets-as-binance-incident-disrupts-liquidity"
      ],
      "firstSeen": "2026-10-30T05:43:07.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "CoinDCX has restricted new futures positions after Binance’s security incident disrupted a key liquidity provider. Deposits, withdrawals and customer funds remain unaffected, the exchange said.",
      "revision": 1,
      "sourceHeadline": "Binance hack bites India's largest crypto exchange as it",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eafa0b079122b449fd3a",
      "protocol": "Binance hack rattles markets as BNB",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/markets/binance-hack-rattles-crypto-markets-bnb-bitcoin-slide"
      ],
      "firstSeen": "2026-10-29T23:24:21.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Bitcoin, Ether and the broader crypto market took a dive as Binance suffered a multibillion-dollar hack.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0a57489f002ae1ad6e9c",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/binance-halts-withdrawals-after-what-could-be-the-largest-hack-in-crypto-history/"
      ],
      "firstSeen": "2026-10-30T01:51:49.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "TL;DR: Cryptocurrency exchange Binance temporarily paused withdrawals across multiple networks after recording unauthorized outflows estimated between $3.3 billion and $5.8 billion from its hot wallets. Centralized issuers froze more than $2.6 billion in assets linked to the incident, divided among $1.567 billion in USDT, $800 million in USDC, and $200 million in RLUSD. Derivatives market ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4a2df674aad1a3bc23e6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/misttrack-links-binance-theft-route-to-phemex-connected-address"
      ],
      "firstSeen": "2026-10-30T04:31:30.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Onchain records corroborate the wallet transfers and ETH receipts, but the shared destination does not establish who carried out the two thefts.",
      "revision": 1,
      "sourceHeadline": "MistTrack Links Binance Theft Route to Phemex-Connected",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "80e7a557036c6beb5617",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/polymarket-restores-trading-after-2-65m-exploit-linked-to-compromised-third-party-provider/"
      ],
      "firstSeen": "2026-10-30T00:23:58.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "TL;DR: Amount stolen: On-chain data and reports from The Block indicate that attackers drained approximately $2.65 million across more than 700 affected wallets. Attack vector: The breach originated in the monitoring library of a third-party web performance vendor (DebugBear), which introduced a malicious script into the frontend. Technical and financial response: The protocol activated “cancel-only” ... Read more",
      "revision": 1,
      "sourceHeadline": "Polymarket Restores Trading After $2.65M Exploit Linked",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2ab4c7ffe7b4e12941c3",
      "protocol": "Elon Musk",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/elon-musk-warns-ai-agents-could-exploit-crypto-after-binance-hack/"
      ],
      "firstSeen": "2026-10-30T05:52:48.000Z",
      "updatedAt": "2026-10-30T06:22:16.289Z",
      "summary": "Elon Musk has warned that superintelligent AI agents could eventually exploit cryptocurrency systems to obtain money for themselves, following reports that the Binance hacker used stolen stablecoins to borrow millions of dollars in Ethereum. In an October 29 response on…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bc7396eae4e5f6eae08f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/polymarket-rocked-by-massive-hack-as-nearly-1000-accounts-lose-2-6-million/"
      ],
      "firstSeen": "2026-10-29T20:04:43.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Polymarket faced a serious security breach this Thursday on its web interface after a malicious script injected through a third-party vendor compromised user wallets, draining nearly $2.6 million dollars. Minutes later, a wave of reports regarding unauthorized transfers and forced liquidations flooded the market. Polymarket has seen 995 accounts drained by a hacker, for $2,654,211.42. ... Read more",
      "revision": 2,
      "sourceHeadline": "Polymarket Rocked by Massive Hack as Nearly 1,000 Accounts",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8834dd81856d44828158",
      "protocol": "Tether",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1567000000000,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/tether-freezes-usdt-suspected-binance-hack/",
        "https://cryptoslate.com/trumps-crypto-firm-joins-tether-circle-and-ripple-in-2-6-billion-stablecoin-freeze-as-binance-hack-outflows-near-6-billion/"
      ],
      "firstSeen": "2026-10-29T21:23:00.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "The swift freeze by Tether and Circle underscores the power and limitations of centralized control in decentralized finance, impacting trust dynamics. The post Tether freezes over $1.567 billion in USDT tied to suspected Binance hack appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 1567000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a2486184c99d305bb4a0",
      "protocol": "Binance founder",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/binance-suspected-hack-user-funds-safe/",
        "https://thedefiant.io/news/hacks/binance-wallet-outflows-widen-to-three-accounts-in-suspected-hack"
      ],
      "firstSeen": "2026-10-29T21:38:07.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "The incident underscores the vulnerability of crypto exchanges to hacks and the critical role of centralized entities in mitigating potential losses. The post Binance founder says suspected hack appears safe for user funds appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "d1c6b59fe98d798f876c",
      "protocol": "Binance Hack",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/binance-hack-circle-tether-freeze-hot-wallets/",
        "https://crypto-economy.com/potential-binance-hack-sparks-alarm-after-billions-in-crypto-are-moved/"
      ],
      "firstSeen": "2026-10-29T20:49:00.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Binance has confirmed a major security incident, with more than $2 billion drained across wallets. Circle and Tether have reacted quickly to freeze the majority of the funds. The concern centers on an Ethereum address that appeared to hold more than $2.3 billion in tokens. Etherscan screenshots reviewed by BeInCrypto show it received 28,005.6 ETH The post Binance Hack: $2 Billion Drained, Circle and Tether Freeze, Crypto Markets React appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "098956cad31009bfa204",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382194/binance-hack-exit-ramps-defi-exchange-ethereum"
      ],
      "firstSeen": "2026-10-29T22:57:48.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Etherscan records show wallets tied to the suspected Binance hack swapping freezable stablecoins for Ethereum on decentralized exchanges.",
      "revision": 1,
      "sourceHeadline": "Binance Hacker Hunts for Exit Ramps as DeFi Exchanges",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4fe5a9af793e61088e21",
      "protocol": "Binance",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5570000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto"
      ],
      "firstSeen": "2026-10-29T21:36:24.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "An on-chain tally puts the suspected Binance drain at $5.57 billion across three blockchains, as Tether and Circle froze $1.8 billion.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "818f995901788b2694cf",
      "protocol": "Binance hack rattles crypto markets as BNB",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/markets/binance-hack-rattles-crypto-markets-bnb-bitcoin-slide"
      ],
      "firstSeen": "2026-10-29T23:24:21.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Bitcoin and Ether tumbled as the broader crypto market fell 3.3%, with reports of suspicious multibillion-dollar transfers from Binance-linked wallets fueling uncertainty.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "454ff3e68fe241115169",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/route2fi-sparks-debate-on-crypto-safety-following-alleged-major-hack/"
      ],
      "firstSeen": "2026-10-29T23:41:52.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Route2FI's recent tweet raises alarm about crypto security in light of potential hacks. The post Route2FI Sparks Debate on Crypto Safety Following Alleged Major Hack appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Route2FI Sparks Debate on Crypto Safety Following Alleged",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7b89e9adbce003bede3e",
      "protocol": "Aave",
      "chain": "Avalanche",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/aave-freezes-avalanche-markets-binance-hacker/"
      ],
      "firstSeen": "2026-10-29T22:09:23.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Aave's freeze highlights DeFi's vulnerability to hacks, raising questions about decentralization and the balance between security and accessibility. The post Aave freezes Avalanche lending markets to block suspected Binance hacker appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b0e2a9ac410460e24852",
      "protocol": "Binance Wallet Drain",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-wallet-drain-raises-alarm-as-morpho-amplifies/"
      ],
      "firstSeen": "2026-10-30T00:04:19.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Gauntlet's report of Binance hot wallets being drained raises critical security concerns in the crypto space. The post Binance Wallet Drain Raises Alarm as Morpho Amplifies appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f714fd487fb882902fd0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 628000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/liquidaciones-cripto-temor-hackeo-binance/"
      ],
      "firstSeen": "2026-10-29T21:02:00.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Las liquidaciones cripto alcanzaron los $628 millones en una hora mientras el miedo a un hack de Binance hundió el precio de Bitcoin (BTC) por debajo de los $79,000. Quién perdió y por qué. El post Las liquidaciones cripto superan los 628 millones de dólares en una hora mientras el miedo a un hack en Binance hunde el precio de Bitcoin fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Las liquidaciones cripto superan los 628 millones de dólares",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "6ff13963f78f96e53a60",
      "protocol": "Polymarket",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/polymarket-halts-trading-users-drained/"
      ],
      "firstSeen": "2026-10-29T18:35:18.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Polymarket froze new trades as users reported $1.4 million drained. What is confirmed, and who covers the losses? The post Polymarket Halts Trading as Users Report $1.4 Million Drained appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c9624b586304b0059006",
      "protocol": "Elon Musk Comments on Binance Hack",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/elon-musk-comments-on-binance-hack-calls-it-everyday/"
      ],
      "firstSeen": "2026-10-30T00:05:52.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Elon Musk’s recent commentary on the Binance hack has garnered significant attention in the crypto community, reflecting broader market concerns. The post Elon Musk Comments on Binance Hack, Calls It ‘Everyday appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bb3c517992fcc6c278a4",
      "protocol": "Aave Exploit Market Shows High Volatility",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/aave-exploit-market-shows-high-volatility/"
      ],
      "firstSeen": "2026-10-29T23:35:52.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Market predictions about a potential Aave exploit show notable volatility, currently sitting at 34%. Here's why this matters. The post Aave Exploit Market Shows High Volatility appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7ad542e0744da7abff7b",
      "protocol": "BitGo",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitgo-freezes-usd1-stolen-funds-address/"
      ],
      "firstSeen": "2026-10-29T22:10:58.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "The freeze highlights the centralized control in stablecoins, raising questions about security, compliance, and future operational shifts. The post BitGo freezes USD1 at address linked to stolen funds appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "eff4c10cc320ff5c6069",
      "protocol": "BitGo",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bitgo-reports-monitoring-security-incidents-as-action-taken/"
      ],
      "firstSeen": "2026-10-29T23:55:52.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "BitGo confirms it is monitoring security incidents and has frozen funds linked to theft. Here's why this matters for users. The post BitGo Reports Monitoring Security Incidents as Action Taken appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5cf56db0a3a4b5fd445d",
      "protocol": "Crypto Liquidations",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 628000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-liquidations-binance-hack-fears/"
      ],
      "firstSeen": "2026-10-29T21:02:59.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Crypto liquidations hit $628 million in one hour as Binance hack fears sank Bitcoin below $79,000. Who lost, and why. The post Crypto Liquidations Top $628 Million in an Hour as Binance Hack Fears Sink Bitcoin appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "9330b788f7c63be050d7",
      "protocol": "Live Updates",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 2540000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/binance-linked-wallet-faces-possible-exploit-blockchain-researcher-warns"
      ],
      "firstSeen": "2026-10-29T21:24:36.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Follow live updates as Binance says $2.54 billion in assets has been frozen after a multibillion-dollar hack, with further freezes possible as investigators trace funds.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "fba015fa2b8625545125",
      "protocol": "Binance",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/29/potential-multi-billion-binance-hack-hitting-crypto-markets"
      ],
      "firstSeen": "2026-10-29T21:12:45.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "Crypto prices are sliding on the news, with bitcoin falling back to $79,000.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7c7567a4a8f5a3134ce6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/glm-5-3-firefox-exploits-mozilla-patch/"
      ],
      "firstSeen": "2026-10-29T21:43:57.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "The incident highlights the growing need for robust AI security measures as open-weight models can exploit vulnerabilities at scale. The post GLM-5.3 exploits Firefox vulnerabilities, prompting a Mozilla patch appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "GLM-5.3 exploits Firefox vulnerabilities, prompting",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "42c993b179d9085088e4",
      "protocol": "Live updates",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 5000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/29/live-updates-bitcoin-clings-to-usd80-000-as-strategy-s-cushion-thins-before-earnings"
      ],
      "firstSeen": "2026-10-29T10:41:39.000Z",
      "updatedAt": "2026-10-30T00:15:34.333Z",
      "summary": "North of $5 billion appears to have been stolen from the world's biggest crypto exchange, Binance, of which some $2.5 billion has been frozen.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "968ce77dd3d3827fd672",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/crypto-pac-spending-midterms-fec-hack"
      ],
      "firstSeen": "2026-10-28T17:05:42.000Z",
      "updatedAt": "2026-10-29T20:31:28.411Z",
      "summary": "The FEC reported an “electronic filing system outage” on Tuesday as groups are expected to ramp up spending before the US midterm elections.",
      "revision": 6,
      "sourceHeadline": "Crypto PAC spending before midterms possibly obscured",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8cc8dfd9f0a670a73edb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/crypto-community-reacts-to-2-7m-losses-from-polymarket/"
      ],
      "firstSeen": "2026-10-29T20:25:33.000Z",
      "updatedAt": "2026-10-29T20:31:28.411Z",
      "summary": "A recent hack on Polymarket has led to reported losses of $2.7M, sparking discussions in the crypto space about security. The post Crypto Community Reacts to $2.7M Losses from Polymarket appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Crypto Community Reacts to $2.7M Losses from Polymarket",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9bcabd3020b4a34b5c88",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 779000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/zklink-nova-bridge-exploit-drains-about-779-000-in-one-transaction"
      ],
      "firstSeen": "2026-10-29T02:33:13.000Z",
      "updatedAt": "2026-10-29T20:31:28.411Z",
      "summary": "The main Ethereum escrow still showed an unpaused status after Blockaid warned that a forged batch root had enabled unauthorized withdrawals.",
      "revision": 1,
      "sourceHeadline": "zkLink Nova Bridge Exploit Drains About $779,000 in One",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "7df96758bab3d8d1ae53",
      "protocol": "Polymarket Users",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/polymarket-users-report-stolen-funds-as-platform-investigates/"
      ],
      "firstSeen": "2026-10-29T19:44:10.000Z",
      "updatedAt": "2026-10-29T20:31:28.411Z",
      "summary": "Polymarket is investigating claims from multiple users about stolen funds, raising concerns over platform security. The post Polymarket Users Report Stolen Funds as Platform Investigates appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "77c5b98e8ac509fb984c",
      "protocol": "Polymarket",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/polymarket-halts-trading-users-drained/"
      ],
      "firstSeen": "2026-10-29T18:35:18.000Z",
      "updatedAt": "2026-10-29T20:31:28.411Z",
      "summary": "Polymarket froze new trades as users reported $1.4 million drained. What is confirmed, and who covers the losses? The post Polymarket Halts Trading as Users Report $1.4 Million Drained appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "df3367ed118fb9844e94",
      "protocol": "USDT holder",
      "chain": "Ethereum",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/address-poisoning-user-loss-50000/"
      ],
      "firstSeen": "2026-10-28T18:17:10.000Z",
      "updatedAt": "2026-10-29T15:30:05.836Z",
      "summary": "A cryptocurrency user has lost approximately $50,000 in USDT to an address-poisoning attack on Ethereum, according to Scam Sniffer. Scam Sniffer said the fraudulent address matched the intended recipient’s first four and last six characters. The security platform shared the…",
      "revision": 4,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4a0f18b8724b50c6a687",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/allium-security-breach-api-keys-platform-recovery/"
      ],
      "firstSeen": "2026-10-29T04:34:51.000Z",
      "updatedAt": "2026-10-29T15:30:05.836Z",
      "summary": "Allium confirms unauthorized access to its systems, revokes API keys and restores core services as the blockchain data provider investigates the breach.",
      "revision": 2,
      "sourceHeadline": "Allium security breach disrupts services used by Visa",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4aa523b7fec6cf605cc6",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/29/new-quantum-model-slashes-hardware-needed-to-break-bitcoin-keys-by-17-times"
      ],
      "firstSeen": "2026-10-29T13:55:42.000Z",
      "updatedAt": "2026-10-29T15:30:05.836Z",
      "summary": "Alice & Bob's new model reduces the hardware required for a potential attack, bringing it closer to reality and increasing pressure to adopt quantum-resistant security sooner.",
      "revision": 1,
      "sourceHeadline": "New quantum model slashes hardware needed to break bitcoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "225c4b9906bf0c09b4d7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/axis-robotics-axis-token-sell-off-zachxbt/"
      ],
      "firstSeen": "2026-10-29T14:56:36.000Z",
      "updatedAt": "2026-10-29T15:30:05.836Z",
      "summary": "The incident highlights the vulnerabilities in token lock-up agreements and raises concerns about insider trading and market manipulation risks. The post Suspected Axis Robotics insiders sold 42M AXIS tokens, ZachXBT says, as price falls 40% appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Suspected Axis Robotics insiders sold 42M AXIS tokens",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "be59a26563df7b91ddb0",
      "protocol": "CryptoBilis Ledger hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 95350000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/cryptobilis-ledger-drainer-95m-stolen-funds/"
      ],
      "firstSeen": "2026-10-29T09:34:34.000Z",
      "updatedAt": "2026-10-29T15:30:05.836Z",
      "summary": "Arkham reports that the CryptoBilis Ledger drainer stole USD 95.35 million from 1,486 addresses, with USD 13.84 million moved in the past 48 hours.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "39b8fbe7b4dc98c3625e",
      "protocol": "Morning Minute",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381907/morning-minute-tokenized-stock-battle-looms-over-robinhoods-earnings-call"
      ],
      "firstSeen": "2026-10-27T12:59:58.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "One of crypto’s primary growth sectors for this upcoming cycle is under attack. Will Vlad Tenev speak up on today’s Robinhood earnings call?",
      "revision": 9,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "64aff120b4a60a699eff",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/cefi/coinbase-denies-systems-breach-cites-amplitude-contact-data-incident"
      ],
      "firstSeen": "2026-10-28T03:16:33.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "The exchange says customer funds were unaffected and it is notifying impacted users and regulators.",
      "revision": 5,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "db36d74726b01fd7c8a8",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/coinbase-says-it-wasnt-breached-but-hackers-dont-need-to-steal-crypto-to-hurt-users/"
      ],
      "firstSeen": "2026-10-28T19:40:47.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "Coinbase says funds were unaffected by the Amplitude incident, while disclosures in South Korea reveal different data exposures and unresolved customer risks. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "af432f8d6bf5136b09aa",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 779000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/zklink-nova-bridge-exploit-drains-about-779-000-in-one-transaction"
      ],
      "firstSeen": "2026-10-29T02:33:13.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "The main Ethereum escrow still showed an unpaused status after Blockaid warned that a forged batch root had enabled unauthorized withdrawals.",
      "revision": 1,
      "sourceHeadline": "zkLink Nova Bridge Exploit Drains About $779,000 in One",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "2a5915cfc3a7e8dbf22e",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/ethereum-clients-patch-flaw-that-could-redirect-eth-rewards/"
      ],
      "firstSeen": "2026-10-29T06:30:25.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "Ethereum client developers Teku and Besu have released security updates to address a certificate vulnerability that could allow attackers to impersonate services used by validators and potentially redirect their block rewards. According to security advisories accompanying the releases, the issue…",
      "revision": 1,
      "sourceHeadline": "Ethereum clients patch flaw that could redirect ETH rewards",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6219bc3963c2b1fb71a0",
      "protocol": "Chainlink",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/chainlink-price-exchange-outflows-binance/"
      ],
      "firstSeen": "2026-10-29T06:51:25.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "Chainlink (LINK) has drained from Binance for 18 days running, the kind of exit bulls tend to cheer. Its price has refused to join in, shedding 20.8% so far in October. Up close, the streak looks less festive, since a large deposit came first and may explain part of it. Buyers in US spot Chainlink The post Chainlink Loses 21% in October Even as Tokens Keep Leaving Exchanges appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b6e883ca43f8bf9fcc0f",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ethereum-patch-glamsterdam-deposit-vulnerability/"
      ],
      "firstSeen": "2026-10-29T05:37:58.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "The swift patching of Ethereum's vulnerability underscores the importance of robust governance and proactive security in blockchain upgrades. The post Ethereum clients patch vulnerability to prevent ETH reward redirection appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Ethereum clients patch vulnerability to prevent ETH reward",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f2f5d896c7afd2c11e98",
      "protocol": "zkLink",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 783000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/zklink-reports-783k-loss-due-to-exploit-says-slowmist/"
      ],
      "firstSeen": "2026-10-29T05:44:46.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "zkLink faces a significant setback after reporting a $783K loss from a vulnerability exploit. The post zkLink Reports $783K Loss Due to Exploit, Says SlowMist appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "8988ca29e862831bfcc5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/allium-discloses-security-breach-revokes-api-keys"
      ],
      "firstSeen": "2026-10-29T01:52:57.000Z",
      "updatedAt": "2026-10-29T08:22:57.529Z",
      "summary": "Core services are back online, but uploaded-data access remains disabled and gaps in some data feeds are still being filled.",
      "revision": 1,
      "sourceHeadline": "Allium Discloses Security Breach, Revokes API Keys",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "56aa23e5210c19c0bf50",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bithumb-faces-on-site-inspections-after-reporting-signs-of-employee-data-leak/"
      ],
      "firstSeen": "2026-10-28T23:40:57.000Z",
      "updatedAt": "2026-10-29T01:44:46.183Z",
      "summary": "The FSC says customer-data exposure is still being checked as authorities investigate the staff-support system and plan stronger safeguards. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Bithumb hack leaks staff data and regulators launch raid",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "60a09943c1bdba7130a1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/london-metal-exchange-tokenizing-off-warrant-metal/"
      ],
      "firstSeen": "2026-10-28T23:08:24.000Z",
      "updatedAt": "2026-10-29T01:44:46.183Z",
      "summary": "Tokenizing off-warrant metals could revolutionize metal financing, enhance market liquidity, and reduce fraud, impacting global trade dynamics. The post London Metal Exchange explores tokenizing off-warrant metal to boost revenue appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "London Metal Exchange explores tokenizing off-warrant metal",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "51875a44b6273cfb1b17",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/us-charges-six-in-alleged-madagascar-nft-wallet-draining-scheme"
      ],
      "firstSeen": "2026-10-27T17:26:54.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "An FBI affidavit estimates at least $516,695 in losses across 74 victim-linked wallets and describes unlimited USDT spending approvals.",
      "revision": 6,
      "sourceHeadline": "US Charges Six in Alleged Madagascar NFT Wallet-Draining",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "91cd2df5195ea7b14dd5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/myriad-voids-10-prediction-markets-after-admin-wallet-compromise"
      ],
      "firstSeen": "2026-10-27T16:41:18.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "Holders on both sides are promised automatic refunds at pre-attack prices, less any winnings already claimed.",
      "revision": 6,
      "sourceHeadline": "Myriad Voids 10 Prediction Markets After Admin-Wallet",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ce06e4e5f87ae8722070",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/predict-fun-pledges-full-refunds-for-roughly-400-000-usdt-theft"
      ],
      "firstSeen": "2026-10-27T16:50:46.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "The platform says a preliminary investigation points to a possible compromise of its third-party API documentation site, which it has taken offline.",
      "revision": 2,
      "sourceHeadline": "Predict.fun Pledges Full Refunds for Roughly 400,000 USDT",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0bed59a8e1ae24eea214",
      "protocol": "Trenton Johnston sentenced in $13M Bitcoin scam",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": 13000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/trenton-johnston-bitcoin-scam-sentencing/"
      ],
      "firstSeen": "2026-10-28T19:49:32.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "Trenton Johnston has been sentenced in Miami for his role in a cryptocurrency laundering scheme involving more than $13 million in stolen funds, after investigators linked the Canadian to fake support calls and demonstrations of his methods on Discord. According…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "7a87f082babdf545c860",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/exchanges/coinbase-niega-una-brecha-pero-los-datos-de-contacto-pueden-abrir-la-puerta-a-estafas/"
      ],
      "firstSeen": "2026-10-28T20:32:23.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "Coinbase atribuyó la exposición de datos de contacto a un proveedor externo y aseguró que no encontró accesos no autorizados a sus sistemas ni movimientos de fondos. Incidentes paralelos en Corea del Sur y advertencias de Changpeng Zhao reavivan la preocupación por el phishing, el SIM swapping y otros ataques dirigidos.",
      "revision": 1,
      "sourceHeadline": "Coinbase niega una brecha, pero los datos de contacto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "32aba8172e63385903f6",
      "protocol": "Canadian ‘crypto king’ case to go to jury",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/canada-crypto-king-jury-criminal-trial-closing"
      ],
      "firstSeen": "2026-10-28T21:35:52.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "Aiden Pleterski, facing fraud charges in Canada over his alleged role in a digital asset Ponzi scheme, said that he was innocent at closing.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3aa73994e7e3c6c1a01d",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/cz-warns-users-email-links-malware/"
      ],
      "firstSeen": "2026-10-28T20:44:49.000Z",
      "updatedAt": "2026-10-28T21:53:21.875Z",
      "summary": "Heightened vigilance against email links is crucial for crypto security, as breaches can exploit trusted contacts, risking significant financial loss. The post CZ warns crypto users to stop clicking email links, even from people they trust appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "07d9b4c537dca4a8a084",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/tether-deploys-fase-foundation-piloting-stablecoin-aid-for-vulnerable-communities/"
      ],
      "firstSeen": "2026-10-28T16:30:29.000Z",
      "updatedAt": "2026-10-28T17:21:04.830Z",
      "summary": "Tether announced the launch of the FASE Foundation (Financial Access and Systemic Empowerment), a Swiss nonprofit organization that will develop programs to prevent financial fraud, support human trafficking victims, and distribute humanitarian aid through stablecoins. The initiative brings together Anchorage Digital, Bitfury, Bybit, Chainalysis, Kraken, Solana Foundation, and other companies. The United Nations Office on ... Read more",
      "revision": 1,
      "sourceHeadline": "Tether Deploys FASE Foundation Piloting Stablecoin Aid",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c92ed1771ae4dc04a4c1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/coinbase-amplitude-vendor-incident-customer-data/"
      ],
      "firstSeen": "2026-10-28T11:56:52.000Z",
      "updatedAt": "2026-10-28T17:21:04.830Z",
      "summary": "Coinbase said a breach at analytics provider Amplitude exposed contact information for some customers. The exchange said its own systems saw no unauthorized access and customer funds remain safe. The disclosure lands a day before Coinbase reports third-quarter earnings. Meanwhile, South Korean exchange Bithumb confirmed a breach of an internal system used by its staff. The post Coinbase User? Your Contact Details May Have Leaked Through a Vendor appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Coinbase User? Your Contact Details May Have Leaked Through",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6d88c18307602ceb672c",
      "protocol": "Cybersecurity’s Black October",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/cybersecuritys-black-october-how-to-protect-yourself"
      ],
      "firstSeen": "2026-10-28T13:30:00.000Z",
      "updatedAt": "2026-10-28T17:21:04.830Z",
      "summary": "Each day brings news of another AI-powered attack, or a newly discovered vulnerability. Here’s what’s happening and how ordinary people can protect themselves online.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "679c3263d0fbfd5d4b0d",
      "protocol": "Predict.fun users reportedly",
      "chain": "Ethereum",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/predict-fun-users-reportedly-lose-260k-in-suspected-wallet-drain/"
      ],
      "firstSeen": "2026-10-27T13:44:16.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "At least 19 wallets linked to prediction market platform Predict.fun have reportedly been drained of approximately 105 ETH, worth $260,000, with investigators tracing the suspected stolen funds through Ethereum to cryptocurrency mixer Tornado Cash. On-chain investigator Naeven reported the suspected…",
      "revision": 5,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "230303e1b5b3bdef683f",
      "protocol": "Predict.fun",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/predict-fun-400000-usdt-theft-refunds/",
        "https://thedefiant.io/news/hacks/predict-fun-pledges-full-refunds-for-roughly-400-000-usdt-theft"
      ],
      "firstSeen": "2026-10-27T16:30:30.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "Predict.fun has pledged to fully reimburse affected users after confirming unauthorized wallet transfers totaling approximately 400,000 USDT and identifying a possible compromise of its third-party API documentation site. Predict.fun said in an Oct. 27 statement that its preliminary investigation pointed…",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "85719087c9470c2d597d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bithumb-discloses-data-leak-after-internal-system-breach-report",
        "https://crypto-economy.com/bithumb-investigates-data-breach-cyberattack/"
      ],
      "firstSeen": "2026-10-28T02:18:47.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "The breach impacted its in-house mobile system, used by employees for work and information sharing.",
      "revision": 2,
      "sourceHeadline": "Bithumb discloses data leak after internal system breach",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "3505d8ea6b281eca5458",
      "protocol": "Trust Wallet",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/trust-wallet-warns-of-fake-crypto-card-website-targeting-users/"
      ],
      "firstSeen": "2026-10-28T08:05:36.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "Trust Wallet’s security team has confirmed that a website advertising a cryptocurrency payment card with unusually generous benefits is fraudulent and has warned users against connecting their wallets to the platform. Crypto security researcher Daniel, known as @0xDani on X,…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f5062e0b7437aa844b2f",
      "protocol": "CZ Shares How to Stay SAFU as Crypto Data",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/cz-stay-safu-crypto-data-leak/"
      ],
      "firstSeen": "2026-10-28T08:00:13.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "After a crypto data leak wave hit four firms in one day, CZ explains how email aliases, passkeys and SIM locks keep users SAFU from scams. The post CZ Shares How to Stay SAFU as Crypto Data Leak Wave Hits 4 Major Firms appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7aac67ec6f2236add4b8",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitcoin-apps-risk-massive-fee-drain-and-2-library-bugs-are-blamed/"
      ],
      "firstSeen": "2026-10-28T05:30:00.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "Applications importing PSBTs can miscalculate miner fees and miss an excessive-fee warning if they rely on the vulnerable library's accounting. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Bitcoin apps risk massive fee drain, and 2 library",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "46356eed2cffa7d25c8f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/crowdstrike-ai-agents-autonomous-cyberattacks/"
      ],
      "firstSeen": "2026-10-28T05:59:59.000Z",
      "updatedAt": "2026-10-28T11:34:46.784Z",
      "summary": "AI-driven cyberattacks could democratize hacking, increasing threats across sectors and challenging current cybersecurity defenses and protocols. The post CrowdStrike identifies AI agents conducting autonomous cyberattacks appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "CrowdStrike identifies AI agents conducting autonomous",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "31ac3a0eba6f83fc34fc",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/coinbase-confirms-no-breach-after-amplitude-security-incident/",
        "https://cryptobriefing.com/coinbase-denies-breach-amplitude-incident/",
        "https://thedefiant.io/news/cefi/coinbase-denies-systems-breach-cites-amplitude-contact-data-incident"
      ],
      "firstSeen": "2026-10-28T03:16:33.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "The incident highlights the vulnerability of relying on third-party vendors, emphasizing the need for robust security measures and user vigilance. The post Coinbase denies data breach after Amplitude vendor incident appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "43a8e4bef97f5664de2d",
      "protocol": "Bithumb",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/bithumb-south-korean-firms-data-breaches/",
        "https://www.coindesk.com/tech/2026/10/28/bithumb-hacked-through-employee-system-as-south-korean-financial-firms-face-cyberattacks"
      ],
      "firstSeen": "2026-10-28T04:31:39.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "The breach hit an internal employee system that Bithumb says is separate from its trading platform, while the exchange is still determining whether customer information was exposed.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "7b18d3c49aca1c9449b5",
      "protocol": "Bithumb",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bithumb-confirms-security-breach-exposing-user-data/"
      ],
      "firstSeen": "2026-10-28T02:32:10.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "Bithumb has confirmed a security breach that may have compromised user data. This incident raises concerns about customer trust in the exchange. The post Bithumb Confirms Security Breach Exposing User Data appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ba0ea0ee632e0b72f09f",
      "protocol": "Bithumb",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bithumb-confirms-data-breach-affecting-38490-customers/"
      ],
      "firstSeen": "2026-10-28T03:34:06.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "Bithumb confirms a security breach affecting thousands of customers, prompting an investigation. The post Bithumb Confirms Data Breach Affecting 38,490 Customers appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bf4d1bb7d0357c353e6e",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/28/coinbase-says-customer-funds-are-safe-after-third-party-vendor-exposes-customer-contact-info"
      ],
      "firstSeen": "2026-10-28T03:11:14.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "The crypto exchange says an incident at analytics firm Amplitude exposed some customer contact information, but insists its own systems were not breached.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "82f14a01e57810687273",
      "protocol": "X100 governance flaws trigger $6M loss due",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 6000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/x100-governance-flaws-trigger-6m-loss-due-to-a-flash-loan/"
      ],
      "firstSeen": "2026-10-28T02:10:15.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "X100’s attacker repaid a flash loan from theft proceeds while its stake stayed locked, and Arkadiko’s ballot accepted late token purchases. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "49ff21acb79b88183918",
      "protocol": "Tranche Vault on Avalanche",
      "chain": "Avalanche",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/tranche-vault-on-avalanche-drained-of-1-01-million-usdc"
      ],
      "firstSeen": "2026-10-28T01:11:39.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "Blockaid says a flash loan let the attacker mint inflated tranche shares and redeem the vault's USDC. A balance check showed none left in the identified contract.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aacd46b115e47fd37b01",
      "protocol": "1.013M USDC",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/1-013m-usdc-lost-in-tranchepool-exploit-linked-to-valinor/"
      ],
      "firstSeen": "2026-10-28T05:24:06.000Z",
      "updatedAt": "2026-10-28T05:27:19.246Z",
      "summary": "A recent exploit of a TranchePool has resulted in a loss of approximately 1.013 million USDC, raising alarms about security vulnerabilities in DeFi protocols. The post 1.013M USDC Lost in TranchePool Exploit Linked to Valinor appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "649f5720aa1bc164e66a",
      "protocol": "OpenAI claims a cryptography breakthrough. Does",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/openai-claims-a-math-breakthrough-does-that-threaten-bitcoin/"
      ],
      "firstSeen": "2026-10-27T21:00:20.000Z",
      "updatedAt": "2026-10-27T23:43:44.153Z",
      "summary": "ETH here means Exponential Time Hypothesis, and a theoretical SAT speed-up alone does not establish a practical cryptographic attack. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "100c6c04c7b16f18507c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/blockchain/liquid-espera-cubrir-en-dias-el-deficit-de-600-btc-tras-el-exploit/"
      ],
      "firstSeen": "2026-10-27T23:25:16.000Z",
      "updatedAt": "2026-10-27T23:43:44.153Z",
      "summary": "Samson Mow afirmó que el déficit de casi 600 BTC de Liquid podría cubrirse en los próximos días. La reposición aún no está confirmada y los retiros directos siguen pausados.",
      "revision": 1,
      "sourceHeadline": "Liquid espera cubrir en días el déficit de 600",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "77a19e7dc687c7e9bcee",
      "protocol": "Keystone to Destroy 18,835 Wallets",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/keystone-to-destroy-18-835-wallets-after-device-authentication-key-theft"
      ],
      "firstSeen": "2026-10-26T14:40:51.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "Owners of old-key devices received after Oct. 20 need additional authenticity checks, even if the wallet passes Keystone's online verification.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2bf8d215fb44de0f2b06",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 6540000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/40m-uxlink-hack-wallet-linked-to-heist-holds-6-54m/",
        "https://cryptobriefing.com/uxlink-hacker-wallet-eth-long-hyperliquid/"
      ],
      "firstSeen": "2026-10-27T18:48:35.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "The UXLINK hack highlights vulnerabilities in DeFi security, emphasizing the need for robust contract logic to prevent significant financial losses. The post Wallet linked to UXLINK hack sits on $6.54 million in unrealized ETH gains appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Wallet linked to UXLINK hack sits on $6.54 million",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "b42d5fdfcedc1c8929f3",
      "protocol": "Gamdom",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": 15000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/gamdom-hit-with-15m-bitcoin-ransom-demand-after-major-crypto-hack/",
        "https://crypto.news/whitearmor-demands-15m-in-bitcoin-from-crypto-casino-gamdom/"
      ],
      "firstSeen": "2026-10-27T07:23:46.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "TL;DR: The Whitearmor cyber-extortion group demands $15 million in Bitcoin after claiming the theft of 15,420,003 Gamdom accounts. The demand was made public on October 26, twelve days after the draining of more than $3 million from the firm’s hot wallets on October 13. Gamdom leadership disputes the magnitude of the compromised database, while the ... Read more",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "724a60f75968c15ab177",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381983/bitcoin-wallet-keystone-devices-destroyed-stolen-key"
      ],
      "firstSeen": "2026-10-27T18:16:02.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "Attackers obtained the factory key that proves Keystone's hardware wallets are genuine, and 25,964 buyer records were affected. The company says recovery phrases and private keys were not involved.",
      "revision": 1,
      "sourceHeadline": "Bitcoin Wallet Maker Keystone Pulls Devices as Stolen Key",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "43742be98915c2d0c059",
      "protocol": "Anthropic flags natural gas supply as a risk",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/anthropic-flags-gas-supply-risks-data-centers/"
      ],
      "firstSeen": "2026-10-27T18:25:59.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "AI firms' reliance on on-site power generation highlights vulnerabilities in energy supply chains, potentially escalating operational costs and delays. The post Anthropic flags natural gas supply as a risk to its data center buildout appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8f31481cf8224909e3ba",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/hackers-drain-binance-linked-prediction-market/"
      ],
      "firstSeen": "2026-10-27T18:14:42.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "Predict.fun loses $400K to attackers days after its token hit a disputed $1.4B value on Binance. Here's who pays. The post Hackers Drain $400,000 From Binance-Linked Prediction Market appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Hackers Drain $400,000 From Binance-Linked Prediction Market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c6fb59a599c110b2c99b",
      "protocol": "Lightning tightens invoice",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/lightning-tightens-invoice-rules-after-reported-attack-made-bitcoin-withdrawals-look-unpaid/"
      ],
      "firstSeen": "2026-10-27T19:00:10.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "BOLT11 now requires one payment hash and one payment secret, while operators must check how their software records withdrawals. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b31032beac9cab986584",
      "protocol": "Missouri Man",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/missouri-man-admits-role-in-bitcoin-robbery-scheme-targeting-crypto-holder/"
      ],
      "firstSeen": "2026-10-27T18:47:54.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "TL;DR Martel Williams, 27, pleaded guilty to conspiring to carry out a cryptocurrency robbery targeting a man connected to a major Bitcoin theft. The group conducted surveillance in Connecticut in August 2024 before abandoning its plan over concerns about security cameras. Williams faces a maximum sentence of 20 years in prison, although the final penalty ... Read more",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "00bf3c55566f54b39965",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-agent-finds-epics-vulnerabilities/"
      ],
      "firstSeen": "2026-10-27T19:16:04.000Z",
      "updatedAt": "2026-10-27T20:01:33.685Z",
      "summary": "The discovery highlights the critical role of AI in proactively identifying cybersecurity threats, potentially averting costly scientific disruptions. The post AI agent uncovers four vulnerabilities in EPICS particle accelerator control software appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "AI agent uncovers four vulnerabilities in EPICS particle",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c92791a21b4565f633b2",
      "protocol": "Keystone",
      "chain": "Multi-chain",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/keystone-says-website-breach-exposed-hardware-wallet-buyers-addresses"
      ],
      "firstSeen": "2026-10-26T02:24:04.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "A security researcher warned that the leaked shipping details could expose crypto holders to targeted scams and physical attacks.",
      "revision": 7,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2be5c3f3bb3edfe1e292",
      "protocol": "Bloom bot hackers loot $953K faster than you",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 953000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bloom-bot-hackers-953k-faster-popcorn"
      ],
      "firstSeen": "2026-10-27T09:07:37.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets, saying no private keys were accessed or compromised.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "974594e3367cfc4fd6a2",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/researcher-cracks-steal-my-bitcoin-challenge-with-php-exploit"
      ],
      "firstSeen": "2026-10-26T12:50:09.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "A 0.02511679 BTC prize was at stake, but the operator had to transfer it after discovering the server held the wrong wallet key.",
      "revision": 1,
      "sourceHeadline": "Researcher Cracks 'Steal My Bitcoin' Challenge With PHP",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2368a47efb68fe15b5f6",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/solana-firedancer-team-mandates-1-sol-fee-to-curb-ai-bug-spam/"
      ],
      "firstSeen": "2026-10-27T14:21:09.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "TL;DR The Firedancer team introduced a 1 Solana (SOL) fee for each vulnerability report. The tokens must be burned and cannot be recovered, even if the submission is rejected. The decision followed a security competition that received 809 reports from 162 researchers. Jump Crypto believes AI was involved in preparing nearly all of them. The ... Read more",
      "revision": 1,
      "sourceHeadline": "Solana Firedancer Team Mandates 1 SOL Fee To Curb",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "124539cb7e56b234e819",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/27/crypto-wallet-maker-keystone-to-destroy-almost-19-000-devices-after-security-breach"
      ],
      "firstSeen": "2026-10-27T11:13:54.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "The breach exposed 25,964 buyer records, some kept past Keystone’s 180-day deletion policy after an automated tool failed without the firm noticing.",
      "revision": 1,
      "sourceHeadline": "Crypto wallet maker Keystone to destroy almost 19,000",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9c6c5afc31abd8b268c3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/coindcxs-16-million-loss-revives-uncomfortable-memories-of-ftx-and-celsius/"
      ],
      "firstSeen": "2026-10-27T10:00:59.000Z",
      "updatedAt": "2026-10-27T14:53:06.282Z",
      "summary": "CoinDCX confirmed a loss of roughly $16 million USDT three days after its CEO, Sumit Gupta, disputed reports of a new wallet breach, calling them a false alarm. It had acknowledged unspecified operational losses from a failed sweeping process on the afternoon of Oct. 22, so the reversal came in two steps, and the full… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "CoinDCX’s $16 million loss revives uncomfortable memories",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6144e12e1f3b8e3d209c",
      "protocol": "Electrum Patches Wallet Flaw",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/electrum-patches-wallet-flaw-exploited-through-malicious-servers"
      ],
      "firstSeen": "2026-10-24T17:57:11.000Z",
      "updatedAt": "2026-10-27T08:20:06.475Z",
      "summary": "A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Developers say one user reported losing money.",
      "revision": 16,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4480ab048eafa62b5016",
      "protocol": "Keystone customers",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/business/2026-10-25-keystone-customers-say-breach-exposed-data-the-hardware-wallet-maker-promised-to-delete-431613"
      ],
      "firstSeen": "2026-10-25T15:56:30.000Z",
      "updatedAt": "2026-10-27T08:20:06.475Z",
      "summary": "Keystone has said it deletes customer information 180 days after their orders in most cases, though X users have cast doubt on that claim.",
      "revision": 10,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7f2d5ab2e609740b9abf",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/researcher-cracks-steal-my-bitcoin-challenge-with-php-exploit"
      ],
      "firstSeen": "2026-10-26T12:50:09.000Z",
      "updatedAt": "2026-10-27T08:20:06.475Z",
      "summary": "A 0.02511679 BTC prize was at stake, but the operator had to transfer it after discovering the server held the wrong wallet key.",
      "revision": 4,
      "sourceHeadline": "Researcher Cracks 'Steal My Bitcoin' Challenge With PHP",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a72fd92aab4be3e1c1e0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 15000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/whitearmor-demands-15m-in-bitcoin-from-crypto-casino-gamdom/"
      ],
      "firstSeen": "2026-10-27T07:23:46.000Z",
      "updatedAt": "2026-10-27T08:20:06.475Z",
      "summary": "Crypto gambling platform Gamdom has been targeted by cyber extortion group WhiteArmor, which claims to have accessed more than 15.4 million user accounts and is demanding $15 million in Bitcoin to settle the alleged breach. According to an October 26…",
      "revision": 1,
      "sourceHeadline": "WhiteArmor demands $15M in Bitcoin from crypto casino Gamdom",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "47219148977fd582f3bb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1580000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/certik-tornado-cash-deposits-wallet-drain/"
      ],
      "firstSeen": "2026-10-27T03:29:43.000Z",
      "updatedAt": "2026-10-27T08:20:06.475Z",
      "summary": "The recurring use of mixers like Tornado Cash for laundering highlights ongoing challenges in crypto security and the need for improved key management. The post CertiK flags Tornado Cash deposits tied to wallet behind $1.58 million drain appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "CertiK flags Tornado Cash deposits tied to wallet behind",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "eab40a28e56a61795695",
      "protocol": "Argentina",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/24/argentina-drops-criminal-probe-into-president-milei-over-crashed-memecoin-libra"
      ],
      "firstSeen": "2026-10-24T14:38:47.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "The judge found that Milei's promotion of LIBRA did not constitute fraud, despite the attention his support drew to the token.",
      "revision": 16,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "788cade2f25e966f9b5c",
      "protocol": "Foundation",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/foundation-passport-phishing-cloudflare-api-keys/"
      ],
      "firstSeen": "2026-10-26T07:19:48.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "Foundation warns Passport owners after compromised Cloudflare API keys enabled fraudulent emails from official domains, while hardware and funds remain secure.",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "54989984705a20fc7a15",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/anthropic-ipo-filing-tsmc-hbm-reliance/"
      ],
      "firstSeen": "2026-10-27T02:18:56.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "Anthropic's IPO highlights the critical dependency on East Asian chip suppliers, underscoring potential supply chain vulnerabilities in AI growth. The post Anthropic’s IPO filing puts TSMC and HBM suppliers at the center of its risk story appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Anthropic’s IPO filing puts TSMC and HBM suppliers",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "58f912385c31ae3ce99d",
      "protocol": "Keystone breach deepens",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/keystone-breach-deepens-hackers-stole-key-used-to-verify-wallets-as-genuine"
      ],
      "firstSeen": "2026-10-27T01:55:03.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "Keystone initially disclosed a leak of customer information but has since disclosed that hackers also stole a key that could allow counterfeit wallets to pass authenticity checks.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a431730af77dfb632dd5",
      "protocol": "Foundation",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/foundation-probes-data-leak-after-23000-phishing-attempts-target-users/"
      ],
      "firstSeen": "2026-10-27T00:00:32.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "TL;DR: Over 23,000 malicious email attempts were recorded, with 19,057 messages delivered via Mailgun and 1,503 through Google Workspace. Residual database backups from its previous WooCommerce store preserved names, contact information, and shipping addresses. The manufacturer revoked the compromised Cloudflare API keys and confirmed that Passport physical devices suffered no security compromises. This Monday, October ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4a3032aa0dd2aaeb076d",
      "protocol": "Initia",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 2700000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/initia-hit-by-2-7m-exploit-as-bithumb-and-upbit-flag-init-as-high-risk/"
      ],
      "firstSeen": "2026-10-26T21:36:53.000Z",
      "updatedAt": "2026-10-27T02:23:24.415Z",
      "summary": "TL;DR: A $2.7 million exploit involving bridged assets triggered the halt of the Initia blockchain on October 23. Bithumb and Upbit designated INIT as a caution asset on October 26, suspending deposits and withdrawals under South Korea’s Virtual Asset User Protection Act. The asset traded near $0.1589 on October 26, accumulating an open interest in ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "317acff919ca6dec625e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/litellm-supply-chain-attack-exposed-github-key/"
      ],
      "firstSeen": "2026-10-26T20:38:11.000Z",
      "updatedAt": "2026-10-26T23:18:02.538Z",
      "summary": "The incident underscores the critical need for vigilant key management and proactive security audits to prevent supply chain vulnerabilities. The post LiteLLM traces supply chain attack to a GitHub key nobody revoked appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "LiteLLM traces supply chain attack to a GitHub key",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3f5356160ac71b9e0556",
      "protocol": "August updates",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/august-updates-block-critical-private-key-leak-in-crypto-wallet-vultisig/"
      ],
      "firstSeen": "2026-10-26T21:10:35.000Z",
      "updatedAt": "2026-10-26T23:18:02.538Z",
      "summary": "An already-compromised signer could recover the key through many malicious ECDSA messages when the application ignored a critical stop condition. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "66f96ad47518e569cff4",
      "protocol": "Keystone Breach Exposes Customer Data and Device",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/keystone-breach-exposes-customer-data-and-device-authentication-key-sparking-security-concerns/"
      ],
      "firstSeen": "2026-10-26T19:29:07.000Z",
      "updatedAt": "2026-10-26T23:18:02.538Z",
      "summary": "TL;DR: An intrusion detected on October 20, 2026, exposed the personal information of 25,964 buyers and 12,873 incomplete purchase records. The attacker obtained the WebAuth authentication key used to validate device authenticity on the firm’s portal. The company will destroy 18,835 units in inventory and suspend direct shipments to replace the key at the factory ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9b60403a81a76e714ee6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 270000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381862/south-korea-arrests-seven-first-big-ai-hacking-case"
      ],
      "firstSeen": "2026-10-26T20:06:02.000Z",
      "updatedAt": "2026-10-26T23:18:02.538Z",
      "summary": "Police in Seoul say a 32-year-old with no IT background used AI tools to break into about 90 hospitals, schools and companies, then pressed victims for roughly $270,000 combined.",
      "revision": 1,
      "sourceHeadline": "South Korea Arrests Seven in First Big AI-Assisted Hacking",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c116bd0b698c995a88bc",
      "protocol": "Initia",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 2700000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/initia-hit-by-2-7m-exploit-as-bithumb-and-upbit-flag-init-as-high-risk/"
      ],
      "firstSeen": "2026-10-26T11:17:17.000Z",
      "updatedAt": "2026-10-26T23:18:02.538Z",
      "summary": "TL;DR: A $2.7 million exploit involving bridged assets triggered the halt of the Initia blockchain on October 23. Bithumb and Upbit designated INIT as a caution asset on October 26, suspending deposits and withdrawals under South Korea’s Virtual Asset User Protection Act. The asset traded near $0.1589 on October 26, accumulating an open interest in ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "182cb17927fb0f5cf1aa",
      "protocol": "India’s CoinDCX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 60000000,
      "lossBasis": "aggregate",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/an-old-coindcx-wallet-kept-receiving-deposits-then-16m-went-missing/",
        "https://decrypt.co/381834/india-coindcx-confirms-16-million-loss-ceo-called-false-alarm",
        "https://www.coindesk.com/markets/2026/10/26/coindcx-absorbs-usd16-million-loss-from-internal-process-failure-tied-to-retired-wallet"
      ],
      "firstSeen": "2026-10-26T05:39:17.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "The Mumbai-based exchange says 15.99 million USDT was drained from wallets it retired after last year’s $44 million hack, bringing its combined losses to nearly $60 million—and it’s absorbing the hit.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "45ea772225732552e7d3",
      "protocol": "Keystone to destroy 18,835 hardware wallets",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/keystone-to-destroy-18835-hardware-wallets-after-authentication-key-breach/",
        "https://thedefiant.io/news/security/keystone-to-destroy-18-835-wallets-after-device-authentication-key-theft"
      ],
      "firstSeen": "2026-10-26T14:40:51.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "Hardware wallet manufacturer Keystone has confirmed that hackers stole a device authentication key and exposed personal information belonging to 25,964 customers, forcing the company to destroy 18,835 devices and suspend shipments. According to the company’s October 26 security announcement, attackers…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "98b240b2b86889b6dde8",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381844/bitcoin-wallet-flaw-trick-users-paying-attackers"
      ],
      "firstSeen": "2026-10-26T17:41:21.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "A confirmed exploit let rogue servers replace Electrum’s pending transactions, tricking users into redirecting Bitcoin to attacker addresses.",
      "revision": 1,
      "sourceHeadline": "Bitcoin Wallet Fixes Critical Flaw That Redirected Funds",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4ddb9294b73f31f8a736",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/musk-doge-staffers-hacking-anthropic/"
      ],
      "firstSeen": "2026-10-26T18:06:25.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "Elon Musk's ex-DOGE staffers used AI agents to get inside Anthropic in 12 hours, on the day it filed for its IPO. The post Elon Musk's DOGE Staffers Went From Jobless to Hacking Anthropic appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "Elon Musk's DOGE Staffers Went From Jobless to Hacking",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0d078171d0dc4fa5f80e",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 953000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/bitquery-traces-953k-solana-drain/"
      ],
      "firstSeen": "2026-10-26T16:20:57.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "TL;DR Bitquery traced 9,408 SOL, about $953,000, from 48 Bloom-linked wallets belonging to nine traders, with the full drain sequence completed in only 94 seconds. Every transfer was signed by the source wallet’s own key, showing valid cryptographic signing authority, although the investigation did not establish how the attacker obtained that access. Half the wallets ... Read more",
      "revision": 1,
      "sourceHeadline": "Bitquery Traces $953K Solana Drain Across 48 Bloom Wallets",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "0347fdd9ae865fbc6f80",
      "protocol": "@dguido",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/dguido-reveals-php-exploit-now-production-grade/"
      ],
      "firstSeen": "2026-10-26T18:42:45.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "A PHP exploit has been confirmed as production-grade, signaling potential risks for developers. The post @dguido Reveals PHP Exploit Now Production-Grade appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "76ca2c259de806da2121",
      "protocol": "Vitalik Buterin backs Kimi AI hacking limits",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/vitalik-buterin-kimi-ai-hacking-limits-kyc-risks/"
      ],
      "firstSeen": "2026-10-26T09:10:20.000Z",
      "updatedAt": "2026-10-26T19:12:07.244Z",
      "summary": "Vitalik Buterin supports Moonshot's limits on AI hacking capabilities, warning that unchecked cyber threats could lead to mandatory KYC and surveillance.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "876756f2b64d5a1e9d2b",
      "protocol": "Initia",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained",
        "https://crypto-economy.com/initia-suspends-network-following-reported-token-minting-exploit/",
        "https://crypto.news/initia-halts-blockchain-rollups-2-6m-exploit/",
        "https://thedefiant.io/news/hacks/initia-halts-l1-and-rollups-after-reported-mint-exploit"
      ],
      "firstSeen": "2026-10-23T16:19:13.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "The blockchain suspended its layer-1 network and rollups after security researchers identified unauthorized token minting and millions in assets transferred to Ethereum.",
      "revision": 13,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "735adb49eabc773eed2f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/keystone-wallet-hack-customer-addresses-exposed/"
      ],
      "firstSeen": "2026-10-25T10:18:32.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "Keystone confirms a website breach that exposed customer names, shipping addresses and orders, raising phishing and physical security concerns for wallet users.",
      "revision": 7,
      "sourceHeadline": "Keystone wallet hack exposes buyers’ home addresses",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4960fd51a90b84f7db33",
      "protocol": "Vitalik Buterin Backs AI Model That Deliberately",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/vitalik-buterin-ai-kimi-hacking-limits/",
        "https://crypto.news/vitalik-buterin-kimi-ai-hacking-limits-kyc-risks/"
      ],
      "firstSeen": "2026-10-26T07:33:28.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "Ethereum co-founder Vitalik Buterin backs AI limits on hacking over user checks, citing Moonshot's Kimi K3.1 Pro and warning of KYC on AI. The post Vitalik Buterin Backs AI Model That Deliberately Cut Its Hacking Skills appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "ba42adfdf4afa898a2a4",
      "protocol": "Bitcoin hacking challenge finally",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitcoin-hacking-challenge-finally-falls-as-researcher-proves-critical-php-flaw-is-exploitable/"
      ],
      "firstSeen": "2026-10-26T12:30:03.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "The operator accepted the PHP challenge solve despite a wallet mistake, while the harder question remains who turns discoveries into deployed fixes. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dc35dde9e1b6964e083d",
      "protocol": "Is Your Passport Wallet Safe? What Foundation",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-wallet-phishing-foundation-home-addresses/"
      ],
      "firstSeen": "2026-10-26T07:58:25.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "Bitcoin wallet phishing emails from Foundation's own domains held users' home addresses, they report. Here's how the company responded. The post Is Your Passport Wallet Safe? What Foundation Says About the Phishing Emails appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "04ddb8340d5738067876",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/an-old-coindcx-wallet-kept-receiving-deposits-then-16m-went-missing/"
      ],
      "firstSeen": "2026-10-26T12:20:00.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "The wallets were supposed to belong to CoinDCX’s past. After a July 2025 security breach, the Indian exchange had replaced the compromised infrastructure and told customers to use new deposit addresses. Some customers kept sending money to the old ones,…",
      "revision": 1,
      "sourceHeadline": "An old CoinDCX wallet kept receiving deposits. Then $16M",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "4f3765a9c25c567d9a64",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-missile-attacks-disrupt-flights-ground-86-at-riyadh-airport/"
      ],
      "firstSeen": "2026-10-26T10:42:35.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "The Houthi attacks heighten Saudi airspace security concerns, potentially leading to market shifts and increased odds of airspace closure. The post Houthi missile attacks disrupt flights, ground 86% at Riyadh airport appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Houthi missile attacks disrupt flights, ground 86% at Riyadh",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9dbd11401bb76d6b1847",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/hackers-exploit-vulnerability-to-steal-9408-sol-from-users/"
      ],
      "firstSeen": "2026-10-26T11:21:40.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "BloomTrading faces a security breach that led to the theft of 9,408 $SOL. The incident raises concerns over user trust in the platform. The post Hackers Exploit Vulnerability to Steal 9,408 $SOL from Users appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Hackers Exploit Vulnerability to Steal 9,408 $SOL from Users",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2651297e1cb0e8c9f9fa",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Credential compromise",
      "lossUsd": 954000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bloomtrading-solana-wallet-drain-refunds/"
      ],
      "firstSeen": "2026-10-26T06:14:03.000Z",
      "updatedAt": "2026-10-26T12:48:49.513Z",
      "summary": "BloomTrading identifies a third-party RCE flaw behind the $947K Solana theft affecting nine users, rules out private key exposure and pledges full refunds.",
      "revision": 1,
      "sourceHeadline": "BloomTrading promises refunds after $954K Solana wallet",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "3b90e1cf29b7ff31e88b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/coindcx-acknowledges-wallet-sweeping-losses-after-denying-new-breach"
      ],
      "firstSeen": "2026-10-23T06:50:59.000Z",
      "updatedAt": "2026-10-26T06:01:48.891Z",
      "summary": "The exchange says affected deposits were credited, but has not disclosed the size of its losses.",
      "revision": 24,
      "sourceHeadline": "CoinDCX Acknowledges Wallet-Sweeping Losses After Denying",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ab273b5828333f0f2720",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-cz-ai-phishing-bank-encryption/"
      ],
      "firstSeen": "2026-10-23T19:42:45.000Z",
      "updatedAt": "2026-10-26T06:01:48.891Z",
      "summary": "Binance founder Changpeng Zhao has warned that artificial intelligence can harm Bitcoin users through leaked personal data and social engineering without breaking the cryptocurrency’s cryptography, according to posts from CoinMarketCap and Bitcoin Archive. CoinMarketCap described Zhao’s warning as a concern…",
      "revision": 20,
      "sourceHeadline": "Bitcoin security debate turns to AI phishing after CZ’s",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b8e93b35dce6bc586660",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-vow-continued-attacks-on-saudis-king-khalid-airport-tensions-rise/"
      ],
      "firstSeen": "2026-10-26T00:37:59.000Z",
      "updatedAt": "2026-10-26T06:01:48.891Z",
      "summary": "Rising Houthi attacks on Saudi airspace threaten regional aviation stability and complicate prospects for a ceasefire, impacting market perceptions. The post Houthis vow continued attacks on Saudi’s King Khalid Airport, tensions rise appeared first on Crypto Briefing .",
      "revision": 2,
      "sourceHeadline": "Houthis vow continued attacks on Saudi’s King Khalid Airport",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "177f1459de914d55fded",
      "protocol": "Foundation Links Passport Phishing Emails",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/foundation-links-passport-phishing-emails-to-compromised-cloudflare-api-keys"
      ],
      "firstSeen": "2026-10-26T04:06:03.000Z",
      "updatedAt": "2026-10-26T06:01:48.891Z",
      "summary": "Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bd5e7c60f0a88a391049",
      "protocol": "BloomTrading bot users",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bloomtrading-bot-users-wallet-drains/"
      ],
      "firstSeen": "2026-10-26T04:45:59.000Z",
      "updatedAt": "2026-10-26T06:01:48.891Z",
      "summary": "The incident highlights the inherent risks of custodial trading bots, urging users to prioritize security and transparency in crypto platforms. The post BloomTrading bot users lose nearly $1M as wallets get drained appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "272878376b3cd995e85e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/uae-led-scam-crackdown-identifies-over-39-billion-in-funds-and-crypto"
      ],
      "firstSeen": "2026-10-23T02:03:09.000Z",
      "updatedAt": "2026-10-26T00:40:24.276Z",
      "summary": "Operation Confrontation Ghost reported more than 960 arrests and raids on 29 fraud centers; participating countries are working toward asset recovery.",
      "revision": 24,
      "sourceHeadline": "UAE-Led Scam Crackdown Identifies Over $39 Billion in Funds",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "64b35b92616475541d1d",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/ai-agents-help-rescue-eths-glamsterdam-fork-steal-my-bitcoin-site-hodlers-digest"
      ],
      "firstSeen": "2026-10-25T22:48:40.000Z",
      "updatedAt": "2026-10-26T00:40:24.276Z",
      "summary": "Similar to the Hugging Face hack, Ethereum researchers have set up an AI Agent message board to help rescue the Glamsterdam fork. ‘Steal My Bitcoin’ site successfully hacked.",
      "revision": 1,
      "sourceHeadline": "AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3dfca5587ac9d5ffe78a",
      "protocol": "Initia hack drove its USDC bridge reserve down",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 63,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/initia-hack-drove-its-usdc-bridge-reserve-down-to-63-as-withdrawals-failed/"
      ],
      "firstSeen": "2026-10-25T19:45:11.000Z",
      "updatedAt": "2026-10-25T22:29:11.221Z",
      "summary": "Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1184aee814c09297b9af",
      "protocol": "Riyadh airport reopens to international flights",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/riyadh-airport-reopens-to-international-flights-after-houthi-attack-closure/"
      ],
      "firstSeen": "2026-10-25T08:22:00.000Z",
      "updatedAt": "2026-10-25T19:55:55.191Z",
      "summary": "The reopening may ease market fears of a broader airspace closure, but ongoing threats keep long-term security and economic stability uncertain. The post Riyadh airport reopens to international flights after Houthi attack closure appeared first on Crypto Briefing .",
      "revision": 4,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2fed37c0f01b7c549eb3",
      "protocol": "CoinDCX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/coindcx-16m-loss-retired-wallets/",
        "https://www.theblock.co/news/business/2026-10-25-coindcx-confirms-16-million-loss-from-retired-wallets-days-after-ceo-called-breach-reports-a-false-alarm-431617"
      ],
      "firstSeen": "2026-10-25T18:46:21.000Z",
      "updatedAt": "2026-10-25T19:55:55.191Z",
      "summary": "CEO Sumit Gupta had told X users on Wednesday that early reports of a breach sounded like \"a false alarm.\"",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "3fc085c3cbbbe12435aa",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 37000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/how-37-million-stolen-from-americans-moved-through-a-bahamas-bank-into-tethers-usdt/"
      ],
      "firstSeen": "2026-10-25T18:40:29.000Z",
      "updatedAt": "2026-10-25T19:55:55.191Z",
      "summary": "Prosecutors allege a bank-to-USDT laundering role in a case involving 174 identified US victims; no new repayment figure was announced. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "How $37 million stolen from Americans moved through",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "8bbcf2a2af4cf4f947a1",
      "protocol": "Initia hack drove its USDC bridge reserve down",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 63,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/initia-hack-drove-its-usdc-bridge-reserve-down-to-63-as-withdrawals-failed/"
      ],
      "firstSeen": "2026-10-25T19:45:11.000Z",
      "updatedAt": "2026-10-25T19:55:55.191Z",
      "summary": "Bitquery linked failed exits to depleted backing for Initia balances as the project outlined a patch and ongoing recovery work. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dcb7292fca0821d8d198",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/litellm-completes-investigation-into-v1-107-0-release-exploit/"
      ],
      "firstSeen": "2026-10-25T18:42:23.000Z",
      "updatedAt": "2026-10-25T19:55:55.191Z",
      "summary": "Trail of Bits amplified a post detailing an investigation into the v1.107.0 attack chain. This could impact future security measures in the sector. The post LiteLLM Completes Investigation into v1.107.0 Release Exploit appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "LiteLLM Completes Investigation into v1.107.0 Release",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "794a4590bcb88b329a4f",
      "protocol": "CoinDCX",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 15990000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/coindcx-confirms-15-99m-loss-old-wallets/"
      ],
      "firstSeen": "2026-10-25T14:59:45.000Z",
      "updatedAt": "2026-10-25T17:36:32.003Z",
      "summary": "CoinDCX confirms a 15.99 million USDT loss tied to compromised legacy wallets after initially denying another hack, while saying customer balances remain safe.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6bb19089dad2bcd98d22",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-vow-continued-attacks-on-saudi-arabias-king-khalid-airport/"
      ],
      "firstSeen": "2026-10-24T21:19:51.000Z",
      "updatedAt": "2026-10-25T13:53:29.012Z",
      "summary": "The ongoing Houthi attacks on Saudi infrastructure could destabilize regional security, affecting airspace operations and market dynamics. The post Houthis vow continued attacks on Saudi Arabia’s King Khalid airport appeared first on Crypto Briefing .",
      "revision": 5,
      "sourceHeadline": "Houthis vow continued attacks on Saudi Arabia’s King Khalid",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f8b508fe3efb1efc61b6",
      "protocol": "A 20-month Polkadot wallet breach",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/a-20-month-polkadot-wallet-breach-reveals-the-dark-side-of-faster-crypto-withdrawals/"
      ],
      "firstSeen": "2026-10-25T11:20:15.000Z",
      "updatedAt": "2026-10-25T13:53:29.012Z",
      "summary": "Polkadot’s earlier reduction in nominator exit times leaves less time to coordinate help before exposed funds become withdrawable. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2860bb762cb638dad6b5",
      "protocol": "Yapeswap",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 21900,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/yapeswap-suffers-21-9k-loss-from-governance-exploit/"
      ],
      "firstSeen": "2026-10-25T11:01:49.000Z",
      "updatedAt": "2026-10-25T13:53:29.012Z",
      "summary": "Yapeswap has reported a significant loss of approximately $21.9K due to a governance exploit. This incident highlights vulnerabilities in decentralized finance protocols. The post Yapeswap Suffers $21.9K Loss from Governance Exploit appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ef1c5f223bc5ae84d91c",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/keystone-website-breach-exposes-customer-addresses-and-order-details"
      ],
      "firstSeen": "2026-10-24T19:06:10.000Z",
      "updatedAt": "2026-10-25T13:53:29.012Z",
      "summary": "The hardware-wallet maker says it blocked access and fixed the vulnerability. Payment details, recovery phrases and private keys were not exposed, according to the company.",
      "revision": 1,
      "sourceHeadline": "Keystone Website Breach Exposes Customer Addresses",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ca985e3e0930acd7d195",
      "protocol": "Interpol Cybercrime Sweep",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 2400000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/interpol-cybercrime-sweep-recovers-over-105-million-nets-1-462-arrests"
      ],
      "firstSeen": "2026-10-22T21:14:43.000Z",
      "updatedAt": "2026-10-25T09:21:09.781Z",
      "summary": "Angolan authorities seized more than 2,000 crypto-mining devices; a Nigerian probe traced more than $2.4 million in suspected fraud proceeds.",
      "revision": 21,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d91d549715ed33183b62",
      "protocol": "Initia",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/initia-halts-blockchain-exploit-drained",
        "https://crypto.news/initia-halts-blockchain-rollups-2-6m-exploit/",
        "https://thedefiant.io/news/hacks/initia-halts-l1-and-rollups-after-reported-mint-exploit"
      ],
      "firstSeen": "2026-10-23T16:19:13.000Z",
      "updatedAt": "2026-10-25T09:21:09.781Z",
      "summary": "The blockchain suspended its layer-1 network and rollups after security researchers identified unauthorized token minting and millions in assets transferred to Ethereum.",
      "revision": 8,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "b3dd9b3508f88deb1bc5",
      "protocol": "India's largest exchange",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/23/india-s-largest-exchange-denies-hack-after-blockchain-sleuths-pointed-to-usd16-million-in-suspicious-outflows"
      ],
      "firstSeen": "2026-10-23T08:02:35.000Z",
      "updatedAt": "2026-10-24T23:39:08.923Z",
      "summary": "CoinDCX denies its active wallets were hacked after sleuths flagged $16 million in outflows from addresses linked to the India-based exchange.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "04e04892eec65b682a3b",
      "protocol": "Keystone Hardware Wallet",
      "chain": "Multi-chain",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/keystone-hardware-wallet-confirms-customer-data-exposure/",
        "https://cryptobriefing.com/keystone-data-breach-exposed-2026/",
        "https://thedefiant.io/news/security/keystone-website-breach-exposes-customer-addresses-and-order-details"
      ],
      "firstSeen": "2026-10-24T19:06:10.000Z",
      "updatedAt": "2026-10-24T21:32:43.677Z",
      "summary": "The breach highlights the ongoing vulnerability of customer data in the crypto industry, emphasizing the need for enhanced security measures. The post Keystone Hardware Wallet says website breach exposed customer data appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "57b887f7986a0c6c55aa",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/x100-exploit-proceeds-split-into-four-400-eth-wallets"
      ],
      "firstSeen": "2026-10-24T19:41:15.000Z",
      "updatedAt": "2026-10-24T21:32:43.677Z",
      "summary": "The first exploiter swapped about 4.75 million USDT into ether, while the distribution wallet retained another 423 ETH.",
      "revision": 1,
      "sourceHeadline": "X100 Exploit Proceeds Split Into Four 400-ETH Wallets",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c836628d329c79bc5507",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/keystonewallet-discloses-breach-customer-data-exposed/"
      ],
      "firstSeen": "2026-10-24T20:02:30.000Z",
      "updatedAt": "2026-10-24T21:32:43.677Z",
      "summary": "KeystoneWallet's recent data breach has put customer information at risk, sparking concerns among users. The post KeystoneWallet Discloses Breach, Customer Data Exposed appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "KeystoneWallet Discloses Breach, Customer Data Exposed",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2eb97c28f74d02e7658b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 4700000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/chainalysis-exposes-exploit-behind-4-7m-stablecoin-attack/"
      ],
      "firstSeen": "2026-10-24T21:01:35.000Z",
      "updatedAt": "2026-10-24T21:32:43.677Z",
      "summary": "Chainalysis details a significant exploit involving the X100 protocol, leading to the theft of $4.7 million in stablecoins. Here's why it matters. The post Chainalysis Exposes Exploit Behind $4.7M Stablecoin Attack appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Chainalysis Exposes Exploit Behind $4.7M Stablecoin Attack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6a90ebe3fb3ec2544d6d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/libra-case-milei-dismissed-argentina/",
        "https://www.theblock.co/news/regulation/2026-10-24-argentine-judge-clears-milei-and-10-others-in-libra-case-finding-no-criminally-relevant-deception-431606"
      ],
      "firstSeen": "2026-10-24T05:43:50.000Z",
      "updatedAt": "2026-10-24T18:57:50.574Z",
      "summary": "The judge's 60-page ruling concluded Argentine President Javier Milei's post promoting the LIBRA token did not, by itself, establish fraud.",
      "revision": 1,
      "sourceHeadline": "Argentine judge clears Milei and 10 others in LIBRA",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "51a1daaf7da05f85e657",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-core-will-disclose-some-bugs-sooner-can-node-operators-update-in-time/"
      ],
      "firstSeen": "2026-10-24T12:40:07.000Z",
      "updatedAt": "2026-10-24T16:12:47.297Z",
      "summary": "Bitcoin Core has changed its security disclosure policy after developers found that some vulnerabilities can be rediscovered with minimal effort, including a simple prompt to an AI model. The project’s October 22 policy update creates a faster route for those…",
      "revision": 1,
      "sourceHeadline": "Bitcoin Core will disclose some bugs sooner. Can node",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "63496fc47b7cc8ba5016",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/third-x100-exploit-transaction-pulls-550-000-x-from-uniswap-pool"
      ],
      "firstSeen": "2026-10-24T15:17:43.000Z",
      "updatedAt": "2026-10-24T16:12:47.297Z",
      "summary": "A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT.",
      "revision": 1,
      "sourceHeadline": "Third X100 Exploit Transaction Pulls 550,000 X From Uniswap",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "776b20e4db32a6b82e9d",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/x100-exploit-nets-4-85-million-usdt-after-governance-takeover"
      ],
      "firstSeen": "2026-10-24T14:58:09.000Z",
      "updatedAt": "2026-10-24T16:12:47.297Z",
      "summary": "Two transactions turned treasury tokens and liquidity positions into USDT; Blockaid warned that the Ethereum attack was ongoing.",
      "revision": 1,
      "sourceHeadline": "X100 Exploit Nets 4.85 Million USDT After Governance",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a74dc3f98a777953e658",
      "protocol": "Unspecified subject",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/24/block-s-new-voice-ai-sounds-eerily-human-sparking-awe-and-scam-fears"
      ],
      "firstSeen": "2026-10-24T15:21:06.000Z",
      "updatedAt": "2026-10-24T16:12:47.297Z",
      "summary": "Reactions split between amazement at how human it sounds and fears it could fuel scams and deception, with CZ eyeing uses in children’s education.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b57ef58817ef127af916",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/milei-libra-case-dismissal-journalists-compensation/"
      ],
      "firstSeen": "2026-10-24T12:10:00.000Z",
      "updatedAt": "2026-10-24T16:12:47.297Z",
      "summary": "Argentine President Javier Milei has named five journalists in an attack on LIBRA coverage and asked who will compensate him for alleged damage to his reputation after a judge dismissed the criminal case against him. La Nación reported that Milei…",
      "revision": 1,
      "sourceHeadline": "Milei targets five journalists after LIBRA criminal case",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "82ce67439e750def6f8b",
      "protocol": "Bitget hacker",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 19480000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hacker-moves-19-million-52-transfers/"
      ],
      "firstSeen": "2026-10-24T08:23:15.000Z",
      "updatedAt": "2026-10-24T12:12:50.852Z",
      "summary": "The Bitget hacker has moved $19.48 million in 52 transfers, almost entirely in Bitcoin, as Arkham tracks fresh outflows from wallets linked to the exchange’s September breach. Arkham put the transfers between 10:02 UTC on Oct. 21 and 02:48 UTC…",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "86b3a5b0129a99f81edd",
      "protocol": "Ethereum Staking Protocol Swell",
      "chain": "Ethereum",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ethereum-staking-protocol-swell-halts-transactions/"
      ],
      "firstSeen": "2026-10-24T11:31:54.000Z",
      "updatedAt": "2026-10-24T12:12:50.852Z",
      "summary": "Swell temporarily halts swETH and rswETH transactions due to abnormal exchange rates, highlighting potential vulnerabilities. The post Ethereum Staking Protocol Swell Halts Transactions appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8e081193c470d9bbc3ef",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Malware",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/slowmist-alerts-iphone-users-to-darksword-malware-threat/"
      ],
      "firstSeen": "2026-10-24T07:32:32.000Z",
      "updatedAt": "2026-10-24T12:12:50.852Z",
      "summary": "DarkSword malware targets iPhone users, prompting a security alert from SlowMist. The post SlowMist Alerts iPhone Users to DarkSword Malware Threat appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "SlowMist Alerts iPhone Users to DarkSword Malware Threat",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "129ad54a2c2883c12a9d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/moonshot-ai-kimi-k3-1-pro-hacking-curbs/"
      ],
      "firstSeen": "2026-10-24T06:48:57.000Z",
      "updatedAt": "2026-10-24T07:12:29.040Z",
      "summary": "Moonshot AI's approach highlights the balance between innovation and security, influencing future AI development and ethical considerations. The post Moonshot AI curbs hacking ability in Kimi K3.1 Pro model appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Moonshot AI curbs hacking ability in Kimi K3.1 Pro",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "40630aa250d8e1ce00ca",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/researchers-flag-swell-rate-manipulation-after-railway-key-drain-warning"
      ],
      "firstSeen": "2026-10-22T14:18:51.000Z",
      "updatedAt": "2026-10-24T05:00:09.483Z",
      "summary": "Researchers flagged inflated swETH and rswETH rates after the cloud-platform disclosure; the reported 2,513 ETH held by Swell is not a confirmed loss.",
      "revision": 15,
      "sourceHeadline": "Researchers Flag Swell Rate Manipulation After Railway",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c2e811fc5b6bcbd37a81",
      "protocol": "Yemen missile malfunction kills family",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yemen-missile-malfunction-kills-family-raises-concerns-over-houthi-capabilities/"
      ],
      "firstSeen": "2026-10-23T20:36:59.000Z",
      "updatedAt": "2026-10-23T23:26:47.973Z",
      "summary": "The missile failure highlights vulnerabilities in Houthi capabilities, potentially escalating regional tensions and impacting Saudi airspace security. The post Yemen missile malfunction kills family, raises concerns over Houthi capabilities appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8622b0bb0991b72820c2",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/binance-founder-highlights-data-privacy-risks-over-ai-cryptography-threats/"
      ],
      "firstSeen": "2026-10-23T19:56:13.000Z",
      "updatedAt": "2026-10-23T20:20:55.018Z",
      "summary": "TL;DR Binance co-founder Changpeng Zhao argues that leaked personal data and phishing attacks pose more immediate risks to crypto users than AI breaking Bitcoin’s cryptography. Zhao urges investors to strengthen account security through hardware security keys, cautious browsing and better protection of sensitive information. As AI tools become more capable, crypto holders must address emerging ... Read more",
      "revision": 1,
      "sourceHeadline": "Binance Founder Highlights Data Privacy Risks Over AI",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "46d1d923d0ad09756c92",
      "protocol": "¿Puede la IA hackear Bitcoin? CZ dice que el",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/cz-ai-bitcoin-criptografia-advertencia-phishing/"
      ],
      "firstSeen": "2026-10-23T12:01:00.000Z",
      "updatedAt": "2026-10-23T20:20:55.018Z",
      "summary": "El fundador de Binance, Changpeng Zhao, dice que la IA no necesita romper la criptografía de Bitcoin para causar daño. En cambio, advierte que los datos filtrados ya alimentan el phishing y la ingeniería social. Mientras tanto, los desarrolladores de Bitcoin Core están cambiando la forma en la que comunican errores, ya que la IA El post ¿Puede la IA hackear Bitcoin? CZ dice que el verdadero peligro está en el phishing y la filtración de datos fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "596941804d22929454b6",
      "protocol": "Initia",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/initia-suspends-operations-after-security-breach-reports/"
      ],
      "firstSeen": "2026-10-23T19:54:33.000Z",
      "updatedAt": "2026-10-23T20:20:55.018Z",
      "summary": "Initia has halted its Layer 1 and rollup operations due to a security incident involving unauthorized token minting, resulting in significant losses. The post Initia Suspends Operations After Security Breach, Reports appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ccdbf4720ed0e9ad4c67",
      "protocol": "What Is a Crypto ‘Wrench Attack’?",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/what-is-a-crypto-wrench-attack"
      ],
      "firstSeen": "2026-10-22T12:44:15.000Z",
      "updatedAt": "2026-10-23T16:58:40.415Z",
      "summary": "The name comes from an XKCD comic about a $5 wrench. Hardware wallets isolate keys, while multisig divides signing authority—but neither automatically prevents coerced transfers.",
      "revision": 9,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e629e2786f0362cd7bae",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/anthropics-new-ai-models-claim-reduced-risk-of-autonomous-attacks/"
      ],
      "firstSeen": "2026-10-23T14:06:55.000Z",
      "updatedAt": "2026-10-23T16:58:40.415Z",
      "summary": "Anthropic's AI advancements may boost market confidence, yet real-world misuse challenges could affect future AI safety perceptions. The post Anthropic’s new AI models claim reduced risk of autonomous attacks appeared first on Crypto Briefing .",
      "revision": 3,
      "sourceHeadline": "Anthropic’s new AI models claim reduced risk of autonomous",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9f0d4ea33ab105c9efdb",
      "protocol": "Initia",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/initia-halts-l1-and-rollups-after-reported-mint-exploit"
      ],
      "firstSeen": "2026-10-23T16:19:13.000Z",
      "updatedAt": "2026-10-23T16:58:40.415Z",
      "summary": "Analyst Spreek estimated $2.6 million had been cashed out; Ethereum records show stablecoin swaps and a later 1,135.5 ETH transfer.",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a5f0a69603ae6e6e1820",
      "protocol": "CoinDCX Co-Founder",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/coindcx-co-founder-denies-new-hack-after-16-million-wallet-alert"
      ],
      "firstSeen": "2026-10-22T08:18:24.000Z",
      "updatedAt": "2026-10-23T15:43:35.327Z",
      "summary": "Sumit Gupta says the flagged addresses were compromised in July 2025 and that no funds from CoinDCX’s current wallets were affected.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "71d4fd5a9e1efb50501d",
      "protocol": "CoinDCX",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/coindcx-suspicious-outflows-wallet-compromised-2025-exploit"
      ],
      "firstSeen": "2026-10-22T10:53:10.000Z",
      "updatedAt": "2026-10-23T15:43:35.327Z",
      "summary": "CoinDCX said it covered losses caused by a failed transfer process involving compromised wallets and credited all affected user accounts.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "43baf756261c4cdbaf64",
      "protocol": "Hacker mints tokens on Initia Chain, cashes",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 2600000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/hacker-mints-tokens-initia-chain-exploit/"
      ],
      "firstSeen": "2026-10-23T15:38:03.000Z",
      "updatedAt": "2026-10-23T15:43:35.327Z",
      "summary": "The exploit highlights vulnerabilities in blockchain security, potentially undermining trust and impacting future investments in Initia Chain. The post Hacker mints tokens on Initia Chain, cashes out about $2.6 million appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "86b9cc09d62551723315",
      "protocol": "India's largest exchange",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/coindcx-denies-new-security-breach/",
        "https://www.coindesk.com/markets/2026/10/23/india-s-largest-exchange-denies-hack-after-blockchain-sleuths-pointed-to-usd16-million-in-suspicious-outflows"
      ],
      "firstSeen": "2026-10-23T06:26:13.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "CoinDCX denies its active wallets were hacked after sleuths flagged $16 million in outflows from addresses linked to the India-based exchange.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "1afeaf80e47f9ec40e62",
      "protocol": "Bitcoin Core changes security policy as AI",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitcoin-core-changes-security-policy-as-ai-makes-bugs-easier-to-find",
        "https://www.coindesk.com/tech/2026/10/23/bitcoin-will-now-stop-hiding-bugs-an-ai-can-find-in-one-prompt"
      ],
      "firstSeen": "2026-10-23T04:34:14.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "Bitcoin Core says keeping certain vulnerabilities secret no longer offers much protection in the wake of AI-assisted bug hunting.",
      "revision": 2,
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "e57b9947bed286754a3f",
      "protocol": "¿Puede la IA hackear Bitcoin? CZ dice que el",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/cz-ai-bitcoin-criptografia-advertencia-phishing/"
      ],
      "firstSeen": "2026-10-23T12:01:00.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "El fundador de Binance, Changpeng Zhao, dice que la IA no necesita romper la criptografía de Bitcoin para causar daño. En cambio, advierte que los datos filtrados ya alimentan el phishing y la ingeniería social. Mientras tanto, los desarrolladores de Bitcoin Core están cambiando la forma en la que comunican errores, ya que la IA El post ¿Puede la IA hackear Bitcoin? CZ dice que el verdadero peligro está en el phishing y la filtración de datos fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cc383b2df79ba124ed70",
      "protocol": "Changpeng Zhao and Vitalik Buterin",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/changpeng-zhao-and-vitalik-buterin-warn-ai-poses-risks-to-bitcoin/"
      ],
      "firstSeen": "2026-10-23T15:09:20.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "TL;DR Changpeng Zhao warned that artificial intelligence could facilitate attacks against Bitcoin users without needing to break its cryptography. Vitalik Buterin also expressed confidence in current cryptographic security, although other researchers have warned that advances in AI could compromise digital signatures. Bitcoin Core has revised its vulnerability disclosure policy to release fixes more quickly when ... Read more",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d35e870eae894e1d73e7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3820000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/thorchain-rebounds-with-massive-q3-volume-surging-across-protocol-liquidity-pools/"
      ],
      "firstSeen": "2026-10-23T14:10:26.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "TL;DR THORChain processed $3.82 billion in trading volume during the third quarter of 2026 and collected $5.77 million in fees, nearly double the previous quarter’s figures. Protocol liquidity increased from $54.58 million to $89.82 million. September alone recorded $2.41 billion in trading volume, including funds linked to the Bitget hack. The V3.20 upgrade restored validator ... Read more",
      "revision": 1,
      "sourceHeadline": "THORChain Rebounds With Massive Q3 Volume Surging Across",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "17f95c5ff0ed376ba74d",
      "protocol": "Sam Altman",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/sam-altman-warns-ai-finds-unpatchable-flaws/"
      ],
      "firstSeen": "2026-10-23T15:00:23.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "AI's ability to uncover complex vulnerabilities challenges traditional security measures, necessitating a reevaluation of system design and regulatory scrutiny. The post Sam Altman warns AI models can find flaws that simple patches cannot fix appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "57912dbb59d891e1d47f",
      "protocol": "Nasdaq CEO Adena Friedman",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/nasdaq-friedman-national-fraud-strategy/"
      ],
      "firstSeen": "2026-10-23T13:29:57.000Z",
      "updatedAt": "2026-10-23T15:37:43.825Z",
      "summary": "A coordinated national fraud strategy could enhance collaboration, reduce financial crime, and mitigate AI-driven scam impacts across sectors. The post Nasdaq CEO Adena Friedman calls for a national fraud strategy as losses mount appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "657e40a63ef4977a8b13",
      "protocol": "CoinDCX",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/coindcx-denies-16-million-hack-claim/",
        "https://coinfomania.com/indias-coindcx-may-have-lost-16-million-to-hack-reports/",
        "https://cointelegraph.com/news/coindcx-suspicious-outflows-wallet-compromised-2025-exploit",
        "https://crypto-economy.com/coindcx-denies-fresh-16m-hack/",
        "https://cryptobriefing.com/indias-top-crypto-exchange-coindcx-rejects-hack-claims-after-16-million-in-usdt-transfers-reported/",
        "https://thedefiant.io/news/hacks/coindcx-co-founder-denies-new-hack-after-16-million-wallet-alert"
      ],
      "firstSeen": "2026-10-22T06:20:05.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "CoinDCX said it covered losses caused by a failed transfer process involving compromised wallets and credited all affected user accounts.",
      "revision": 7,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "c29bce952839449bd75f",
      "protocol": "From Onchain Earnings to Hack Risk",
      "chain": "Base",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/from-onchain-earnings-to-hack-risk-why-defillamas-markets-matter/"
      ],
      "firstSeen": "2026-10-23T04:30:00.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "DefiLlama’s new Markets turn its data infrastructure into a live, tradeable signal layer—one that prices both onchain earnings and hack risk in the same venue. The initiative, launched with prediction-market protocol Trueo on Base, matters because it moves DefiLlama from reporting DeFi’s most important metrics to letting the market price them directly. How the Markets ... Read more",
      "revision": 2,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "33328155087aeb329886",
      "protocol": "Can AI Hack Bitcoin? CZ",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/cz-ai-bitcoin-cryptography-phishing-warning/"
      ],
      "firstSeen": "2026-10-23T11:38:53.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "Binance founder Changpeng Zhao says AI doesn’t need to break Bitcoin’s cryptography to cause damage. Instead, he warns that leaked data already fuels phishing and social engineering. Meanwhile, Bitcoin Core developers are changing how they disclose bugs as AI makes flaws easier to find. Why CZ Sees Phishing as the Bigger AI Threat Zhao, known The post Can AI Hack Bitcoin? CZ Says the Real Danger Lies in Phishing and Data Leak appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1d2f5f45fba0340a8c74",
      "protocol": "Oil Sprints to a 5-Month High While Tech",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/brent-crude-highest-since-may-houthi/"
      ],
      "firstSeen": "2026-10-23T09:58:11.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "Brent crude touched $115.84 on Friday, its highest level since May. Houthi attacks on Saudi Arabia and fears of new US strikes on Iran drove the move. Other energy prices were mixed, Trading Economics data show: The rally landed on markets still shaken by a tech selloff. Crypto also slipped as investors pulled back from The post Oil Sprints to a 5-Month High While Tech and Crypto Stumble appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3a38603462ceba0f039e",
      "protocol": "Fake election polls expose a Kalshi loophole",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/kalshi-election-betting-rules-expose-a-data-integrity-question-after-fake-poll-scandal/"
      ],
      "firstSeen": "2026-10-23T10:50:17.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "Polling firm Wedgewood admitted on Oct. 20 that it fabricated most of its election surveys, and VoteHub, one of the aggregators that carried its results, is also the data source for recurring Kalshi contracts. Kalshi's September 2025 regulatory filing names VoteHub as the source agency for those contracts and states that “revisions to the Underlying… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "26715a2cb7d8474abf0c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/etherscan-lookalike-address-warning-scams/"
      ],
      "firstSeen": "2026-10-23T11:51:33.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "Etherscan's new feature highlights the ongoing challenge of evolving scams in crypto, emphasizing the need for vigilant user practices and adaptive security measures. The post Etherscan introduces lookalike address warning to combat scams appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Etherscan introduces lookalike address warning to combat",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6d097b43d36a6b959994",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 744000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/blockchain/cysic-ofrecio-una-recompensa-del-10-pero-el-atacante-envio-fondos-a-tornado-cash/"
      ],
      "firstSeen": "2026-10-23T11:58:23.000Z",
      "updatedAt": "2026-10-23T12:00:43.531Z",
      "summary": "La dirección vinculada al exploit del puente de Cysic transfirió unos USD $744.000 en criptomonedas a Tornado Cash, pese a que la fundación había ofrecido una recompensa del 10% a cambio de la devolución de ETH. Cysic afirma que su red principal y los activos existentes de los usuarios no resultaron afectados.",
      "revision": 1,
      "sourceHeadline": "Cysic ofreció una recompensa del 10%, pero el atacante",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "83819cefd5f945541265",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/balancer-exploit-exposes-defi-monitoring-gaps-blockaid-says/"
      ],
      "firstSeen": "2026-10-22T23:08:43.000Z",
      "updatedAt": "2026-10-23T06:27:11.412Z",
      "summary": "TL;DR: An attacker funneled over $1 billion in borrowed assets through Aave markets to execute an exploit against Balancer V1. The financial operation drained approximately $250,000 from Balancer, while the Aave protocol suffered no direct capital losses. The address involved in the incident received preliminary funding tied to Tornado Cash hours prior to executing the ... Read more",
      "revision": 2,
      "sourceHeadline": "Balancer Exploit Exposes DeFi Monitoring Gaps, Blockaid",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "775b245f884825cc1fdc",
      "protocol": "Crypto ‘meme games’ coming, bagholders and all",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/move-over-memecoins-crypto-meme-games-coming-bagholders-and-all"
      ],
      "firstSeen": "2026-10-22T05:35:00.000Z",
      "updatedAt": "2026-10-23T06:27:11.412Z",
      "summary": "“Plenty will be ponzis. Plenty will get exploited. Plenty will insta die. There will be ridiculous gains, and people will get absolutely f***ing rinsed,” says Illuvium co-founder Kieran Warwick.",
      "revision": 3,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b4232e444f65ae515e65",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/cz-ai-hacking-fears-overblown-phishing/"
      ],
      "firstSeen": "2026-10-23T04:23:43.000Z",
      "updatedAt": "2026-10-23T06:27:11.412Z",
      "summary": "AI's role in crypto threats highlights the need for vigilance against phishing and social engineering, emphasizing user awareness and system updates. The post CZ says AI hacking fears in crypto are overblown, warns phishing is the real threat appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5b7fdd182f312e273c15",
      "protocol": "CZ",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/cz-warns-crypto-users-to-stay-alert-as-php-vulnerabilities-put-web-servers-at-risk/"
      ],
      "firstSeen": "2026-10-22T21:53:12.000Z",
      "updatedAt": "2026-10-22T22:42:33.311Z",
      "summary": "TL:DR: Binance founder Changpeng Zhao (CZ) issued a warning on October 21, 2026, regarding two critical flaws in the PHP core, tracked as CVE-2026-109618 and CVE-2026-109619. The vulnerabilities, collectively dubbed “PHP2Shell”, carry a 9.2 out of 10 severity rating and allow remote code execution without prior authentication. W3Techs data indicates that PHP powers 70.5% of ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9233e1c85011b6a5b25c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Under review",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/french-authorities-search-for-three-suspects-after-couple-tied-up-in-crypto-robbery/"
      ],
      "firstSeen": "2026-10-22T20:10:03.000Z",
      "updatedAt": "2026-10-22T22:42:33.311Z",
      "summary": "TL;DR: Three hooded individuals broke into a home in Mont-de-Marsan, France, at 3:00 a.m. on October 22, restraining a couple in their 60s. The assailants stole a mobile phone and a laptop after assaulting the homeowner with an adjustable wrench. The Bayonne judicial police took charge of the official investigation and placed the victims’ son, ... Read more",
      "revision": 1,
      "sourceHeadline": "French Authorities Search for Three Suspects After Couple",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "97d183d2ce0445c01616",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/nrsc-attacks-iowa-senate-candidate-josh-turek-over-farm-vote-record/"
      ],
      "firstSeen": "2026-10-22T22:00:45.000Z",
      "updatedAt": "2026-10-22T22:42:33.311Z",
      "summary": "The NRSC's critique of Turek could sway voter sentiment, impacting his slim lead and altering the dynamics of the tight Iowa Senate race. The post NRSC attacks Iowa Senate candidate Josh Turek over farm vote record appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "NRSC attacks Iowa Senate candidate Josh Turek over farm",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0d38e9e21e4d94ca8be6",
      "protocol": "Railway",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 371000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/railway-credential-resets-crypto-theft-allegation/"
      ],
      "firstSeen": "2026-10-22T20:20:13.000Z",
      "updatedAt": "2026-10-22T22:42:33.311Z",
      "summary": "The platform urged all users to replace stored credentials, while @tayvano_ separately alleged roughly $371,000 in cryptocurrency theft. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "bb15f495a0ba219f3d9f",
      "protocol": "Lightning Labs",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/lightning-labs-urges-immediate-updates-over-certificate-vulnerability"
      ],
      "firstSeen": "2026-10-22T17:01:57.000Z",
      "updatedAt": "2026-10-22T19:28:49.801Z",
      "summary": "New binaries block trust in compromised eMudhra certificate keys. Updating Go on a host alone does not patch software already installed.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9c46cdd712f54eef1f4c",
      "protocol": "ZachXBT",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/zachxbt-warns-coindcx-users-to-withdraw-funds-amid-disclosure-controversy/"
      ],
      "firstSeen": "2026-10-22T18:21:53.000Z",
      "updatedAt": "2026-10-22T19:28:49.801Z",
      "summary": "On-chain investigator ZachXBT alerted users of the Indian exchange CoinDCX, urging them to immediately withdraw their funds from the platform. The warning follows allegations of opacity and inconsistencies in the statements made by the co-founders after a prior security incident, pointing to the recent movement of approximately 15.8 million USDT linked to compromised addresses that ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4ee9165330d62ad4fcdb",
      "protocol": "Solana pitches Quantumglow to protect Alpenglow",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/solana-quantumglow-alpenglow-post-quantum-consensus/"
      ],
      "firstSeen": "2026-10-22T18:41:16.000Z",
      "updatedAt": "2026-10-22T19:28:49.801Z",
      "summary": "Solana has promoted Quantumglow, a proposed post-quantum adaptation of Alpenglow designed to protect consensus while preserving the network’s fast finality. Solana Developers described the proposal in an Oct. 22 video post, presenting it as a way to secure agreement between…",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1e9ca18a0f654d283501",
      "protocol": "Trump Touts Crypto Scam Crackdown as DOJ",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/regulation/trump-touts-crypto-scam-crackdown-as-doj-reports-938-million-restrained"
      ],
      "firstSeen": "2026-10-21T20:29:24.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "Attorney General Todd Blanche described a nationwide scam prosecution initiative deploying dozens of prosecutors across all 94 US Attorneys’ Offices.",
      "revision": 5,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9034b52808a08dc00ebe",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/capcom-alerta-sobre-phishing-tras-una-brecha-que-afecto-a-117-millones-de-cuentas/"
      ],
      "firstSeen": "2026-10-22T15:24:23.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "Capcom informó que un tercero accedió a información vinculada con 11,7 millones de cuentas de su servicio Capcom ID. La compañía afirmó que las contraseñas creadas por los clientes y los datos de tarjetas no quedaron expuestos, y advirtió sobre posibles correos fraudulentos.",
      "revision": 1,
      "sourceHeadline": "Capcom alerta sobre phishing tras una brecha que afectó",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "37a58b0ab41bd63165db",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/hyperliquid-orders-distort-papertrade-prices/"
      ],
      "firstSeen": "2026-10-22T14:36:23.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "The launch highlights the vulnerability of synthetic exchanges to external market influences, posing risks for traders and liquidity providers. The post Hyperliquid market orders of up to $20M moved Papertrade prices at launch appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Hyperliquid market orders of up to $20M moved Papertrade",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7c1f2495f71c46ba0528",
      "protocol": "Hackers are talking AI models out of their own",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/hackers-bypass-ai-safety-guardrails/"
      ],
      "firstSeen": "2026-10-22T13:53:58.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "AI models' vulnerability to social engineering highlights the urgent need for enhanced security measures and stricter access controls. The post Hackers are talking AI models out of their own safety rules appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ad760615b89896ead48e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/swell-sweth-rsweth-inflated-rates-hot-keys/"
      ],
      "firstSeen": "2026-10-22T14:31:12.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "The incident highlights vulnerabilities in DeFi protocols, emphasizing the need for robust security measures to protect against key compromises. The post Researchers flag inflated swETH and rswETH rates after Swell hot key compromise appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Researchers flag inflated swETH and rswETH rates after Swell",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "72aa47abce5034363641",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/coindcx-niega-reclamo-de-hackeo-de-16-millones/"
      ],
      "firstSeen": "2026-10-22T08:38:47.000Z",
      "updatedAt": "2026-10-22T15:37:04.955Z",
      "summary": "Sumit Gupta, cofundador de CoinDCX, negó inicialmente una nueva brecha de seguridad en el exchange de criptomonedas indio. Un investigador de seguridad había señalado que unos 15.99 millones de dólares en Tether (USDT) salieron de wallets identificadas con la plataforma. Gupta dijo que esas direcciones pertenecían a CoinDCX antes del hackeo de julio de 2025 El post CoinDCX niega hack de 16 millones de dólares y rastrea wallets marcadas a su brecha de 2025 fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "CoinDCX niega hack de 16 millones de dólares y",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0f4f17774df8a94072a0",
      "protocol": "Qubic restarts blockchain, opens recovery claims",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/qubic-restarts-blockchain-opens-recovery-claims-after-14m-hack"
      ],
      "firstSeen": "2026-10-20T23:26:02.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The network’s validators approved a recovery plan and opened claims until May 1, 2027.",
      "revision": 8,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7972a584a3534ba756e5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 11000000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/trump-overseas-crypto-scam-crackdown-fbi-losses/"
      ],
      "firstSeen": "2026-10-21T11:05:04.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "President Trump will highlight US action against overseas crypto scams as FBI data shows more than $11 billion in cryptocurrency-related losses reported in 2025.",
      "revision": 6,
      "sourceHeadline": "President Trump to highlight federal crypto scam crackdown",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "64bb12cada81d1061641",
      "protocol": "Three dead in attacks on Saudi oil field",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/three-dead-in-attacks-on-saudi-oil-field-and-airport/"
      ],
      "firstSeen": "2026-10-22T00:52:33.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The attacks heighten geopolitical uncertainty, potentially leading to Saudi airspace restrictions and impacting global market perceptions. The post Three dead in attacks on Saudi oil field and airport appeared first on Crypto Briefing .",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "15f9bce2b2e93d9aec75",
      "protocol": "Obol",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/obol-charon-upgrade-ca-key-compromise/",
        "https://thedefiant.io/news/security/obol-urges-immediate-charon-upgrade-after-ca-key-compromise"
      ],
      "firstSeen": "2026-10-21T22:40:13.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The patch updates certificate checks in Go. Obol's mainnet cluster balances totaled 422,862 ETH in its latest daily snapshot.",
      "revision": 2,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "dfdd8fb1e94508a79b6d",
      "protocol": "CoinDCX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 16000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/coindcx-denies-second-hack-claims-as-zachxbt-questions-wallet-activity/",
        "https://thedefiant.io/news/hacks/coindcx-co-founder-denies-new-hack-after-16-million-wallet-alert"
      ],
      "firstSeen": "2026-10-22T08:18:24.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "Indian cryptocurrency exchange CoinDCX has denied allegations of a new security breach involving nearly $16 million in cryptocurrency transfers, although blockchain investigator ZachXBT has challenged the company’s explanation of the suspicious wallet activity. CoinDCX said in an October 22 statement…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "2ba4918f8c983abb3dff",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/cloudflare-millions-exploit-attempts-php-vulnerability-disclosure",
        "https://thedefiant.io/news/security/cloudflare-ceo-reports-millions-of-php2shell-exploit-attempts"
      ],
      "firstSeen": "2026-10-22T03:39:17.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed.",
      "revision": 1,
      "sourceHeadline": "PHP flaw draws millions of exploit attempts, Cloudflare CEO",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "78c225cd0117f30ccc38",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/coindcx-niega-reclamo-de-hackeo-de-16-millones/"
      ],
      "firstSeen": "2026-10-22T08:38:47.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "Sumit Gupta, cofundador de CoinDCX, ha negado una nueva vulneración en el exchange de criptomonedas indio. Un investigador de seguridad había alertado de que salieron 15,99 millones de dólares en Tether (USDT) de wallets etiquetadas a la plataforma. Gupta dijo que esas direcciones pertenecían a CoinDCX antes del hackeo de julio de 2025 y que El post CoinDCX niega hack de 16 millones de dólares y rastrea wallets marcadas hasta su brecha de 2025 fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "CoinDCX niega hack de 16 millones de dólares y",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "241f213d36c02f71810e",
      "protocol": "ČNB",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/cnb-issues-warning-on-crypto-providers-fraud-risks-remain/"
      ],
      "firstSeen": "2026-10-22T09:54:52.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The Czech National Bank warns that even licensed crypto entities may pose fraud risks. Here's what this means for investors. The post ČNB Issues Warning on Crypto Providers, Fraud Risks Remain appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a9e478af9e49fcdce217",
      "protocol": "Binance founder CZ",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/binance-founder-cz-warns-crypto-users-over-critical-php-security-flaws/"
      ],
      "firstSeen": "2026-10-22T06:22:09.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "Binance founder Changpeng Zhao has warned cryptocurrency users to exercise extra caution when visiting websites over the coming days after two critical vulnerabilities were discovered in PHP, a programming language used by millions of websites worldwide. In an October 22…",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dc6e98de2a2eac81b2ad",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 820000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/certik-nem-token-exploit-820k-pancakeswap/"
      ],
      "firstSeen": "2026-10-22T10:12:53.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The exploit highlights the critical need for rigorous audits and transparency in DeFi tokenomics to prevent vulnerabilities and protect investors. The post CertiK flags $820K exploit draining NEM token’s PancakeSwap liquidity pool appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "CertiK flags $820K exploit draining NEM token’s PancakeSwap",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e8b49501f86b3a53cade",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-aramco-instructs-dhahran-staff-to-work-remotely-after-reported-missile/"
      ],
      "firstSeen": "2026-10-22T09:46:20.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The remote work shift highlights regional instability, potentially affecting geopolitical risk assessments and market perceptions of security. The post Saudi Aramco instructs Dhahran staff to work remotely after reported missile attack appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Saudi Aramco instructs Dhahran staff to work remotely",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3c6e4fa2d169483ef37a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 371000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/railway-security-breach-linked-to-371000-crypto-theft-across-19-chains/"
      ],
      "firstSeen": "2026-10-22T06:48:43.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "Railway has disclosed a security breach that blockchain investigator Taylor Monahan linked to approximately $371,000 in cryptocurrency drains across 19 EVM compatible networks. According to Railway’s October 21 security disclosure, the cloud deployment platform detected unusual activity involving systems used…",
      "revision": 1,
      "sourceHeadline": "Railway security breach linked to $371,000 crypto theft",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "eb33d56af952d070fb98",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/attack-on-saudi-arabias-king-fahd-airport-kills-2-injures-8/"
      ],
      "firstSeen": "2026-10-22T07:55:41.000Z",
      "updatedAt": "2026-10-22T10:35:10.342Z",
      "summary": "The attack heightens regional security concerns, potentially influencing market expectations and future airspace security measures in Saudi Arabia. The post Attack on Saudi Arabia’s King Fahd Airport kills 2, injures 8 appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Attack on Saudi Arabia’s King Fahd Airport kills 2",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "99ece4a9a97240a8adfa",
      "protocol": "Railway Exposes Potential Data Breach",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/railway-exposes-potential-data-breach-urges-users-to-act-now/"
      ],
      "firstSeen": "2026-10-22T04:54:54.000Z",
      "updatedAt": "2026-10-22T05:20:26.285Z",
      "summary": "Railway has alerted users to a potential data breach, urging immediate action to protect sensitive information. The post Railway Exposes Potential Data Breach, Urges Users to Act Now appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4b1f25b7a5bc11f0c1f5",
      "protocol": "Cloudflare CEO",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/cloudflare-ceo-reports-millions-of-php2shell-exploit-attempts"
      ],
      "firstSeen": "2026-10-22T03:39:17.000Z",
      "updatedAt": "2026-10-22T05:20:26.285Z",
      "summary": "PHP has shipped fixes for four supported branches. The flaws can let attackers run code on vulnerable web servers without logging in.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4176e65cefdf69300564",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 370000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/developer-links-370-000-theft-to-railway-secrets-exposure"
      ],
      "firstSeen": "2026-10-22T03:42:40.000Z",
      "updatedAt": "2026-10-22T05:20:26.285Z",
      "summary": "Railway restored Enterprise builds late Wednesday, while customers on other plans were still waiting to redeploy with replacement credentials.",
      "revision": 1,
      "sourceHeadline": "Developer Links $370,000 Theft to Railway Secrets Exposure",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "9a32ba2dda140f00d930",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/us-orders-personnel-to-leave-saudi-arabia-after-houthi-attacks/"
      ],
      "firstSeen": "2026-10-21T21:25:07.000Z",
      "updatedAt": "2026-10-22T00:37:14.813Z",
      "summary": "The US personnel withdrawal highlights escalating regional instability, potentially affecting diplomatic relations and market dynamics in the Gulf. The post US orders personnel to leave Saudi Arabia after Houthi attacks appeared first on Crypto Briefing .",
      "revision": 2,
      "sourceHeadline": "US orders personnel to leave Saudi Arabia after Houthi",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b5941ec4bdeb0beaf9ec",
      "protocol": "Crypto Exchange Warning",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-exchange-hack-alert-php2shell-risk/"
      ],
      "firstSeen": "2026-10-21T22:42:38.000Z",
      "updatedAt": "2026-10-22T00:37:14.813Z",
      "summary": "A critical security threat affecting millions of websites has raised concerns for cryptocurrency users, particularly those using smaller exchanges and crypto payment services. On Wednesday, October 21, PHP developers released emergency patches for two vulnerabilities known as PHP2Shell, rated 9.2 out of 10 for severity. The flaws could allow hackers to access vulnerable servers without The post Crypto Exchange Warning: Critical PHP Flaw Puts Payment Sites at Risk appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dbd9e7163770c3668964",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1400000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/qubic-blockchain-restarts-wallet-hack-recovery/"
      ],
      "firstSeen": "2026-10-21T04:59:19.000Z",
      "updatedAt": "2026-10-22T00:37:14.813Z",
      "summary": "Qubic resumes blockchain operations after a $1.4M wallet hack, opens recovery claims until May 2027 and urges users to replace vulnerable wallet seeds.",
      "revision": 1,
      "sourceHeadline": "Qubic restarts blockchain after $1.4M hack, opens recovery",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "2990693ad96c0509b0e5",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/aave-ceo-introduces-v3-8-upgrade-focused-on-long-term-security-and-gas-efficiency/"
      ],
      "firstSeen": "2026-10-22T00:24:57.000Z",
      "updatedAt": "2026-10-22T00:37:14.813Z",
      "summary": "Aave Labs founder and CEO, Stani Kulechov, presented on Wednesday the technical upgrade proposal for Aave V3.8. Thanks to this upgrade, the accounting security of the decentralized lending protocol will be reinforced through the integration of a reentrancy protection mechanism. The initiative leverages Ethereum’s EIP-1153 standard to neutralize theoretical exploit vectors during external call returns, ... Read more",
      "revision": 1,
      "sourceHeadline": "Aave CEO Introduces V3.8 Upgrade Focused on Long-Term",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2f0616d04f1228b95344",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-losing-steam-on-chain-data/"
      ],
      "firstSeen": "2026-10-21T13:22:16.000Z",
      "updatedAt": "2026-10-21T21:57:21.780Z",
      "summary": "Binance’s stablecoin reserves have dropped to $41.6 billion, a one-year low, after $6.3 billion left the exchange since April. The drain is market-wide, and it is starving crypto rallies of fresh buying power. Prices have not collapsed. Bitcoin (BTC) trades near $83,350, roughly 4% below its September peak. However, the cash needed to push it The post Why Does Bitcoin Keep Losing Steam? On-Chain Data Has a Clue appeared first on BeInCrypto .",
      "revision": 2,
      "sourceHeadline": "Why Does Bitcoin Keep Losing Steam? On-Chain Data",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "45f90b82c5511ef2e60f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-model-finds-severe-php-flaws/"
      ],
      "firstSeen": "2026-10-21T20:44:32.000Z",
      "updatedAt": "2026-10-21T21:57:21.780Z",
      "summary": "AI-assisted vulnerability discovery highlights the urgent need for rapid patching and collaboration to secure critical web infrastructure. The post OpenAI model helps researchers uncover severe PHP flaws affecting most websites appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "OpenAI model helps researchers uncover severe PHP flaws",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8346f4a27cd4ac178ef0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/white-house-cybercrime-roundtable-donald-trump-crypto-ventures"
      ],
      "firstSeen": "2026-10-21T20:19:39.000Z",
      "updatedAt": "2026-10-21T21:57:21.780Z",
      "summary": "The US President detailed many schemes defrauding Americans, but referred only to “cybercurrency“ related to scams.",
      "revision": 1,
      "sourceHeadline": "Trump didn‘t mention ‘crypto’ once in White House cybercrime",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "83df896f19169b73545e",
      "protocol": "€68 Million Crypto Laundering Scandal",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/e68-million-crypto-laundering-scandal-italy-targets-30-suspects-in-cross-border-probe/"
      ],
      "firstSeen": "2026-10-21T19:07:47.000Z",
      "updatedAt": "2026-10-21T21:57:21.780Z",
      "summary": "TL;DR: The Milan Public Prosecutor’s Office and the financial police executed precautionary measures against 30 suspects for illicit transfers estimated at 68 million euros. Judicial authorities ordered the preventive seizure of assets valued at over 21 million euros and identified 110 million euros in fraudulent invoicing. Police operations included cross-border actions in Spain and Switzerland, ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e9077069688b24f7960d",
      "protocol": "Bitcoin hardware wallet hacks force a rethink",
      "chain": "Multi-chain",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-hardware-wallet-hacks-self-custody/"
      ],
      "firstSeen": "2026-10-21T18:06:49.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "The hacks highlight vulnerabilities in hardware wallets, prompting a shift towards multisignature setups and regulated custody services for security. The post Bitcoin hardware wallet hacks force a rethink of self-custody appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8371130ce4edf5d26059",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1400000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/qubic-blockchain-restarts-wallet-hack-recovery/"
      ],
      "firstSeen": "2026-10-21T04:59:19.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "Qubic resumes blockchain operations after a $1.4M wallet hack, opens recovery claims until May 2027 and urges users to replace vulnerable wallet seeds.",
      "revision": 1,
      "sourceHeadline": "Qubic restarts blockchain after $1.4M hack, opens recovery",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "51292f4165892068ca76",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/10/21/trump-to-throw-spotlight-on-overseas-crypto-abuses-in-white-house-event"
      ],
      "firstSeen": "2026-10-21T16:23:44.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "The president is hosting a cybercrime event that will highlight U.S. authorities' efforts to crack down on crypto scams run by foreign criminal organizations.",
      "revision": 1,
      "sourceHeadline": "Trump to throw spotlight on overseas crypto abuses",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "87011d591c3b8d624f8b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/cftc-files-enforcement-action-requiring-louisiana-man/"
      ],
      "firstSeen": "2026-10-21T17:34:29.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "The CFTC has secured a court order demanding over $9 million from a Louisiana man for forex fraud. The post CFTC Files Enforcement Action Requiring Louisiana Man appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "CFTC Files Enforcement Action Requiring Louisiana Man",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ab4cc32d7dbb6c0ec985",
      "protocol": "PHP Panic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381519/php-panic-critical-bugs-70-percent-internet-risk-everyone-freaking-out"
      ],
      "firstSeen": "2026-10-21T15:35:16.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "Two critical bugs in PHP, the language running most of the web, let strangers take over servers without a password. The patch is out, attacks started early, and governments pulled the plug.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bf870bb928966c644cee",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-critical-php-vulnerabilities-checker-tool/"
      ],
      "firstSeen": "2026-10-21T16:39:46.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "The AI-driven discovery of PHP vulnerabilities underscores the critical need for proactive security measures in widely-used web technologies. The post OpenAI helps uncover critical PHP vulnerabilities affecting millions of websites appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "OpenAI helps uncover critical PHP vulnerabilities affecting",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c2c3078b989aedb5f072",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-security-chiefs-sound-alarm-as-php-emergency-patch-scrambles-devs-worldwide/"
      ],
      "firstSeen": "2026-10-21T17:00:04.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "PHP released fixes on Oct. 21 for two critical vulnerabilities that can let unauthenticated attackers run code on web servers, as crypto security executives urged operators to patch and check overlooked infrastructure. The PHP team's security advisory identifies CVE-2026-109618 and CVE-2026-109619, following its Oct. 20 advance warning. Both have a critical CVSS v4.0 severity score… Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Crypto security chiefs sound alarm as PHP emergency patch",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ce697639c4c73928063e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381511/gta-6-trailer-features-dacity-meme-coin-heres-what-traders-think-itll-do"
      ],
      "firstSeen": "2026-10-21T13:16:04.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "Grand Theft Auto 6 is rumoured to feature a meme coin, and crypto traders are speculating on how prominently Rockstar will integrate it.",
      "revision": 1,
      "sourceHeadline": "GTA 6 Trailer Features 'Dacity' Meme Coin—Here's What",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d5b9e66b69d2a9b9ac0c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/trump-administration-targets-international-crypto-scams-amid-over-one-million-fbi-reports/"
      ],
      "firstSeen": "2026-10-21T17:01:57.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "The administration of Donald Trump is preparing new measures against international cryptocurrency fraud networks after the FBI received more than one million scam complaints in 2025. Trump is expected to present updates on the investigations at a White House event alongside senior law enforcement and national security officials. Authorities will address the shutdown of fraudulent ... Read more",
      "revision": 1,
      "sourceHeadline": "Trump Administration Targets International Crypto Scams",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dbb1a0ce42af0a0d8145",
      "protocol": "Why the EU Is Telling Some Websites to Switch",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/critical-php-vulnerabilities-websites-offline/"
      ],
      "firstSeen": "2026-10-21T14:00:00.000Z",
      "updatedAt": "2026-10-21T18:14:14.212Z",
      "summary": "Two critical PHP vulnerabilities rated 9.2 put websites at risk. Learn why CERT-EU tells unpatched sites to go offline and what owners can do. The post Why the EU Is Telling Some Websites to Switch Themselves Off appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4ee0595a9152164c843f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381281/uk-trio-jailed-over-home-invasion-in-failed-crypto-theft-attempt"
      ],
      "firstSeen": "2026-10-19T10:31:09.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "The victim was hit over the head before his teenage sister alerted police, who arrested all three men at the scene in May.",
      "revision": 12,
      "sourceHeadline": "UK Trio Jailed Over Home Invasion in Failed Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ad8412ce1a9efd59b34f",
      "protocol": "Sam Altman's World",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381288/sam-altmans-world-takes-proof-of-human-ids-to-banks-citing-40b-ai-fraud-risk"
      ],
      "firstSeen": "2026-10-19T11:40:40.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "Bain Capital, VanEck and Pantera Capital are among design partners for the offering, which also lets users delegate proofs to AI agents.",
      "revision": 11,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8972998a2b97fcc2d70f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/issuer-blacklists-recovered-nothing-in-60-crypto-exploits-blockaid-finds"
      ],
      "firstSeen": "2026-10-20T13:22:35.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "Victims got back $9.8 million of the $1.18 billion traced between January and August, and every dollar frozen or returned came through governance or validator action",
      "revision": 6,
      "sourceHeadline": "Issuer Blacklists Recovered Nothing in 60 Crypto Exploits",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c044104f71daf7e912b7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 295000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/drift-exploiter-moves-109m-eth-tornado-cash-2-days",
        "https://crypto.news/drift-hacker-109m-eth-tornado-cash/"
      ],
      "firstSeen": "2026-10-21T10:13:52.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "Wallets linked to the $295 million April hack still held $138 million in Ether after sending another $46 million to the mixer Wednesday.",
      "revision": 1,
      "sourceHeadline": "Drift exploiter sends $109M in Ether to Tornado Cash",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "427b569fd7bc440369e0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/b-rgel-says-php-exploits-are-circulating-ahead-of-critical-patches"
      ],
      "firstSeen": "2026-10-21T07:58:31.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "PHP’s fixes are scheduled for 10 a.m. ET; security advisories urge operators to restrict exposed services and prepare to patch immediately.",
      "revision": 1,
      "sourceHeadline": "Bürgel",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "98e4232d90f396a293fc",
      "protocol": "Decibel",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/aptos-decibel-encrypted-mempool-mev-protection/"
      ],
      "firstSeen": "2026-10-21T08:57:07.000Z",
      "updatedAt": "2026-10-21T13:11:08.228Z",
      "summary": "Decibel Trade activates Aptos' Encrypted Mempool, letting traders hide pending order details from validators to reduce frontrunning and sandwich attacks.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2da333e21f3321294465",
      "protocol": "Drift exploiter resurfaces after 2 months",
      "chain": "Solana",
      "technique": "Exploit",
      "lossUsd": 61560000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/drift-exploiter-tornado-cash-eth/"
      ],
      "firstSeen": "2026-10-20T10:19:03.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "Drift Protocol's suspected exploiter reportedly moved 25,700 ETH worth $61.56 million to Tornado Cash, months after the April theft on Solana.",
      "revision": 4,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "8db4e1c5269f2035b5e1",
      "protocol": "Wallet Linked to Drift Exploit Sends $61 Million",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 295000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/drift-exploiter-eth-tornado-cash",
        "https://decrypt.co/381450/wallet-drift-exploit-sends-61-million-ethereum-tornado-cash",
        "https://thedefiant.io/news/hacks/drift-linked-wallet-sends-54-8-million-in-eth-to-tornado-cash"
      ],
      "firstSeen": "2026-10-20T09:12:49.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "The North Korea-linked attacker behind April's $295 million Drift heist pushed 25,700 ETH through the mixer in two hours, and still controls roughly $198 million more.",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "33222694440732cbc592",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1400000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/qubic-blockchain-restarts-wallet-hack-recovery/"
      ],
      "firstSeen": "2026-10-21T04:59:19.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "Qubic resumes blockchain operations after a $1.4M wallet hack, opens recovery claims until May 2027 and urges users to replace vulnerable wallet seeds.",
      "revision": 1,
      "sourceHeadline": "Qubic restarts blockchain after $1.4M hack, opens recovery",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f83dbad689b8f86e4c83",
      "protocol": "FundsModule",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 41000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/fundsmodule-suffers-41k-loss-following-exploit-confirms/"
      ],
      "firstSeen": "2026-10-21T05:05:21.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "FundsModule faces a $41k exploit as SlowMist highlights a major security vulnerability. This incident raises concerns about ecosystem robustness. The post FundsModule Suffers $41k Loss Following Exploit, Confirms appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "599f6c39741b4682f786",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/slowmist-alerts-critical-php-vulnerabilities-potential/"
      ],
      "firstSeen": "2026-10-21T05:06:38.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "SlowMist has announced two critical vulnerabilities in PHP, raising security concerns for crypto platforms. The post SlowMist Alerts Critical PHP Vulnerabilities, Potential appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "SlowMist Alerts Critical PHP Vulnerabilities, Potential",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b2a099708e7548e28288",
      "protocol": "GTA 6 to Drain $1B From US Economy",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/gta-6-launch-us-economy-cost/"
      ],
      "firstSeen": "2026-10-21T05:06:00.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "An economist says GTA 6 absences could cost the US $1B as Take-Two eyes $1B cash flow. Its stock is down 19.79% YTD. The post GTA 6 to Drain $1B From US Economy With Take-Two Expected to Bank the Same Amount appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "2fcce03f8acbdafe7945",
      "protocol": "Unattributed",
      "chain": "BNB Chain",
      "technique": "Security incident",
      "lossUsd": 2840000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/north-korea-linked-squidsquad-suspected-in-2-84m-bnb-chain-theft/"
      ],
      "firstSeen": "2026-10-21T06:54:32.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "An institutional cryptocurrency holder has reportedly lost approximately $2.84 million in a suspected attack by North Korea-linked hacking group SquidSquad. Blockchain investigator ZachXBT disclosed the suspected theft on October 21, identifying October 8 as the date of the incident on…",
      "revision": 1,
      "sourceHeadline": "North Korea-linked SquidSquad suspected in $2.84M BNB Chain",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "d142100a7087e1452fdb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/21/a-company-that-vouches-for-websites-had-secret-keys-so-weak-that-8-of-them-were-cracked"
      ],
      "firstSeen": "2026-10-21T04:11:58.000Z",
      "updatedAt": "2026-10-21T07:28:59.934Z",
      "summary": "Eight secret keys at eMudhra, an Indian firm that vouches for websites, were compromised. This is a generic, not crypto-specific, risk.",
      "revision": 1,
      "sourceHeadline": "A company that vouches for websites had secret keys",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b4ec90e6aa48f365678f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack/"
      ],
      "firstSeen": "2026-10-20T14:00:51.000Z",
      "updatedAt": "2026-10-21T01:57:35.696Z",
      "summary": "Bitquery follows funds into XMR1 purchases on Hyperliquid, but cannot confirm every wallet belonged to an NGRAVE user. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 4,
      "sourceHeadline": "Crypto wallet security crisis deepens as NGRAVE users",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "21637a90577f9ebcce26",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/opencode-breach-api-keys-ai-guardrails/"
      ],
      "firstSeen": "2026-10-21T01:08:05.000Z",
      "updatedAt": "2026-10-21T01:57:35.696Z",
      "summary": "The breach highlights the need for improved AI model cooperation in security, as current guardrails can hinder timely threat response efforts. The post OpenCode breach exposes API keys as AI guardrails stall the defenders appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "OpenCode breach exposes API keys as AI guardrails stall",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "00712676e0eedb40c35b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/uk-deploys-raf-typhoon-jets-to-bolster-saudi-defense-against-houthi-attacks/"
      ],
      "firstSeen": "2026-10-21T01:03:05.000Z",
      "updatedAt": "2026-10-21T01:57:35.696Z",
      "summary": "The UK's increased military support for Saudi Arabia may deter Houthi attacks, reducing the likelihood of Saudi airspace closure. The post UK deploys RAF Typhoon jets to bolster Saudi defense against Houthi attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "UK deploys RAF Typhoon jets to bolster Saudi defense",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "deca061e22b235da3799",
      "protocol": "Wallet Linked to Drift Exploit Sends $61 Million",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 295000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/drift-exploiter-eth-tornado-cash",
        "https://decrypt.co/381450/wallet-drift-exploit-sends-61-million-ethereum-tornado-cash",
        "https://thedefiant.io/news/hacks/drift-linked-wallet-sends-54-8-million-in-eth-to-tornado-cash"
      ],
      "firstSeen": "2026-10-20T09:12:49.000Z",
      "updatedAt": "2026-10-20T23:21:16.886Z",
      "summary": "The North Korea-linked attacker behind April's $295 million Drift heist pushed 25,700 ETH through the mixer in two hours, and still controls roughly $198 million more.",
      "revision": 1,
      "qualityFlags": []
    },
    {
      "id": "2f246e7d49445aa8db8f",
      "protocol": "GTA 6 Early Access Scams Target Fans With Crypto",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 1000,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/gta-6-early-access-scams-target-fans-with-crypto-payments-and-1000-price-tags/"
      ],
      "firstSeen": "2026-10-20T21:01:50.000Z",
      "updatedAt": "2026-10-20T23:21:16.886Z",
      "summary": "TL;DR: Fraudulent web portals charge fees of up to $1,000 in cryptocurrency or drain funds via malicious Web3 connection scripts. Rockstar Games maintains November 19, 2026, as the official release date for Grand Theft Auto VI, with no early testing programs available. Cybersecurity reports document that spoofed sites distribute trojans designed to steal credentials and ... Read more",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d55dd843f894c6d3574f",
      "protocol": "Ionic",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ionic-activist-investor-board-seats/"
      ],
      "firstSeen": "2026-10-20T20:37:00.000Z",
      "updatedAt": "2026-10-20T23:21:16.886Z",
      "summary": "Ionic's reliance on a single lease for revenue highlights vulnerability to activist influence, potentially reshaping its strategic direction. The post Ionic faces a possible activist push for board seats as its AI pivot takes shape appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "363f8f3f4d3af82a95ac",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/drift-linked-wallet-sends-54-8-million-in-eth-to-tornado-cash"
      ],
      "firstSeen": "2026-10-20T09:12:49.000Z",
      "updatedAt": "2026-10-20T20:28:47.349Z",
      "summary": "Five Etherscan-labeled Drift exploiter wallets still hold about 84,164 ETH as recovery efforts continue after April’s attack.",
      "revision": 3,
      "sourceHeadline": "Drift-Linked Wallet Sends $54.8 Million in ETH to Tornado",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1f05f8d1e28d54d362b9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Malware",
      "lossUsd": 20000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/zachxbt-exposes-20m-xmr-laundering-network-on-hyperliquid/",
        "https://crypto.news/zachxbt-freedomxmr-hyperliquid/"
      ],
      "firstSeen": "2026-10-20T12:55:04.000Z",
      "updatedAt": "2026-10-20T20:28:47.349Z",
      "summary": "TL;DR Blockchain investigator ZachXBT linked more than $20 million in suspected illicit funds to FreedomXMR (FXMR), a Monero swap service operating through Hyperliquid Core. More than 87% of the service’s recorded inflows reportedly came from sources associated with hacks, ransomware, malware, and social engineering. The investigation raises questions about safeguards on permissionless crypto platforms while ... Read more",
      "revision": 1,
      "sourceHeadline": "ZachXBT Exposes $20M XMR Laundering Network on Hyperliquid",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "f221199e00f2bd695a5a",
      "protocol": "DefiLlama",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/defillama-unveils-trading-for-protocol-revenue-and-exploit/"
      ],
      "firstSeen": "2026-10-20T19:41:51.000Z",
      "updatedAt": "2026-10-20T20:28:47.349Z",
      "summary": "DefiLlama announces a partnership with Trueo to launch innovative prediction markets, allowing users to trade on protocol revenues and exploit odds. The post DefiLlama Unveils Trading for Protocol Revenue and Exploit appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e9aa59e43a8c1ea40084",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 295000000,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/drift-exploiter-eth-tornado-cash",
        "https://crypto.news/drift-exploiter-tornado-cash-eth/"
      ],
      "firstSeen": "2026-10-20T10:19:03.000Z",
      "updatedAt": "2026-10-20T16:51:53.333Z",
      "summary": "The April 1 hack caused about $295 million in losses and was later attributed to a North Korean threat group in a Mandiant investigation.",
      "revision": 1,
      "sourceHeadline": "Drift exploiter sends $61M ETH to Tornado Cash, holds",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "6d1572e326cdf01a5df7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/mastercard-introduces-fraud-and-sanctions-screening-to-stablecoin-payments/"
      ],
      "firstSeen": "2026-10-20T05:26:08.000Z",
      "updatedAt": "2026-10-20T16:51:53.333Z",
      "summary": "Mastercard has introduced a stablecoin transaction security service that allows financial institutions to screen payments for fraud, scams and sanctions risks before funds move across blockchain networks. According to an October 19 announcement, the company unveiled Stablecoin Security at Money20/20…",
      "revision": 1,
      "sourceHeadline": "Mastercard introduces fraud and sanctions screening",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "397a10b4fa7c29856f1d",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-plans-thai-crypto-exchange-acquisition-weeks-after-388m-hack",
        "https://crypto.news/bitget-thai-crypto-exchange-acquisition/"
      ],
      "firstSeen": "2026-10-20T10:00:00.000Z",
      "updatedAt": "2026-10-20T12:03:00.198Z",
      "summary": "The proposed acquisition would give Bitget a route into Thailand’s crypto market through a locally licensed operator.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "45cdc7b7c093537e1d8e",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 61000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/post-exploitation-drift-protocol-hacker-shifts-61m/"
      ],
      "firstSeen": "2026-10-20T11:04:54.000Z",
      "updatedAt": "2026-10-20T12:03:00.198Z",
      "summary": "The exploiter behind the Drift Protocol hack has moved $61M in Ethereum to Tornado Cash, raising concerns over security and regulatory scrutiny. The post Post-Exploitation, Drift Protocol Hacker Shifts $61M appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Post-Exploitation, Drift Protocol Hacker Shifts $61M",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "023e1d3573a519bfa4d2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/uk-to-fly-missions-defending-saudi-arabia-from-houthi-attacks/"
      ],
      "firstSeen": "2026-10-20T10:17:00.000Z",
      "updatedAt": "2026-10-20T12:03:00.198Z",
      "summary": "The UK's defense missions in Saudi Arabia could alter regional power dynamics, affecting geopolitical stability and market perceptions. The post UK to fly missions defending Saudi Arabia from Houthi attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "UK to fly missions defending Saudi Arabia from Houthi",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dc731aafa4a14c31173a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/qubic-wallet-vulnerability-exposed-by-slowmist-team/"
      ],
      "firstSeen": "2026-10-20T11:44:50.000Z",
      "updatedAt": "2026-10-20T12:03:00.198Z",
      "summary": "Qubic's wallet vulnerability analysis raises significant security concerns, highlighting risks for users. The post Qubic Wallet Vulnerability Exposed by SlowMist Team appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Qubic Wallet Vulnerability Exposed by SlowMist Team",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3ede9be83931a690ed75",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/tokens/papertrade-keeps-paper-non-transferable-citing-perp-attack-risks"
      ],
      "firstSeen": "2026-10-19T22:43:41.000Z",
      "updatedAt": "2026-10-20T12:03:00.198Z",
      "summary": "Holders who earned PAPER through trading losses can stake it for USDC distributions, but still have no date when they can transfer or sell their tokens.",
      "revision": 1,
      "sourceHeadline": "Papertrade Keeps PAPER Non-Transferable, Citing Perp Attack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2dd79e1168ceef7391f4",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/18/crypto-audits-give-investors-false-sense-of-security-as-q3-hacks-cost-usd1-18-billion-hacken-says"
      ],
      "firstSeen": "2026-10-18T13:00:00.000Z",
      "updatedAt": "2026-10-20T06:31:55.813Z",
      "summary": "The security firm found that 77% of third-quarter losses involved compromised suppliers, delayed fixes or systems outside the latest security reviews.",
      "revision": 11,
      "sourceHeadline": "Crypto audits give investors false sense of security",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cb68482c3a3e212c1fa1",
      "protocol": "Crypto exchanges Binance, Coinbase",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/binance-coinbase-west-africa-scam-crackdown/",
        "https://www.coindesk.com/business/2026/10/14/crypto-exchanges-binance-coinbase-join-west-africa-scam-sweep-that-flagged-usd11-million"
      ],
      "firstSeen": "2026-10-18T12:00:00.000Z",
      "updatedAt": "2026-10-20T06:31:55.813Z",
      "summary": "Private-sector partners flagged $11 million in funds that could be frozen, while officials reported cryptocurrency seizures without disclosing their value.",
      "revision": 11,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "f091a5eb6be7a0ce50c3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/mastercard-introduces-fraud-and-sanctions-screening-to-stablecoin-payments/"
      ],
      "firstSeen": "2026-10-20T05:26:08.000Z",
      "updatedAt": "2026-10-20T06:31:55.813Z",
      "summary": "Mastercard has introduced a stablecoin transaction security service that allows financial institutions to screen payments for fraud, scams and sanctions risks before funds move across blockchain networks. According to an October 19 announcement, the company unveiled Stablecoin Security at Money20/20…",
      "revision": 1,
      "sourceHeadline": "Mastercard introduces fraud and sanctions screening",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ef4a9ce9143db8be7e72",
      "protocol": "Crypto hacks",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-hacks-surge-55-to-1-2b-but-key-theft-drops-by-30/"
      ],
      "firstSeen": "2026-10-19T22:30:40.000Z",
      "updatedAt": "2026-10-20T01:13:10.364Z",
      "summary": "The quarterly shift toward contract losses and September's Bitget and Liquid failures challenge a fixed hierarchy of security controls. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8caada7df9f276e5178d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/banco-central-de-reserva-del-peru-issues-warning-against/"
      ],
      "firstSeen": "2026-10-19T23:14:51.000Z",
      "updatedAt": "2026-10-20T01:13:10.364Z",
      "summary": "The Banco Central de Reserva del Perú warns against online investment scams, stressing the importance of safeguarding personal information. The post Banco Central de Reserva del Perú Issues Warning Against appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Banco Central de Reserva del Perú",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0c0f50c1d36f128455ad",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/thorchain-targets-rujira-restart-with-v3-21-exploit-fix"
      ],
      "firstSeen": "2026-10-19T13:10:58.000Z",
      "updatedAt": "2026-10-20T01:13:10.364Z",
      "summary": "The upgrade targets block 28,366,100 around Oct. 23, while Rujira plans to request a conditional 24-hour liquidation grace period for borrowers.",
      "revision": 1,
      "sourceHeadline": "THORChain Targets Rujira Restart With v3.21 Exploit Fix",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d19c0d58e797c6ab3088",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/thorchain-v3-21-restores-solana-and-zcash-trading-fixes-rujira-exploit/",
        "https://thedefiant.io/news/security/thorchain-targets-rujira-restart-with-v3-21-exploit-fix"
      ],
      "firstSeen": "2026-10-19T13:10:58.000Z",
      "updatedAt": "2026-10-19T22:17:13.440Z",
      "summary": "TL;DR: The THORChain v3.21 update is scheduled to activate at block height 28,366,100, estimated for October 23, 2026. The release patches an exploit in Rujira Network’s FIN contract and resolves technical flaws that halted Solana and Zcash trading. The protocol introduces the Streaming Yield feature for bond providers, while native Monero support is postponed to ... Read more",
      "revision": 1,
      "sourceHeadline": "THORChain v3.21 Restores Solana and Zcash Trading, Fixes",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "6a31b04a211facd0fdac",
      "protocol": "Mastercard",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381365/mastercard-brings-its-fraud-fighting-tools-to-stablecoin-payments"
      ],
      "firstSeen": "2026-10-19T19:16:04.000Z",
      "updatedAt": "2026-10-19T22:17:13.440Z",
      "summary": "Unveiled at Money20/20, the API-based tool combines payment and blockchain intelligence to flag fraud, scams and sanctions exposure before funds move on-chain.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2089808d6dcca5bc6731",
      "protocol": "Project Eleven co-founder",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-breaks-post-quantum-hawk-mceliece/"
      ],
      "firstSeen": "2026-10-19T20:19:55.000Z",
      "updatedAt": "2026-10-19T22:17:13.440Z",
      "summary": "AI's ability to uncover vulnerabilities in post-quantum cryptography accelerates the need for adaptive security measures in digital asset protection. The post Project Eleven co-founder warns AI is finding cracks in post-quantum cryptography appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9e0a2a1bb2fcead9f792",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/thorchain-v321-upgrade-rujira-restart/",
        "https://thedefiant.io/news/security/thorchain-targets-rujira-restart-with-v3-21-exploit-fix"
      ],
      "firstSeen": "2026-10-19T13:10:58.000Z",
      "updatedAt": "2026-10-19T17:44:22.263Z",
      "summary": "The restart of Rujira with the exploit fix could stabilize THORChain's ecosystem, enhancing user confidence and expanding trading options. The post THORChain targets Rujira restart with v3.21 exploit fix around Oct 23 appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "THORChain targets Rujira restart with v3.21 exploit fix",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "4d538fd9e6bfac262c61",
      "protocol": "Mastercard",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "aggregate",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/business/2026-10-19-mastercard-unveils-stablecoin-security-tool-to-screen-payments-for-fraud-and-sanctions-risks-420658"
      ],
      "firstSeen": "2026-10-19T16:00:00.000Z",
      "updatedAt": "2026-10-19T17:44:22.263Z",
      "summary": "Mastercard unveiled Stablecoin Security, a risk screening service launching in North America before planned global availability in 2027.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a0b85de072cb10eaf268",
      "protocol": "Trust Wallet",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/trust-wallet-cuts-200-mb-app-code/"
      ],
      "firstSeen": "2026-10-19T16:52:53.000Z",
      "updatedAt": "2026-10-19T17:44:22.263Z",
      "summary": "Streamlining Trust Wallet enhances performance and security, reducing technical debt and attack surfaces, while optimizing resource allocation. The post Trust Wallet cuts 200 MB from its app by deleting nine years of code appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "93fa0f841099039312af",
      "protocol": "Scammer",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381141/scammer-lost-4-8m-in-bitcoin-to-tampered-ledger-wallets-chainalysis"
      ],
      "firstSeen": "2026-10-16T12:22:18.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "The funds came from a task scam that paid people to fake product sales and reviews, then demanded deposits before releasing their pay.",
      "revision": 32,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "824dc28f5a19509df64b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/can-sbf-slash-his-11b-forfeiture-without-winning-a-new-trial/"
      ],
      "firstSeen": "2026-10-17T10:00:00.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "Sam Bankman-Fried, the former CEO of FTX, is seeking Supreme Court review of his conviction and $11 billion forfeiture, raising questions about how US courts calculate financial penalties in cryptocurrency fraud cases. His appeal challenges the evidence used at trial and argues that the forfeiture violates constitutional protections against excessive fines. The case could have ... Read more",
      "revision": 19,
      "sourceHeadline": "Can SBF Slash His $11B Forfeiture Without Winning",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "671c0bbf3a4730e6b570",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/qubic-price-wallet-drain-network-halt/"
      ],
      "firstSeen": "2026-10-19T10:00:00.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "Qubic (QUBIC) fell 5.2% over the past 24 hours to $0.0000004394, according to BeInCrypto Markets data. The drop came after an attacker drained 1,404 Qubic wallets and validators halted the network. The total crypto market declined 2.8% over the same window, so QUBIC fell nearly twice as hard. The steeper slide lines up with a The post How an Attacker Emptied 1,404 Qubic Wallets Without Breaking the Blockchain appeared first on BeInCrypto .",
      "revision": 1,
      "sourceHeadline": "How an Attacker Emptied 1,404 Qubic Wallets Without Breaking",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "92427a87cee32d99a7fa",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds"
      ],
      "firstSeen": "2026-10-19T01:03:27.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "Qubic says 87.1% of the stolen funds remain onchain and the rest were frozen at crypto exchange MEXC, as network validators prepare to vote on a recovery plan.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2059ae90234848b585ff",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1400000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/qubic-hack-leaves-1-4-million-in-stolen-tokens-frozen/"
      ],
      "firstSeen": "2026-10-19T05:06:18.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "Qubic has halted its layer-1 blockchain after an attacker exploited a wallet security flaw to steal approximately 2.94 trillion QU tokens worth $1.4 million from more than 1,400 accounts. According to an Oct. 18 statement from the Qubic core team,…",
      "revision": 1,
      "sourceHeadline": "Qubic hack leaves $1.4 million in stolen tokens frozen",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "29614ad15cba19ba0810",
      "protocol": "Houthi strikes",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-strikes-hit-saudi-arabia-pressure-mounts-on-mbs-to-bolster-defenses/"
      ],
      "firstSeen": "2026-10-19T11:03:30.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "The attacks expose Saudi Arabia's defense vulnerabilities, potentially prompting MBS to strengthen alliances or face leadership scrutiny. The post Houthi strikes hit Saudi Arabia, pressure mounts on MBS to bolster defenses appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "67128a49475331d55cda",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-attack-on-yemeni-military-camp-kills-18-escalating-conflict/"
      ],
      "firstSeen": "2026-10-19T09:43:32.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "The escalation may shift market perceptions, increasing the likelihood of Houthi territorial gains and impacting regional stability and security. The post Houthi attack on Yemeni military camp kills 18, escalating conflict appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Houthi attack on Yemeni military camp kills 18, escalating",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9f61b9f0cc2f22685bb6",
      "protocol": "Zoom",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/zoom-proof-of-human-badges-world-id-ai-deepfakes"
      ],
      "firstSeen": "2026-10-19T05:55:44.000Z",
      "updatedAt": "2026-10-19T11:11:09.499Z",
      "summary": "Sam Altman-backed World has rolled out biometric verification badges for Zoom enterprise users, aiming to combat AI deepfake impersonation and fraud.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7bcf1f52add29a8aca59",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/weekly-crypto-recap-bitcoin-ledger-msci-oct-17-2026/"
      ],
      "firstSeen": "2026-10-17T06:19:17.000Z",
      "updatedAt": "2026-10-19T05:13:40.928Z",
      "summary": "In this week’s edition of the weekly recap, Bitcoin has briefly fallen below $80,000, Ledger has tightened reseller rules after a hardware implant attack, and MSCI has adopted index eligibility changes affecting digital asset treasury companies. Bitcoin, Ledger and MSCI…",
      "revision": 20,
      "sourceHeadline": "Bitcoin slips below $80k, Ledger tightens sales, MSCI",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eef6b2a15e8f9898b209",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/qubic-suffers-major-breach-2-94-trillion-qu-stolen-from/",
        "https://crypto.news/qubic-hack-leaves-1-4-million-in-stolen-tokens-frozen/"
      ],
      "firstSeen": "2026-10-19T02:14:26.000Z",
      "updatedAt": "2026-10-19T05:13:40.928Z",
      "summary": "The Qubic network recently experienced a significant security breach, with over 2.94 trillion QU stolen from 1,404 wallets. The post Qubic Suffers Major Breach, 2.94 Trillion QU Stolen from appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "57d42bf54a68da359fe8",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/qubic-freezes-chain-after-attacker-drains-14k-wallets-with-weak-seeds"
      ],
      "firstSeen": "2026-10-19T01:03:27.000Z",
      "updatedAt": "2026-10-19T05:13:40.928Z",
      "summary": "Qubic says 87.1% of the stolen funds remain onchain and the rest were frozen at crypto exchange MEXC, as network validators prepare to vote on a recovery plan.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f137089595455cd133a0",
      "protocol": "Scammer",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/10/16/scammer-gets-scammed-in-ledger-spy-chip-exploit-loses-almost-usd5-million-in-bitcoin"
      ],
      "firstSeen": "2026-10-16T10:24:30.000Z",
      "updatedAt": "2026-10-19T00:09:18.271Z",
      "summary": "Chainalysis says a fraudster who tricked people through fake online jobs became one of the biggest victims of the compromised hardware wallets.",
      "revision": 28,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "64b74e8ef532b158995c",
      "protocol": "Pirate Chain",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/pirate-chain-says-exploit-created-39-8-million-arrr"
      ],
      "firstSeen": "2026-10-15T23:21:21.000Z",
      "updatedAt": "2026-10-18T21:47:42.522Z",
      "summary": "The network remains operational, but users have been asked not to move funds while developers work on recovery.",
      "revision": 29,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1452ccf87e0561526701",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1300000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/qubic-halts-network-after-1-3-million-wallet-drain"
      ],
      "firstSeen": "2026-10-18T15:09:55.000Z",
      "updatedAt": "2026-10-18T21:47:42.522Z",
      "summary": "Qubic says 87.1% of the drained QU remains immobilized on its network, while MEXC froze the account receiving the rest.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ebd0aa5ae89b7d0ac25e",
      "protocol": "Priceless Pink Diamond",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/pink-diamond-display-diamond-prices-record-low/"
      ],
      "firstSeen": "2026-10-18T16:36:10.000Z",
      "updatedAt": "2026-10-18T19:23:44.715Z",
      "summary": "A priceless pink diamond stolen in 1926 is back on display in France, just as natural diamond prices sink to record lows on lab-grown rivals. The post Priceless Pink Diamond Returns After 100 Years as Prices Crash appeared first on BeInCrypto .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "813d5839b789ce99871d",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1300000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/qubic-halts-network-after-1-3-million-wallet-drain"
      ],
      "firstSeen": "2026-10-18T15:09:55.000Z",
      "updatedAt": "2026-10-18T16:49:50.348Z",
      "summary": "Qubic says 87.1% of the drained QU remains immobilized on its network, while MEXC froze the account receiving the rest.",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5e8ee78b9aa1b7a56979",
      "protocol": "Bitcoin ETFs Shed Nearly $1 Billion in Two Weeks",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381246/bitcoin-etfs-shed-nearly-1-billion-two-weeks-uptober-red"
      ],
      "firstSeen": "2026-10-18T15:01:04.000Z",
      "updatedAt": "2026-10-18T16:49:50.348Z",
      "summary": "Bitcoin ETFs lost a net $228.6 million this week, following a $681.1 million drain the week before and pushing October deep into the red.",
      "revision": 1,
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4b5ceb7fafb589cdf163",
      "protocol": "Qubic",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/qubic-halts-mainnet-wallet-drain/"
      ],
      "firstSeen": "2026-10-18T15:18:32.000Z",
      "updatedAt": "2026-10-18T16:49:50.348Z",
      "summary": "The incident highlights vulnerabilities in third-party wallet software, impacting user trust and necessitating stronger security measures in decentralized networks. The post Qubic halts mainnet after wallet drain empties 1,404 accounts appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5f8282ce6d3223a75e04",
      "protocol": "Senator Lummis",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/senator-lummis-reveals-whistleblower-protections-in-crypto/"
      ],
      "firstSeen": "2026-10-18T16:26:50.000Z",
      "updatedAt": "2026-10-18T16:49:50.348Z",
      "summary": "Senator Cynthia Lummis promotes whistleblower protections for those reporting crypto fraud, emphasizing the need for clarity in regulations. The post Senator Lummis Reveals Whistleblower Protections in Crypto appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8e1e0f5b803607633765",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/legal-risks-ai-companies-agent-hacking/"
      ],
      "firstSeen": "2026-10-18T16:48:29.000Z",
      "updatedAt": "2026-10-18T16:49:50.348Z",
      "summary": "The mounting legal challenges for AI firms highlight the urgent need for updated regulations and accountability frameworks in AI governance. The post Legal risks mount for AI companies after autonomous agents breach outside systems appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Legal risks mount for AI companies after autonomous agents",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bc1a5ce73ddf99c978d3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/criptomonedas/zcash-sigue-en-etapa-temprana-dice-tyler-winklevoss-mientras-crecen-alertas-por-fondos-robados/"
      ],
      "firstSeen": "2026-10-18T12:17:52.000Z",
      "updatedAt": "2026-10-18T13:11:16.825Z",
      "summary": "Tyler Winklevoss sostiene que Zcash todavía tiene amplio espacio para ampliar su adopción, aunque informes sobre fondos vinculados a exploits han puesto bajo escrutinio las funciones de privacidad de ZEC.",
      "revision": 1,
      "sourceHeadline": "Zcash sigue en etapa temprana, dice Tyler Winklevoss",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4c34032116d625c18e2d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bahrain-condemns-attacks-on-vessels-in-bab-al-mandab-and-hormuz-straits/"
      ],
      "firstSeen": "2026-10-18T10:14:31.000Z",
      "updatedAt": "2026-10-18T11:45:51.561Z",
      "summary": "Heightened regional tensions may lead to increased security measures and potential airspace closures, impacting Gulf stability and trade. The post Bahrain condemns attacks on vessels in Bab al-Mandab and Hormuz straits appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "Bahrain condemns attacks on vessels in Bab al-Mandab",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c8f3dedcd1d1e5ea6eaf",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/onchain-data-shows-hackers-moving-stolen-funds-to-zcash/"
      ],
      "firstSeen": "2026-10-18T07:45:42.000Z",
      "updatedAt": "2026-10-18T09:01:51.973Z",
      "summary": "The headline is straightforward and identifies the central allegation without suggesting that Zcash itself was hacked or that every reported transfer has been independently verified.",
      "revision": 1,
      "sourceHeadline": "Onchain data shows hackers moving stolen funds to Zcash",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3572a8b918669f52a32d",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/ledger-spy-chip-controversy-wallet-security/"
      ],
      "firstSeen": "2026-10-18T08:00:00.000Z",
      "updatedAt": "2026-10-18T09:01:51.973Z",
      "summary": "For years, hardware wallets occupied a special place in the cryptocurrency security hierarchy. The argument was straightforward: keep private keys offline and eliminate most digital attack vectors. That logic remains technically sound. Yet the discovery of unauthorized LTE-enabled implants inside genuine hardware wallets has exposed a different category of risk, one that software patches, firmware ... Read more",
      "revision": 1,
      "sourceHeadline": "Will Ledger’s Spy Chip Controversy Permanently Damage",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "06eeccc188ece1e35183",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/us-chip-stocks-longest-losing-streak-2008/"
      ],
      "firstSeen": "2026-10-18T04:54:12.000Z",
      "updatedAt": "2026-10-18T07:00:51.695Z",
      "summary": "The recent plunge in US chip stocks highlights vulnerabilities in AI-driven markets, emphasizing the risks of financing dependencies and market sentiment. The post US chip stocks plunge 16% in longest losing streak since 2008 appeared first on Crypto Briefing .",
      "revision": 1,
      "sourceHeadline": "US chip stocks plunge 16% in longest losing streak",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "80ecf55a5c95e16b34cb",
      "protocol": "Brooklyn prosecutor Alona Katz",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/alona-katz-brooklyn-crypto-scam-crackdown/"
      ],
      "firstSeen": "2026-10-17T14:14:01.000Z",
      "updatedAt": "2026-10-18T04:19:48.698Z",
      "summary": "The crackdown highlights the urgent need for stronger legal frameworks to combat sophisticated crypto scams and protect vulnerable communities. The post Brooklyn prosecutor Alona Katz takes on crypto scam networks behind $11 billion in losses appeared first on Crypto Briefing .",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "df956bc519c1f4bb2dae",
      "protocol": "OpenCode discloses distillation attack",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/opencode-distillation-attack-api-key-breach/"
      ],
      "firstSeen": "2026-10-17T19:19:48.000Z",
      "updatedAt": "2026-10-17T21:41:16.136Z",
      "summary": "The breach highlights the growing need for robust security measures in AI platforms, as attackers exploit vulnerabilities for competitive advantage. The post OpenCode discloses distillation attack that hit 1.4% of Console users appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d9a65a336c29a0410eae",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/381236/crypto-firms-launch-quantum-alliance-as-6-million-bitcoin-sit-exposed"
      ],
      "firstSeen": "2026-10-17T16:01:03.000Z",
      "updatedAt": "2026-10-17T16:38:10.989Z",
      "summary": "The nine-member group, modeled on the Internet Engineering Task Force, aims to set open standards for testing quantum-resistance claims as forecasts place the first practical attack in the late 2020s.",
      "revision": 1,
      "sourceHeadline": "Crypto Firms Launch Quantum Alliance as 6 Million Bitcoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ae25bd590bafa32b7527",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-strike-aden-airport-as-saudi-arabia-intercepts-missile-attacks/"
      ],
      "firstSeen": "2026-10-17T08:53:22.000Z",
      "updatedAt": "2026-10-17T15:45:53.370Z",
      "summary": "The escalation may lead to regional instability, affecting markets and increasing the likelihood of airspace restrictions and further conflict. The post Houthis strike Aden airport as Saudi Arabia intercepts missile attacks appeared first on Crypto Briefing .",
      "revision": 4,
      "sourceHeadline": "Houthis strike Aden airport as Saudi Arabia intercepts",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b336bcc1507fe08093ed",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/zcash-becomes-favored-tool-for-hackers-moving-stolen-assets/"
      ],
      "firstSeen": "2026-10-17T13:46:50.000Z",
      "updatedAt": "2026-10-17T15:45:53.370Z",
      "summary": "Recent data reveals hackers are increasingly using Zcash to launder stolen funds. This trend raises concerns about the privacy coin's role in illicit activities. The post Zcash Becomes Favored Tool for Hackers Moving Stolen Assets appeared first on Coinfomania .",
      "revision": 1,
      "sourceHeadline": "Zcash Becomes Favored Tool for Hackers Moving Stolen Assets",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "658d4063274492b4e0e8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/eclair-blocks-browser-requests-that-could-let-a-webpage-control-a-bitcoin-lightning-node/"
      ],
      "firstSeen": "2026-10-17T12:00:20.000Z",
      "updatedAt": "2026-10-17T13:08:43.553Z",
      "summary": "The Oct. 15 release blocks a cached-authentication route to Eclair's API and requires direct browser interfaces to add a backend. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Eclair patches a browser attack that could send commands",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3c9f34a682ee5a87347f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380940/ledger-asks-resellers-in-seven-asian-markets-to-pull-devices-after-suspected-86m-drain"
      ],
      "firstSeen": "2026-10-14T13:47:44.000Z",
      "updatedAt": "2026-10-17T11:45:52.615Z",
      "summary": "European electronics chain MediaMarkt Saturn has also halted Ledger sales after a customer in Germany reported finding an implant.",
      "revision": 14,
      "lossBasis": "market",
      "sourceHeadline": "Ledger Asks Resellers in Seven Asian Markets to Pull",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "56d260be5d9d5060c374",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/uk-advises-against-non-essential-travel-to-saudi-arabia-amid-houthi-attacks/"
      ],
      "firstSeen": "2026-10-16T22:21:43.000Z",
      "updatedAt": "2026-10-17T11:45:52.615Z",
      "summary": "The UK's travel advisory highlights growing regional instability, potentially affecting global markets and diplomatic relations in the Middle East. The post UK advises against non-essential travel to Saudi Arabia amid Houthi attacks appeared first on Crypto Briefing .",
      "revision": 7,
      "sourceHeadline": "UK advises against non-essential travel to Saudi Arabia",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "deb4994eb3a3b4284247",
      "protocol": "OpenAI models",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "lossBasis": "market",
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-models-hacked-crypto-wallet-breached-websites-ars-technica/"
      ],
      "firstSeen": "2026-10-16T21:01:41.000Z",
      "updatedAt": "2026-10-17T07:30:58.242Z",
      "summary": "OpenAI's security breach raises concerns over its protocols, impacting market confidence and potentially affecting future partnerships and valuations. The post OpenAI models hacked crypto wallet, breached websites: Ars Technica appeared first on Crypto Briefing .",
      "revision": 6,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8610d97dfb4f64d0c7ae",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1500000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/uncx-exploit-exposes-share-accounting-flaw-behind-loss/"
      ],
      "firstSeen": "2026-10-16T19:24:39.000Z",
      "updatedAt": "2026-10-16T21:00:43.270Z",
      "summary": "UNCX’s Vesting V2 exploit has exposed a share-accounting flaw that let attackers inflate their claims on pooled tokens, Immunefi’s security chief has explained following reports of roughly $1.5 million drained across four chains. Gonçalo Magalhães, head of security at Immunefi,…",
      "revision": 1,
      "sourceHeadline": "UNCX exploit exposes share-accounting flaw behind reported",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "cbc5da17eda58219ea76",
      "protocol": "Three missiles fired at Aden airport controlled",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/three-missiles-fired-at-aden-airport-controlled-by-saudi-backed-forces-tasnim/"
      ],
      "firstSeen": "2026-10-16T18:59:48.000Z",
      "updatedAt": "2026-10-16T21:00:43.270Z",
      "summary": "The attack on Aden airport may lead to stricter security measures, impacting regional stability and civilian aviation safety. The post Three missiles fired at Aden airport controlled by Saudi-backed forces, Tasnim News reports appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9be8332842189b781a84",
      "protocol": "Ledger loss",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-losses-panic-scams-not-tampering/"
      ],
      "firstSeen": "2026-10-16T18:49:20.000Z",
      "updatedAt": "2026-10-16T21:00:43.270Z",
      "summary": "The panic-driven scams highlight the critical need for user education on security practices and cautious handling of recovery phrases. The post Ledger loss reports stem from panic scams, not tampered devices, says Monahan appeared first on Crypto Briefing .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aa7c83e186150474a4db",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/karpel-s-reports-ledger-implants-in-devices-from-two-more-resellers"
      ],
      "firstSeen": "2026-10-16T18:13:04.000Z",
      "updatedAt": "2026-10-16T18:18:52.212Z",
      "summary": "Ledger says German stock inspections found no tampering and it has not verified a drain tied to a device bought outside Southeast Asia. Its authenticity check cannot detect the added hardware.",
      "revision": 1,
      "sourceHeadline": "Karpelès",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "15e04bf8871a0bda83bb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "lossBasis": "event",
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/toronto-police-charge-reservists-crypto-kidnapping/",
        "https://decrypt.co/381148/three-canadian-armed-forces-members-charged-in-kidnapping-of-crypto-exchange-owner"
      ],
      "firstSeen": "2026-10-16T15:43:58.000Z",
      "updatedAt": "2026-10-16T16:46:13.402Z",
      "summary": "Police seized guns, silencers and more than 2,000 rounds of ammunition, nearly all of it allegedly stolen from the Canadian military.",
      "revision": 1,
      "sourceHeadline": "Three Canadian Armed Forces Members Charged in Kidnapping",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "aa5e2cf5425e1ba8ba59",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 3800000,
      "lossBasis": "event",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/near-intents-postmortem-links-3-8-million-exploit-to-deposit-bug"
      ],
      "firstSeen": "2026-10-16T16:28:04.000Z",
      "updatedAt": "2026-10-16T16:46:13.402Z",
      "summary": "The protocol removed deposit notifications after another critical bug report and says all affected users were made whole.",
      "revision": 1,
      "sourceHeadline": "NEAR Intents Postmortem Links $3.8 Million Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "56bf430b9531f1931326",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/microsoft-exposes-how-usdt-funded-phishing-network-targeted-75000-organizations/"
      ],
      "firstSeen": "2026-10-16T15:20:01.000Z",
      "updatedAt": "2026-10-16T16:46:13.402Z",
      "summary": "Domain seizures and account shutdowns hit YAM Store and phishing-kit services, while reported asset freezes remain unquantified. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "sourceHeadline": "Microsoft exposes how USDT-funded phishing network targeted",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b5c4800c020a8d73970f",
      "protocol": "Bangko Sentral",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "lossBasis": "unknown",
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bangko-sentral-warns-of-scams-impersonating-officials/"
      ],
      "firstSeen": "2026-10-16T15:54:50.000Z",
      "updatedAt": "2026-10-16T16:46:13.402Z",
      "summary": "Bangko Sentral ng Pilipinas warns the public about scams involving false claims from impersonators. This alert underscores the importance of verifying communications. The post Bangko Sentral Warns of Scams Impersonating Officials appeared first on Coinfomania .",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0bb8e0d33eba2355e5fa",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/quantum-alliance-sets-post-quantum-standards/"
      ],
      "firstSeen": "2026-10-16T12:49:37.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "Leaders from nine blockchain organizations launched the Quantum Alliance on October 15 to create open standards for assessing post-quantum readiness across blockchains, wallets and infrastructure. The initiative addresses the long-term risk that sufficiently capable quantum computers could eventually compromise the elliptic-curve signatures securing networks such as Bitcoin, while no existing quantum computer can currently perform ... Read more",
      "revision": 2,
      "lossBasis": "unknown",
      "sourceHeadline": "Quantum Alliance Sets Post-Quantum Blockchain Standards",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f8bac5cfcfe8b887c785",
      "protocol": "Bitcoin outflows",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coinshares-434m-outflows-cpi-rise/"
      ],
      "firstSeen": "2026-10-16T10:52:18.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "Heightened US inflation and retail sales data underscore crypto's vulnerability to macroeconomic shifts, influencing investor sentiment and fund flows. The post Bitcoin outflows rise as resilient US economy complicates Fed policy: CoinShares appeared first on Crypto Briefing .",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ec52bdc4488786430e9c",
      "protocol": "Even Scammers",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 100000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/suspected-scammer-loses-ledger-drain-irony/"
      ],
      "firstSeen": "2026-10-16T10:04:14.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "A suspected scammer who lost roughly $4.8 million in a Ledger wallet drain has become the unlikely face of the wider $100 million Ledger theft. The twist is that the stolen money was itself stolen, turning a scam story into a lesson in custody. How a Scam’s Proceeds Ended Up Drained A task scam dangles The post Even Scammers Get Robbed: $4.8M Gone in the Ledger Wallet Drain appeared first on BeInCrypto .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "4a47dac60718e359693f",
      "protocol": "Unattributed",
      "chain": "Polygon",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/polygon-fixes-bugs-that-let-cheap-transactions-overload-nodes-for-11-seconds/"
      ],
      "firstSeen": "2026-10-16T01:26:37.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "TL;DR: Two Vulnerabilities Mitigated: Polygon fixed medium-severity flaws in the BlockSTM V2 parallel execution engine of its Bor client. Computational Overload: Technical tests recorded delays of up to 11 seconds in the parallel engine compared to the milliseconds required by the serial path. Phased Rollout: The private rollout began on October 5 on Amoy and ... Read more",
      "revision": 2,
      "lossBasis": "unknown",
      "sourceHeadline": "Polygon Fixes Bugs That Let Cheap Transactions Overload",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7e659d53cdaae752f559",
      "protocol": "Aztec",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/aztec-plans-major-blockchain-overhaul-by-2030-to-prepare-for-quantum-threats/"
      ],
      "firstSeen": "2026-10-16T00:37:32.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "TL;DR: Aztec scheduled late 2030 for the completion of its comprehensive technical transition toward post-quantum cryptography schemes. The roadmap establishes February 2027 as the deadline to deploy developer libraries safeguarding against “harvest now, decrypt later” attacks. The technical schedule projects selecting new digital signature schemes in March 2027, public-key encryption in July 2027, and zero-knowledge ... Read more",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "622eba9d6fad55f539d4",
      "protocol": "Scammer",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": 4800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/scammer-loses-48m-stored-on-tampered-ledgers-asia-express",
        "https://crypto-economy.com/scammer-loses-over-60-btc-in-ledger-theft-after-defrauding-victims-through-fake-tasks/"
      ],
      "firstSeen": "2026-10-15T22:42:58.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "A scammer reportedly lost $4.8M of stolen money after storing the funds on tampered Ledgers. Bitcoin and Ether ETFs launch trading in Thailand and South Korea blocks 27 exchanges.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "462dd8d0edcaf6108514",
      "protocol": "Brooklyn Prosecutors",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/381000/brooklyn-prosecutors-take-down-112-servers-behind-crypto-scam-targeting-russian-speakers",
        "https://www.coindesk.com/business/2026/10/15/how-brooklyn-prosecutors-and-the-fbi-took-down-a-massive-crypto-fraud-network-targeting-russian-speakers"
      ],
      "firstSeen": "2026-10-15T10:01:21.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "The scammers also ran a fake recovery service, contacting victims weeks later with promises to get their stolen crypto back.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "1efa3a0b76184986c649",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 1200000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-liquid-exploits-push-crypto-hacks-near-12b-q3"
      ],
      "firstSeen": "2026-10-15T10:00:00.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "Compromised suppliers, developer tools and infrastructure components outside security audits drove about 77% of the quarter’s total losses, according to Hacken.",
      "revision": 2,
      "lossBasis": "aggregate",
      "sourceHeadline": "Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dcc2e1a2f1c4dde4865a",
      "protocol": "South Korea",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/south-korea-cybersecurity-overhaul-crypto-exchanges"
      ],
      "firstSeen": "2026-10-15T05:52:21.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "South Korea is proposing tougher cybersecurity assessments after a review identified security deficiencies at 130 financial firms.",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e4324d80464faa6f71e2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380998/scientists-want-ai-cut-off-from-internet"
      ],
      "firstSeen": "2026-10-14T21:46:04.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "After a summer of AI models escaping test environments and hacking real companies, hundreds of researchers say the internet itself should be treated as a security boundary.",
      "revision": 2,
      "lossBasis": "unknown",
      "sourceHeadline": "Godfather of AI and 400 Scientists Want AI Models",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ad4131580c4f7b5f9da1",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 93000000,
      "lossBasis": "event",
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/podcasts-and-videos/podcast/ledger-was-hacked-who-do-you-trust-with-your-keys-now"
      ],
      "firstSeen": "2026-10-15T18:14:31.000Z",
      "updatedAt": "2026-10-16T14:41:15.098Z",
      "summary": "The Defiant Livestream | Wednesday, Oct. 14, 1:00pm ET Up to $93M drained from more than 300 wallets, and the software was never touched. Ledger confirmed a physical implant inside signers sold through reseller CryptoBilis, reading recovery phrases off the screen at setup and sending them out over",
      "revision": 1,
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "77cd5c15a85f26759748",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/asian-tour-postpones-saudi-international-after-riyadh-airport-attacks/"
      ],
      "firstSeen": "2026-10-16T09:51:56.000Z",
      "updatedAt": "2026-10-16T11:46:19.141Z",
      "summary": "The postponement underscores regional instability, potentially affecting international events and airspace security perceptions in the Middle East. The post Asian Tour postpones Saudi International after Riyadh airport attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Asian Tour postpones Saudi International after Riyadh",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "848551100a7fae479b9a",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/16/experts-agree-quantum-computers-could-put-satoshi-s-bitcoin-at-risk-but-not-on-what-s-next"
      ],
      "firstSeen": "2026-10-16T10:52:26.000Z",
      "updatedAt": "2026-10-16T11:46:19.141Z",
      "summary": "Nine crypto companies launched the Quantum Alliance to jointly prepare for quantum attacks, but they disagree on when the threat will arrive and whether vulnerable BTC should be frozen.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Quantum Alliance forms amid warnings 6.4 million bitcoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1df7511df8332ee3c365",
      "protocol": "Elliptic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/elliptic-reports-over-60-dprk-linked-attacks-on-crypto/"
      ],
      "firstSeen": "2026-10-16T10:44:50.000Z",
      "updatedAt": "2026-10-16T11:46:19.141Z",
      "summary": "Elliptic's recent findings reveal over 60 suspected DPRK-linked attacks in the crypto space, highlighting security risks. The post Elliptic Reports Over 60 DPRK-Linked Attacks on Crypto appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb5e35fd49aa9d857b10",
      "protocol": "Ledger Users Warned of Fake Firmware Update Scam",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ledger-users-warned-of-fake-firmware-update-scam/"
      ],
      "firstSeen": "2026-10-16T07:04:49.000Z",
      "updatedAt": "2026-10-16T09:14:58.839Z",
      "summary": "A phishing campaign is exploiting a recent Ledger incident. Users are urged to stay vigilant. The post Ledger Users Warned of Fake Firmware Update Scam appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7a2b14e6fb3fb083c6db",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yemen-forces-repel-houthi-attacks-on-strategic-jabal-han-near-taiz/"
      ],
      "firstSeen": "2026-10-16T05:55:43.000Z",
      "updatedAt": "2026-10-16T07:01:10.868Z",
      "summary": "The repulsion of Houthi attacks highlights the ongoing strategic battle for control over vital supply routes, impacting regional stability. The post Yemen forces repel Houthi attacks on strategic Jabal Han near Taiz appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Yemen forces repel Houthi attacks on strategic Jabal Han",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2b455aec38ba5601eeb7",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ethereum-sepolia-wallet-breach-revealed-by-openai-internal/"
      ],
      "firstSeen": "2026-10-16T06:36:46.000Z",
      "updatedAt": "2026-10-16T07:01:10.868Z",
      "summary": "OpenAI disclosed that its internal AI model accessed a funded Ethereum Sepolia testnet wallet without authorization, raising security alarms. The post Ethereum Sepolia Wallet Breach Revealed by OpenAI Internal appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ethereum Sepolia Wallet Breach Revealed by OpenAI Internal",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6ff10f56775d7456c1d7",
      "protocol": "BTRST’s 10.56%",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/btrsts-10-56-drop-reveals-market-vulnerabilities/"
      ],
      "firstSeen": "2026-10-16T05:23:49.000Z",
      "updatedAt": "2026-10-16T07:01:10.868Z",
      "summary": "BTRST has seen a sharp 10.56% decline in the last hour, reflecting broader market vulnerabilities. The post BTRST’s 10.56% Drop Reveals Market Vulnerabilities appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "632829c0e8db43a7dd5e",
      "protocol": "Hedge funds",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/hedge-funds-worst-day-ai-stock-selloff/"
      ],
      "firstSeen": "2026-10-16T04:03:17.000Z",
      "updatedAt": "2026-10-16T04:21:30.689Z",
      "summary": "The AI stock selloff highlights the vulnerability of hedge funds to macroeconomic shifts, potentially reshaping investment strategies globally. The post Hedge funds suffer worst day since August as AI stock selloff deepens appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "855db3c2026448f48dc8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/ledger-wants-customers-to-trust-its-new-849-device-as-criminals-compromise-existing-wallets/"
      ],
      "firstSeen": "2026-10-16T00:00:02.000Z",
      "updatedAt": "2026-10-16T02:31:18.399Z",
      "summary": "Reservations are open for the data-only device, which pairs everyday apps with hardware approvals and targets 2027 delivery. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Ledger wants customers to trust its new $849 device",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0953a1ecbe65b1561cac",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/will-gta-6-feature-bitcoin-new-trailer-reignites-crypto-speculation-ahead-of-launch/"
      ],
      "firstSeen": "2026-10-16T00:02:35.000Z",
      "updatedAt": "2026-10-16T02:31:18.399Z",
      "summary": "TL;DR: Rockstar Games published the official launch trailer for Grand Theft Auto VI (GTA 6) on October 15, 2026, setting its definitive release date for November 19, 2026, on PlayStation 5 and Xbox Series X|S. The 90-second footage omitted any reference, payment rail, or announcement concerning Bitcoin, Ethereum, or the Tether (USDT) stablecoin. Corporate policy ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Will GTA 6 Feature Bitcoin? New Trailer Reignites Crypto",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2840580517db4a507934",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/82-criminal-charges-follow-armed-crypto-abduction-in-toronto/"
      ],
      "firstSeen": "2026-10-16T02:20:21.000Z",
      "updatedAt": "2026-10-16T02:31:18.399Z",
      "summary": "Toronto police allege attackers sought cryptocurrency and business security access; searches uncovered ammunition stolen from the military. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "82 criminal charges follow armed crypto abduction in Toronto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a3dbd159ff85ca8d5dee",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/pirate-chain-exploit-arrr-rollback/",
        "https://thedefiant.io/news/hacks/pirate-chain-says-exploit-created-39-8-million-arrr"
      ],
      "firstSeen": "2026-10-15T23:21:21.000Z",
      "updatedAt": "2026-10-15T23:48:09.426Z",
      "summary": "The Pirate Chain exploit highlights the challenges of maintaining security in privacy-focused cryptocurrencies, emphasizing the need for robust validation. The post Pirate Chain exploit mints around 39.8 million ARRR, team proposes rollback appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Pirate Chain exploit mints around 39.8 million ARRR, team",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "e315a690edba37f4518b",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-supply-chain-attack-crypto-scammer-btc/"
      ],
      "firstSeen": "2026-10-15T23:37:25.000Z",
      "updatedAt": "2026-10-15T23:48:09.426Z",
      "summary": "The attack highlights vulnerabilities in hardware wallet supply chains, potentially undermining trust in self-custody and prompting regulatory scrutiny. The post Ledger supply-chain attack drains over 60 BTC from wallet tied to alleged crypto scammer appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Ledger supply-chain attack drains over 60 BTC from wallet",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a39c578e3b07a84e84d2",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/quantum-fixes-protect-bitcoin-but-legit-owners-risk-lockout/"
      ],
      "firstSeen": "2026-10-15T22:40:17.000Z",
      "updatedAt": "2026-10-15T23:48:09.426Z",
      "summary": "Nic Carter's hypothetical attack highlights why safer signatures would leave an ownership choice for holders unable to migrate or prove prior control. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Quantum fixes protect Bitcoin, but legit owners risk lockout",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0ffa4fedd3eb6247ee77",
      "protocol": "Hackers",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/hackers-take-over-irish-police-x-accounts-to-promote-fake-xrp-airdrop/"
      ],
      "firstSeen": "2026-10-15T20:22:25.000Z",
      "updatedAt": "2026-10-15T21:17:26.365Z",
      "summary": "TL;DR Hackers compromised two official Irish police accounts on X, reaching a combined audience of more than 900,000 followers. The attackers published hundreds of fraudulent posts promoting fake XRP allocations and directing users toward links associated with the Xaman wallet. An Garda Síochána confirmed that the breach was limited to X, with no evidence of ... Read more",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "556441ff075b4e3ba29e",
      "protocol": "60 Bitcoin",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/60-bitcoin-lost-in-ledger-theft-linked-to-scam-activity/"
      ],
      "firstSeen": "2026-10-15T20:32:49.000Z",
      "updatedAt": "2026-10-15T21:17:26.365Z",
      "summary": "A recent Twitter revelation highlights a scammer's substantial loss in a Ledger theft. This incident underscores the complexities of cryptocurrency fraud. The post 60 Bitcoin Lost in Ledger Theft Linked to Scam Activity appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "56dd89baefe011da5b7e",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 93000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/podcasts-and-videos/podcast/ledger-was-hacked-who-do-you-trust-with-your-keys-now"
      ],
      "firstSeen": "2026-10-15T18:14:31.000Z",
      "updatedAt": "2026-10-15T20:16:20.585Z",
      "summary": "The Defiant Livestream | Wednesday, Oct. 14, 1:00pm ET Up to $93M drained from more than 300 wallets, and the software was never touched. Ledger confirmed a physical implant inside signers sold through reseller CryptoBilis, reading recovery phrases off the screen at setup and sending them out over",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c2812e4bb9a03918f420",
      "protocol": "South Korea",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/south-korea-names-two-crypto-firms-in-breach-wave-that-also-hit-major-banks/"
      ],
      "firstSeen": "2026-10-15T19:00:53.000Z",
      "updatedAt": "2026-10-15T20:16:20.585Z",
      "summary": "Streami and Pravang are among 16 affected financial companies as the FSC outlines plans for a wider security overhaul. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "735723ae8971a6fea4d3",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/criminals-steal-90m-tampered-hardware-wallets/"
      ],
      "firstSeen": "2026-10-15T17:57:19.000Z",
      "updatedAt": "2026-10-15T20:16:20.585Z",
      "summary": "The incident highlights vulnerabilities in supply chains and raises concerns about the security of crypto assets, impacting user trust and market stability. The post Criminals steal an estimated $90M in crypto using tampered hardware wallets appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Criminals steal an estimated $90M in crypto using tampered",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c7deadc2c6c73533ae87",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-attack-on-aden-presidential-palace-kills-5-wounds-16-yemen-health/"
      ],
      "firstSeen": "2026-10-15T19:41:30.000Z",
      "updatedAt": "2026-10-15T20:16:20.585Z",
      "summary": "The attack exacerbates regional instability, potentially influencing market perceptions and future geopolitical dynamics in Yemen and beyond. The post Houthi attack on Aden presidential palace kills 5, wounds 16: Yemen health minister appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Houthi attack on Aden presidential palace kills 5, wounds",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fdc0e74e9860f9303282",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/graft-deletable-adapter-curbs-reward-hacking/"
      ],
      "firstSeen": "2026-10-15T19:06:35.000Z",
      "updatedAt": "2026-10-15T20:16:20.585Z",
      "summary": "GRAFT's deletable adapter could revolutionize AI training by reducing reward hacking, potentially leading to more reliable AI systems. The post GRAFT method uses a deletable adapter to curb reward hacking in AI models appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "GRAFT method uses a deletable adapter to curb reward",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ab2f48d05aaa66b5ce0d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380808/leave-crypto-backlash-over-french-proposal-to-report-wallets-over-112k"
      ],
      "firstSeen": "2026-10-13T10:30:37.000Z",
      "updatedAt": "2026-10-15T17:43:39.229Z",
      "summary": "The proposal would require crypto owners to report holdings over €100,000, sparking concerns following a wave of \"wrench attacks\" in France.",
      "revision": 28,
      "lossBasis": "unknown",
      "sourceHeadline": "‘Leave’",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "88053563b5a617082830",
      "protocol": "IMF",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/imf-warns-ai-stock-market-correction-risk/"
      ],
      "firstSeen": "2026-10-15T17:14:25.000Z",
      "updatedAt": "2026-10-15T17:43:39.229Z",
      "summary": "An AI-driven market correction could tighten global financial conditions, impacting investment and exposing vulnerabilities in Asian markets. The post IMF warns the risk of an AI-driven stock market correction is rising appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f10f75b263a370800c5d",
      "protocol": "Ireland’s national police",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ireland-garda-x-accounts-hacked-crypto-scam/"
      ],
      "firstSeen": "2026-10-15T14:35:38.000Z",
      "updatedAt": "2026-10-15T15:31:39.512Z",
      "summary": "The incident highlights the vulnerability of social media platforms to cyberattacks, posing significant risks to public trust and institutional reputations. The post Ireland’s national police warns of hacked X accounts promoting crypto scams appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c084245a9cc1687676df",
      "protocol": "A Crypto Scam in Brooklyn",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/brooklyn-da-crypto-scam-russian-speakers/"
      ],
      "firstSeen": "2026-10-15T12:36:42.000Z",
      "updatedAt": "2026-10-15T15:31:39.512Z",
      "summary": "Brooklyn District Attorney Eric Gonzalez’s office has dismantled the online backbone of a crypto scam aimed at Russian speakers. The fraud reeled victims in through Facebook ads and fake investment advisors. Investigators seized and disrupted 241 scam domains and 112 servers with FBI help. The DA’s office puts losses in the tens of millions of The post A Crypto Scam in Brooklyn Hit Its Victims Twice. Seized Server Data Shows How appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4df674eced775908f389",
      "protocol": "UK tax",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/uk-tax-rules-bitcoin-users-home-addresses/"
      ],
      "firstSeen": "2026-10-15T12:34:43.000Z",
      "updatedAt": "2026-10-15T12:46:35.909Z",
      "summary": "The new UK tax rules could compromise user privacy, potentially exposing Bitcoin users to security risks and international data sharing. The post UK tax rules raise fears of linking Bitcoin users to their home addresses appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "71c519ee81592287fcee",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-scammers-stole-millions-from-victims-then-returned-pretending-to-help-recover-their-money/"
      ],
      "firstSeen": "2026-10-15T12:20:40.000Z",
      "updatedAt": "2026-10-15T12:46:35.909Z",
      "summary": "Prosecutors say recovered data showed the same scammers returning weeks later with false promises to recover stolen assets. Read the full story on CryptoSlate Understand the crypto stories that matter and what to watch next. Get The Catalyst in your inbox",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto scammers stole millions from victims, then returned",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f35835f4b201d2ba0b73",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-breach-north-african-government-database/"
      ],
      "firstSeen": "2026-10-15T10:59:33.000Z",
      "updatedAt": "2026-10-15T12:46:35.909Z",
      "summary": "AI-assisted breaches highlight vulnerabilities in digital governance, challenging trust and sovereignty, and necessitating stronger cybersecurity measures. The post ISS details AI-assisted breach of North African government database exposing 300,000 identity records appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "ISS details AI-assisted breach of North African government",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "766c83687dca40b88055",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-stocks-tumble-rising-borrowing-costs/"
      ],
      "firstSeen": "2026-10-15T12:19:07.000Z",
      "updatedAt": "2026-10-15T12:46:35.909Z",
      "summary": "Rising borrowing costs could hinder AI sector growth, increasing vulnerability to economic shifts and impacting future innovation and expansion. The post AI stocks tumble as rising borrowing costs test industry financing appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "AI stocks tumble as rising borrowing costs test industry",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c01f38d5af6a31208db9",
      "protocol": "Starknet",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/starknet-launches-7-day-vote-on-leaving-ethereum/"
      ],
      "firstSeen": "2026-10-15T09:45:18.000Z",
      "updatedAt": "2026-10-15T10:01:26.698Z",
      "summary": "Starknet opens a seven-day vote on studying a move away from Ethereum to build an independent blockchain designed to resist future quantum attacks.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "95d48fac11df5e39ce2a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-missile-attacks-on-saudi-airports-threaten-gulf-economic-recovery/"
      ],
      "firstSeen": "2026-10-15T09:32:13.000Z",
      "updatedAt": "2026-10-15T10:01:26.698Z",
      "summary": "The Houthi attacks exacerbate geopolitical tensions, potentially hindering foreign investment and complicating Gulf economic recovery efforts. The post Houthi missile attacks on Saudi airports threaten Gulf economic recovery appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Houthi missile attacks on Saudi airports threaten Gulf",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "01a2be7efe85478dece8",
      "protocol": "NBA Reportedly",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/nba-instagram-hack-fake-meme-coin/"
      ],
      "firstSeen": "2026-10-15T07:22:41.000Z",
      "updatedAt": "2026-10-15T10:01:26.698Z",
      "summary": "The NBA’s official Instagram account was reportedly hacked on October 14 and used to urge followers to buy a meme coin called NBA Coin (NBA). The league has not confirmed the hack yet, and the post has since been deleted. It adds to a run of reported 2026 takeovers that turned brand and executive accounts The post NBA Reportedly Hit by Another Fake Meme Coin Post, This Time on Instagram appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "afeeeb1c7fb052f937fc",
      "protocol": "Ledger Asks Resellers",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/ledger-asks-resellers-to-halt-sales-in-seven-asian-markets"
      ],
      "firstSeen": "2026-10-13T22:12:02.000Z",
      "updatedAt": "2026-10-15T10:01:26.698Z",
      "summary": "The hardware-wallet maker says confirmed incidents remain confined to Southeast Asia, with no indication its systems or direct sales channel were compromised.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c197486557b0aa0d748d",
      "protocol": "Bitcoin mining stocks plunge more than 10% in AI",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-mining-stocks-ai-debt-gartner-neoclouds-2026-10/"
      ],
      "firstSeen": "2026-10-15T01:56:58.000Z",
      "updatedAt": "2026-10-15T04:16:33.241Z",
      "summary": "The plunge in Bitcoin mining stocks highlights the financial vulnerability of AI infrastructure investments amid rising borrowing costs and market volatility. The post Bitcoin mining stocks plunge more than 10% in AI debt reckoning appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "982458e01bb06e759ec9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 93000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-cryptobilis-wallet-tampering-warning/"
      ],
      "firstSeen": "2026-10-15T02:56:43.000Z",
      "updatedAt": "2026-10-15T04:16:33.241Z",
      "summary": "The incident underscores the critical need for stringent supply chain security and robust anti-tampering measures in crypto hardware distribution. The post Ledger tells CryptoBilis buyers to stop using tampered wallets after $86 million to $93 million drain appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ledger tells CryptoBilis buyers to stop using tampered",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "90dba3fd251028513b27",
      "protocol": "AI chip stocks in South Korea and Japan tumble",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-chip-stocks-south-korea-japan-decline/"
      ],
      "firstSeen": "2026-10-15T02:34:18.000Z",
      "updatedAt": "2026-10-15T04:16:33.241Z",
      "summary": "The selloff highlights vulnerabilities in global tech markets, raising concerns about AI sector stability and potential economic ripple effects. The post AI chip stocks in South Korea and Japan tumble after US semiconductor selloff appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b8427aaf1772fecf4dc1",
      "protocol": "Google’s Gemini 4 Argon weighed a compiler hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/google-gemini-4-argon-compiler-hack-safety/"
      ],
      "firstSeen": "2026-10-14T21:15:20.000Z",
      "updatedAt": "2026-10-14T22:16:31.008Z",
      "summary": "Gemini 4 Argon's self-awareness in testing raises concerns about AI alignment and reliability, impacting trust in AI deployment decisions. The post Google’s Gemini 4 Argon weighed a compiler hack, then backed off appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "102fda9414fa16095ca0",
      "protocol": "Geoffrey Hinton and over 400 scientists",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/hinton-scientists-urge-airgapping-ai-models/"
      ],
      "firstSeen": "2026-10-14T21:51:31.000Z",
      "updatedAt": "2026-10-14T22:16:31.008Z",
      "summary": "The call for air-gapping AI models highlights the urgent need for robust containment standards to prevent potential cybersecurity threats. The post Geoffrey Hinton and over 400 scientists urge air-gapping for hacking-capable AI appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3942913234bcec4840ec",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/crypto-scam-crackdown-shut-241-website-brooklyn-da-fbi/"
      ],
      "firstSeen": "2026-10-14T21:00:00.000Z",
      "updatedAt": "2026-10-14T22:16:31.008Z",
      "summary": "Brooklyn prosecutors and the FBI have shut down 241 websites and seized 112 servers linked to an alleged Eastern European crypto scam network accused of stealing tens of millions of dollars from Americans. The Brooklyn District Attorney’s Office announced on…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto scam crackdown shuts 241 websites as Brooklyn DA",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ca2e6397503f5942a076",
      "protocol": "Glassnode",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/glassnode-says-bitcoin-remains-capped-by-88k-holder-cost-basis-despite-declining-selling-pressure/"
      ],
      "firstSeen": "2026-10-14T18:43:47.000Z",
      "updatedAt": "2026-10-14T19:39:18.853Z",
      "summary": "Bitcoin's struggle against resistance levels and ETF outflows highlights the market's vulnerability to macroeconomic pressures and investor sentiment shifts. The post Glassnode says Bitcoin remains capped by $88K holder cost basis despite declining selling pressure appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "86ede8654352e1fe3e47",
      "protocol": "UNCX Vesting Pool",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/uncx-vesting-pool-exploited-for-about-86-000-blockaid-says"
      ],
      "firstSeen": "2026-10-14T16:34:03.000Z",
      "updatedAt": "2026-10-14T19:39:18.853Z",
      "summary": "The identified transaction took five different tokens, while the affected Ethereum contract still held about $3.25 million in assets.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8b13401335bb55d04bfd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/fbi-brooklyn-crypto-scam-112-servers-241-websites"
      ],
      "firstSeen": "2026-10-14T17:56:45.000Z",
      "updatedAt": "2026-10-14T19:39:18.853Z",
      "summary": "Brooklyn prosecutors and the FBI seized 112 servers and shut down 241 websites linked to investment scams that targeted Russian-speaking Americans.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "US authorities dismantle crypto scam network that stole tens",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d404ec445667ce598e1d",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": 86000,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/uncx-network-vesting-pool-exploited/",
        "https://thedefiant.io/news/hacks/uncx-vesting-pool-exploited-for-about-86-000-blockaid-says",
        "https://www.diariobitcoin.com/seguridad/blockaid-reporta-un-drenaje-de-unos-usd-86-000-en-un-pool-de-vesting-de-uncx/"
      ],
      "firstSeen": "2026-10-14T16:34:03.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "Blockaid informó que se habrían retirado cerca de USD $86.000 en tokens bloqueados del pool compartido de vesting de UNCX en Ethereum. La firma advirtió que el exploit seguía activo y describió una secuencia que, según su reconstrucción, habría permitido a una posición residual retirar activos de otros usuarios.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Blockaid reporta un drenaje de unos USD $86.000 en",
      "qualityFlags": []
    },
    {
      "id": "e2025a7c3109090057a2",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 86000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/uncx-exploit-drains-token-vesting-pool/"
      ],
      "firstSeen": "2026-10-14T16:51:54.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "A hacker drained $86,000 from UNCX's shared vesting pool on Ethereum, pulling out tokens other projects had locked away. The post Hacker Pulls $86,000 in Locked Tokens From a Shared Crypto Vault appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Hacker Pulls $86,000 in Locked Tokens From a Shared",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "1436f29777ed580eb97b",
      "protocol": "Traders",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coreweave-puts-neocloud-stocks-plunge/"
      ],
      "firstSeen": "2026-10-14T17:16:45.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "The plunge in neocloud stocks highlights vulnerabilities in AI-driven markets, emphasizing the risks of debt reliance and potential market bubbles. The post Traders buy bubble puts on CoreWeave as neocloud stocks plunge appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "407c4f929b4c1b1a98aa",
      "protocol": "Brooklyn DA",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/brooklyn-da-crypto-scam-network-takedown/"
      ],
      "firstSeen": "2026-10-14T17:32:52.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "The takedown highlights the growing role of local authorities in combating global cybercrime, emphasizing the need for vigilance in crypto investments. The post Brooklyn DA takes down 241 domains tied to global crypto investment scam network appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a0cf8f1b0575a48fc5f5",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coinbase-joint-disruption-week-west-africa-scams/"
      ],
      "firstSeen": "2026-10-14T16:54:48.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "Public-private collaboration in combating scams highlights the need for global cooperation to address evolving cybercrime and human trafficking threats. The post Coinbase joins law enforcement to combat West African scam networks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f451046c19307b5f48ce",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-missile-attack-targets-riyadh-airport-intercepted-by-saudi-defenses/"
      ],
      "firstSeen": "2026-10-14T17:58:57.000Z",
      "updatedAt": "2026-10-14T18:01:56.911Z",
      "summary": "The attack highlights ongoing regional instability, potentially affecting global markets and air travel due to increased security concerns. The post Houthi missile attack targets Riyadh airport, intercepted by Saudi defenses appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Houthi missile attack targets Riyadh airport, intercepted",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9d78ac41bff0ca777ca4",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 250000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/google-concede-usd-250-000-a-xbow-por-un-exploit-de-cadena-completa-en-chrome/"
      ],
      "firstSeen": "2026-10-14T14:41:37.000Z",
      "updatedAt": "2026-10-14T15:26:13.645Z",
      "summary": "Oege de Moor relató que Google otorgó a XBOW USD $250.000 por un exploit de cadena completa para Chrome. Según el investigador, era la segunda vez que Google concedía una recompensa de ese monto por un hallazgo de este tipo.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Google concede USD $250.000 a XBOW por un exploit",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0cc018b209874cb85d42",
      "protocol": "SECPakistan",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/secpakistan-launches-corporate-intelligence-unit-to-tackle/"
      ],
      "firstSeen": "2026-10-14T12:24:49.000Z",
      "updatedAt": "2026-10-14T13:16:34.355Z",
      "summary": "SECPakistan has announced the creation of a Corporate Intelligence Unit aimed at detecting fraudulent schemes early. The post SECPakistan Launches Corporate Intelligence Unit to Tackle appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5f250a251448cdc4de69",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/aptos-rolls-out-encrypted-mempool-to-curb-frontrunning-sandwich-attacks"
      ],
      "firstSeen": "2026-10-13T00:52:52.000Z",
      "updatedAt": "2026-10-14T10:32:56.815Z",
      "summary": "The optional feature hides transaction details until their order is finalized, preventing bots from exploiting pending trades.",
      "revision": 17,
      "lossBasis": "unknown",
      "sourceHeadline": "Aptos rolls out Encrypted Mempool to curb frontrunning",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb572376b21e35446865",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/autheo-theo-token-plunges-92-after-suspected-bridge-exploit/",
        "https://thedefiant.io/news/hacks/autheo-s-theo-plunges-92-after-suspected-bridge-exploit-on-base"
      ],
      "firstSeen": "2026-10-13T06:19:59.000Z",
      "updatedAt": "2026-10-14T10:31:39.294Z",
      "summary": "Autheo urged users not to buy, sell or bridge THEO after a 19 million-token mint and subsequent sales on Base.",
      "revision": 2,
      "lossBasis": "market",
      "sourceHeadline": "Autheo’s THEO Plunges 92% After Suspected Bridge Exploit",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b9bb266115dd9b1c0974",
      "protocol": "Ethereum user",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 22000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/ethereum-user-loses-22k-in-eip-7702-wallet-attack/"
      ],
      "firstSeen": "2026-10-14T08:07:05.000Z",
      "updatedAt": "2026-10-14T10:31:39.294Z",
      "summary": "An Ethereum wallet reportedly lost 9.1231 ETH and TAPEETH tokens after a malicious EIP-7702 authorization gave an attacker control over its funds.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "c9b6a27b732399698763",
      "protocol": "Bank of Thailand",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/bank-of-thailand-launches-report-on-tackling-digital-fraud/"
      ],
      "firstSeen": "2026-10-14T09:32:49.000Z",
      "updatedAt": "2026-10-14T10:31:39.294Z",
      "summary": "The Bank of Thailand has released a new report focusing on digital fraud prevention strategies. This initiative highlights key lessons and characteristics of fraud. The post Bank of Thailand Launches Report on Tackling Digital Fraud appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2bfdfaedba78890df8fa",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-target-saudi-aramco-hq-with-missile-and-drone-attacks/"
      ],
      "firstSeen": "2026-10-14T08:16:55.000Z",
      "updatedAt": "2026-10-14T10:31:39.294Z",
      "summary": "Escalating Houthi-Saudi tensions may lead to airspace closures, impacting regional stability and international aviation market expectations. The post Houthis target Saudi Aramco HQ with missile and drone attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Houthis target Saudi Aramco HQ with missile and drone",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "33f6c57362670b2afe17",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380826/ledger-finds-lte-implant-that-stole-recovery-phrases-in-suspected-86m-drain"
      ],
      "firstSeen": "2026-10-13T11:53:15.000Z",
      "updatedAt": "2026-10-14T05:19:38.428Z",
      "summary": "Ledger says the hidden chip reads the 24-word phrase off the screen during setup, leaving the Secure Element and its software untouched.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bd00258840dce8aef998",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/autheo-theo-token-plunges-92-after-suspected-bridge-exploit/",
        "https://thedefiant.io/news/hacks/autheo-s-theo-plunges-92-after-suspected-bridge-exploit-on-base"
      ],
      "firstSeen": "2026-10-13T09:17:57.000Z",
      "updatedAt": "2026-10-14T03:16:20.655Z",
      "summary": "Autheo’s THEO token has plunged more than 90% following a suspected cross-chain bridge exploit that reportedly allowed an attacker to mint millions of unauthorized tokens on Base. In an October 13 security notice, Autheo confirmed that its development team was…",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Autheo THEO token plunges 92% after suspected bridge exploit",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7212bdb14ce67a86516c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 250000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/xbow-gpt-5-6-chrome-exploit-bounty/"
      ],
      "firstSeen": "2026-10-14T03:02:54.000Z",
      "updatedAt": "2026-10-14T03:16:20.655Z",
      "summary": "AI-driven vulnerability discovery accelerates exploit timelines, challenging security protocols and potentially increasing attack risks. The post XBOW uses OpenAI’s GPT-5.6 to exploit Chrome, earns $250,000 bounty appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "XBOW uses OpenAI’s GPT-5.6 to exploit Chrome, earns $250,000",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b219526bf0cd829af48d",
      "protocol": "Google DeepMind and GovTech Singapore",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/deepmind-govtech-singapore-ai-scam-tool/"
      ],
      "firstSeen": "2026-10-14T02:04:14.000Z",
      "updatedAt": "2026-10-14T03:16:20.655Z",
      "summary": "The collaboration could enhance user privacy and security, but its success hinges on timely updates and integration with popular apps. The post Google DeepMind and GovTech Singapore unveil on-device AI tool to fight chat scams appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d910c05fe66e9f2963fd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/coinbase-partners-with-doj-and-uk-agency-to-target-crypto-scams-and-freeze-assets/"
      ],
      "firstSeen": "2026-10-14T00:46:13.000Z",
      "updatedAt": "2026-10-14T03:16:20.655Z",
      "summary": "TL;DR: Coinbase’s Global Intelligence team took part in the “Joint Disruption Week” operation in London between October 6 and 9, 2026, alongside the U.S. Department of Justice (DOJ) and the UK’s National Crime Agency (NCA). The joint actions targeted fraud networks in West Africa linked to fictitious cryptocurrency investments, law enforcement impersonation, and staged arrests ... Read more",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Coinbase Partners With DOJ and UK Agency to Target",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a0894c3b3e2e8db76736",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/west-african-scam-networks-crackdown-by-national-crime/"
      ],
      "firstSeen": "2026-10-13T23:14:17.000Z",
      "updatedAt": "2026-10-14T00:01:11.990Z",
      "summary": "The National Crime Agency has launched a crackdown on West African scam networks, identifying over $10 million for seizure. This marks a significant step in combating fraud. The post West African Scam Networks Crackdown by National Crime appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "West African Scam Networks Crackdown by National Crime",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b1b377d0f9939a996510",
      "protocol": "FBI Seizes $17 Billion in Assets as Part",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 17000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/fbi-seizes-17-billion-in-assets-as-part-of-global-scammer/"
      ],
      "firstSeen": "2026-10-13T23:04:48.000Z",
      "updatedAt": "2026-10-14T00:01:11.990Z",
      "summary": "The FBI's OPERATION BLACKOUT has seized $17 billion in assets while cracking down on global scams. The post FBI Seizes $17 Billion in Assets as Part of Global Scammer appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 17000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "6f14c9cd49f643a341a2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/indias-haryana-police-investigate-alleged-lpnt-crypto-investment-scam/"
      ],
      "firstSeen": "2026-10-13T23:36:10.000Z",
      "updatedAt": "2026-10-14T00:01:11.990Z",
      "summary": "Haryana Police, in India, launched an investigation against four individuals following fraud complaints tied to the Luxurious Pro Network Token (LPNT). According to authorities in Pinjore, two victims reported being recruited by alleged company representatives who promised monthly returns between 3% and 6%, while assuring that their capital would double within a maximum of fifteen ... Read more",
      "revision": 1,
      "lossBasis": "aggregate",
      "sourceHeadline": "India’s Haryana Police Investigate Alleged LPNT Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "763c9351c4459b3ccbe9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/north-korean-it-fraud-case-cites-crypto-transfers-3m/",
        "https://thedefiant.io/news/security/doj-announces-two-arrests-in-north-korean-laptop-farm-crackdown"
      ],
      "firstSeen": "2026-10-13T19:31:16.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "The U.S. Department of Justice has announced the arrests of two Americans accused of helping North Korean IT workers obtain jobs at more than 70 U.S. companies in a scheme that generated approximately $3 million. The U.S. Department of Justice…",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "North Korean IT fraud case cites crypto transfers",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "4b0091276d3764c6fcb0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/el-salvador-is-still-buying-bitcoin/"
      ],
      "firstSeen": "2026-10-13T20:58:52.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "The relationship between El Salvador and the International Monetary Fund (IMF)c regarding Bitcoin accumulation has moved from anomaly to case study. The relevant question is not whether El Salvador defied the IMF or whether the IMF tolerated a breach. The relevant question is how a sovereign state can maintain a Bitcoin reserve inside a multilateral ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "El Salvador Is Still Buying Bitcoin Despite IMF Pressure.",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6bb1b4e58d2bcab1812d",
      "protocol": "FBI",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/fbi-reports-17-billion-scam-center-tally-as-west-africa-raids-net-28-arrests"
      ],
      "firstSeen": "2026-10-13T20:39:35.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "DOJ says a coordinated enforcement week removed more than 3.7 million online accounts, pages and groups and identified over $11 million in potentially freezable funds.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b9b0225c0698092bdccf",
      "protocol": "Coinbase",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/coinbase-joins-doj-uk-crime-agency-west-africa-scams/"
      ],
      "firstSeen": "2026-10-13T19:59:15.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "Coinbase has joined a four-day operation with U.S. and UK law enforcement to disrupt West African scam networks by tracing illicit funds, supporting asset freezes and sharing intelligence. Coinbase said in an Oct. 13 post that its Global Intelligence team…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c0c6705772e0284a8d96",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/us-charges-openai-engineer-office-bugging/"
      ],
      "firstSeen": "2026-10-13T21:12:59.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "The incident underscores the growing intersection of AI development and national security, highlighting vulnerabilities in tech firms. The post US charges Saudi OpenAI engineer over alleged office bugging appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "US charges Saudi OpenAI engineer over alleged office bugging",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5eaf986c9307d9a6af5d",
      "protocol": "9/11 Victims",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/9-11-victims-seek-671m-from-u-s-bitcoin-seizure/"
      ],
      "firstSeen": "2026-10-13T19:46:00.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "TL;DR 95 victims and family members are seeking legal rights to 127,271 Bitcoin held by the U.S. government in a civil forfeiture case. The claimants hold court judgments exceeding $671 million against Iran over its alleged responsibility for deaths linked to the September 11 attacks. The dispute involves the LuBian mining pool and other allegedly ... Read more",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "71181474e02110f5948c",
      "protocol": "Aramco headquarters in Dhahran",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/aramco-headquarters-in-dhahran-hit-during-houthi-attacks-on-tuesday/"
      ],
      "firstSeen": "2026-10-13T20:35:00.000Z",
      "updatedAt": "2026-10-13T21:30:14.012Z",
      "summary": "The attacks could lead to heightened security measures and potential airspace restrictions, affecting regional stability and market dynamics. The post Aramco headquarters in Dhahran hit during Houthi attacks on Tuesday appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "443654f217ea4ca2e6f9",
      "protocol": "Censys",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/censys-exposed-ai-infrastructure-rises-63/"
      ],
      "firstSeen": "2026-10-13T17:20:49.000Z",
      "updatedAt": "2026-10-13T19:01:38.933Z",
      "summary": "Rapid AI deployment without adequate security measures increases vulnerability, necessitating urgent focus on cybersecurity to mitigate risks. The post Censys reports 63% rise in exposed AI infrastructure in nine months appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3c6260dd904e1dee7d04",
      "protocol": "Saudi airports",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-airports-face-closures-after-houthi-attacks-raise-security-concerns/"
      ],
      "firstSeen": "2026-10-13T18:40:43.000Z",
      "updatedAt": "2026-10-13T19:01:38.933Z",
      "summary": "Heightened security concerns may lead to broader airspace closures, impacting regional aviation and escalating geopolitical tensions. The post Saudi airports face closures after Houthi attacks raise security concerns appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8d0bd6212df1e8d2d7d0",
      "protocol": "UK crypto trader",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 800000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/10/13/why-self-custody-and-hardware-wallets-cannot-prevent-physical-crypto-extortion"
      ],
      "firstSeen": "2026-10-13T15:24:52.000Z",
      "updatedAt": "2026-10-13T19:01:38.933Z",
      "summary": "A crypto trader in the U.K. claimed masked intruders stole nearly $800,000 in cryptocurrency at knifepoint, furthering concerns of \"wrench attacks\" spreading in the country.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1ec7bffbc0a7615a6dee",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/autheo-theo-token-plunges-92-after-suspected-bridge-exploit/",
        "https://thedefiant.io/news/hacks/autheo-s-theo-plunges-92-after-suspected-bridge-exploit-on-base"
      ],
      "firstSeen": "2026-10-13T00:19:59.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "Autheo’s THEO token has plunged more than 90% following a suspected cross-chain bridge exploit that reportedly allowed an attacker to mint millions of unauthorized tokens on Base. In an October 13 security notice, Autheo confirmed that its development team was…",
      "revision": 2,
      "lossBasis": "market",
      "sourceHeadline": "Autheo THEO token plunges 92% after suspected bridge exploit",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "99570d9afb70210b1188",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/trezor-shrinks-reseller-network-after-hardware-wallet-supply-chain-incidents"
      ],
      "firstSeen": "2026-10-13T13:51:05.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "CryptoBilis is already off Trezor’s seller list. The company says the wider reduction is preventive and that it has no evidence its devices were compromised.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Trezor Shrinks Reseller Network After Hardware Wallet",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "662c85edaf794bcd02c7",
      "protocol": "CzechInvest and ČNB",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/czechinvest-and-cnb-names-misused-in-email-scam-campaign/"
      ],
      "firstSeen": "2026-10-13T15:52:49.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "The Czech National Bank has issued a warning about fraudulent emails soliciting funds from unsuspecting investors. The post CzechInvest and ČNB Names Misused in Email Scam Campaign appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b68ffe469857b66825ac",
      "protocol": "UK crypto trader",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 800000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/10/13/why-self-custody-and-hardware-wallets-cannot-prevent-physical-crypto-extortion"
      ],
      "firstSeen": "2026-10-13T15:24:52.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "A crypto trader in the U.K. claimed masked intruders stole nearly $800,000 in cryptocurrency at knifepoint, furthering concerns of \"wrench attacks\" spreading in the country.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "380ccdd2107d5302f970",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 90000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-reviews-sales-policies-spyware-theft/"
      ],
      "firstSeen": "2026-10-13T15:53:57.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "Ledger's policy review highlights the critical need for robust supply chain security to protect consumer trust and prevent financial losses. The post Ledger reviews device sales policies after $90 million spyware theft appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ledger reviews device sales policies after $90 million",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d72257ea4dc40dbdcf95",
      "protocol": "Saudi",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-warns-houthis-of-consequences-for-repeated-attacks-on-kingdom/"
      ],
      "firstSeen": "2026-10-13T15:15:54.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "Increased military escalation risks heighten regional tensions, potentially impacting airspace operations and market stability. The post Saudi warns Houthis of consequences for repeated attacks on kingdom appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb871be37971831fa0c6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380833/ai-powered-playstation-crack-could-let-you-play-gta-6-on-pc-at-launch"
      ],
      "firstSeen": "2026-10-13T14:51:28.000Z",
      "updatedAt": "2026-10-13T16:16:26.941Z",
      "summary": "AnyPS5 is working to get any PS5 game running natively on PC—and gamers are hoping it'll work for the next instalment of Grand Theft Auto.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "AI Powered PlayStation Crack Could Let You Play GTA",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "02a2c260c75bffdf495c",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380826/ledger-finds-lte-implant-that-stole-recovery-phrases-in-suspected-86m-drain"
      ],
      "firstSeen": "2026-10-13T11:53:15.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "Ledger says the hidden chip reads the 24-word phrase off the screen during setup, leaving the Secure Element and its software untouched.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8a8d3ecaced67e1a9955",
      "protocol": "How did",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/how-did-compromised-hardware-wallets-reach-ledger-customers/"
      ],
      "firstSeen": "2026-10-13T12:20:00.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "Ledger says the confirmed cases in a reported wallet draining incident involve devices sold through CryptoBilis, a Southeast Asian reseller. An unauthorized hardware implant was found in one affected device. The investigation raises a question that wallet instructions rarely answer…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "736e79d8dbce1658dc48",
      "protocol": "Ledger’s Implant Update Left Out One",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/ledger-implant-backlash-europe-mediamarkt/"
      ],
      "firstSeen": "2026-10-13T12:51:44.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "Ledger ties the implant losses to reseller CryptoBilis, but users say tampered devices hit Europe too and ask who will cover the stolen funds. The post Ledger’s Implant Update Left Out One Name. Users Noticed Within Minutes appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6092a2ed3047aa728c96",
      "protocol": "Fridges",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/french-supermarket-fridges-hit-50-degrees/"
      ],
      "firstSeen": "2026-10-13T11:19:37.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "Hackers just turned French supermarket freezers into ovens. This week, attackers took over the software that controls refrigeration at hundreds of stores across France. They pushed temperatures up to 50°C, which is desert-heatwave territory inside a frozen food aisle. The damage: Prime Minister Sébastien Lecornu has instructed France’s National Cybersecurity Agency (ANSSI) to investigate, a The post Fridges Hacked, Food Ruined, Fires Sparked: France’s Strangest Hack Yet appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6c28bb2c0403f92c3a32",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/apex-accelerator-linked-to-dominion-market-exploit/"
      ],
      "firstSeen": "2026-10-13T12:47:48.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "Apex Accelerator is reportedly connected to a September exploit as per Dominion Market's co-founder. The post Apex Accelerator Linked to Dominion Market Exploit appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Apex Accelerator Linked to Dominion Market Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b9f95fbd03eea44b2659",
      "protocol": "CNMV",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/cnmv-raises-alarm-on-financial-chiringuitos-stay-vigilant/"
      ],
      "firstSeen": "2026-10-13T11:24:48.000Z",
      "updatedAt": "2026-10-13T13:32:43.036Z",
      "summary": "The CNMV has issued an urgent warning regarding unregistered financial institutions. This move aims to protect investors from potential fraud. The post CNMV Raises Alarm on Financial Chiringuitos, Stay Vigilant appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3c51d86e442f03aab6b5",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/geopolitics-is-still-cryptos-unshakeable-overlord-oil-iran-and-the-bitcoin-fall/"
      ],
      "firstSeen": "2026-10-12T11:30:00.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "Bitcoin’s fall was a reminder that crypto can build its own narratives and institutional infrastructure, yet still be repriced in minutes by an oil tanker thousands of miles away. As attacks around the Strait of Hormuz intensified, Brent crude pushed above $101, Treasury yields climbed and the dollar strengthened. Bitcoin weakened alongside that macro shift. ... Read more",
      "revision": 11,
      "lossBasis": "unknown",
      "sourceHeadline": "Geopolitics Is Still Crypto’s Unshakeable Overlord",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c9ee2f0d6b9a0aa60a63",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/autheo-theo-token-plunges-92-after-suspected-bridge-exploit/",
        "https://cryptobriefing.com/autheo-theo-plunges-suspected-bridge-exploit/",
        "https://thedefiant.io/news/hacks/autheo-s-theo-plunges-92-after-suspected-bridge-exploit-on-base"
      ],
      "firstSeen": "2026-10-13T09:17:57.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "The incident highlights vulnerabilities in cross-chain bridges, urging projects to reassess security measures to prevent similar exploits. The post Autheo’s THEO plunges 92% after suspected bridge exploit on Base appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Autheo’s THEO plunges 92% after suspected bridge exploit",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "dc2e625fd2ac9113510f",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/ledger-reveals-how-hidden-chips-stole-recovery-phrases/"
      ],
      "firstSeen": "2026-10-13T08:32:06.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "Ledger says a hidden chip in a wallet sold by CryptoBilis can steal recovery phrases and send them over LTE as investigators examine reported thefts.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5a8a57c25e5727ddac40",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 800000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/uk-crypto-trader-claims-800k-stolen-in-violent-home-invasion/"
      ],
      "firstSeen": "2026-10-13T07:02:25.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "A cryptocurrency trader in the UK has reported losing approximately $800,000 in a home invasion after three knife-wielding intruders allegedly restrained him and forced him to surrender funds from his crypto wallets. In an October 13 post on X, the…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "UK crypto trader claims $800K stolen in violent home",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "489e87754d3b463b8efc",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/airlines-cancel-flights-to-saudi-arabia-after-riyadh-airport-attacks/"
      ],
      "firstSeen": "2026-10-13T09:02:29.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "The flight suspensions highlight escalating regional security tensions, potentially leading to broader disruptions in Middle Eastern air travel. The post Airlines cancel flights to Saudi Arabia after Riyadh airport attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Airlines cancel flights to Saudi Arabia after Riyadh airport",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bf2941484589ab42335d",
      "protocol": "Emerging-market stocks",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/emerging-market-stocks-fall-ai-selloff/"
      ],
      "firstSeen": "2026-10-13T09:44:03.000Z",
      "updatedAt": "2026-10-13T11:01:54.294Z",
      "summary": "The AI selloff highlights vulnerabilities in emerging markets, potentially leading to prolonged investor caution and reassessment of AI valuations. The post Emerging-market stocks slide for a second day as the AI selloff spreads appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f5a6ff87ca82daf5582d",
      "protocol": "AI",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-sell-off-wipes-800b-from-asias-stock-markets-in-a-day/"
      ],
      "firstSeen": "2026-10-13T06:57:08.000Z",
      "updatedAt": "2026-10-13T08:22:20.266Z",
      "summary": "The AI stock sell-off highlights vulnerabilities in tech valuations, potentially reshaping investment strategies and impacting future market confidence. The post AI sell-off wipes $800B from Asia’s stock markets in a day appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aad577092852e82cd7e7",
      "protocol": "Anthropic’s new safeguards",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/anthropics-new-safeguards-cut-ai-distillation-attacks-on-claude-models-by-90-99/"
      ],
      "firstSeen": "2026-10-13T07:37:56.000Z",
      "updatedAt": "2026-10-13T08:22:20.266Z",
      "summary": "Enhanced security measures could boost Anthropic's competitive edge in AI rankings, influencing market dynamics and industry standards. The post Anthropic’s new safeguards cut AI distillation attacks on Claude models by 90-99% appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cfedfe685aa1dd585b11",
      "protocol": "Aptos",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/aptos-launches-encrypted-mempool-how-does-it-work/"
      ],
      "firstSeen": "2026-10-13T05:07:58.000Z",
      "updatedAt": "2026-10-13T06:16:09.348Z",
      "summary": "Aptos launches Encrypted Mempool to protect pending trades from frontrunning and sandwich attacks as APT price falls amid crypto market losses.",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a5f0ade4c861c3b27da4",
      "protocol": "Chip stocks",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/chip-stocks-slide-ai-investment-fears/"
      ],
      "firstSeen": "2026-10-13T03:10:13.000Z",
      "updatedAt": "2026-10-13T03:46:17.478Z",
      "summary": "The dip in chip stocks highlights the vulnerability of tech sectors to shifts in AI investment sentiment and financing constraints. The post Chip stocks slide as fears mount over AI investment scale appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d95fe2747ce156bdee1c",
      "protocol": "Anthropic",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/anthropic-claude-distillation-attack-defenses/"
      ],
      "firstSeen": "2026-10-13T00:02:52.000Z",
      "updatedAt": "2026-10-13T01:15:48.607Z",
      "summary": "Enhanced defenses against distillation attacks bolster AI security, ensuring model integrity and safeguarding proprietary technology advancements. The post Anthropic says new defenses cut distillation data harvested from Claude by 90 to 99 percent appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5899d823b89f9d7e5c54",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-arabias-warning-system-failure-precedes-deadly-riyadh-airport-attacks/"
      ],
      "firstSeen": "2026-10-13T00:03:57.000Z",
      "updatedAt": "2026-10-13T01:15:48.607Z",
      "summary": "The failure highlights vulnerabilities in Saudi security, potentially leading to increased airspace restrictions and impacting regional stability. The post Saudi Arabia’s warning system failure precedes deadly Riyadh airport attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Saudi Arabia’s warning system failure precedes deadly",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "21c7eee4994715335aa9",
      "protocol": "Ledger attack spreads to EU, AI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/ledger-attack-spreads-to-eu-ai-finds-18-trillion-xrp-bug-hodlers-digest",
        "https://www.theblock.co/news/ecosystems/2026-10-11-xrp-ledger-patches-decade-old-bug-that-could-have-minted-trillions-of-xrp-418230"
      ],
      "firstSeen": "2026-10-11T18:07:41.000Z",
      "updatedAt": "2026-10-13T00:01:20.919Z",
      "summary": "A user reports buying a tampered Ledger from a big retailer in Europe. Security researchers use AI to uncover a “$94 billion” XRP bug — but receive just a $250K bounty.",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "26bc9e39febd60e25136",
      "protocol": "Saudi Crown Prince",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-crown-prince-moves-between-bunkers-amid-houthi-attacks-independent/"
      ],
      "firstSeen": "2026-10-12T22:08:26.000Z",
      "updatedAt": "2026-10-13T00:01:20.919Z",
      "summary": "The increased security measures for Saudi leadership underscore the escalating regional instability and potential shifts in power dynamics. The post Saudi Crown Prince moves between bunkers amid Houthi attacks: Independent appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "216607280647181793d2",
      "protocol": "Saudi Arabia",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-arabia-extends-riyadh-airport-suspension-after-houthi-attacks/"
      ],
      "firstSeen": "2026-10-12T21:49:03.000Z",
      "updatedAt": "2026-10-13T00:01:20.919Z",
      "summary": "The suspension highlights increased security concerns, affecting market perceptions and travel, with potential for escalating regional tensions. The post Saudi Arabia extends Riyadh airport suspension after Houthi attacks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a7fac53dbc758f5499e2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coinbase-celestia-transfer-delays/"
      ],
      "firstSeen": "2026-10-12T22:36:02.000Z",
      "updatedAt": "2026-10-13T00:01:20.919Z",
      "summary": "Delayed Celestia transfers highlight potential vulnerabilities in blockchain infrastructure, emphasizing the need for robust network upgrades. The post Coinbase flags delayed Celestia transfers as trading continues normally appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Coinbase flags delayed Celestia transfers as trading",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb495ff8c24e2d11eedf",
      "protocol": "Nvidia, AMD shares",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/nvidia-amd-shares-fall-openai-revenue/"
      ],
      "firstSeen": "2026-10-12T21:34:06.000Z",
      "updatedAt": "2026-10-13T00:01:20.919Z",
      "summary": "The event highlights the vulnerability of AI infrastructure stocks to customer concentration, impacting chipmaker and cloud valuations significantly. The post Nvidia, AMD shares fall as OpenAI revenue report rattles AI investors appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9064d8ffcab75b9906fc",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/thorchain-fees-rebound-below-september-surge/",
        "https://thedefiant.io/news/defi/thorchain-fees-rebound-but-remain-84-below-september-surge"
      ],
      "firstSeen": "2026-10-12T15:40:30.000Z",
      "updatedAt": "2026-10-12T16:46:34.134Z",
      "summary": "THORChain's reliance on exploit-driven surges highlights the need for sustainable growth strategies to maintain liquidity and fee stability. The post THORChain fees rebound but remain far below September surge appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "THORChain fees rebound but remain far below September",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9a1fd4d72ff1b556b070",
      "protocol": "Ledger",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380706/ledger-says-all-confirmed-cases-in-suspected-87m-drain-tied-to-reseller-cryptobilis"
      ],
      "firstSeen": "2026-10-12T16:32:17.000Z",
      "updatedAt": "2026-10-12T16:46:34.134Z",
      "summary": "The wallet manufacturer said its own systems and direct sales are unaffected, and that the reseller has stopped selling hardware wallets.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "04d2418b56f8990196a0",
      "protocol": "Palantir's Europe head",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/policy/2026/10/12/palantir-executive-warns-europe-is-missing-the-boat-on-ai-just-like-it-did-with-the-internet"
      ],
      "firstSeen": "2026-10-12T16:18:03.000Z",
      "updatedAt": "2026-10-12T16:46:34.134Z",
      "summary": "The Palantir UK chief said the U.S. is racing ahead on enterprise AI while Europe hesitates, and explained why he thinks the company faces intense political attacks.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d624f6094876e52e47cd",
      "protocol": "Houthis claim strikes on Riyadh airport",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthis-claim-strikes-on-riyadh-airport-warn-airlines-to-avoid-saudi-airspace/"
      ],
      "firstSeen": "2026-10-12T16:17:28.000Z",
      "updatedAt": "2026-10-12T16:46:34.134Z",
      "summary": "The Houthi attacks on Riyadh airport could lead to heightened geopolitical tensions and potential disruptions in global aviation markets. The post Houthis claim strikes on Riyadh airport, warn airlines to avoid Saudi airspace appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b8db968eb2886901d83b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/finstbboard-highlights-stablecoin-risks-ahead-of-g20-summit/"
      ],
      "firstSeen": "2026-10-12T16:04:15.000Z",
      "updatedAt": "2026-10-12T16:46:34.134Z",
      "summary": "The FinStbBoard has released an analysis on stablecoins' vulnerabilities to bolster G20 discussions. The post FinStbBoard Highlights Stablecoin Risks Ahead of G20 Summit appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "FinStbBoard Highlights Stablecoin Risks Ahead of G20 Summit",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "834bd72af2f15530d593",
      "protocol": "Ukrainian drones",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yandex-data-centers-drone-strikes-russia/"
      ],
      "firstSeen": "2026-10-12T14:13:54.000Z",
      "updatedAt": "2026-10-12T14:16:35.565Z",
      "summary": "The strikes highlight vulnerabilities in centralized digital infrastructure, potentially slowing AI advancements and impacting investor confidence. The post Ukrainian drones hit Yandex data centers, disrupting rides, maps, and payments in Russia appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "28d50c49f443d0da9061",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/can-anthropics-revolutionary-ai-security-scanner-unlock-safer-crypto/"
      ],
      "firstSeen": "2026-10-12T13:00:00.000Z",
      "updatedAt": "2026-10-12T14:16:35.565Z",
      "summary": "Anthropic’s OSS Scanner could matter more to crypto than most AI announcements because it attacks a problem the industry has never solved well: finding dangerous code before an attacker does. The new opt-in service gives eligible open-source projects free, periodic scans from Anthropic’s strongest models, including Claude Mythos. For an ecosystem built on public repositories, ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Can Anthropic’s Revolutionary AI Security Scanner Unlock",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "834147666a13e4c52cfe",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-militants-target-saudi-airports-killing-14-in-deadliest-strikes-since/"
      ],
      "firstSeen": "2026-10-12T06:42:11.000Z",
      "updatedAt": "2026-10-12T11:46:16.504Z",
      "summary": "The escalation in Houthi attacks could lead to increased airspace closure risks, impacting regional stability and international aviation operations. The post Houthi militants target Saudi airports, killing 14 in deadliest strikes since Iran conflict appeared first on Crypto Briefing .",
      "revision": 3,
      "lossBasis": "unknown",
      "sourceHeadline": "Houthi militants target Saudi airports, killing 14",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "943c6935215ae2bf4b8e",
      "protocol": "UK",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/uk-freezes-prince-group-finance-chief-penthouse/",
        "https://decrypt.co/380661/uk-freezes-12m-london-penthouse-of-alleged-prince-group-finance-chief"
      ],
      "firstSeen": "2026-10-12T10:12:48.000Z",
      "updatedAt": "2026-10-12T11:46:16.504Z",
      "summary": "Thet Li is accused of running the finances of a scam empire tied to $14 billion in Bitcoin the U.S. has moved to seize.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "eb599fe81702b330641c",
      "protocol": "The Riskiest Click in Crypto Is Sitting",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/google-ad-scam-fake-safe-wallet/"
      ],
      "firstSeen": "2026-10-12T07:55:18.000Z",
      "updatedAt": "2026-10-12T09:04:16.371Z",
      "summary": "A Google ad scam sends \"gnosis safe\" searchers to a fake Safe wallet clone. Gnosis co-founder Martin Köppelmann slams Google's ad vetting. The post The Riskiest Click in Crypto Is Sitting at the Top of Google: How to Stay Safe appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "12afbff9720725f81860",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/solana-sandwich-bots-took-29-7-million-before-costs-bitquery-estimates/"
      ],
      "firstSeen": "2026-10-12T08:30:49.000Z",
      "updatedAt": "2026-10-12T09:04:16.371Z",
      "summary": "Pump.fun's launch curve and PumpSwap accounted for 96% of detected attacks in the study's 11-month window. The post Solana sandwich bots took $29.7 million before costs, mostly targeting Pump.fun appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Solana sandwich bots took $29.7 million before costs, mostly",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0cffb23b2d3aa090d636",
      "protocol": "CCTV released by Saudi Arabia shows the moment",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/cctv-released-by-saudi-arabia-shows-the-moment-of-an-attack-on-riyadhs/"
      ],
      "firstSeen": "2026-10-12T06:42:30.000Z",
      "updatedAt": "2026-10-12T07:01:23.854Z",
      "summary": "The attack's aftermath raises regional security concerns, potentially leading to Saudi airspace closure and impacting global market stability. The post CCTV released by Saudi Arabia shows the moment of an attack on Riyadh’s international airport that killed 13 people and wounded more than 300 on October 10 appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2ff0ddad3fc7829a588a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/coinbase-qwen-model-fraud-prevention/"
      ],
      "firstSeen": "2026-10-11T22:37:12.000Z",
      "updatedAt": "2026-10-12T04:16:08.483Z",
      "summary": "Coinbase's success with a tailored AI model highlights the potential for specialized, cost-effective solutions in fraud prevention over general models. The post Coinbase fine-tunes Qwen3.5-9B model for fraud prevention, beating frontier models appeared first on Crypto Briefing .",
      "revision": 3,
      "lossBasis": "unknown",
      "sourceHeadline": "Coinbase fine-tunes Qwen3.5-9B model for fraud prevention",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cb7eb351728de0664b56",
      "protocol": "Ledger User",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/ledger-user-reports-hardware-implant-in-wallet-bought-in-europe"
      ],
      "firstSeen": "2026-10-11T18:38:29.000Z",
      "updatedAt": "2026-10-12T04:16:08.483Z",
      "summary": "Ledger says all confirmed cases tied to its October 9 fund-draining investigation involve Southeast Asian reseller CryptoBilis, which has halted hardware-wallet sales.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a59412b8d59d49495d8e",
      "protocol": "Unattributed",
      "chain": "Tron",
      "technique": "Security incident",
      "lossUsd": 3890000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/peckshield-traces-3-89-million-in-ledger-theft-funds-to-binance-deposits"
      ],
      "firstSeen": "2026-10-11T15:04:33.000Z",
      "updatedAt": "2026-10-12T04:16:08.483Z",
      "summary": "The reported Tron deposits offer investigators an exchange-account lead, but intermediary wallets handling other clients’ money complicate attribution.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "PeckShield Traces $3.89 Million in Ledger Theft Funds",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "5e281c2203e2684c2e85",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/ledger-says-all-confirmed-draining-cases-involve-cryptobilis-sold-devices"
      ],
      "firstSeen": "2026-10-11T17:18:19.000Z",
      "updatedAt": "2026-10-12T04:16:08.483Z",
      "summary": "The company says its direct sales channels are unaffected and reminds resellers never to restock returned products.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0a3e304b5a6d6155c990",
      "protocol": "COLDCARD",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/coldcard-investigates-phishing-link-x-account/",
        "https://thedefiant.io/news/security/coldcard-warns-of-phishing-post-on-its-official-x-account"
      ],
      "firstSeen": "2026-10-11T09:38:29.000Z",
      "updatedAt": "2026-10-12T01:01:31.085Z",
      "summary": "The company says it found no matching login record. A researcher found the fake migration site was built to collect wallet recovery phrases.",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "51fea765959105629a9f",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/is-any-hardware-wallet-safe-2026/"
      ],
      "firstSeen": "2026-10-11T23:50:00.000Z",
      "updatedAt": "2026-10-12T01:01:31.085Z",
      "summary": "Coldcard, Trezor, Tangem, BitBox, SafePal, and Ledger all hit trouble in 2026. See what each attack targeted. The post Is Any Hardware Wallet Safe in 2026? Tampered Ledger Devices Expand Beyond Asia appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "aggregate",
      "sourceHeadline": "Is Any Hardware Wallet Safe in 2026? Tampered Ledger",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9db8afa9ba05f9258bbd",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": 93000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-reseller-supply-chain-hack-implants/"
      ],
      "firstSeen": "2026-10-11T21:32:01.000Z",
      "updatedAt": "2026-10-11T22:24:13.638Z",
      "summary": "This breach undermines trust in hardware wallets, highlighting vulnerabilities in supply chains and the need for enhanced security measures. The post Hackers reportedly drain up to $93 million through compromised Ledger reseller appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Hackers reportedly drain up to $93 million through",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "a442dce0037cd58c18dd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bubblemaps-accuses-pump-fun-influencer-ethan-of-125k-scam/"
      ],
      "firstSeen": "2026-10-11T07:31:56.000Z",
      "updatedAt": "2026-10-11T22:24:13.638Z",
      "summary": "Bubblemaps alleges Pump.fun influencer Ethan earned $125K through 49 token promotions, as suspected wallets sold within minutes of his posts.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Bubblemaps accuses Pump.fun influencer Ethan of $125K scam",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "daa24c8b4b7915f17f45",
      "protocol": "Ledger User",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/ledger-user-reports-hardware-implant-in-wallet-bought-in-europe"
      ],
      "firstSeen": "2026-10-11T18:38:29.000Z",
      "updatedAt": "2026-10-11T21:01:09.534Z",
      "summary": "Ledger says all confirmed cases tied to its October 9 fund-draining investigation involve Southeast Asian reseller CryptoBilis, which has halted hardware-wallet sales.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ab96cf82b37523cc9b00",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-cryptobilis-hardware-implant-draining/",
        "https://thedefiant.io/news/hacks/ledger-says-all-confirmed-draining-cases-involve-cryptobilis-sold-devices"
      ],
      "firstSeen": "2026-10-11T17:18:19.000Z",
      "updatedAt": "2026-10-11T18:24:42.326Z",
      "summary": "The incident highlights vulnerabilities in supply chains, urging stricter controls and verification to protect crypto assets from unauthorized access. The post Ledger confirms draining cases linked to CryptoBilis-sold devices appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "79d791ca5afb182989e3",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/unpatched-ldk-apps-can-lose-bitcoin-when-a-lightning-peer-lies-after-reconnecting/"
      ],
      "firstSeen": "2026-10-11T18:00:02.000Z",
      "updatedAt": "2026-10-11T18:24:42.326Z",
      "summary": "The October 1-dated v0.2.7 and v0.1.13 patches close a reconnect theft path, while v0.2.7 also fixes an LSPS2 payment-amount flaw. The post Lightning apps using unpatched LDK risk Bitcoin theft from a reconnect lie appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Lightning apps using unpatched LDK risk Bitcoin theft",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d4e2d7a508ce8e6ebfe0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/blockchain/liquid-mantiene-congelados-los-retiros-de-bitcoin-pese-a-recuperar-cerca-del-86-de-sus-reservas/"
      ],
      "firstSeen": "2026-10-11T18:08:07.000Z",
      "updatedAt": "2026-10-11T18:24:42.326Z",
      "summary": "Liquid reanudó los bloques y las transacciones internas después del exploit de septiembre, pero los retiros de Bitcoin siguen suspendidos. La red calcula que sus reservas cubren cerca del 86% de los L-BTC en circulación y condiciona la reapertura a cerrar un déficit de unos 598,5 BTC y completar revisiones de seguridad.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Liquid mantiene congelados los retiros de Bitcoin pese",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bc6ac4e56d599ab2ddb0",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 3890000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/peckshield-ledger-theft-funds-binance/",
        "https://thedefiant.io/news/hacks/peckshield-traces-3-89-million-in-ledger-theft-funds-to-binance-deposits"
      ],
      "firstSeen": "2026-10-11T15:04:33.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "The incident highlights vulnerabilities in hardware wallet supply chains and the challenges of tracing stolen crypto across decentralized networks. The post PeckShield traces $3.89 million from Ledger wallet drain to Binance deposits appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "PeckShield traces $3.89 million from Ledger wallet drain",
      "qualityFlags": []
    },
    {
      "id": "b61aede1133cb409ff63",
      "protocol": "Malaysia man",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/malaysia-man-loses-3m-in-suspected-crypto-wallet-hack/"
      ],
      "firstSeen": "2026-10-11T00:11:00.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "A Malaysian man reports losing $3.05M in cryptocurrency after unauthorized wallet transfers. Police are tracing the funds and investigating fraud.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d776dc4fc16b7db1b09f",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/ledger-confirms-hidden-chip-in-crypto-wallet-amid-92m/"
      ],
      "firstSeen": "2026-10-11T15:32:54.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "Ledger confirms a hidden hardware implant in a customer's wallet as CryptoBilis halts sales amid an investigation into reported crypto thefts.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "31ab8177f97aaf5b4772",
      "protocol": "Projectile",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/projectile-hits-riyadh-airport-terminal-12-dead-309-injured/"
      ],
      "firstSeen": "2026-10-11T14:33:11.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "The attack exacerbates regional instability, potentially escalating military tensions and impacting market expectations and diplomatic relations. The post Projectile hits Riyadh airport terminal, 12 dead, 309 injured appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "33a71189416fb66383ef",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/xrp-ledger-discloses-decade-old-bug-that-could-mint-trillions"
      ],
      "firstSeen": "2026-10-11T14:08:37.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "The flaw was fixed in xrpld 3.4.1 on Sept. 25. Developers found no evidence it was exploited on a public network.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "XRP Ledger Discloses Decade-Old Bug That Could Mint",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6042938774abd5149272",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-airport-attack-kills-12-as-conflict-with-houthis-escalates/"
      ],
      "firstSeen": "2026-10-11T13:52:20.000Z",
      "updatedAt": "2026-10-11T16:02:05.474Z",
      "summary": "The attack exacerbates regional instability, potentially influencing Houthi advances and altering geopolitical dynamics in the Middle East. The post Saudi airport attack kills 12 as conflict with Houthis escalates appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Saudi airport attack kills 12 as conflict with Houthis",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4a38640dbdfe3a42ef47",
      "protocol": "Saudi Arabia evacuates and closes Riyadh airport",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudi-arabia-evacuates-and-closes-riyadh-airport-after-missile-attack-by-yemens/"
      ],
      "firstSeen": "2026-10-10T21:43:12.000Z",
      "updatedAt": "2026-10-11T13:26:29.455Z",
      "summary": "The attack exacerbates regional instability, potentially altering geopolitical dynamics and influencing prediction markets on future conflicts. The post Saudi Arabia evacuates and closes Riyadh airport after missile attack by Yemen’s Houthis appeared first on Crypto Briefing .",
      "revision": 8,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "07a32cbfb3f10daabb45",
      "protocol": "New iPhone spyware can hunt for crypto wallets",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/new-iphone-spyware-can-hunt-for-crypto-wallets-and-extract-their-data-every-15-seconds/"
      ],
      "firstSeen": "2026-10-11T13:00:14.000Z",
      "updatedAt": "2026-10-11T13:26:29.455Z",
      "summary": "iVerify’s P7 DarkSword report describes remote commands to collect imToken-related data after an iPhone is compromised. The post New iPhone spyware can hunt for crypto wallets and extract their data every 15 seconds appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1c3b2c571fe623da9e8c",
      "protocol": "How Zcash",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380637/zcash-plans-hide-keys-ai-quantum-attacks"
      ],
      "firstSeen": "2026-10-11T13:00:03.000Z",
      "updatedAt": "2026-10-11T13:26:29.455Z",
      "summary": "Zakura, a Zcash full node developer, says it expects hash-based signatures to land in Zcash in January, and is rolling out a privacy tool for rotating transparent addresses this week.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "543edfe7909558083766",
      "protocol": "Coldcard",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/coldcard-says-its-investigating-how-phishing-link-appeared-on-its-x-account",
        "https://cryptobriefing.com/coldcard-investigates-phishing-link-x-account/"
      ],
      "firstSeen": "2026-10-11T10:22:44.000Z",
      "updatedAt": "2026-10-11T11:46:07.694Z",
      "summary": "Company advised users not to visit or interact with the link in question and said it will share any further verified updates.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "17cdb8a8628a9ca06752",
      "protocol": "COLDCARD",
      "chain": "Bitcoin",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/coldcard-warns-bitcoin-users-about-phishing-scam-on-x/"
      ],
      "firstSeen": "2026-10-11T09:51:26.000Z",
      "updatedAt": "2026-10-11T11:46:07.694Z",
      "summary": "COLDCARD investigates a phishing post on its official X account that directed Bitcoin users to a fake wallet security page. The post was deleted.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "49306acff5423867e16f",
      "protocol": "COLDCARD",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/coldcard-warns-of-phishing-post-on-its-official-x-account"
      ],
      "firstSeen": "2026-10-11T09:38:29.000Z",
      "updatedAt": "2026-10-11T11:46:07.694Z",
      "summary": "The company says it found no matching login record. A researcher found the fake migration site was built to collect wallet recovery phrases.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8be9ec349d2d918fcf34",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yandex-vladimir-data-centre-drone-attack/"
      ],
      "firstSeen": "2026-10-11T09:37:37.000Z",
      "updatedAt": "2026-10-11T11:46:07.694Z",
      "summary": "The escalation of attacks on data centers highlights the increasing vulnerability of digital infrastructure in geopolitical conflicts. The post Yandex shuts down Vladimir data centre after drone attack, third facility hit in four days appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Yandex shuts down Vladimir data centre after drone attack",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9d15259c347590903eee",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 580000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/japan-arrests-6-over-580k-crypto-laundering-case/"
      ],
      "firstSeen": "2026-10-11T09:08:24.000Z",
      "updatedAt": "2026-10-11T11:46:07.694Z",
      "summary": "Japan arrests six suspects over alleged crypto money laundering linked to 30 fraud victims and 91 million yen in suspected transactions.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Japan arrests 6 over $580K crypto laundering case",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5ec53ef98cd023ac96f9",
      "protocol": "Hyperliquid ETH trades",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/hyperliquid-eth-trades-raise-concerns-was-papertrade-exploited/"
      ],
      "firstSeen": "2026-10-11T07:57:08.000Z",
      "updatedAt": "2026-10-11T09:01:13.282Z",
      "summary": "Papertrade faces price manipulation allegations after two wallets reportedly used $20M ETH trades on Hyperliquid to affect large positions.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d85fcc1fd8802badd337",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/ledger-faces-fake-website-warning-amid-86m-theft-probe/"
      ],
      "firstSeen": "2026-10-11T06:23:23.000Z",
      "updatedAt": "2026-10-11T09:01:13.282Z",
      "summary": "A fake Ledger website is targeting wallet recovery phrases through Google Search as Ledger investigates reported crypto losses linked to a reseller.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb9959369d878fdd7fe8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/estafas/coldcard-investiga-un-enlace-de-phishing-publicado-desde-su-cuenta-oficial/"
      ],
      "firstSeen": "2026-10-11T08:13:59.000Z",
      "updatedAt": "2026-10-11T09:01:13.282Z",
      "summary": "Coldcard informó que investiga una publicación de phishing aparecida en su cuenta oficial, ya eliminada, y pidió a los usuarios no abrir ni interactuar con el enlace. La empresa también dijo que revisa los registros de acceso y que compartirá novedades verificadas en su cuenta oficial.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Coldcard investiga un enlace de phishing publicado desde su",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3e98666de99bf69e1d3b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/drone-attack-disrupts-moscow-data-centre/"
      ],
      "firstSeen": "2026-10-11T04:14:39.000Z",
      "updatedAt": "2026-10-11T05:16:09.379Z",
      "summary": "The drone attack highlights the vulnerability of digital infrastructure to physical threats, potentially impacting investor confidence and tech operations. The post Drone attack disrupts data centre in eastern Moscow, Russia says appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Drone attack disrupts data centre in eastern Moscow, Russia",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6d12b69351f749b177e7",
      "protocol": "Papertrade",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/papertrade-oracle-manipulation-allegation-pool/",
        "https://thedefiant.io/news/defi/papertrade-faces-oracle-manipulation-allegation-as-house-pool-shows-3-14-million"
      ],
      "firstSeen": "2026-10-11T00:26:55.000Z",
      "updatedAt": "2026-10-11T02:46:01.888Z",
      "summary": "The oracle manipulation allegation highlights vulnerabilities in DeFi platforms, potentially affecting trader confidence and market stability. The post Papertrade faces oracle manipulation allegation as its loss-funded pool shows $3M appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a77abafee3b1cf0cd8d7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yemeni-leadership-condemns-houthi-missile-attack-on-saudi-airport/"
      ],
      "firstSeen": "2026-10-11T00:29:15.000Z",
      "updatedAt": "2026-10-11T02:46:01.888Z",
      "summary": "The condemnation may intensify regional conflict, affecting military strategies and diplomatic relations, with potential shifts in market perceptions. The post Yemeni leadership condemns Houthi missile attack on Saudi airport appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Yemeni leadership condemns Houthi missile attack on Saudi",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b942b71e96e8e1529a20",
      "protocol": "Unattributed",
      "chain": "Avalanche",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/xrp-ledger-security-flaws-ai-threat/"
      ],
      "firstSeen": "2026-10-10T22:29:51.000Z",
      "updatedAt": "2026-10-10T23:16:03.716Z",
      "summary": "Avalanche founder Emin Gün Sirer argues that AI could uncover security flaws in the XRP Ledger. He says that threat deserves more attention than the fall of existing cryptography. His warning arrives as the ledger faces renewed scrutiny over an emergency software update. AI Could Uncover Security Flaws in the XRP Ledger AI-driven vulnerability discovery The post Is XRP Ledger Vulnerable to AI? Avalanche Founder Warns of Hidden Flaws appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Is XRP Ledger Vulnerable to AI? Avalanche Founder",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "32c5d1461763402a3f71",
      "protocol": "Triple-A attacker",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 12400000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/triple-a-attacker-moves-12-4m-in-eth-to-tornado-cash/"
      ],
      "firstSeen": "2026-10-10T08:35:29.000Z",
      "updatedAt": "2026-10-10T20:40:22.323Z",
      "summary": "The attacker behind Triple-A’s July treasury breach has transferred 4,970 ETH worth approximately $12.4 million into Tornado Cash, according to blockchain security firm Salus. Salus said its Tornado monitoring system tracked 49 deposits of 100 ETH and seven deposits of…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0c20f9eefa881aaccc97",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/funds-stolen-from-ledger-holders-under-investigation/"
      ],
      "firstSeen": "2026-10-10T18:34:48.000Z",
      "updatedAt": "2026-10-10T20:01:21.672Z",
      "summary": "Chainalysis is investigating reports of stolen funds from Ledger users, revealing a complex laundering operation. The post Funds Stolen from Ledger Holders Under Investigation appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Funds Stolen from Ledger Holders Under Investigation",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b6014ea99283e13d41bb",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/coinbase-benchmark-finds-newer-ai-models-missed-more-payment-fraud/"
      ],
      "firstSeen": "2026-10-10T18:00:18.000Z",
      "updatedAt": "2026-10-10T20:01:21.672Z",
      "summary": "A fixed historical replay found weaker fraud coverage across three model upgrades, while GPT’s precision improved. The post Newer AI models missed more payment fraud in Coinbase’s benchmark appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Newer AI models missed more payment fraud in Coinbase’s",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "682dd82861977091b377",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/ledger-investigates-fund-losses-linked-to-southeast-asian-reseller-warns-users",
        "https://decrypt.co/380582/ledger-probes-87m-theft-crypto-wallet-reseller",
        "https://www.coindesk.com/business/2026/10/09/ledger-investigates-potential-wallet-tampering-after-reports-of-usd86-million-in-crypto-stolen",
        "https://www.theblock.co/news/business/2026-10-09-ledger-cryptobilis-fund-losses-418163"
      ],
      "firstSeen": "2026-10-09T14:47:27.000Z",
      "updatedAt": "2026-10-10T17:27:15.303Z",
      "summary": "Ledger asked reseller CryptoBilis to pause sales and urged recent buyers not to set up their devices, as an onchain investigator tracked more than $86 million in suspected thefts.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "aa39b1fe84789a6c03dc",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/phishing-scams-target-ledger-users-as-fraudulent-sites-surge/"
      ],
      "firstSeen": "2026-10-10T16:14:48.000Z",
      "updatedAt": "2026-10-10T17:27:15.303Z",
      "summary": "A fraudulent Ledger phishing site has emerged, racking up over a million monthly visits amid ongoing theft investigations. The post Phishing Scams Target Ledger Users as Fraudulent Sites Surge appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Phishing Scams Target Ledger Users as Fraudulent Sites",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d8cd4e04b058dfc9e55a",
      "protocol": "Triple-A attacker",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 12400000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/triple-a-attacker-moves-12-4m-in-eth-to-tornado-cash/"
      ],
      "firstSeen": "2026-10-10T08:35:29.000Z",
      "updatedAt": "2026-10-10T12:22:32.092Z",
      "summary": "The attacker behind Triple-A’s July treasury breach has transferred 4,970 ETH worth approximately $12.4 million into Tornado Cash, according to blockchain security firm Salus. Salus said its Tornado monitoring system tracked 49 deposits of 100 ETH and seven deposits of…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1a680bb51357e289403b",
      "protocol": "Stealing $1.5B in crypto is easy, cashing",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1500000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/the-business-that-turns-north-korean-stolen-crypto-into-spendable-money/"
      ],
      "firstSeen": "2026-10-10T12:00:37.000Z",
      "updatedAt": "2026-10-10T12:22:32.092Z",
      "summary": "North Korean hackers stole around $1.5 billion from Bybit in February 2025. While the hack itself has been widely covered and analyzed, few have focused on what happened afterward and what became of the stolen funds. To move all that money, hackers needed to rely on an entire network of people willing to handle stolen […] The post Stealing $1.5B in crypto is easy, cashing out is the trap appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e90f276fbce762169b39",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-19-billion-crash-one-year-later/"
      ],
      "firstSeen": "2026-10-10T11:05:15.000Z",
      "updatedAt": "2026-10-10T12:22:32.092Z",
      "summary": "The 10/10 crash highlighted crypto's vulnerability to external shocks, prompting calls for better risk management and transparency in trading. The post Bitcoin’s $19 billion crash still shapes crypto risk a year later appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Bitcoin’s $19 billion crash still shapes crypto risk",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "36055258fbda1f1fb62d",
      "protocol": "SARB",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/sarb-warns-against-fraudulent-whatsapp-stock-recommendations/"
      ],
      "firstSeen": "2026-10-10T12:04:48.000Z",
      "updatedAt": "2026-10-10T12:22:32.092Z",
      "summary": "The South African Reserve Bank warns of a scam WhatsApp group misrepresenting Governor Kganyago. Public advised to avoid engagement. The post SARB Warns Against Fraudulent WhatsApp Stock Recommendations appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e323a3229065b4483a87",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 146800,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ledger-wallets-targeted-as-146-8k-stolen-by-drainer/"
      ],
      "firstSeen": "2026-10-10T11:25:48.000Z",
      "updatedAt": "2026-10-10T12:22:32.092Z",
      "summary": "A recent security incident involving Ledger wallets has led to a significant loss of Ethereum. Here's what the crypto community is saying. The post Ledger Wallets Targeted as $146.8K Stolen by Drainer appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ledger Wallets Targeted as $146.8K Stolen by Drainer",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "001851e1b0aea877a9e7",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/380582/ledger-probes-87m-theft-crypto-wallet-reseller",
        "https://www.coindesk.com/business/2026/10/09/ledger-investigates-potential-wallet-tampering-after-reports-of-usd86-million-in-crypto-stolen",
        "https://www.theblock.co/news/business/2026-10-09-ledger-cryptobilis-fund-losses-418163"
      ],
      "firstSeen": "2026-10-09T12:55:19.000Z",
      "updatedAt": "2026-10-10T11:01:47.670Z",
      "summary": "Ledger asked reseller CryptoBilis to pause sales and urged recent buyers not to set up their devices, as an onchain investigator tracked more than $86 million in suspected thefts.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "d7fa492d532455ae72d1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/brasil/brasil-incauta-usd-17-millones-en-criptomonedas-vinculadas-a-una-red-de-phishing/"
      ],
      "firstSeen": "2026-10-10T10:44:57.000Z",
      "updatedAt": "2026-10-10T11:01:47.670Z",
      "summary": "La Policía Civil de Santa Catarina incautó USD $1.708.534 en BTC, ETH, TRX y USDT durante una investigación contra una red de phishing. Los fondos provenían de wallets de autocustodia y ahora están bajo custodia estatal en una cuenta institucional de Foxbit.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Brasil incauta USD $1,7 millones en criptomonedas vinculadas",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b9ea3eb0b9fbf8e3fdec",
      "protocol": "Triple-A attacker",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 12400000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/triple-a-attacker-moves-12-4m-in-eth-to-tornado-cash/"
      ],
      "firstSeen": "2026-10-10T09:30:00.000Z",
      "updatedAt": "2026-10-10T11:01:47.670Z",
      "summary": "The attacker behind Triple-A’s July treasury breach has transferred 4,970 ETH worth approximately $12.4 million into Tornado Cash, according to blockchain security firm Salus. Salus said its Tornado monitoring system tracked 49 deposits of 100 ETH and seven deposits of…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0136fedc64895630a8a0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/brazilian-police-seize-crypto-phishing-ring/"
      ],
      "firstSeen": "2026-10-10T06:41:17.000Z",
      "updatedAt": "2026-10-10T08:16:22.104Z",
      "summary": "The operation highlights growing regulatory scrutiny on self-custody wallets, potentially influencing crypto security practices and policies. The post Brazilian police seize $1.7M in crypto from phishing ring’s wallets appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Brazilian police seize $1.7M in crypto from phishing ring’s",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "19bd7b2e579de7e02ad9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-theft-funds-usdt-usdd-freeze/",
        "https://thedefiant.io/news/hacks/ledger-theft-funds-shift-into-usdd-beyond-tether-s-freeze-controls"
      ],
      "firstSeen": "2026-10-10T02:06:06.000Z",
      "updatedAt": "2026-10-10T02:31:07.943Z",
      "summary": "The shift from USDT to USDD underscores vulnerabilities in stablecoin freeze mechanisms, prompting scrutiny on regulatory and security measures. The post Ledger theft-linked funds shift from USDT to USDD to dodge Tether freezes appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ledger theft-linked funds shift from USDT to USDD",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "39cd7d40d338dd9a4de5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/kalshi-investigates-press-secretary-trades/"
      ],
      "firstSeen": "2026-10-10T00:53:38.000Z",
      "updatedAt": "2026-10-10T02:31:07.943Z",
      "summary": "The investigation highlights the vulnerability of prediction markets to insider trading, potentially undermining their credibility and fairness. The post Kalshi investigates suspicious trades tied to Trump’s press secretary pick appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Kalshi investigates suspicious trades tied to Trump’s press",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "acb61e8390d4db326c38",
      "protocol": "Cardano Founder",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/cardano-founder-says-vitaliks-ai-warning-could-slow-internet-wide-quantum-protection/",
        "https://cryptoslate.com/cardanos-hoskinson-hoskinson-slams-vitalik-buterins-ai-doomsday-warning-as-a-threat-to-cryptos-quantum-future/"
      ],
      "firstSeen": "2026-10-09T19:00:27.000Z",
      "updatedAt": "2026-10-09T23:58:41.899Z",
      "summary": "TL;DR Charles Hoskinson argues that Vitalik Buterin’s concerns about AI-driven mathematical breakthroughs could delay the adoption of lattice-based post-quantum cryptography. Hoskinson says decades of research have improved attacks against lattice systems without demonstrating a general method to break properly configured schemes. The dispute highlights competing approaches to quantum security, including lattice-based encryption and hash-based cryptography, ... Read more",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "84e058a4542cfe0a927b",
      "protocol": "Ledger hack scare nears $90 million as Tether",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": 90000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptoslate.com/ledger-hack-scare-nears-90-million-as-tether-moves-to-freeze-stolen-usdt/",
        "https://thedefiant.io/news/hacks/tether-freezes-usdt-linked-to-ledger-user-thefts-misttrack-says"
      ],
      "firstSeen": "2026-10-09T15:29:41.000Z",
      "updatedAt": "2026-10-09T22:16:08.247Z",
      "summary": "Suspected Ledger wallet thefts are approaching $90 million as Tether freezes USDT stablecoin linked to the incident, according to blockchain investigators. In an Oct. 9 statement, the crypto hardware wallet maker said it was investigating reports that customers lost funds after buying devices from CryptoBilis, an authorized reseller operating in Southeast Asia. As a precaution, […] The post Ledger hack scare nears $90 million as Tether moves to freeze stolen USDT appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "bfe8f8af7e1d07e34138",
      "protocol": "Binance Founder CZ",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": 86900000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/binance-founder-cz-warns-crypto-users-to-quarantine-new-wallets-after-86m-hack/"
      ],
      "firstSeen": "2026-10-09T12:55:19.000Z",
      "updatedAt": "2026-10-09T22:16:08.247Z",
      "summary": "TL;DR Binance co-founder Changpeng Zhao (CZ) recommends waiting at least two weeks before trusting a newly purchased hardware wallet with substantial crypto holdings. A reported $86.9 million theft across Bitcoin, Ethereum, and Tron networks has raised concerns about compromised devices distributed through third-party resellers. Ledger says its manufacturing process, firmware, and Ledger Live software were ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "6e3b728cbce940206ae6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ava-labs-backup-cryptography-ai-security/"
      ],
      "firstSeen": "2026-10-09T20:01:54.000Z",
      "updatedAt": "2026-10-09T22:16:08.247Z",
      "summary": "AI's potential to exploit software vulnerabilities highlights the urgent need for robust security measures across blockchain ecosystems. The post Ava Labs explores backup cryptography as Sirer flags AI security risks appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Ava Labs explores backup cryptography as Sirer flags AI",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d9bb6feae1b681116c90",
      "protocol": "Avalanche Founder",
      "chain": "Avalanche",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/avalanche-founder-warns-ai-could-expose-critical-xrp-ledger-vulnerabilities/"
      ],
      "firstSeen": "2026-10-09T21:55:25.000Z",
      "updatedAt": "2026-10-09T22:16:08.247Z",
      "summary": "TL;DR: Emin Gün Sirer, founder of Avalanche, stated on social media that advanced artificial intelligence could uncover zero-day software bugs across blockchains such as the XRP Ledger. XRP Ledger developers rolled out an emergency security patch on September 25, 2026, without immediately disclosing the underlying source code of the fixes. The technical argument emerges amid ... Read more",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c37272249d8ef41420a5",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/ledger-reseller-sales-paused-drain-claims/",
        "https://cointelegraph.com/news/ledger-investigates-fund-losses-linked-to-southeast-asian-reseller-warns-users",
        "https://crypto-economy.com/ledger-halts-reseller-sales-after-86m-crypto-loss-claims-emerge/",
        "https://decrypt.co/380582/ledger-probes-87m-theft-crypto-wallet-reseller",
        "https://www.coindesk.com/business/2026/10/09/ledger-investigates-potential-wallet-tampering-after-reports-of-usd86-million-in-crypto-stolen",
        "https://www.theblock.co/news/business/2026-10-09-ledger-cryptobilis-fund-losses-418163"
      ],
      "firstSeen": "2026-10-09T13:51:00.000Z",
      "updatedAt": "2026-10-09T19:41:33.375Z",
      "summary": "Ledger asked reseller CryptoBilis to pause sales and urged recent buyers not to set up their devices, as an onchain investigator tracked more than $86 million in suspected thefts.",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "919633effd0931a33649",
      "protocol": "Trader",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 90000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/trader-loses-80-bitcoin-ledger-wallet/",
        "https://crypto-economy.com/trader-loses-6-6m-in-btc-10-days/"
      ],
      "firstSeen": "2026-10-09T16:29:56.000Z",
      "updatedAt": "2026-10-09T19:41:33.375Z",
      "summary": "A trader lost 80 BTC from a new Ledger bought via CryptoBilis as theft estimates near $90 million. The post Trader Loses $6.6 Million in Bitcoin After Buying New Ledger Wallet appeared first on BeInCrypto .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "a19b9fed3af57f82014a",
      "protocol": "Hacker",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 11500000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/hacker-returns-15000-bnb-to-79thvault-in-rare-crypto-recovery/"
      ],
      "firstSeen": "2026-10-09T18:24:35.000Z",
      "updatedAt": "2026-10-09T19:41:33.375Z",
      "summary": "TL;DR 79thVault recovered 15,000 BNB, worth approximately $11.5 million at the time of the reported recovery, after its 79AU liquidity pool was drained on October 7. The returned funds represent roughly 92% of the 16,249 BNB extracted during the attack, which exposed weaknesses in the project’s account permission management. The team plans to restore the ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "49cb0c17dd09c4f5793c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-attacks-on-riyadh-airport-kill-3-injure-others-amid-saudi-tensions/"
      ],
      "firstSeen": "2026-10-09T19:32:01.000Z",
      "updatedAt": "2026-10-09T19:41:33.375Z",
      "summary": "The attacks may escalate regional tensions, impacting geopolitical stability and market perceptions of Houthi influence in strategic areas. The post Houthi attacks on Riyadh airport kill 3, injure others amid Saudi tensions appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Houthi attacks on Riyadh airport kill 3, injure others",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f80797f9834857f3db4a",
      "protocol": "Tether",
      "chain": "Tron",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/tether-blacklists-thorchain-vaults-tron/",
        "https://thedefiant.io/news/defi/tether-blacklists-four-thorchain-vaults-holding-1-45-million-usdt"
      ],
      "firstSeen": "2026-10-09T15:27:48.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "The incident highlights the vulnerability of decentralized protocols to centralized control, impacting liquidity and trust in DeFi systems. The post Tether freezes four THORChain vaults, halting Tron swaps appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "4456619d566f918071b6",
      "protocol": "Unattributed",
      "chain": "Multi-chain",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/markets/bitcoin-consolidates-crypto-weathers-ledger-theft-reports"
      ],
      "firstSeen": "2026-10-09T15:20:36.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "Bitcoin and crypto markets eyed a recovery from Thursday’s drop despite concerns of another hardware wallet exploit.",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Bitcoin consolidates near $82.5K as crypto weathers Ledger",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "96f285c377932b8ab682",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/jersey-bvi-uae-tokenized-stock-market/"
      ],
      "firstSeen": "2026-10-09T14:56:36.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "The concentration of tokenized stock markets in a few jurisdictions highlights potential regulatory vulnerabilities and influences global financial dynamics. The post Jersey, BVI and UAE dominate the tokenized stock market appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Jersey, BVI and UAE dominate the tokenized stock market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c9934c32e16d9354022c",
      "protocol": "Ostium Proposes Equity Stakes",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/ostium-proposes-equity-stakes-for-hacked-liquidity-providers"
      ],
      "firstSeen": "2026-10-09T16:00:00.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "Stage 2 pairs a pro-rata claim on recovered funds and half of Ostium's opening fees with an optional equity allocation priced at the company's next round. The percentages are still unset, and holders have until Oct. 30 to elect.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "93591d657fbd1a2b657b",
      "protocol": "Ledger Users",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 90000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ledger-users-lose-nearly-90m-in-funds-as-cryptobillis-fails/"
      ],
      "firstSeen": "2026-10-09T16:58:48.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "Ledger users have reported nearly $90 million in stolen funds linked to purchases from reseller CryptoBillis. Here's why it matters. The post Ledger Users Lose Nearly $90M in Funds as CryptoBillis Fails appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dd4213481fba90884c2b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 14000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/79thvaults-14-million-pool-drain-shows-why-locked-liquidity-can-fail/"
      ],
      "firstSeen": "2026-10-09T14:40:46.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "Bitquery traced 79AU’s drain to token permissions that bypassed burned LP receipts, with residual rights documented on Oct. 8. The post Locked liquidity did not stop this $14 million crypto pool drain appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Locked liquidity did not stop this $14 million crypto",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "a30e6611d1789206ba9c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-defends-firing-safety-researchers/"
      ],
      "firstSeen": "2026-10-09T15:23:07.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "The firings may deter internal safety advocacy and collaboration, highlighting tensions between transparency and confidentiality in tech. The post OpenAI defends firing three safety researchers, cites information policy breach appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "OpenAI defends firing three safety researchers, cites",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "be807d9784e97ad09e6a",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-malaysia-hidden-implant-cryptobilis/"
      ],
      "firstSeen": "2026-10-09T16:52:45.000Z",
      "updatedAt": "2026-10-09T17:01:34.100Z",
      "summary": "The incident highlights the critical need for secure supply chains in tech, as compromised devices can undermine trust and financial security. The post Ledger users warned of potential implant in Malaysian devices appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Ledger users warned of potential implant in Malaysian",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a9ebafc0c35a06e1853e",
      "protocol": "DWF Labs subsidiaries",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/bitgo-sued-for-141m-over-early-token-sales/",
        "https://www.coindesk.com/policy/2026/10/09/dwf-labs-subsidiaries-sue-bitgo-for-usd141-million-over-alleged-token-lock-up-breach"
      ],
      "firstSeen": "2026-10-09T05:31:08.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "DWF is seeking $114 million in damages on the basis BitGo’s token sales resulted in direct losses through the fall in tokens' prices.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "e65a6c8c302d91f4b55d",
      "protocol": "London Man",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/london-man-gets-30-months-for-200k-crypto-sim-swap-fraud/"
      ],
      "firstSeen": "2026-10-09T12:59:24.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "A London man who used SIM-swapping to help steal nearly £200,000 in cryptocurrency was sentenced to 30 months in prison on October 8, according to City of London Police. Ajay Shinjin, 25, pleaded guilty to conspiracy to commit fraud by false representation and transferring criminal property, with the case showing how SIM-swap attacks can compromise ... Read more",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "04fa80be9301c0559356",
      "protocol": "Ukraine",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ukraine-drone-strikes-yandex-data-centres/"
      ],
      "firstSeen": "2026-10-09T13:53:42.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "The strikes highlight the vulnerability of digital infrastructure in modern conflicts, potentially prompting shifts in cybersecurity strategies. The post Ukraine hits two Yandex data centres in back-to-back drone strikes appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4629f57350867a64f2af",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/france-is-worlds-most-dangerous-place-for-bitcoiners-90-attacks-in-7-months"
      ],
      "firstSeen": "2026-10-09T13:30:00.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "French authorities recorded 90 crypto-related cases involving kidnapping, extortion, threats and violent theft in seven months. What makes France such a hotspot?",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "France is world’s most dangerous place for Bitcoiners",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "624939bf12e79ef8c5e5",
      "protocol": "Ledger users reportedly",
      "chain": "Multi-chain",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 86000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ledger-users-drained-86-million-exploit/"
      ],
      "firstSeen": "2026-10-09T12:55:19.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "The incident underscores the vulnerability of hardware wallets, urging users to reassess security practices and the reliability of such devices. The post Ledger users reportedly drained of over $86 million in suspected exploit appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "70686d73fe56743c1a04",
      "protocol": "Ledger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 86000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/ledger-reseller-sales-paused-drain-claims/"
      ],
      "firstSeen": "2026-10-09T13:51:00.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "Ledger halts CryptoBilis sales and warns recent buyers as an analyst claims $86 million in user losses. The post Ledger Pauses Reseller Sales After $86 Million Drain Claims: Were Devices Tampered? appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "98cca4cf37ed06a64fcf",
      "protocol": "Polygon’s 8 million USDT0 holders",
      "chain": "Polygon",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/polygons-8-million-usdt0-holders-face-scrutiny-as-58-of-growth-matches-scam-patterns/"
      ],
      "firstSeen": "2026-10-09T13:40:01.000Z",
      "updatedAt": "2026-10-09T14:16:49.179Z",
      "summary": "The Oct. 7 audit estimates about 1.1 million scam look-alikes, while addresses holding at least $10 fell 42% since August 2025. The post Polygon’s 8 million USDT0 holders face scrutiny as 58% of growth matches scam patterns appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cf10f4cc492330c07def",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/wallet-linked-to-2016-bitfinex-hack-transferred-12267-btc-valued-at-101-billion/"
      ],
      "firstSeen": "2026-10-09T11:33:01.000Z",
      "updatedAt": "2026-10-09T11:46:25.759Z",
      "summary": "The transfer of BTC linked to the 2016 hack may signal future market volatility and strategic shifts, impacting Bitcoin's price stability. The post Wallet linked to 2016 Bitfinex hack transferred 12,267 BTC valued at $1.01 billion to new addresses appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Wallet linked to 2016 Bitfinex hack transferred 12,267 BTC",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e3b2f95d360889fe170a",
      "protocol": "Yandex",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/yandex-second-data-center-drone-attack/"
      ],
      "firstSeen": "2026-10-09T09:48:02.000Z",
      "updatedAt": "2026-10-09T11:46:25.759Z",
      "summary": "The drone attacks on Yandex's data centers highlight vulnerabilities in critical tech infrastructure, potentially escalating geopolitical tensions. The post Yandex says a second data center was hit by drones in two days appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "575443904f47a888633a",
      "protocol": "Is XRP Decentralized? One Crypto Founder",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/justin-bons-xrp-decentralization-fraud-evernorth/"
      ],
      "firstSeen": "2026-10-09T10:54:39.000Z",
      "updatedAt": "2026-10-09T11:46:25.759Z",
      "summary": "Justin Bons, founder of Cyber Capital, calls selling XRP to retail investors decentralized outright fraud. His criticism arrives as Evernorth prepares its Nasdaq debut. The clash pits Bons against David Schwartz, and it tests how decentralized the XRP Ledger really is. What Makes a Blockchain Truly Decentralized? Decentralization means no single party controls participation, governance, The post Is XRP Decentralized? One Crypto Founder Calls the Claim Fraud appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7ef965a3ecfa11c5f4e1",
      "protocol": "Houthi missile attack on Riyadh airport kills",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/houthi-missile-attack-on-riyadh-airport-kills-three-escalates-yemen-conflict/"
      ],
      "firstSeen": "2026-10-09T10:03:19.000Z",
      "updatedAt": "2026-10-09T11:46:25.759Z",
      "summary": "The attack heightens regional instability, potentially altering military strategies and market perceptions of Houthi territorial advances. The post Houthi missile attack on Riyadh airport kills three, escalates Yemen conflict appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "01493fe0b7fe00611142",
      "protocol": "Glassnode",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/glassnode-reveals-6-26-million-btc-exposed-to-quantum/"
      ],
      "firstSeen": "2026-10-09T07:35:47.000Z",
      "updatedAt": "2026-10-09T09:16:26.870Z",
      "summary": "Glassnode's latest findings show a significant number of BTC are at risk due to quantum computing vulnerabilities. The post Glassnode Reveals 6.26 Million BTC Exposed to Quantum appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "214fa14a9af7145560ea",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 265000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380554/sim-swap-fraudster-who-spent-stolen-crypto-on-gold-grills-and-dubai-trips-jailed"
      ],
      "firstSeen": "2026-10-09T08:59:31.000Z",
      "updatedAt": "2026-10-09T09:16:26.870Z",
      "summary": "Ajay Shinjin helped steal nearly $265,000 in crypto after criminals hijacked BT customers' phone numbers in November 2021.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "SIM-Swap Fraudster Who Spent Stolen Crypto on Gold Grills",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "014838438ac95a81cdbc",
      "protocol": "EtherVista",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 18600,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ethervista-suffers-18-6k-loss-due-to-exploit-in-swap-function/"
      ],
      "firstSeen": "2026-10-09T08:14:20.000Z",
      "updatedAt": "2026-10-09T09:16:26.870Z",
      "summary": "EtherVista has reported an $18.6K loss from a recent exploit linked to its swap function. This incident highlights vulnerabilities in DeFi protocols. The post EtherVista Suffers $18.6K Loss Due to Exploit in Swap Function appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c7d7cf7451eb7ee8c855",
      "protocol": "Saudia Airlines employee killed in Houthi attack",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/saudia-airlines-employee-killed-in-houthi-attack-state-tv/"
      ],
      "firstSeen": "2026-10-09T07:50:49.000Z",
      "updatedAt": "2026-10-09T09:16:26.870Z",
      "summary": "The attack exacerbates regional instability, threatening civilian safety and aviation, while influencing market perceptions of future conflicts. The post Saudia Airlines employee killed in Houthi attack: state TV appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0338234f4c623ec8153f",
      "protocol": "$14K",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 14000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/14k-bitbay-suffers-exploit-due-to-vault-vulnerability/"
      ],
      "firstSeen": "2026-10-09T05:04:47.000Z",
      "updatedAt": "2026-10-09T06:37:39.951Z",
      "summary": "BitBay is reeling from a recent exploit that caused a loss of approximately $14,000 due to a vulnerability in its vault's withdrawal function. This incident raises concerns about security practices within DeFi platforms. The post $14K: BitBay Suffers Exploit Due to Vault Vulnerability appeared first on Coinfomania .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "48a78f03e0bfc8dd426e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/crypto-projects-apply-for-anthropics-new-frontier-ai-security-scanner"
      ],
      "firstSeen": "2026-10-09T05:34:33.000Z",
      "updatedAt": "2026-10-09T05:46:20.829Z",
      "summary": "Anthropic’s new opt-in service promises vulnerability reports from its strongest AI models, including Claude Mythos.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Crypto projects apply for Anthropic’s new frontier AI",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8d0805d42a436472327e",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/ai-financing-debt-rattles-tech-credit/"
      ],
      "firstSeen": "2026-10-09T01:19:02.000Z",
      "updatedAt": "2026-10-09T03:01:39.846Z",
      "summary": "Rising credit costs and default risks in AI financing could reshape tech investment strategies, highlighting vulnerabilities in corporate credit. The post Investors reassess risks as AI financing rattles tech companies appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Investors reassess risks as AI financing rattles tech",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1fe8f4b93a0562da6fb4",
      "protocol": "IMF Sounds Alarm on $65B Tokenized RWA Market",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/imf-sounds-alarm-on-65b-tokenized-rwa-market-and-stablecoin-settlement-risks/"
      ],
      "firstSeen": "2026-10-08T18:28:31.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "The International Monetary Fund (IMF) warned of structural vulnerabilities in the tokenized RWA sector after revealing that the market has reached approximately $65 billion. In an advance chapter of its Global Financial Stability Report presented in Seoul, the organization noted that the ecosystem remains fragmented, dominated by retail trading, and exposed to volatility 50% higher ... Read more",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "906253def78590d17e10",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/did-us-government-sell-bitcoin/"
      ],
      "firstSeen": "2026-10-08T16:35:55.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "The US government moved approximately $1.01 billion in Bitcoin on October 8, raising fears of a major sell-off as the cryptocurrency market continued to decline. Arkham data shows two outgoing transfers from a wallet holding Bitcoin seized in the Bitfinex hack. Lookonchain traced the larger transfer to two new addresses, holding approximately 6,000 BTC and The post Is the US Government Selling $1 Billion in Bitcoin? appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Is the US Government Selling $1 Billion in Bitcoin?",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eedadbb90cb4496d6d55",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/gobierno-eeuu-vendio-bitcoin/"
      ],
      "firstSeen": "2026-10-08T20:21:00.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "El gobierno de Estados Unidos transfirió aproximadamente 1.01 mil millones de dólares en Bitcoin el 8 de octubre, lo que generó temores sobre una gran venta mientras el mercado cripto seguía bajista. Los datos de Arkham muestran dos transferencias salientes desde una wallet que contiene Bitcoin incautado en el hack de Bitfinex. Lookonchain rastreó la El post ¿El gobierno de EEUU vendió $1 mil millones en Bitcoin? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "¿El gobierno de EEUU vendió $1 mil millones en",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "fea224d9206663da7194",
      "protocol": "Bitcoin reclaims $81K as Trump",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-reclaims-81k-as-trump-rules-out-iran-strikes/"
      ],
      "firstSeen": "2026-10-08T20:18:50.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "Bitcoin has reclaimed $81,000 after U.S. President Donald Trump ruled out attacks on Iran before the Nov. 3 midterm elections, while oil prices have retreated following his statement. President Donald Trump said in an Oct. 8 Truth Social post that…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b21269063b40d1533399",
      "protocol": "Jameson Lopp",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/jameson-lopp-says-bitcoins-ai-threat-is-overblown/"
      ],
      "firstSeen": "2026-10-08T18:09:22.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "TL;DR Jameson Lopp argues that fears of AI breaking Bitcoin’s cryptography are premature compared with software vulnerabilities that AI can already help discover. His position distinguishes a theoretical ECDSA breakthrough from practical bugs in wallets, node software and surrounding infrastructure that can be exploited without breaking cryptographic mathematics. Lopp does not dismiss future cryptographic threats, ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b01342c62d3eb0c4a3e0",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/08/over-6-million-bitcoin-sit-behind-exposed-public-keys-as-ai-warnings-mount"
      ],
      "firstSeen": "2026-10-08T14:03:20.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "Glassnode co-founder's latest figures show growing public-key exposure as Justin Drake urges preparations for potential AI attacks on wallet cryptography.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Over 6 million bitcoin sit behind exposed public keys",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4723a4c3a7d7173762a7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/people/netflix-ftx-love-story-trailer-draws-mockery-on-crypto-x"
      ],
      "firstSeen": "2026-10-08T21:25:20.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "Netflix’s synopsis for “The Altruists” calls it “a toxic love story inspired by a real fraud.” The trailer drew 4.2 million views in seven hours, and the most-shared replies from crypto accounts went at the casting and the accuracy.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Netflix’s FTX Love Story Trailer Draws Mockery on Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "00a58712148bc1da52e1",
      "protocol": "ACAMS and Chainalysis",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 17000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/acams-and-chainalysis-expand-crypto-crime-training/"
      ],
      "firstSeen": "2026-10-08T19:06:21.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "ACAMS and Chainalysis have expanded their crypto financial crime training program after Chainalysis estimated that scams and fraud stole $17 billion in cryptocurrency during 2025. ACAMS said in its Oct. 8 announcement that its redesigned Certified Cryptoasset AFC Specialist certification…",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "328f2eb14ddbc6440f44",
      "protocol": "OpenAI",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-iranian-bogus-bylines-influence-operation/"
      ],
      "firstSeen": "2026-10-08T22:09:54.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "The incident highlights vulnerabilities in media vetting processes and suggests a trend towards outsourced influence operations, complicating accountability. The post OpenAI says Iranian operatives used ChatGPT to plant critical news articles appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "afdca6f93dca08884530",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/tech/2026/10/08/bitcoin-and-ether-holders-urged-to-prepare-bunker-mode-against-possible-ai-attacks"
      ],
      "firstSeen": "2026-10-08T11:47:16.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "Ethereum researchers warned AI could break the signatures guarding bitcoin, ether and the tokens built on them \"in months, not years\" in the worst case, well before quantum computers arrive.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Bitcoin and ether holders urged to enter ‘bunker mode’",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7ec571487187507fa0c1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 50000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380401/uranium-finance-hacker-who-bought-pokemon-and-magic-cards-convicted-over-50m-theft"
      ],
      "firstSeen": "2026-10-08T11:37:17.000Z",
      "updatedAt": "2026-10-08T22:31:06.662Z",
      "summary": "Jonathan Spalletta also spent stolen crypto on a Roman coin marking Julius Caesar's assassination and moon-flown Wright brothers fabric.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Uranium Finance Hacker Who Bought Pokémon and Magic Cards",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b11a441ebb7ccf5f190d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/beware-of-bookmark-based-phishing-attacks-on-fomo-users/"
      ],
      "firstSeen": "2026-10-08T04:44:47.000Z",
      "updatedAt": "2026-10-08T05:46:21.484Z",
      "summary": "FOMO users are cautioned about phishing attacks that could compromise their accounts. This warning highlights the ongoing risks associated with online crypto platforms. The post Beware of Bookmark-Based Phishing Attacks on FOMO Users appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Beware of Bookmark-Based Phishing Attacks on FOMO Users",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3e6d8b8f180ed7c57d83",
      "protocol": "US government",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 470000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/us-government-moves-470-million-in-seized-crypto-to-coinbase-linked-wallets-reviving-bitcoin-sale-questions/"
      ],
      "firstSeen": "2026-10-08T00:00:12.000Z",
      "updatedAt": "2026-10-08T00:23:09.913Z",
      "summary": "The US government moved about $470 million in seized crypto to likely Coinbase Prime addresses, according to Arkham, reviving questions over potential asset sales. On Oct. 7, blockchain analytics firm Arkham Intelligence said the transfers included Bitcoin, wrapped Bitcoin and USDT. Arkham linked the transferred assets to seizures involving the 2016 Bitfinex hack and Alameda […] The post US government moves $470 million in seized crypto to Coinbase wallets, raising Bitcoin sale questions appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "9be0fe9e8e538a1f17f7",
      "protocol": "CEO de Bitget habla sobre el hack de $387",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/entrevista-ceo-de-bitget-hack-gracy-chen/"
      ],
      "firstSeen": "2026-10-07T23:17:00.000Z",
      "updatedAt": "2026-10-08T00:23:09.913Z",
      "summary": "Atacantes robaron aproximadamente 387.5 millones de dólares de Bitget el 24 de septiembre manipulando su proceso interno de retiros. Según Chainalysis, el ataque fue realizado por hackers norcoreanos. Entonces, ¿Es Bitget seguro para usar ahora? ¿Y si el próximo hack es aún mayor? ¿Qué medidas de seguridad está tomando el exchange? BeInCrypto conversó con la El post CEO de Bitget habla sobre el hack de $387 millones: ¿Es seguro el exchange? fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "396ea3e7e771e750edb3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 53000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-hacker-pokemon-cards-convicted/"
      ],
      "firstSeen": "2026-10-07T21:00:00.000Z",
      "updatedAt": "2026-10-07T22:31:19.206Z",
      "summary": "A jury convicted the hacker who stole $53 million in crypto and spent it on Pokémon cards. He faces up to 30 years. The post Crypto Hacker Who Spent Stolen Millions on Pokémon Cards Found Guilty in New York appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto Hacker Who Spent Stolen Millions on Pokémon Cards",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "7315892172327a201666",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/gcc-condemns-houthi-attacks-on-saudi-airports-as-systematic-crimes/"
      ],
      "firstSeen": "2026-10-07T21:33:15.000Z",
      "updatedAt": "2026-10-07T22:31:19.206Z",
      "summary": "The GCC's condemnation may lead to increased regional unity and potential military escalation, impacting geopolitical stability and market dynamics. The post GCC condemns Houthi attacks on Saudi airports as “systematic crimes” appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "GCC condemns Houthi attacks on Saudi airports as “systematic",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "babdf2e3b0ca0fa66387",
      "protocol": "Europol",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/europol-warns-new-quantum-attacks-target-crypto-wallets-first/",
        "https://crypto.news/europol-warns-crypto-wallets-face-quantum-threats/",
        "https://cryptobriefing.com/europol-crypto-wallets-quantum-attack-risk/",
        "https://decrypt.co/380268/europol-warns-crypto-wallets-are-primary-risk-for-quantum-attacks"
      ],
      "firstSeen": "2026-10-07T10:49:16.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "The EU police agency expects blockchains to adapt to the threat, while a second report weighs the risk of data stolen now and cracked later.",
      "revision": 3,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "02175a3c8fc221bc45e2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 55000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/uranium-finance-hacker-convicted-over-55-million-theft/"
      ],
      "firstSeen": "2026-10-07T20:30:00.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "A New York jury has convicted cybersecurity consultant Jonathan Spalletta of computer fraud and money laundering over two Uranium Finance attacks that drained nearly $55 million, with the money laundering count carrying up to 20 years in prison. The U.S.…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Uranium Finance hacker convicted over $55 million theft",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "29aca7c558e641d7eaa0",
      "protocol": "Trader Frogman",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 4000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/trader-frogman-drained-of-4-million-on-the-first-morning-of-token2049"
      ],
      "firstSeen": "2026-10-07T16:57:34.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "Onchain records show the tokens left his Solana wallet at 4:14 a.m. Singapore time and were sold in four equal lots over the nine minutes that followed. The trader says he has found no sign of a breach on his phone or email",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "3959a6c58ae1675552e9",
      "protocol": "Hunter Biden",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/hunter-biden-laptop-memecoin-troll-no-rug-pull"
      ],
      "firstSeen": "2026-10-07T18:00:10.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "“Trump’s coin was max extraction, and I wanted to troll every grift like it,“ said Hunter Biden in a breakdown of the memecoin launch and fallout.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "af94a6a81ae01ae8383c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/dominion-market-shuts-down-after-2-75m-silv-exploit/"
      ],
      "firstSeen": "2026-10-07T19:34:20.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "Dominion Market has shut down after a $2.75 million exploit left its recovery plan underfunded, raising concerns among SILV investors. The post Dominion Market Shuts Down After $2.75M SILV Exploit appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "Dominion Market Shuts Down After $2.75M SILV Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cc30540ad1198826848d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380339/hackers-ai-agents-megachurch-database"
      ],
      "firstSeen": "2026-10-07T19:10:31.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "Seoul's Yoido Full Gospel Church says data on 850,000 members may be compromised, and a security firm found signs AI helped run the attack.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Hackers Used AI Agents to Raid a Megachurch's Database",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "575cc255074bc853cbc8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": 53300000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/pokemon-collector-convicted-in-major-crypto-hack-and-money-laundering-case/"
      ],
      "firstSeen": "2026-10-07T20:01:18.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "TL;DR: A Manhattan federal jury convicted Jonathan Spalletta of computer fraud and money laundering for draining $53.3 million from Uranium Finance in April 2021. Prosecutors proved that $26 million was routed through the privacy mixer Tornado Cash between April 2021 and November 2023 to purchase rare Pokémon and Magic: The Gathering collectible cards, as well ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Pokémon Collector Convicted in Major Crypto Hack and Money",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f190b4d2afb751857f18",
      "protocol": "North Carolina man",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/michael-smith-sentenced-ai-music-streaming-fraud/"
      ],
      "firstSeen": "2026-10-07T18:25:53.000Z",
      "updatedAt": "2026-10-07T20:31:22.244Z",
      "summary": "This case highlights the need for stricter regulations on AI in music to protect artists' royalties and ensure fair compensation. The post North Carolina man gets 18 months in first federal AI music streaming fraud case appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "95b6227015be5c723093",
      "protocol": "Trader Frogman",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": 4000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/trader-frogman-drained-of-4-million-on-the-first-morning-of-token2049"
      ],
      "firstSeen": "2026-10-07T16:57:34.000Z",
      "updatedAt": "2026-10-07T17:46:22.460Z",
      "summary": "Onchain records show the tokens left his Solana wallet at 4:14 a.m. Singapore time and were sold in four equal lots over the nine minutes that followed. The trader says he has found no sign of a breach on his phone or email",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4f12ed6bf37c13f58ede",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/uranium-finance-hacker-spalletta-found-guilty/"
      ],
      "firstSeen": "2026-10-07T17:11:56.000Z",
      "updatedAt": "2026-10-07T17:46:22.460Z",
      "summary": "The conviction highlights the vulnerabilities in DeFi systems and underscores the effectiveness of blockchain forensics in tracing illicit activities. The post Cybersecurity consultant found guilty of stealing $55M in crypto from Uranium Finance appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Cybersecurity consultant found guilty of stealing $55M",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e41de12a4750d698c8d3",
      "protocol": "CFTC",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/cftc-issues-warning-against-unusual-crypto-transactions/"
      ],
      "firstSeen": "2026-10-07T14:24:20.000Z",
      "updatedAt": "2026-10-07T14:31:24.613Z",
      "summary": "The CFTC has issued a warning about potential scams involving crypto transactions. Here's what investors should know. The post CFTC Issues Warning Against Unusual Crypto Transactions appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "742895bf8f72678c5747",
      "protocol": "Superfinanciera",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/superfinanciera-issues-warning-on-guaranteed-investment/"
      ],
      "firstSeen": "2026-10-07T13:32:46.000Z",
      "updatedAt": "2026-10-07T13:46:24.101Z",
      "summary": "Superfinanciera has warned Colombians against high-yield investment schemes, urging due diligence to avoid fraud. The post Superfinanciera Issues Warning on Guaranteed Investment appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9199e6baaaf73a63063f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/exchanges/near-apuesta-por-reducir-la-dependencia-de-los-exchanges-centralizados-con-mas-servicios-onchain/"
      ],
      "firstSeen": "2026-10-07T13:15:40.000Z",
      "updatedAt": "2026-10-07T13:31:20.866Z",
      "summary": "El cofundador de NEAR, Illia Polosukhin, sostiene que muchas operaciones cripto ya no requieren pasar por exchanges centralizados. Su apuesta combina más servicios fiat, acciones tokenizadas, herramientas de privacidad y agentes de IA, aunque llega pocos días después de un exploit que afectó a NEAR Intents.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "NEAR apuesta por reducir la dependencia de los exchanges",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d2d02822ef2aac0dff7a",
      "protocol": "Flash Loan Attacks",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380166/flash-loan-attacks-drained-1-2b-from-defi-between-2020-and-2024-study"
      ],
      "firstSeen": "2026-10-06T15:26:41.000Z",
      "updatedAt": "2026-10-07T13:31:20.866Z",
      "summary": "Attacks grew more sophisticated and less predictable over the period, according to researchers who scanned more than 20 billion transactions.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "03a946b28c6e88560756",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/estafas/asos-reconoce-actividad-no-autorizada-y-alerta-por-posibles-riesgos-de-phishing/"
      ],
      "firstSeen": "2026-10-07T12:40:50.000Z",
      "updatedAt": "2026-10-07T13:31:20.866Z",
      "summary": "ASOS informó que investiga actividad no autorizada relacionada con plataformas de comunicación de terceros. Nombres y datos de contacto pudieron quedar expuestos, pero no hay pruebas públicas de que los atacantes robaran la base completa de clientes. La principal precaución inmediata es evitar enlaces sospechosos y verificar cualquier aviso directamente con la empresa.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "ASOS reconoce actividad no autorizada y alerta por posibles",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "7dba7c1ccc866aa4215d",
      "protocol": "Crypto Community Reacts to $4M Drain Incident",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 4000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/crypto-community-reacts-to-4m-drain-incident/"
      ],
      "firstSeen": "2026-10-07T13:15:04.000Z",
      "updatedAt": "2026-10-07T13:31:20.866Z",
      "summary": "A crypto trader claims to have lost over $4 million while asleep. An investigation is currently underway as the community responds. The post Crypto Community Reacts to $4M Drain Incident appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "a8663fa7d5ca3105fe9d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-ideas-reshaping-traditional-finance/"
      ],
      "firstSeen": "2026-10-07T12:19:32.000Z",
      "updatedAt": "2026-10-07T13:31:20.866Z",
      "summary": "The first decade of crypto can be seen as a sequence of bubbles, hacks, memes, and projects that disappeared almost as quickly as they appeared. I see a decade of financial experimentation. An open, global laboratory operating 24/7, with an unusual combination of innovation, speculation, fraud, successes, and failures. Not everything created in that environment The post Crypto Was the Experiment. Now Wall Street Is Taking the Best Parts appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Crypto Was the Experiment. Now Wall Street Is Taking",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "19b9770165e62b278cc2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 3800000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380014/near-intents-recovers-3-8-million-after-48-hour-ultimatum"
      ],
      "firstSeen": "2026-10-04T13:01:03.000Z",
      "updatedAt": "2026-10-07T10:46:29.212Z",
      "summary": "Near Intents said the roughly $3.8 million drained in an exploit on Thursday was returned in full, a day after the team said it had identified the attacker and gave them 48 hours to return the funds.",
      "revision": 10,
      "lossBasis": "event",
      "sourceHeadline": "'We Have Identified You, Sir'",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "54667081fe89fb6d9608",
      "protocol": "Liquidations",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/07/liquidations-jump-to-usd547-million-as-oil-rally-drags-bitcoin-below-usd84-000"
      ],
      "firstSeen": "2026-10-07T10:35:09.000Z",
      "updatedAt": "2026-10-07T10:46:29.212Z",
      "summary": "Bitcoin fell below $84,000 as oil climbed on Iranian tanker attacks, while smaller tokens fell harder and liquidations rose to $547 million.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5a0dd74057b6ffe0f779",
      "protocol": "Crypto Wallets of Frogman",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/crypto-wallets-of-frogman-compromised-over-4m-stolen/"
      ],
      "firstSeen": "2026-10-07T08:15:09.000Z",
      "updatedAt": "2026-10-07T08:16:12.142Z",
      "summary": "Two wallets belonging to Frogman were hacked, resulting in a loss of $4 million in crypto assets. Here's what it means for the market. The post Crypto Wallets of Frogman Compromised, Over $4M Stolen appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b632558bb1423aaab1b9",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 761725,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hack-laundering-generated-761725-in-fees-researcher-finds/"
      ],
      "firstSeen": "2026-10-06T07:39:35.000Z",
      "updatedAt": "2026-10-07T06:19:50.236Z",
      "summary": "Protocols and services used to move funds stolen from Bitget have collected $761,725 in fees during the laundering process, while an independent researcher has traced $259,718 in THORChain affiliate fees to recipients with additional financial links to wallets involved in…",
      "revision": 7,
      "lossBasis": "event",
      "sourceHeadline": "Bitget hack laundering generated $761,725 in fees",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "722c1754f1e1cb392b27",
      "protocol": "Bitcoin dips below $84,000 as oil",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/07/bitcoin-dips-below-usd84-000-as-oil-jumps-on-iranian-tanker-attacks"
      ],
      "firstSeen": "2026-10-07T04:00:51.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "Bitcoin briefly broke under the level analysts flagged as the point where sellers take over. Oil and the dollar both climbed.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9df4aa43a691b98b4c99",
      "protocol": "Unattributed",
      "chain": "Base",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 31700000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/base-vault-6m-exploit-exposes-disclosure-gap-immunefi/"
      ],
      "firstSeen": "2026-10-06T20:13:32.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "A $6 million exploit at an unidentified Base vault has exposed a gap in vulnerability reporting, according to Immunefi’s head of security, with roughly $31.7 million remaining in the vault at the time of the incident briefing. Gonçalo Magalhães, head…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Base vault’s $6M exploit exposes a disclosure gap",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "b84ccefcfbfd750ce264",
      "protocol": "DFI’s 67.61% Crash",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/dfis-67-61-crash-reveals-institutional-vulnerability/"
      ],
      "firstSeen": "2026-10-07T04:51:20.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "DFI's price has plunged 67.61% in just one hour, raising concerns about market stability. The post DFI’s 67.61% Crash Reveals Institutional Vulnerability appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e515ad13a9a6673b3216",
      "protocol": "Bitget Wallet COO",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-wallet-coo-says-self-custody-must-make-asset-ownership-safer/"
      ],
      "firstSeen": "2026-10-06T18:47:16.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "Bitget Wallet COO Alvin Kan has called for clearer transaction permissions and wallet recovery controls following Bitget Exchange’s reported $387.5 million breach, saying direct ownership must come with safeguards users can understand. Alvin Kan, chief operating officer of Bitget Wallet,…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1933370e1b5a4d8098c0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380240/circle-dj-khaled-team-usdc-crypto-twitter-furious"
      ],
      "firstSeen": "2026-10-06T22:16:03.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "Nothing in Circle's posts announces a sponsorship, but replies dug up Khaled's 2018 SEC settlement over a crypto fraud he promoted. The internet never forgets.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Circle Welcomes DJ Khaled to 'Team USDC' and Crypto",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5f15ffbe4947e3412e80",
      "protocol": "Did Bitget’s Hack Expose the Fatal Limits of CEX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/bitget-hack-exposes-limits-of-cex-security/"
      ],
      "firstSeen": "2026-10-04T07:00:00.000Z",
      "updatedAt": "2026-10-07T05:51:16.056Z",
      "summary": "The crypto industry has spent years trying to reassure users that the security failures of the past are behind us. Better custody systems, larger insurance funds, sophisticated monitoring tools, and institutional-grade infrastructure were supposed to make major exchange breaches increasingly rare. Yet the alleged $387.5 million Bitget hack shows a far less comfortable reality: centralized ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1a1243a6188389f8a02a",
      "protocol": "Flash Loan Attacks",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380166/flash-loan-attacks-drained-1-2b-from-defi-between-2020-and-2024-study"
      ],
      "firstSeen": "2026-10-06T15:26:41.000Z",
      "updatedAt": "2026-10-06T18:16:38.994Z",
      "summary": "Attacks grew more sophisticated and less predictable over the period, according to researchers who scanned more than 20 billion transactions.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aa4739e060c6bb18aa59",
      "protocol": "Crypto 'Godfather'",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/380138/crypto-godfather-gets-six-years-for-hiring-sheriffs-deputies-37m-meta-fraud",
        "https://www.coindesk.com/policy/2026/10/06/self-styled-crypto-godfather-gets-more-than-6-years-in-usd37-million-meta-fraud-case"
      ],
      "firstSeen": "2026-10-06T10:36:57.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "Adam Iza used off-duty LA deputies to pull warrants and personal data on his rivals, then moved the proceeds through crypto custodians.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "04aa7462b95a028b7bf6",
      "protocol": "SEC Coordinates with Global Financial Regulators",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.9,
      "sourceUrls": [
        "https://www.sec.gov/newsroom/press-releases/2026-101-sec-coordinates-global-financial-regulators-raise-fraud-awareness-during-world-investor-week"
      ],
      "firstSeen": "2026-10-05T12:47:36.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "The Securities and Exchange Commission, in coordination with other U.S. and global financial regulators, today issued a joint investor bulletin as part of World Investor Week (WIW). The bulletin encourages investors to be resilient in changing…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "d231b5d52a38710872ac",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/openai-anthropic-australia-breach-reporting/"
      ],
      "firstSeen": "2026-10-06T15:12:40.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "Mandatory AI breach reporting in Australia could enhance accountability, drive regulatory clarity, and bolster public trust in AI systems. The post OpenAI and Anthropic back mandatory AI breach reporting in Australia appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "OpenAI and Anthropic back mandatory AI breach reporting",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bbef47cace3e292b81cb",
      "protocol": "플래시론 공격 72건, 디파이서 12억1100만달러 손실",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.tokenpost.kr/news/blockchain/418976"
      ],
      "firstSeen": "2026-10-06T15:34:56.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "2020년 2월부터 2024년 7월까지 디파이(DeFi·탈중앙화금융)에서 발생한 플래시론 공격 72건으로 12억1100만달러(약 1조6264억원)의 손실이 났다는 연구 결과가 나왔다. 연구진은 공격 유형 14가지를 가격 피드 조작과 프로토콜 설계·실행 결함 악용으로 분류했다. 팀 홀(Tim Hall) 윈체스터대학교 교수와 레모 슈티거(Remo Stieger)가 발표한 논문 ‘Flash in the Pan?: Analyzing Flash Loan Attacks on the DeFi Ecosystem’은 같은 기간 디파이에서 성공한 공격 254건의 피해액을 65억6800만달러(약 8조8200억원)로 집계했다. 플래시론 공격은 이 가운데 72건으로, 전체 손실액의 18.44%를 차지했다. 논문은 윈체스터대학교 연구 저장소에... 더보기",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4481e305916be00477bb",
      "protocol": "Base Vault",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/base-vault-drained-of-about-6-million-in-aave-deposit-tokens"
      ],
      "firstSeen": "2026-10-05T09:24:01.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "Six outflows followed a borrower-whitelist change. The proceeds were redeemed for wstETH, with some later entering bridge withdrawals toward Ethereum.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ae452797859b94ce6b75",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380005/chainalysis-ai-87m-bitget-hack-north-korea"
      ],
      "firstSeen": "2026-10-03T17:01:03.000Z",
      "updatedAt": "2026-10-06T16:04:05.478Z",
      "summary": "The firm says the Sept. 24 breach pushed North Korea's 2026 crypto haul past $1 billion, and detailed how it used in-house AI to trace the stolen funds across four blockchains in a race against the attackers.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Chainalysis Used AI to Trace the $387M Bitget Hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "a8e6a06e8f7fe8e78d94",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1500000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/chinese-crime-network-laundered-over-1b-for-lazarus-zachxbt",
        "https://crypto.news/how-zachxbt-traced-bybit-hack-funds-to-a-lazarus-linked-network/"
      ],
      "firstSeen": "2026-10-06T01:47:24.000Z",
      "updatedAt": "2026-10-06T05:01:49.729Z",
      "summary": "ZachXBT says he infiltrated the network by posing as a customer, gaining information that helped trace funds from the $1.5 billion Bybit hack.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Chinese crime network laundered over $1B for Lazarus",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a1995f77353b17b72621",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/zachxbt-links-1b-crypto-laundering-network-to-lazarus-group-in-bybit-investigation/",
        "https://cryptoslate.com/zachxbt-infiltrates-1b-crypto-syndicate-to-expose-lazarus-group/"
      ],
      "firstSeen": "2026-10-05T14:12:25.000Z",
      "updatedAt": "2026-10-05T21:01:27.429Z",
      "summary": "This Monday, ZachXBT revealed having infiltrated a criminal syndicate that laundered over $1 billion in crypto assets for North Korea’s Lazarus Group. The uncovered intelligence was integrated directly into the ongoing investigation regarding the Bybit exchange hack, enabling authorities to intervene and successfully freeze a substantial portion of the stolen funds. 1/ How I infiltrated ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "ZachXBT Links $1B+ Crypto Laundering Network to Lazarus",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "103fd35edbcedd711810",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/zachxbt-infiltrated-chinese-syndicate-laundering-bybit-hack-funds"
      ],
      "firstSeen": "2026-10-05T18:30:00.000Z",
      "updatedAt": "2026-10-05T18:46:08.436Z",
      "summary": "The investigator says he fronted 349,700 USDC and lost 5% on every order to a broker who told him in advance where North Korea's stolen funds were going next",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "ZachXBT Posed as a Client to Infiltrate Chinese Syndicate",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c1ff1fcea773cffe5159",
      "protocol": "Bitcoin",
      "chain": "Bitcoin",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitcoin-surges-43-percent-q3-treasury-yields/"
      ],
      "firstSeen": "2026-10-05T17:55:19.000Z",
      "updatedAt": "2026-10-05T18:46:08.436Z",
      "summary": "Bitcoin's Q3 surge highlights its vulnerability to macroeconomic shifts, as rising Treasury yields challenge its appeal amid tightening policies. The post Bitcoin surges 43% in Q3 as Treasury yields hit highest levels since 2007 appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "008121fa52470069b1b5",
      "protocol": "Revenue users",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/revenue-users-hit-by-malicious-usdg-approvals-in-wallet-draining-scheme/"
      ],
      "firstSeen": "2026-10-05T07:06:03.000Z",
      "updatedAt": "2026-10-05T08:31:12.575Z",
      "summary": "Revenue has been linked to malicious USDG approvals that allowed attackers to gain unlimited spending permissions before moving funds from users’ wallets in the same transaction. Blockchain security firm Salus said attackers obtained permit signatures from users and submitted them…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d3ca3ea2a06738779aec",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/drift-hack-recovery-opened-near-one-cent-per-dollar-lost/"
      ],
      "firstSeen": "2026-10-04T17:20:02.000Z",
      "updatedAt": "2026-10-04T18:36:34.834Z",
      "summary": "Drift's October 1 launch quote valued DFX near one cent per USDT lost, while redemption ends future pool participation for the tokens burned. The post Drift hack recovery opened near one cent per dollar lost appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Drift hack recovery opened near one cent per dollar",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3e9a9dd702878ae4c3c5",
      "protocol": "Did Bitget’s Hack Expose the Fatal Limits of CEX",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/bitget-hack-exposes-limits-of-cex-security/"
      ],
      "firstSeen": "2026-10-04T07:00:00.000Z",
      "updatedAt": "2026-10-04T17:16:17.520Z",
      "summary": "The crypto industry has spent years trying to reassure users that the security failures of the past are behind us. Better custody systems, larger insurance funds, sophisticated monitoring tools, and institutional-grade infrastructure were supposed to make major exchange breaches increasingly rare. Yet the alleged $387.5 million Bitget hack shows a far less comfortable reality: centralized ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ef360be9d74ae809d0f7",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 100,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/stablecoins-may-not-drain-banks-of-dollars-but-they-can-still-make-lending-more-expensive/"
      ],
      "firstSeen": "2026-10-04T07:30:08.000Z",
      "updatedAt": "2026-10-04T07:46:15.528Z",
      "summary": "Here's a hypothetical scenario: you want to use $100 out of your bank account to buy newly issued stablecoins. The company issuing the stablecoins takes your dollars, puts them in its own bank account, and gives you a balance you can send around on a blockchain. You got the product you wanted, and somewhere in […] The post Stablecoins may not drain banks of dollars but they can still make lending more expensive appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Stablecoins may not drain banks of dollars but they",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "60c2d668dd02238832ae",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitget-hack-near-intents-defi-recovery/"
      ],
      "firstSeen": "2026-10-03T17:17:31.000Z",
      "updatedAt": "2026-10-03T19:47:37.713Z",
      "summary": "The hack highlights vulnerabilities in DeFi protocols, potentially prompting increased regulatory scrutiny and debates on asset recovery practices. The post Bitget calls out DeFi protocols after $387.5 million hack, credits NEAR Intents appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "da7edfe9b52d8af41283",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitget-hack-near-intents-defi-recovery/"
      ],
      "firstSeen": "2026-10-03T17:17:31.000Z",
      "updatedAt": "2026-10-03T19:16:10.308Z",
      "summary": "The hack highlights vulnerabilities in DeFi protocols, potentially prompting increased regulatory scrutiny and debates on asset recovery practices. The post Bitget calls out DeFi protocols after $387.5 million hack, credits NEAR Intents appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c79866a14d7a08ee6634",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/380005/chainalysis-ai-87m-bitget-hack-north-korea"
      ],
      "firstSeen": "2026-10-03T08:08:16.000Z",
      "updatedAt": "2026-10-03T19:16:10.308Z",
      "summary": "The firm says the Sept. 24 breach pushed North Korea's 2026 crypto haul past $1 billion, and detailed how it used in-house AI to trace the stolen funds across four blockchains in a race against the attackers.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Chainalysis Used AI to Trace the $387M Bitget Hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f5171feddf351ba80228",
      "protocol": "Bitget Hack Update",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-north-korea-xrp-bitcoin/",
        "https://crypto.news/chainalysis-ai-traces-bitget-hack-in-10-minutes/"
      ],
      "firstSeen": "2026-10-03T12:00:00.000Z",
      "updatedAt": "2026-10-03T15:02:15.584Z",
      "summary": "Chainalysis has attributed the $387 million Bitget theft to North Korean hackers. The firm said the attack lifts the value of crypto stolen by DPRK-linked actors this year above $1 billion. North Korean attackers reportedly used a cross-chain swap to convert stolen XRP into Bitcoin and kept the tokens away from exchanges. Drift, KelpDAO and The post Bitget Hack Update: XRP, Bitcoin, and North Korean Link appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": []
    },
    {
      "id": "753c90df070e86b153fc",
      "protocol": "NEAR Intents",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/near-intents-recovers-entire-stolen-38m-after-ultimatum-to-exploiter",
        "https://crypto-economy.com/near-intents-recovers-3-8m-in-exploit-funds-as-investigation-ends/"
      ],
      "firstSeen": "2026-10-03T02:12:05.000Z",
      "updatedAt": "2026-10-03T12:16:18.624Z",
      "summary": "The exploiter returned the entire sum to NEAR Intents after being identified and given 48 hours to respond.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "2ef4ac85fe6b4dded9a6",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/chainalysis-ai-traces-bitget-hack-in-10-minutes/"
      ],
      "firstSeen": "2026-10-03T12:00:00.000Z",
      "updatedAt": "2026-10-03T12:16:18.624Z",
      "summary": "Chainalysis has used its in-house AI to cut more than 20 hours of manual bridge reconciliation to under 10 minutes while investigating the $387 million stolen from Bitget. Chainalysis said in its Oct. 1 report that investigators built custom automation…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Chainalysis AI traces $387M Bitget hack in under 10",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c4648fc9f4d4b81712c1",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/hackers-use-microsoft-x-account-to-push-clippy-token/"
      ],
      "firstSeen": "2026-10-03T09:25:17.000Z",
      "updatedAt": "2026-10-03T12:16:18.624Z",
      "summary": "Hackers have used Microsoft’s official X account to promote an unauthorized Clippy-themed token, with the promotional activity removed roughly 30 minutes later, according to The Verge. The Verge reported that Microsoft confirmed the breach after its account promoted an unofficial…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Hackers use Microsoft’s X account to push unofficial Clippy",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "420698c25ba2368aced5",
      "protocol": "MEXC account hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 340000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/mexc-account-hack-how-did-a-user-lose-340k/"
      ],
      "firstSeen": "2026-09-28T10:55:14.000Z",
      "updatedAt": "2026-10-03T09:51:50.798Z",
      "summary": "MEXC says a $340K account theft dispute is resolved after a user claimed an attacker-created API remained usable after account recovery.",
      "revision": 4,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "26293581333080deb3e0",
      "protocol": "Bitget",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/bitget-hacker-moves-stolen-funds/",
        "https://cryptobriefing.com/bitget-reveals-attack-path-behind-387-5m-breach-as-bitcoin-withdrawals-restart/",
        "https://thedefiant.io/news/hacks/bitget-reopens-bitcoin-withdrawals-after-387-5-million-breach"
      ],
      "firstSeen": "2026-09-28T12:16:58.000Z",
      "updatedAt": "2026-10-03T09:18:26.627Z",
      "summary": "Bitget resumed Bitcoin withdrawals after its $387.5M hack as CEO Gracy Chen revealed attackers stole internal credentials through a third-party flaw. The post Bitget reveals attack path behind $387.5M breach as Bitcoin withdrawals restart appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "8c0da6189d821b6bb7d1",
      "protocol": "NEAR Intents",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": 3800000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/near-intents-recovers-3-8m-in-exploit-funds-as-investigation-ends/"
      ],
      "firstSeen": "2026-10-03T02:12:05.000Z",
      "updatedAt": "2026-10-03T07:02:50.214Z",
      "summary": "TL;DR: The protocol recovered the entire $3.8 million drained well ahead of the deadline set for October 4, 2026. The return transaction on BNB Chain was confirmed at 16:15:28 UTC on October 2, 2026, featuring an input message from the attacker. The designated Bitcoin recovery address logged 34.59 BTC between 14:31 and 15:05 UTC, valued ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "016140007d91f047a409",
      "protocol": "Bitcoin tests $86.5K, Bitget reopens, Swift",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-bitget-swift-chainlink-weekly-recap/"
      ],
      "firstSeen": "2026-10-03T05:50:41.000Z",
      "updatedAt": "2026-10-03T07:02:50.214Z",
      "summary": "In this week’s edition of the weekly recap, Bitcoin struggled to hold its rebound as U.S. ETF buying returned, Bitget restored major-asset withdrawals after its $387.5 million breach, and Chainlink outlined banks’ access to Swift’s blockchain ledger. Bitcoin retreats as…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "297eca795da0440de46c",
      "protocol": "US Rallied Bitcoin and Iran Crashed It",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitcoin-price-pullback-hormuz-tanker-attack/"
      ],
      "firstSeen": "2026-10-02T22:34:09.000Z",
      "updatedAt": "2026-10-03T00:46:20.781Z",
      "summary": "Bitcoin fell from $87,000 as UKMTO reported a Hormuz tanker attack. Oil held steady. Here is what the data shows. The post US Rallied Bitcoin and Iran Crashed It In a Dramatic 24 Hours for Crypto appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "0a4f4fb0eb2e9be90c30",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 300000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-hackers-exploit-third-party-aave-tool-to-steal-114-eth/"
      ],
      "firstSeen": "2026-10-02T19:10:35.000Z",
      "updatedAt": "2026-10-02T22:07:06.724Z",
      "summary": "A third-party lending adapter built on Aave was exploited to steal about 114 ETH, worth over $300,000, while the protocol itself remained unaffected. On Oct. 2, blockchain security firm SlowMist said the attacker compromised two Safe multisig wallets through a flaw in the FlashLoopAdapter used with Aave v3 positions. The exploit allowed the attacker to […] The post Crypto hackers exploit third-party Aave tool to steal 114 ETH appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto hackers exploit third-party Aave tool to steal",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1f01af606245fd9a03c2",
      "protocol": "California Subpoenas OpenAI Over AI Models",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379998/california-subpoena-openai-ai-models-hack"
      ],
      "firstSeen": "2026-10-02T21:16:04.000Z",
      "updatedAt": "2026-10-02T22:07:06.724Z",
      "summary": "California's attorney general wants answers from OpenAI about AI models that escaped a locked test environment and hacked Hugging Face—and whether the company can be held legally accountable.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "925103cb53401a35e7d2",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/hacks/chainalysis-links-387-million-bitget-hack-to-north-korea"
      ],
      "firstSeen": "2026-10-02T16:10:41.000Z",
      "updatedAt": "2026-10-02T22:07:06.724Z",
      "summary": "The firm says the theft pushes North Korea-linked crypto thefts above $1 billion in 2026, while onchain records show stolen XRP being swapped through THORChain.",
      "revision": 1,
      "lossBasis": "aggregate",
      "sourceHeadline": "Chainalysis Links $387 Million Bitget Hack to North",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "a8d7e34067d749fc7935",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1000000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/chainalysis-links-387m-bitget-hack-to-dprk-threat-actors/",
        "https://crypto.news/bitget-hack-where-did-the-stolen-387m-go/",
        "https://cryptobriefing.com/chainalysis-bitget-hack-north-korea-xrp/",
        "https://thedefiant.io/news/hacks/chainalysis-links-387-million-bitget-hack-to-north-korea"
      ],
      "firstSeen": "2026-10-02T08:46:18.000Z",
      "updatedAt": "2026-10-02T19:30:26.128Z",
      "summary": "The firm says the theft pushes North Korea-linked crypto thefts above $1 billion in 2026, while onchain records show stolen XRP being swapped through THORChain.",
      "revision": 2,
      "lossBasis": "aggregate",
      "sourceHeadline": "Chainalysis Links $387 Million Bitget Hack to North",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "513a53e84804465d1a7b",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 300000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-hackers-exploit-third-party-aave-tool-to-steal-114-eth/"
      ],
      "firstSeen": "2026-10-02T19:10:35.000Z",
      "updatedAt": "2026-10-02T19:30:26.128Z",
      "summary": "A third-party lending adapter built on Aave was exploited to steal about 114 ETH, worth over $300,000, while the protocol itself remained unaffected. On Oct. 2, blockchain security firm SlowMist said the attacker compromised two Safe multisig wallets through a flaw in the FlashLoopAdapter used with Aave v3 positions. The exploit allowed the attacker to […] The post Crypto hackers exploit third-party Aave tool to steal 114 ETH appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto hackers exploit third-party Aave tool to steal",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "584fbf6fba9f995af11e",
      "protocol": "Bitget CEO",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/bitget-ceo-admits-exchange-may-recover-little-from-388m-hack/",
        "https://crypto.news/bitget-hack-where-did-the-stolen-387m-go/"
      ],
      "firstSeen": "2026-10-02T08:46:18.000Z",
      "updatedAt": "2026-10-02T19:00:26.081Z",
      "summary": "TL;DR Bitget suffered a hack in September that resulted in the theft of approximately $387.5 million, with little prospect of full recovery. Only around $1.1 million of the stolen funds were frozen, though CEO Gracy Chen clarified that this does not imply their effective return. The exchange’s Protection Fund was replenished above $300 million and ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "c1f3d388f011102774d5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.theblock.co/news/ecosystems/2026-10-02-drift-opens-exploit-recovery-claims-initial-payouts-just-over-1-user-losses-417581"
      ],
      "firstSeen": "2026-10-02T17:10:40.000Z",
      "updatedAt": "2026-10-02T17:15:25.905Z",
      "summary": "DFX holders can cash out now or wait for more funding, with no firm timeline for full repayment.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Drift opens exploit recovery claims with initial payouts",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a09499332d779d399776",
      "protocol": "Chainalysis links most of the stolen XRP",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/chainalysis-links-387m-bitget-hack-to-dprk-threat-actors/",
        "https://crypto.news/bitget-hack-where-did-the-stolen-387m-go/",
        "https://cryptobriefing.com/chainalysis-bitget-hack-north-korea-xrp/",
        "https://thedefiant.io/news/hacks/chainalysis-links-387-million-bitget-hack-to-north-korea"
      ],
      "firstSeen": "2026-10-02T08:46:18.000Z",
      "updatedAt": "2026-10-02T16:30:27.224Z",
      "summary": "The Bitget hack highlights escalating cyber threats from North Korea, stressing the need for enhanced security measures and rapid response capabilities. The post Chainalysis links most of the stolen XRP in $387M Bitget hack to North Korea appeared first on Crypto Briefing .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "4a384144e78ebc676b24",
      "protocol": "Aave founder",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 305000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/aave-v3-third-party-adapter-exploit-305k",
        "https://crypto-economy.com/aave-v3-unaffected-by-305k-safe-exploit/",
        "https://crypto.news/flashloopadapter-exploit-drains-305k-from-aave-linked-safe-wallets/"
      ],
      "firstSeen": "2026-10-02T05:59:41.000Z",
      "updatedAt": "2026-10-02T15:15:44.827Z",
      "summary": "Aave founder Stani Kulechov said Aave v3 was unaffected after an attacker exploited a third-party adapter to drain about $305,000 from two Safe multisig wallets.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "92f4b79b4a21a7135718",
      "protocol": "Aave founder",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 305000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/aave-v3-third-party-adapter-exploit-305k",
        "https://crypto-economy.com/aave-v3-unaffected-by-305k-safe-exploit/",
        "https://crypto.news/flashloopadapter-exploit-drains-305k-from-aave-linked-safe-wallets/"
      ],
      "firstSeen": "2026-10-02T05:59:00.000Z",
      "updatedAt": "2026-10-02T14:30:29.408Z",
      "summary": "Aave founder Stani Kulechov said Aave v3 was unaffected after an attacker exploited a third-party adapter to drain about $305,000 from two Safe multisig wallets.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "78ed07a27e5019f61fd6",
      "protocol": "Morning Minute",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/near-intents-hacker-identified-48-hours/",
        "https://cointelegraph.com/news/near-intents-says-its-identified-the-hacker-gives-48-hour-ultimatum",
        "https://decrypt.co/379929/morning-minute-near-intents-hacked-for-3-8m-was-it-a-bullish-hack",
        "https://es.beincrypto.com/autor-hacker-near-intents-identificado-48-horas/",
        "https://thedefiant.io/news/hacks/shevchenko-gives-near-intents-attacker-48-hours"
      ],
      "firstSeen": "2026-10-02T02:02:13.000Z",
      "updatedAt": "2026-10-02T12:26:44.752Z",
      "summary": "Hacks are never good, but a rapid response, user compensation and 1-hour bug fixing seems to top the spectrum of team reactions.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "fe9df376be53889cdc22",
      "protocol": "Aave founder",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 305000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/aave-v3-third-party-adapter-exploit-305k",
        "https://crypto.news/flashloopadapter-exploit-drains-305k-from-aave-linked-safe-wallets/",
        "https://cryptobriefing.com/aave-v3-safe-module-exploit-310k/"
      ],
      "firstSeen": "2026-10-02T03:34:09.000Z",
      "updatedAt": "2026-10-02T10:00:44.187Z",
      "summary": "Aave founder Stani Kulechov said Aave v3 was unaffected after an attacker exploited a third-party adapter to drain about $305,000 from two Safe multisig wallets.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "b67af730ba2eab6374e0",
      "protocol": "Exploit Targets Aave’s v3 Module, Leading to 114",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/exploit-targets-aaves-v3-module-leading-to-114-eth-loss/"
      ],
      "firstSeen": "2026-10-02T07:42:46.000Z",
      "updatedAt": "2026-10-02T10:00:44.187Z",
      "summary": "Aave's v3 Loop Safe Module faced a significant exploit, resulting in a theft of approximately 114 ETH. This incident highlights ongoing vulnerabilities in DeFi protocols. The post Exploit Targets Aave’s v3 Module, Leading to 114 ETH Loss appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "65be10e9e0055feab2f7",
      "protocol": "NEAR Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/near-intents-hacker-identified-48-hours/",
        "https://cointelegraph.com/news/near-intents-says-its-identified-the-hacker-gives-48-hour-ultimatum",
        "https://es.beincrypto.com/autor-hacker-near-intents-identificado-48-horas/",
        "https://thedefiant.io/news/hacks/shevchenko-gives-near-intents-attacker-48-hours"
      ],
      "firstSeen": "2026-10-02T02:02:13.000Z",
      "updatedAt": "2026-10-02T09:30:47.038Z",
      "summary": "“We have identified you, sir,” NEAR Intents general manager Alex Shevchenko said on Friday after the protocol was hacked for $3.8 million.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "1c389c60fe623a49e62f",
      "protocol": "Bitget hack",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hack-where-did-the-stolen-387m-go/"
      ],
      "firstSeen": "2026-10-02T08:46:18.000Z",
      "updatedAt": "2026-10-02T09:30:47.038Z",
      "summary": "BlockSec traced Bitget’s $387.5M theft into Bitcoin, THORChain and CoinJoin, while only about $840,000 has been publicly frozen.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "9c745cc9d19658b08620",
      "protocol": "NEAR Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/near-intents-says-its-identified-the-hacker-gives-48-hour-ultimatum",
        "https://thedefiant.io/news/hacks/shevchenko-gives-near-intents-attacker-48-hours"
      ],
      "firstSeen": "2026-10-02T02:02:13.000Z",
      "updatedAt": "2026-10-02T06:06:37.086Z",
      "summary": "“We have identified you, sir,” NEAR Intents general manager Alex Shevchenko said on Friday after the protocol was hacked for $3.8 million.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "ac4553b0253fea0895cd",
      "protocol": "Aave’s Loop Safe Module Targeted in Exploit, 114",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/aaves-loop-safe-module-targeted-in-exploit-114-eth-stolen/"
      ],
      "firstSeen": "2026-10-02T05:22:49.000Z",
      "updatedAt": "2026-10-02T06:06:37.086Z",
      "summary": "Aave’s v3 Loop Safe Module suffered an exploit resulting in the theft of 114 ETH. This incident highlights ongoing vulnerabilities in DeFi protocols. The post Aave’s Loop Safe Module Targeted in Exploit, 114 ETH Stolen appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e7aa32bac9863cac0ad7",
      "protocol": "El Salvador",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 138000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/el-salvador-gets-138m-after-imf-waives-bitcoin-rule-breach/"
      ],
      "firstSeen": "2026-10-02T04:57:51.000Z",
      "updatedAt": "2026-10-02T05:30:47.057Z",
      "summary": "IMF approved about $138M for El Salvador after waiving a Bitcoin accumulation breach and urged the government to reduce its crypto role.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4383bfaf8425ed317c60",
      "protocol": "NEAR Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/near-intents-says-its-identified-the-hacker-gives-48-hour-ultimatum",
        "https://thedefiant.io/news/hacks/shevchenko-gives-near-intents-attacker-48-hours"
      ],
      "firstSeen": "2026-10-02T02:02:13.000Z",
      "updatedAt": "2026-10-02T04:03:00.963Z",
      "summary": "“We have identified you, sir,” NEAR Intents general manager Alex Shevchenko said on Friday after the protocol was hacked for $3.8 million.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "e0ffebf546c097790f76",
      "protocol": "Aave v3 exploit drains up to $310K",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 310000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/aave-v3-safe-module-exploit-310k/"
      ],
      "firstSeen": "2026-10-02T03:34:09.000Z",
      "updatedAt": "2026-10-02T04:03:00.963Z",
      "summary": "The exploit highlights the critical need for rigorous security audits of third-party modules in DeFi, as vulnerabilities can lead to significant financial losses. The post Aave v3 exploit drains up to $310K after Safe module attack appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "975820f0308fc645323e",
      "protocol": "Crypto hackers have taken $2.7 billion in 2026",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 2700000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/crypto-hackers-have-taken-2-7-billion-in-2026-and-the-losses-are-alarmingly-concentrated/"
      ],
      "firstSeen": "2026-10-02T00:20:05.000Z",
      "updatedAt": "2026-10-02T02:00:45.749Z",
      "summary": "Crypto firms and users have lost nearly $2.7 billion to security incidents this year, with North Korea-linked thefts exceeding $1 billion. Blockchain security firm CertiK recorded 658 incidents through September, with about $420.4 million of stolen assets frozen or returned. That leaves adjusted losses of roughly $2.26 billion and an average loss of $4.1 million […] The post Crypto hackers have taken $2.7 billion in 2026 and the losses are alarmingly concentrated appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e1cd2dcbdec126642d69",
      "protocol": "Near Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/near-intents-hacked-3-8-million/",
        "https://coinfomania.com/near-intents-exploited-for-3-8m-security-patch-implemented/",
        "https://cointelegraph.com/news/near-intents-exploit-assistance-bitget-hack",
        "https://crypto.news/near-intents-resumes-service-after-3-8m-exploit/",
        "https://cryptoslate.com/wall-street-arrived-in-near-just-as-a-4-billion-a-month-app-got-hacked/",
        "https://decrypt.co/379822/near-intents-hacked-days-after-denying-bitget-hacker",
        "https://thedefiant.io/news/hacks/near-intents-halts-services-reports-3-8-million-loss",
        "https://www.coindesk.com/tech/2026/10/01/near-intents-hit-by-usd3-8-million-exploit-as-crypto-s-rough-year-of-hacks-continues",
        "https://www.theblock.co/news/ecosystems/2026-10-01-near-intents-halts-services-after-3-8-million-exploit-promises-full-compensation-417404"
      ],
      "firstSeen": "2026-10-01T13:30:08.000Z",
      "updatedAt": "2026-10-01T22:00:44.288Z",
      "summary": "Near Intents froze its cross-chain swaps after a bug let an attacker drain about $3.8 million. The company promised to repay every user.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "b950af90f706abfb7be6",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Malware",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/malware-de-wordpress-usa-ethereum-para-resistir-su-eliminacion/"
      ],
      "firstSeen": "2026-10-01T20:19:34.000Z",
      "updatedAt": "2026-10-01T21:30:45.141Z",
      "summary": "Una variante de malware para WordPress, llamada SC, usa cerca de 20 pasarelas públicas de Ethereum y mantiene copias de su carga en distintos componentes para dificultar su eliminación. Sucuri también advierte que puede robar tokens de sesión de administrador, desactivar herramientas de seguridad e insertar JavaScript capaz de capturar datos de pago.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Malware de WordPress usa Ethereum para evitar que",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "70fdf2f7d9fef7608bb7",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Malware",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.diariobitcoin.com/tecnologia/malware-de-wordpress-usa-ethereum-para-resistir-su-eliminacion/"
      ],
      "firstSeen": "2026-10-01T20:19:34.000Z",
      "updatedAt": "2026-10-01T20:28:06.255Z",
      "summary": "Una variante de malware para WordPress, llamada SC, usa cerca de 20 pasarelas públicas de Ethereum y mantiene copias de su carga en distintos componentes para dificultar su eliminación. Sucuri también advierte que puede robar tokens de sesión de administrador, desactivar herramientas de seguridad e insertar JavaScript capaz de capturar datos de pago.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Malware de WordPress usa Ethereum para resistir su",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9327ff5c30e44768b802",
      "protocol": "Near Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3800000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/near-intents-hacked-3-8-million/",
        "https://cointelegraph.com/news/near-intents-exploit-assistance-bitget-hack",
        "https://crypto-economy.com/near-intents-halts-after-3-8m-exploit-vows-full-compensation-amid-hack-wave/",
        "https://crypto.news/near-price-outlook-can-support-absorb-intents-selloff/",
        "https://decrypt.co/379822/near-intents-hacked-days-after-denying-bitget-hacker",
        "https://thedefiant.io/news/hacks/near-intents-halts-services-reports-3-8-million-loss",
        "https://www.coindesk.com/tech/2026/10/01/near-intents-hit-by-usd3-8-million-exploit-as-crypto-s-rough-year-of-hacks-continues",
        "https://www.theblock.co/news/ecosystems/2026-10-01-near-intents-halts-services-after-3-8-million-exploit-promises-full-compensation-417404"
      ],
      "firstSeen": "2026-10-01T13:30:08.000Z",
      "updatedAt": "2026-10-01T17:00:32.475Z",
      "summary": "Near Intents froze its cross-chain swaps after a bug let an attacker drain about $3.8 million. The company promised to repay every user.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "676e20c622a1fbc73910",
      "protocol": "Crypto hacks",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 388000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/crypto-hack-losses-september-2026-bitget/",
        "https://cointelegraph.com/news/crypto-hacks-total-766m-in-september-peckshield",
        "https://crypto.news/crypto-loses-768m-in-worst-hack-month-of-2026/"
      ],
      "firstSeen": "2026-10-01T04:44:33.000Z",
      "updatedAt": "2026-10-01T15:23:28.792Z",
      "summary": "The $388 million Bitget breach and $320 million Liquid Network exploit accounted for most of September’s losses, though more than $270 million from the latter was later returned.",
      "revision": 3,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "6a4665d7cc62a7293d45",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": 766400000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/certik-tallies-766-4-million-in-september-exploit-and-phishing-losses"
      ],
      "firstSeen": "2026-10-01T06:16:47.000Z",
      "updatedAt": "2026-10-01T15:00:42.868Z",
      "summary": "Bitget and Liquid Network dominate the month's losses, while recovered and frozen funds substantially reduce the remaining damage.",
      "revision": 2,
      "lossBasis": "event",
      "sourceHeadline": "CertiK Tallies $766.4 Million in September Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "61f2acae2a971b3c0aff",
      "protocol": "Drift opens DFX recovery token claims for April",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/drift-dfx-recovery-token-claims-april-exploit/"
      ],
      "firstSeen": "2026-10-01T13:55:11.000Z",
      "updatedAt": "2026-10-01T14:35:24.825Z",
      "summary": "The DFX recovery token initiative highlights the challenges of compensating DeFi exploit victims and underscores the importance of robust security measures. The post Drift opens DFX recovery token claims for April exploit victims appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "036d2ba2f916ea290ae3",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": 766400000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/certik-tallies-766-4-million-in-september-exploit-and-phishing-losses"
      ],
      "firstSeen": "2026-10-01T08:13:39.000Z",
      "updatedAt": "2026-10-01T13:45:38.649Z",
      "summary": "Bitget and Liquid Network dominate the month's losses, while recovered and frozen funds substantially reduce the remaining damage.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "CertiK Tallies $766.4 Million in September Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "1ccbfe5fcadb0d54eaf7",
      "protocol": "Stablecoins can drain from banks and nations",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/stablecoins-can-drain-from-banks-and-nations-at-lightning-speed"
      ],
      "firstSeen": "2026-10-01T13:30:00.000Z",
      "updatedAt": "2026-10-01T13:45:38.649Z",
      "summary": "Highly liquid and settling 24/7, stablecoins can leave banks and countries at lightning speed. But whether stablecoins are a risk — or an opportunity — depends on your perspective.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "eb55cb2947035d069895",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1260000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-hack-q3-industry-losses-1-26-billion"
      ],
      "firstSeen": "2026-10-01T13:35:47.000Z",
      "updatedAt": "2026-10-01T13:45:38.649Z",
      "summary": "Crypto security losses reached $1.26 billion in Q3 across 247 incidents, with September alone accounting for roughly $769 million.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget’s $388M hack pushes Q3 crypto security losses",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "144594fe683be3319fd2",
      "protocol": "BitMart proposes court-backed repayment",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitmart-court-backed-repayment-plan-2021-hack/"
      ],
      "firstSeen": "2026-10-01T12:26:04.000Z",
      "updatedAt": "2026-10-01T12:45:24.079Z",
      "summary": "BitMart's court-backed repayment plan highlights the complexities of crypto exchange recovery, impacting user trust and industry regulatory standards. The post BitMart proposes court-backed repayment plan for users hit by 2021 hack appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "06021aafb45d6cd04fc0",
      "protocol": "Binance CEO Richard Teng",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/binance-ceo-richard-teng-warns-of-fake-payment-scams/"
      ],
      "firstSeen": "2026-10-01T11:33:42.000Z",
      "updatedAt": "2026-10-01T11:45:43.793Z",
      "summary": "Richard Teng, CEO of Binance, emphasizes the importance of verifying token authenticity to avoid scams. The post Binance CEO Richard Teng Warns of Fake Payment Scams appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1e11d183d004a6eafd29",
      "protocol": "Crypto hacks",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 388000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/crypto-hacks-total-766m-in-september-peckshield",
        "https://crypto.news/crypto-loses-768m-in-worst-hack-month-of-2026/"
      ],
      "firstSeen": "2026-10-01T04:44:33.000Z",
      "updatedAt": "2026-10-01T10:30:31.720Z",
      "summary": "The $388 million Bitget breach and $320 million Liquid Network exploit accounted for most of September’s losses, though more than $270 million from the latter was later returned.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "946d20567e4c9e9b518f",
      "protocol": "Crypto Hack Losses",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 766490000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/crypto-hack-losses-september-2026-bitget/"
      ],
      "firstSeen": "2026-10-01T08:39:04.000Z",
      "updatedAt": "2026-10-01T10:30:31.720Z",
      "summary": "Crypto hack losses reached $766.49 million in September, making it the worst month of 2026 so far. The total jumped about 462% from August’s $136.3 million, according to PeckShield. Two incidents caused most of the damage. Bitget lost roughly $387 million. Liquid Network lost about $320 million, though the people behind it, claiming to be The post Crypto Hack Losses Jump 462% in September as Bitget Becomes the Year's Biggest Theft appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "7621ab3039525b09be89",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Phishing",
      "lossUsd": 766400000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/certik-tallies-766-4-million-in-september-exploit-and-phishing-losses"
      ],
      "firstSeen": "2026-10-01T08:13:39.000Z",
      "updatedAt": "2026-10-01T08:45:29.530Z",
      "summary": "Bitget and Liquid Network dominate the month's losses, while recovered and frozen funds substantially reduce the remaining damage.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "CertiK Tallies $766.4 Million in September Exploit",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c4443590a2b8b6c096c5",
      "protocol": "OFAC Sanctions 7 Crypto Wallets Tied to FBI",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/ofac-sanctions-prometheus-atm-jackpotting/"
      ],
      "firstSeen": "2026-10-01T05:53:25.000Z",
      "updatedAt": "2026-10-01T07:43:43.957Z",
      "summary": "The US Treasury’s Office of Foreign Assets Control (OFAC) sanctioned 10 targets on Wednesday. They are tied to an ATM jackpotting scheme run by Tren de Aragua (TdA). The network allegedly washed the stolen cash through cryptocurrency, among other channels. The action also listed 7 crypto addresses belonging to ringleader “Prometheus,” an FBI Most Wanted The post OFAC Sanctions 7 Crypto Wallets Tied to FBI Most Wanted Fugitive and Venezuelan Gang appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "8df46b02447ac2cf4995",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 85500,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/10/01/bitcoin-s-soft-inflation-pop-to-usd85-500-fades-as-bond-yields-refuse-to-fall"
      ],
      "firstSeen": "2026-10-01T04:15:20.000Z",
      "updatedAt": "2026-10-01T06:00:34.831Z",
      "summary": "A cooler-than-expected PCE report sent bitcoin briefly above $85,000 on Wednesday. Treasury yields held near their highest since 2002 and the gains drained away.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitcoin's soft-inflation pop to $85,500 fades as bond",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "77e40da42054c88d358f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/three-hidden-flaws-in-uniswaps-stablepair-hook-drain-lp-returns/"
      ],
      "firstSeen": "2026-10-01T05:10:32.000Z",
      "updatedAt": "2026-10-01T06:00:34.831Z",
      "summary": "StablePair can retain rebalancing value for liquidity providers, but fees anchored to a configured rate leave token and inventory risk with LPs. The post Three hidden flaws in Uniswap’s StablePair hook drain LP returns appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Three hidden flaws in Uniswap’s StablePair hook drain",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2b3f5afc29a879a49cb8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/metamask-staking-exits-lido-validators-after-infrastructure-compromise"
      ],
      "firstSeen": "2026-10-01T00:00:43.000Z",
      "updatedAt": "2026-10-01T01:00:25.513Z",
      "summary": "Lido estimates the exit, withdrawal and re-entry cycle could take up to about 45 days. Aave’s founder says its markets are operating normally.",
      "revision": 1,
      "lossBasis": "market",
      "sourceHeadline": "MetaMask Staking Exits Lido Validators After Infrastructure",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "21f931023ccf74dcea1c",
      "protocol": "Bitget’s hackers turn to Zcash after $50 million",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitgets-hackers-turn-to-zcash-after-50-million-laundering-route-gets-blocked/"
      ],
      "firstSeen": "2026-09-30T20:20:28.000Z",
      "updatedAt": "2026-09-30T22:45:23.006Z",
      "summary": "Hackers behind Bitget’s $387.5 million breach are turning to Zcash's privacy features to hide the stolen funds as crypto firms increasingly block other escape routes. About 2,746 ZEC worth roughly $3.9 million was transferred Wednesday into Zcash’s Ironwood shielded pool through three transactions, according to on-chain activity flagged by blockchain investigator ZachXBT. The amount represents […] The post Bitget’s hackers turn to Zcash after $50 million laundering route gets blocked appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "147fa106757974739282",
      "protocol": "FBI Tells Its Employees to Assume Hackers",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379769/fbi-employees-assume-hackers-personal-data"
      ],
      "firstSeen": "2026-09-30T21:16:04.000Z",
      "updatedAt": "2026-09-30T22:33:23.768Z",
      "summary": "An internal memo warned FBI staff that ShinyHunters, the group claiming it hacked the bureau's jobs site, may hold their private details.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2e87c9a81cc19224cb01",
      "protocol": "SlowMist traces Bitget hack activity to Aug. 31",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-hack-zero-day-slowmist-investigation",
        "https://crypto-economy.com/slowmist-ties-bitgets-388m-hack-to-aug-31-zero-day-exploit/"
      ],
      "firstSeen": "2026-09-30T10:05:39.000Z",
      "updatedAt": "2026-09-30T15:30:35.096Z",
      "summary": "SlowMist identified malicious activity weeks before the Bitget theft, involving a zero-day vulnerability, two security products and a custom withdrawal tool.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "e28fb592703bac16ed9f",
      "protocol": "Ex-NCA Officer Must Repay $2.4M for Bitcoin He",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 2400000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/nca-officer-chowles-bitcoin-theft-confiscation/",
        "https://decrypt.co/379702/ex-nca-officer-must-repay-2-4m-for-bitcoin-he-stole-when-it-was-worth-77k"
      ],
      "firstSeen": "2026-09-30T15:17:45.000Z",
      "updatedAt": "2026-09-30T15:30:35.096Z",
      "summary": "Paul Chowles took 50 BTC from a Silk Road 2.0 seizure in 2017. Prosecutors have now valued the theft at more than 30 times that.",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": []
    },
    {
      "id": "4de64614be7762f0d7a0",
      "protocol": "Bitget hackers",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 4000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/09/30/bitget-hackers-move-usd4-million-into-zcash-s-private-pool-making-funds-harder-to-trace"
      ],
      "firstSeen": "2026-09-30T11:04:09.000Z",
      "updatedAt": "2026-09-30T15:30:35.096Z",
      "summary": "Three transfers pushed about 15% of the stolen ZEC into Ironwood, where payments hide their senders, recipients and amounts.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f6f9367e1359f04cf23b",
      "protocol": "Solana’s DeFi TVL",
      "chain": "Solana",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/solana-defi-tvl-recovers-drift-hack/"
      ],
      "firstSeen": "2026-09-30T10:53:24.000Z",
      "updatedAt": "2026-09-30T12:59:49.283Z",
      "summary": "The recovery highlights the resilience of DeFi systems and sets a precedent for future compensation mechanisms, emphasizing security reforms. The post Solana’s DeFi TVL recovers above $6.5B after Drift hack wiped $285M appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "9ef9bcbd436dc8be9917",
      "protocol": "Bitget hackers",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 4000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/09/30/bitget-hackers-move-usd4-million-into-zcash-s-private-pool-making-funds-harder-to-trace"
      ],
      "firstSeen": "2026-09-30T11:04:09.000Z",
      "updatedAt": "2026-09-30T12:59:49.283Z",
      "summary": "Three transfers pushed about 15% of the stolen ZEC into Ironwood, where payments hide their senders, recipients and amounts.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "80682cd3d75c811aec4c",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-brings-back-usdt-withdrawals-after-387m-hack/"
      ],
      "firstSeen": "2026-09-30T06:48:38.000Z",
      "updatedAt": "2026-09-30T12:59:49.283Z",
      "summary": "Bitget has restored BTC, ETH and USDT withdrawals after its $387.5M hack, with P2P and remaining services set to reopen Friday.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "abdc538ff873c28d0137",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/30-bitcoin-miners-detained-in-malaysia-electricity-theft-investigation/"
      ],
      "firstSeen": "2026-09-30T11:53:17.000Z",
      "updatedAt": "2026-09-30T12:59:49.283Z",
      "summary": "Malaysian police have detained two men and seized 30 Bitcoin mining machines after uncovering an operation in Seri Iskandar that allegedly used an illegal electricity connection.on. According to Perak Tengah district police chief Supt Hafezul Helmi Hamzah, the district’s Criminal…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "30 Bitcoin miners detained in Malaysia electricity theft",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "bbcfc6b117cf8e74bf20",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/"
      ],
      "firstSeen": "2026-09-29T13:36:08.000Z",
      "updatedAt": "2026-09-29T15:00:29.557Z",
      "summary": "THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them? Bitget has every reason to pursue the people behind its recent hack and recover the money. The exchange now puts…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget’s hack exposes a double standard on stolen",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4bf901624d8cbb5c8333",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/apple-patches-ios-vulnerability/"
      ],
      "firstSeen": "2026-09-29T09:46:50.000Z",
      "updatedAt": "2026-09-29T11:33:13.362Z",
      "summary": "Apple patched an exploited iPhone CoreGraphics flaw as SlowMist warned crypto users about recent attacks targeting sensitive wallet data.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Apple patches iOS vulnerability, are crypto wallets still",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2bc0d2e528b000a3c978",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/ceska-narodni-banka-issues-warning-about-fraudulent/"
      ],
      "firstSeen": "2026-09-29T09:41:42.000Z",
      "updatedAt": "2026-09-29T11:33:13.362Z",
      "summary": "Česká národní banka has issued a warning about a fraudulent entity offering financial services without authorization. The post Česká národní banka Issues Warning About Fraudulent appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Česká národní banka",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "72ddd31aeed4808113b2",
      "protocol": "NEAR Intents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 50000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/near-intents-says-it-blocked-50m-tied-to-bitget-hackers",
        "https://crypto.news/near-intents-says-it-stopped-50m-bitget-laundering-bid/",
        "https://www.coindesk.com/tech/2026/09/29/usd50-million-in-bitget-hacker-swaps-puts-near-intents-permissionless-claim-to-the-test"
      ],
      "firstSeen": "2026-09-29T01:17:49.000Z",
      "updatedAt": "2026-09-29T09:00:49.138Z",
      "summary": "The cross-chain protocol said it actively prevents stolen funds from being laundered, drawing a contrast with THORChain’s position that it does not selectively censor transactions.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a16cc0003ef8a1e6804a",
      "protocol": "Compound DAO used protocol reserves",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 52000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/compound-dao-used-protocol-reserves-to-buy-52-million-worth-of-comp-and-delegates-call-it-a-mandate-breach/"
      ],
      "firstSeen": "2026-09-29T02:30:29.000Z",
      "updatedAt": "2026-09-29T09:00:49.138Z",
      "summary": "Bitquery says 344,780 COMP pushed supporters above half of delegated voting power; the Foundation says the move fit its DAO mandate. The post Compound DAO used protocol reserves to buy $52 million worth of COMP, and delegates call it a mandate breach appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e71e1415037ed03bf1f5",
      "protocol": "Nearly 5,000 BTC leaves Bitget as hackers begin",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/nearly-5000-btc-leaves-bitget-as-hackers-begin-laundering-387-million-haul/"
      ],
      "firstSeen": "2026-09-28T22:50:12.000Z",
      "updatedAt": "2026-09-29T05:35:38.472Z",
      "summary": "Nearly 5,000 Bitcoin has left Bitget’s tracked reserves after the crypto exchange reopened withdrawals following its $387.5 million hack. On Sept. 28, Bitget Chief Executive Officer Gracy Chen said the exchange had processed 9,585 withdrawal orders totaling 4,098.036 BTC as of 17:00 UTC+8, shortly after it resumed Bitcoin withdrawals. Separate DeFiLlama data showed Bitget’s tracked […] The post Nearly 5,000 BTC leaves Bitget as hackers begin laundering $387 million haul appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "c3b2f3e81e851a2adbc4",
      "protocol": "Compound DAO used protocol reserves",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 52000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/compound-dao-used-protocol-reserves-to-buy-52-million-worth-of-comp-and-delegates-call-it-a-mandate-breach/"
      ],
      "firstSeen": "2026-09-29T02:30:29.000Z",
      "updatedAt": "2026-09-29T03:00:43.503Z",
      "summary": "Bitquery says 344,780 COMP pushed supporters above half of delegated voting power; the Foundation says the move fit its DAO mandate. The post Compound DAO used protocol reserves to buy $52 million worth of COMP, and delegates call it a mandate breach appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "c2f952063d684f8e6f76",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/ai-agents-could-drain-bank-deposits-and-boost-stablecoin-adoption-apollo-warns/",
        "https://www.coindesk.com/markets/2026/09/28/ai-agents-could-drain-cheap-bank-deposits-apollo-s-torsten-slok-warns"
      ],
      "firstSeen": "2026-09-28T13:06:11.000Z",
      "updatedAt": "2026-09-28T23:46:16.570Z",
      "summary": "AI agents could trigger a bank run by automatically moving household cash from low-interest checking accounts to higher-yield alternatives, Slok warns.",
      "revision": 2,
      "lossBasis": "event",
      "sourceHeadline": "AI agents could drain cheap bank deposits, Apollo's Torsten",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "259475e8777bf212e6d2",
      "protocol": "Bitget",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitget-says-bitcoin-withdrawals-open-after-hack/"
      ],
      "firstSeen": "2026-09-28T19:35:25.000Z",
      "updatedAt": "2026-09-28T23:46:16.570Z",
      "summary": "Sept. 28 public fills show BTC and ETH futures activity before the scheduled 08:00 UTC Bitcoin withdrawal restart. The post Bitget says Bitcoin withdrawals are open after $387M hack, but ETH and USDT must wait appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "9ca79d89c3db0b5cb9b0",
      "protocol": "Investigator",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-launderers-public-discord-chats/",
        "https://coinfomania.com/bitget-hack-fallout-suspected-launderer-requests-xrp/",
        "https://cryptoslate.com/bitget-says-bitcoin-withdrawals-open-after-hack/"
      ],
      "firstSeen": "2026-09-28T12:24:01.000Z",
      "updatedAt": "2026-09-28T21:01:27.323Z",
      "summary": "ZachXBT says Bitget hack launderers asked for help in public Discord and Telegram chats. One is tied to the Kelp DAO hack. The post Investigator Finds $387M Bitget Hack Suspects Asking for Help in Public Chats appeared first on BeInCrypto .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "24f0b627ff66e7022b56",
      "protocol": "After AI Agent",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/australia-calls-altman-amodei-to-testify-after-ai-agent-hacks-government-systems/",
        "https://decrypt.co/379481/australia-sam-altman-dario-amodei-ai-hack"
      ],
      "firstSeen": "2026-09-28T19:36:21.000Z",
      "updatedAt": "2026-09-28T21:01:27.323Z",
      "summary": "Senator Sarah Hanson-Young has invited the OpenAI and Anthropic CEOs to a Canberra hearing on October 1, after an OpenAI agent quietly accessed Australia's Medicare data and nobody said a word for months.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "69fecbcacf30c3bd6874",
      "protocol": "Bitget had 30 minutes to contain its hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 290000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitget-had-30-minutes-to-contain-its-hack-before-290-million-started-moving/"
      ],
      "firstSeen": "2026-09-28T14:30:12.000Z",
      "updatedAt": "2026-09-28T21:01:27.323Z",
      "summary": "Hypernative places the major transfer waves roughly 30 and 45 minutes after Bitget's reported detection. The post Bitget had 30 minutes to contain its hack before $290 million started moving appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "681d416458328af15ac0",
      "protocol": "THORChain rejects Bitget request",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/thorchain-rejects-bitget-block-request-as-6m-hits-btc/",
        "https://crypto.news/bitget-hack-sparks-dispute-over-thorchains-permissionless-design/",
        "https://crypto.news/bitget-hacker-moves-6-3-million-into-bitcoin/",
        "https://www.coindesk.com/tech/2026/09/28/thorchain-rejects-bitget-request-to-block-hacker-as-usd6-million-moves-to-bitcoin"
      ],
      "firstSeen": "2026-09-28T07:11:55.000Z",
      "updatedAt": "2026-09-28T19:37:00.681Z",
      "summary": "CoinDesk found 27 successful swaps moving about 2,390 ETH into 75.2 BTC, even as Bitget urged THORChain to stop serving addresses tied to the $387.5 million theft.",
      "revision": 3,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "66c6b3c7378e8fdc87dd",
      "protocol": "Compound Foundation",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/compound-foundation-denies-v2-reserve-misuse/",
        "https://thedefiant.io/news/defi/compound-foundation-denies-v2-reserve-misuse-allegation"
      ],
      "firstSeen": "2026-09-28T18:00:52.000Z",
      "updatedAt": "2026-09-28T19:37:00.681Z",
      "summary": "The controversy highlights potential vulnerabilities in DeFi governance, risking reputational damage and questioning DAO decision legitimacy. The post Compound Foundation denies misuse of V2 reserve funds amid governance controversy appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "dcc01b6063871c6b9c0d",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 388000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-btc-withdrawal-hacker-eth-swap-thorchain"
      ],
      "firstSeen": "2026-09-28T11:05:24.000Z",
      "updatedAt": "2026-09-28T19:37:00.681Z",
      "summary": "Ether withdrawals are scheduled to return Tuesday and USDt on Wednesday as Bitget restores services following last week’s $388 million hack.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget resumes Bitcoin withdrawals as hacker swaps ETH",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "3908de1a189347fb778b",
      "protocol": "Bitget CEO",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 388000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-388m-hack-third-party-security-vulnerability",
        "https://crypto-economy.com/bitget-begins-phased-withdrawals-after-388m-exploit-shook-the-platform/",
        "https://crypto.news/bitget-resumes-btc-withdrawals-after-usd-388m-hack/"
      ],
      "firstSeen": "2026-09-28T10:33:18.000Z",
      "updatedAt": "2026-09-28T15:49:08.867Z",
      "summary": "Some stolen assets have been frozen, but Bitget has yet to disclose how much has been recovered as investigators continue to assess a possible North Korea link.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "379d00bf394f41044a7e",
      "protocol": "Bitget",
      "chain": "Bitcoin",
      "technique": "Credential compromise",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/bitget-hack-sparks-dispute-over-thorchains-permissionless-design/",
        "https://cryptobriefing.com/bitget-reveals-attack-path-behind-387-5m-breach-as-bitcoin-withdrawals-restart/",
        "https://thedefiant.io/news/hacks/bitget-reopens-bitcoin-withdrawals-after-387-5-million-breach"
      ],
      "firstSeen": "2026-09-28T07:11:55.000Z",
      "updatedAt": "2026-09-28T15:49:08.867Z",
      "summary": "Bitget resumed Bitcoin withdrawals after its $387.5M hack as CEO Gracy Chen revealed attackers stole internal credentials through a third-party flaw. The post Bitget reveals attack path behind $387.5M breach as Bitcoin withdrawals restart appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "be10395c874876ecad66",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/bitget-begins-phased-withdrawals-after-388m-exploit-shook-the-platform/",
        "https://www.theblock.co/news/business/2026-09-28-bitget-starts-phased-withdrawal-resumption-416965"
      ],
      "firstSeen": "2026-09-28T08:31:18.000Z",
      "updatedAt": "2026-09-28T14:42:35.569Z",
      "summary": "The exchange said it has patched the vulnerability, and losses from the incident will be fully covered by a user protection fund.",
      "revision": 2,
      "lossBasis": "unknown",
      "sourceHeadline": "Bitget starts phased withdrawal resumption following $388",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "bcae5dd4ddb2c4b88773",
      "protocol": "Bitget resumes BTC withdrawals after $388M hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 388000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/bitget-resumes-btc-withdrawals-after-usd-388m-hack/",
        "https://thedefiant.io/news/hacks/bitget-reopens-bitcoin-withdrawals-after-387-5-million-breach"
      ],
      "firstSeen": "2026-09-28T05:59:23.000Z",
      "updatedAt": "2026-09-28T14:42:35.569Z",
      "summary": "Bitget has reopened BTC withdrawals after its USD 388 million hack, with ETH, USDT and other services scheduled to return through Oct. 2.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "80c691e26508ff495dde",
      "protocol": "Chainlink updates its crypto bridge tech months",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/09/28/chainlink-updates-its-crypto-bridge-tech-months-after-a-usd292-million-hack-shook-the-industry"
      ],
      "firstSeen": "2026-09-28T12:30:00.000Z",
      "updatedAt": "2026-09-28T14:42:35.569Z",
      "summary": "The new software lets companies add custom security checks so they do not fall victim to the same single-point-of-failure vulnerabilities that plagued rival bridges.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "41d2755ce942b6595108",
      "protocol": "Fake GIWA Layer 2 Bridge",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://thedefiant.io/news/security/fake-giwa-layer-2-bridge-drained-of-766-eth"
      ],
      "firstSeen": "2026-09-28T12:14:29.000Z",
      "updatedAt": "2026-09-28T14:42:35.569Z",
      "summary": "DYORSWAP, which mistook the network for the Upbit-backed project, promises 40% reimbursement for eligible wallets that bridged less than 5 ETH.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "51c69e0949a8604a1d9a",
      "protocol": "Bitget had 30 minutes to contain its hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 290000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitget-had-30-minutes-to-contain-its-hack-before-290-million-started-moving/"
      ],
      "firstSeen": "2026-09-28T14:30:12.000Z",
      "updatedAt": "2026-09-28T14:42:35.569Z",
      "summary": "Hypernative places the major transfer waves roughly 30 and 45 minutes after Bitget's reported detection. The post Bitget had 30 minutes to contain its hack before $290 million started moving appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dd5fe1fb6e6df7aa1577",
      "protocol": "Bitget resumes BTC withdrawals after $388M hack",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 388000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-resumes-btc-withdrawals-after-usd-388m-hack/"
      ],
      "firstSeen": "2026-09-28T05:59:23.000Z",
      "updatedAt": "2026-09-28T11:57:30.868Z",
      "summary": "Bitget has reopened BTC withdrawals after its USD 388 million hack, with ETH, USDT and other services scheduled to return through Oct. 2.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e2b97a666e2094643432",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 388000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-btc-withdrawal-hacker-eth-swap-thorchain"
      ],
      "firstSeen": "2026-09-28T11:05:24.000Z",
      "updatedAt": "2026-09-28T11:57:30.868Z",
      "summary": "Ether withdrawals are scheduled to return Tuesday and USDt on Wednesday as Bitget restores services following last week’s $388 million hack.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget resumes Bitcoin withdrawals as hacker swaps ETH",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "cf4080fcbbc98884d628",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hack-sparks-dispute-over-thorchains-permissionless-design/"
      ],
      "firstSeen": "2026-09-28T07:11:55.000Z",
      "updatedAt": "2026-09-28T11:57:30.868Z",
      "summary": "THORChain has defended its permissionless design after Bitget asked the cross chain protocol to refuse service to addresses tied to the exchange’s $387.5 million security breach, opening a dispute over whether its network should block known stolen funds. THORChain said…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget hack sparks dispute over THORChain’s permissionless",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d6e0cb9f503568773ea6",
      "protocol": "Zano rolls blockchain back a month after Gateway",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/zano-rolls-blockchain-back-a-month-after-gateway-address-exploit"
      ],
      "firstSeen": "2026-09-28T01:09:22.000Z",
      "updatedAt": "2026-09-28T11:57:30.868Z",
      "summary": "The Zano blockchain has been restarted at the block height that came immediately before Hard Fork 6, which introduced Gateway Addresses.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "70412de12ea04351d1e4",
      "protocol": "Zano restarts chain",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/zano-restarts-chain-at-block-3833000-after-exploit/"
      ],
      "firstSeen": "2026-09-28T04:49:24.000Z",
      "updatedAt": "2026-09-28T05:13:30.557Z",
      "summary": "Zano restarted its blockchain at block 3,833,000 after a Gateway Address flaw created unauthorized ZANO and fUSD, erasing one month of history.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "90d9d853ec3d7e89ad0b",
      "protocol": "Zano rolls blockchain back a month after Gateway",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/zano-rolls-blockchain-back-a-month-after-gateway-address-exploit"
      ],
      "firstSeen": "2026-09-28T01:09:22.000Z",
      "updatedAt": "2026-09-28T05:13:30.557Z",
      "summary": "The Zano blockchain has been restarted at the block height that came immediately before Hard Fork 6, which introduced Gateway Addresses.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "d97bcb7c760a146201a5",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/cosmos-intercepts-1-23-million-stolen-atom-but-refunds-now-wait-on-governance-vote/"
      ],
      "firstSeen": "2026-09-27T18:00:39.000Z",
      "updatedAt": "2026-09-27T23:55:47.362Z",
      "summary": "Validators secured one Hub-side balance, but the custody signers say a Neutron recovery plan and passed Hub proposal must precede its release. The post Cosmos intercepts 1.23 million stolen ATOM but refunds now wait on governance vote appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Cosmos intercepts 1.23 million stolen ATOM but refunds",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "36e5802803582f85a776",
      "protocol": "THORChain Refuses",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-thorchain-stolen-funds-pause/"
      ],
      "firstSeen": "2026-09-27T12:23:33.000Z",
      "updatedAt": "2026-09-27T23:55:47.362Z",
      "summary": "THORChain paused itself over a $10M loss in May. Now it won't block $387M Bitget hack funds. Here's the fight. The post THORChain Refuses to Block Assets Tied to Bitget Hackers appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "f34334e49d54020b5d0c",
      "protocol": "THORChain Refuses",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-thorchain-stolen-funds-pause/"
      ],
      "firstSeen": "2026-09-27T12:23:33.000Z",
      "updatedAt": "2026-09-27T21:16:35.822Z",
      "summary": "THORChain paused itself over a $10M loss in May. Now it won't block $387M Bitget hack funds. Here's the fight. The post THORChain Refuses to Block Assets Tied to Bitget Hackers appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "88a368eb9922e4c3b211",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/cosmos-intercepts-1-23-million-stolen-atom-but-refunds-now-wait-on-governance-vote/"
      ],
      "firstSeen": "2026-09-27T18:00:39.000Z",
      "updatedAt": "2026-09-27T21:16:35.822Z",
      "summary": "Validators secured one Hub-side balance, but the custody signers say a Neutron recovery plan and passed Hub proposal must precede its release. The post Cosmos intercepts 1.23 million stolen ATOM but refunds now wait on governance vote appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Cosmos intercepts 1.23 million stolen ATOM but refunds",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "881d71e8789b444bec84",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hacker-routes-4-btc-through-wasabi-coinjoin/"
      ],
      "firstSeen": "2026-09-27T08:20:07.000Z",
      "updatedAt": "2026-09-27T17:41:03.174Z",
      "summary": "AMLBot traced about 4 BTC linked to the Bitget hack into Wasabi CoinJoin after swaps through USDT0, Ethereum and THORChain.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget hacker routes 4 BTC through Wasabi CoinJoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c413b0699047334c45e4",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/australia-summons-openai-anthropic-chiefs-to-senate-inquiry-on-health-data-hack-report"
      ],
      "firstSeen": "2026-09-27T12:46:28.000Z",
      "updatedAt": "2026-09-27T17:41:03.174Z",
      "summary": "A rogue OpenAI research agent bypassed blocks on the Australian government health-data portal, accessing non-public files in June.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Australia asks OpenAI, Anthropic chiefs to Senate inquiry",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "fe514e93a7bf9d91881e",
      "protocol": "THORChain Refuses",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-thorchain-stolen-funds-pause/"
      ],
      "firstSeen": "2026-09-27T12:23:33.000Z",
      "updatedAt": "2026-09-27T12:57:12.068Z",
      "summary": "THORChain paused itself over a $10M loss in May. Now it won't block $387M Bitget hack funds. Here's the fight. The post THORChain Refuses to Block Assets Tied to Bitget Hackers appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "af184f9bb798c4d4e71e",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hacker-routes-4-btc-through-wasabi-coinjoin/"
      ],
      "firstSeen": "2026-09-27T08:20:07.000Z",
      "updatedAt": "2026-09-27T12:57:12.068Z",
      "summary": "AMLBot traced about 4 BTC linked to the Bitget hack into Wasabi CoinJoin after swaps through USDT0, Ethereum and THORChain.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget hacker routes 4 BTC through Wasabi CoinJoin",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "217da5f41dd9592cd648",
      "protocol": "Nearly $15B is moving off LayerZero, now",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 15000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/nearly-15-billion-is-moving-off-layerzero-now-a-292-million-lawsuit-puts-its-security-model-on-trial/"
      ],
      "firstSeen": "2026-09-26T10:42:49.000Z",
      "updatedAt": "2026-09-26T22:41:11.168Z",
      "summary": "Evercrest Technologies, the company behind KelpDAO, has sued LayerZero Labs, its Canadian affiliate, and CEO Bryan Pellegrino in British Columbia over April's $292 million rsETH exploit. The claim alleges negligent misrepresentation, negligence and defamation, seeks aggravated and punitive damages, and says Kelp users have withdrawn more than $650 million since the attack. Pellegrino has called […] The post Nearly $15B is moving off LayerZero, now a $292M lawsuit puts its security model on trial appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 15000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "798b0002149954bd395d",
      "protocol": "Nearly $15B is moving off LayerZero, now",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 15000000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/nearly-15-billion-is-moving-off-layerzero-now-a-292-million-lawsuit-puts-its-security-model-on-trial/"
      ],
      "firstSeen": "2026-09-26T10:42:49.000Z",
      "updatedAt": "2026-09-26T16:43:23.233Z",
      "summary": "Evercrest Technologies, the company behind KelpDAO, has sued LayerZero Labs, its Canadian affiliate, and CEO Bryan Pellegrino in British Columbia over April's $292 million rsETH exploit. The claim alleges negligent misrepresentation, negligence and defamation, seeks aggravated and punitive damages, and says Kelp users have withdrawn more than $650 million since the attack. Pellegrino has called […] The post Nearly $15B is moving off LayerZero, now a $292M lawsuit puts its security model on trial appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityNote": "P0-2 loss review 2026-11-06: event 口径金额 15000000000 USD > 1e10（单笔安全事件不可能这么大，疑似市值/规模/年度汇总）. lossBasis downgraded to unknown (only event counts toward totals); original lossUsd preserved; pending source-level verification.",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "79cf51a0e4acdf9bd79a",
      "protocol": "Bitget hacker",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 75000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/09/26/bitget-hacker-moves-usd83-million-in-stolen-xrp-that-ripple-cannot-freeze"
      ],
      "firstSeen": "2026-09-26T12:56:41.000Z",
      "updatedAt": "2026-09-26T16:43:23.233Z",
      "summary": "Two wallets have been almost emptied and a third is being drained, with about $75 million remaining across the five original holding accounts.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "60519b53b31d14471e01",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 351600000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitcoin-87k-fed-stablecoin-rules-weekly-recap/",
        "https://crypto.news/bitget-offers-bounty-freezing-funds-stolen-in-attack/"
      ],
      "firstSeen": "2026-09-26T02:00:15.000Z",
      "updatedAt": "2026-09-26T12:24:42.254Z",
      "summary": "Bitget has launched a recovery bounty offering 5% for freezing stolen assets and another 5% for recovering them after an attack it initially valued at $351.6 million. Bitget CEO Gracy Chen announced the bounty on X and called on exchanges,…",
      "revision": 2,
      "lossBasis": "event",
      "sourceHeadline": "Bitget offers 5% bounty for freezing funds stolen",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "2a784062a82a7be34509",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 1230000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitget-hacker-withdraws-binance-transfers/"
      ],
      "firstSeen": "2026-09-26T04:22:26.000Z",
      "updatedAt": "2026-09-26T12:24:42.254Z",
      "summary": "The Bitget hack highlights vulnerabilities in crypto exchanges, prompting urgent calls for enhanced security measures and international cooperation. The post Bitget hacker withdraws $1.23M from Binance, funnels funds to attacker-controlled wallet appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget hacker withdraws $1.23M from Binance, funnels funds",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "9c97352196eba4300137",
      "protocol": "Bitget Hack Losses",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-timeline-north-korean-pattern/",
        "https://decrypt.co/379350/bitget-hack-387m-what-happened-why-north-korea-suspect",
        "https://thedefiant.io/news/hacks/bitget-raises-hack-estimate-to-387-5-million-as-token-accounting-widens"
      ],
      "firstSeen": "2026-09-25T16:40:15.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "An attacker faked internal transfer requests to drain $387.5 million from Bitget's hot and warm wallets, and the exchange's CEO says the fingerprints look like Pyongyang's.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "1cc266e1a64286f02438",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 11000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/three-defi-exploits-swipe-11m-from-payy-duelbits-meter-in-one-day/"
      ],
      "firstSeen": "2026-09-25T11:39:31.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "TL;DR: On September 24, 2026, three independent security incidents accumulated combined losses exceeding $11 million. The Duelbits platform recorded the day’s largest theft, with nearly $7 million drained from its hot wallets. The Meter.io and Payy Network protocols suffered losses of $2.3 million and $1.8 million, respectively, through verification flaws and bridge vulnerabilities. The DeFi ... Read more",
      "revision": 1,
      "lossBasis": "aggregate",
      "sourceHeadline": "Three DeFi Exploits Swipe $11M from Payy, Duelbits",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "275b18c82324ba514bae",
      "protocol": "Circle and Tether",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 318000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379365/circle-tether-freeze-stablecoins-bitget-hack"
      ],
      "firstSeen": "2026-09-25T18:42:51.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "The two stablecoin issuers blacklisted a wallet labeled \"Bitget Exploiter 8,\" locking about $318,000 in USDC and USDT—but the attacker swapped most funds into unfreezable ETH before they could act.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3d4b9ae6b355888aa4d6",
      "protocol": "Bitget hacker swaps USDC for ETH as Circle",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 351600000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-hacker-swaps-usdc-for-eth-circle-faces-freeze/"
      ],
      "firstSeen": "2026-09-25T17:54:41.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "The Bitget hacker has converted stolen USDC into ETH after a breach that the exchange valued at about $351.6 million, renewing questions about when Circle freezes funds linked to an attack. Security researcher Taylor Monahan flagged the attacker’s activity on…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "dad4874e627310857d3d",
      "protocol": "Bitget’s hack just got $36 million bigger",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 36000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/bitgets-hack-just-got-36-million-bigger-and-now-theres-a-bounty-on-the-stolen-crypto/"
      ],
      "firstSeen": "2026-09-25T19:20:35.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "The exchange says the revision adds assets from the same incident and will announce a withdrawal plan by Sept. 26. The post Bitget’s hack just got $36 million bigger, and now there’s a bounty on the stolen crypto appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "d3445d0b9ab63f8ab4d4",
      "protocol": "Unattributed",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/former-hack-vc-partner-hsin-ju-chuang-found-dead"
      ],
      "firstSeen": "2026-09-25T18:33:49.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "The crypto executive and Dystopia Labs founder previously held senior roles at Stellar and Solana before joining venture capital firm Hack VC.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Former Hack VC partner Hsin-Ju Chuang’s death ruled",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "da851d93b339ff0a3f28",
      "protocol": "AI Agents",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379369/ai-agents-hacked-test-environment-cheat-darktrace"
      ],
      "firstSeen": "2026-09-25T19:45:39.000Z",
      "updatedAt": "2026-09-25T20:25:15.296Z",
      "summary": "Darktrace's new Signal Labs found AI agents hacking their own evaluation environment to fake a perfect score—and tricking coding assistants into running unauthorized network attacks.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "17c4aee9dd841e3155f4",
      "protocol": "Magic Eden legacy approvals leave $5.7 million",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 5700000,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/magic-eden-legacy-approvals-expose-5-7m-in-nfts/",
        "https://cryptobriefing.com/whitehats-rescue-5-7-million-in-nfts-after-limit-break-payment-processor-exploit/",
        "https://thedefiant.io/news/hacks/legacy-magic-eden-approvals-exploited-as-white-hats-rescue-nfts",
        "https://www.theblock.co/news/web3/2026-09-25-magic-eden-legacy-approvals-leave-5-7-million-in-nfts-exposed-to-exploit-before-rescue-416874"
      ],
      "firstSeen": "2026-09-25T12:53:09.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "Magic Eden legacy approvals exposed $5.7 million in NFTs to an exploit before whitehats rescued 23,155 tokens.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "52066a3d8e3ccbd8d885",
      "protocol": "Bitget Hack Timeline",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 387500000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-timeline-north-korean-pattern/",
        "https://coinfomania.com/bitget-raises-security-breach-estimate-to-387-5m-chen-says/",
        "https://cryptobriefing.com/bitget-raises-breach-estimate-to-387-5m-and-launches-recovery-bounty/",
        "https://thedefiant.io/news/hacks/bitget-raises-hack-estimate-to-387-5-million-as-token-accounting-widens"
      ],
      "firstSeen": "2026-09-25T14:45:00.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "Bitget says hackers used its own system to approve a $387.5 million theft. Here’s the timeline and the evidence behind suspected North Korean links. The post Bitget Hack Timeline: How Its Own System Approved a $387 Million Theft appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "e681ff7531a59138013c",
      "protocol": "KelpDAO Developer",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/kelpdao-layerzero-lawsuit-rseth-exploit",
        "https://crypto.news/kelpdao-sues-layerzero-over-292m-rseth-exploit/",
        "https://cryptobriefing.com/kelpdao-developer-sues-layerzero-ceo-over-292-million-exploit-and-blame-shifting/",
        "https://decrypt.co/379288/kelpdao-developer-sues-layerzero-over-292m-bridge-exploit",
        "https://www.coindesk.com/business/2026/09/25/kelpdao-sues-layerzero-for-the-largest-exploit-2026-has-seen-so-far",
        "https://www.theblock.co/news/regulation/2026-09-25-kelpdao-sues-layerzero-claims-it-endorsed-setup-used-in-292-million-rseth-exploit-416361"
      ],
      "firstSeen": "2026-09-25T05:51:00.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "Evercrest says LayerZero approved the single-verifier configuration in writing multiple times, then warned a different developer about it.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "35d4a93955483ffd453e",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/bitget-halts-withdrawals-after-351m-hack-ceo-assures-funds-safe/"
      ],
      "firstSeen": "2026-09-25T08:30:00.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "The incident underscores vulnerabilities in centralized exchanges, potentially affecting market confidence and prompting calls for enhanced security. The post Bitget halts withdrawals after $351M hack, CEO assures funds safe appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "a4274fce04c21bb0881b",
      "protocol": "Circle and Tether step",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 318000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/markets/2026/09/25/circle-and-tether-step-in-to-freeze-hacker-wallet-after-massive-bitget-crypto-heist"
      ],
      "firstSeen": "2026-09-25T14:41:53.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "The stablecoin issuer blacklisted a wallet holding about $318,000 in USDT and USDC. Most of the stolen funds sit in ether, which can't be frozen.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "ec7fdb0c300931cba652",
      "protocol": "Magic Eden",
      "chain": "Ethereum",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379342/magic-eden-old-ethereum-nft-listings-exposed-exploit"
      ],
      "firstSeen": "2026-09-25T16:17:19.000Z",
      "updatedAt": "2026-09-25T17:04:39.471Z",
      "summary": "A flaw in Limit Break's Payment Processor V2 put old Magic Eden Ethereum listings at risk, prompting a whitehat rescue of more than 23,000 NFTs.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2fe3ecd4b75da603380e",
      "protocol": "North Korean Hackers “Very Likely”",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 350000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-north-korea-gracy-chen/",
        "https://coinfomania.com/bitget-ceo-confirms-350m-hack-likely-linked-to-north-korea/",
        "https://coinfomania.com/bitget-ceo-gracy-chen-confirms-exchange-can-absorb-350m-hack/"
      ],
      "firstSeen": "2026-09-25T01:31:49.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Bitget CEO Gracy Chen said North Korea was “very likely” behind the $350 million Bitget hack. The attackers breached a backend system and never obtained private keys, she added. Withdrawals remain suspended after the September 24 breach. DefiLlama data now ranks it as the largest crypto hack of 2026. Chen Follows a VPN Trail to The post North Korean Hackers “Very Likely” Drained $350 Million From Bitget, CEO Says appeared first on BeInCrypto .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "4c24bbff85eaca43d056",
      "protocol": "KelpDAO Developer",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/kelp-dao-sues-layerzero-rseth-exploit/",
        "https://cointelegraph.com/news/kelpdao-layerzero-lawsuit-rseth-exploit",
        "https://crypto-economy.com/kelpdao-sues-layerzero-over-292m-exploit/",
        "https://crypto.news/kelpdao-sues-layerzero-over-292m-rseth-exploit/",
        "https://cryptobriefing.com/kelpdao-developer-sues-layerzero-ceo-over-292-million-exploit-and-blame-shifting/",
        "https://decrypt.co/379288/kelpdao-developer-sues-layerzero-over-292m-bridge-exploit",
        "https://www.coindesk.com/business/2026/09/25/kelpdao-sues-layerzero-for-the-largest-exploit-2026-has-seen-so-far",
        "https://www.theblock.co/news/regulation/2026-09-25-kelpdao-sues-layerzero-claims-it-endorsed-setup-used-in-292-million-rseth-exploit-416361"
      ],
      "firstSeen": "2026-09-25T05:51:00.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Evercrest says LayerZero approved the single-verifier configuration in writing multiple times, then warned a different developer about it.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "b722a10aaa0074973444",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 352000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-ceo-suspects-north-korea-behind-352m-hack-citing-ip-clues",
        "https://cryptoslate.com/bitgets-north-korea-linked-352-million-hack-could-drain-76-of-its-protection-fund/",
        "https://www.coindesk.com/markets/2026/09/25/bitget-s-usd351-million-hack-happened-via-spoofed-transfers-not-private-keys-ceo-gray-chen-says"
      ],
      "firstSeen": "2026-09-25T00:32:00.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Bitget CEO Gracy Chen said a preliminary investigation found IP addresses matching VPN choices associated with a DPRK hacking group.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget CEO suspects North Korea behind $352M hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "44cf410b578cfdc8fcd9",
      "protocol": "Payy bridge exploit",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/payy-bridge-exploit-freezes-crypto-cards-and-no-balances-remain-safe/"
      ],
      "firstSeen": "2026-09-25T07:10:06.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Payy says the bridge was drained, while the extent of any customer losses remains undisclosed. The post Payy bridge exploit freezes crypto cards, and no balances remain safe appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f04688fb521e46ca62f8",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 351600000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-probe-points-to-backend-breach/"
      ],
      "firstSeen": "2026-09-25T02:33:20.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Bitget says a $351.6M wallet breach hit hot and warm wallets, with withdrawals paused as investigators examine a backend system compromise.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5adaa0ed1647b3b09708",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/magic-eden-undergoing-possible-exploit-as-thousands-of-nfts-move-for-0-eth/"
      ],
      "firstSeen": "2026-09-25T07:32:17.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Magic Eden has faced reports of a possible contract exploit after unusual transactions showed thousands of NFTs being sold for 0 ETH, although one account involved in the activity has claimed the transfers are part of a whitehat operation. NFT…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Magic Eden undergoing possible exploit as thousands",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b580b770ec200ff71ac8",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 5700000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/yuga-labs-responds-to-payment-processor-exploit-safeguards/"
      ],
      "firstSeen": "2026-09-25T10:01:30.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Yuga Labs secures over $5.7 million in NFTs amid a payment processor vulnerability. Here's why this incident is significant. The post Yuga Labs Responds to Payment Processor Exploit, Safeguards appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Yuga Labs Responds to Payment Processor Exploit, Safeguards",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "cf0754d8ba68c2e3ebf9",
      "protocol": "MultiversX restarts after exploit",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/multiversx-restarts-after-exploit-halt-but-kraken-still-bars-new-egld-trades/"
      ],
      "firstSeen": "2026-09-25T10:50:09.000Z",
      "updatedAt": "2026-09-25T11:45:04.481Z",
      "summary": "Mainnet blocks resumed Sept. 24, while Kraken's latest EGLD notice kept trading cancel-only and deposits and withdrawals paused. The post MultiversX restarts after exploit halt, but Kraken still bars new EGLD trades appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f9ad4288530e85e78e05",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 351600000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://coinfomania.com/bitget-ceo-confirms-security-breach-affecting-351-6-million/",
        "https://cryptoslate.com/bitgets-351-6-million-hack-pushes-september-crypto-losses-to-2026-high/",
        "https://thedefiant.io/news/cefi/bitget-disables-withdrawals-165-million-one-address-four-chains"
      ],
      "firstSeen": "2026-09-24T21:42:42.000Z",
      "updatedAt": "2026-09-25T06:06:01.658Z",
      "summary": "Bitget has suspended withdrawals after unauthorized transfers drained about $351.6 million from a limited number of its hot and warm wallets. The crypto exchange detected the transfers at 18:31 UTC on Sept. 24 and activated its emergency response procedures within minutes, Chief Executive Officer Gracy Chen said. Bitget’s cold wallets and most assets held on […] The post Bitget’s $351.6 million hack pushes September crypto losses to 2026 high appeared first on CryptoSlate .",
      "revision": 2,
      "lossBasis": "event",
      "sourceHeadline": "Bitget’s $351.6 million hack pushes September crypto losses",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "c95fc85afdf7f284de13",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 352000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/asia-dominates-crypto-adoption-index-bitgets-356m-hack-asia-express",
        "https://www.coindesk.com/markets/2026/09/24/crypto-exchange-bitget-loses-usd352-million-in-hack-claims-user-funds-are-safe"
      ],
      "firstSeen": "2026-09-24T21:59:32.000Z",
      "updatedAt": "2026-09-25T06:06:01.658Z",
      "summary": "The APAC region accounts for half of the Global Crypto Adoption Index. Bitget suffers massive $352M loss and OpenAI forgets to mention its agents hacked the Australian Government.",
      "revision": 2,
      "lossBasis": "event",
      "sourceHeadline": "Asia dominates Crypto Adoption Index, Bitget’s $352M hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "7d43b0bfd7c8f2617d3d",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 352000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-ceo-suspects-north-korea-behind-352m-hack-citing-ip-clues",
        "https://www.coindesk.com/markets/2026/09/25/bitget-s-usd351-million-hack-happened-via-spoofed-transfers-not-private-keys-ceo-gray-chen-says"
      ],
      "firstSeen": "2026-09-25T00:32:00.000Z",
      "updatedAt": "2026-09-25T06:06:01.658Z",
      "summary": "Bitget CEO Gracy Chen said a preliminary investigation found IP addresses matching VPN choices associated with a DPRK hacking group.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget CEO suspects North Korea behind $352M hack",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "b43350d3fe243b63041e",
      "protocol": "KelpDAO",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 292000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/kelpdao-sues-layerzero-over-292m-rseth-exploit/"
      ],
      "firstSeen": "2026-09-25T05:51:00.000Z",
      "updatedAt": "2026-09-25T06:06:01.658Z",
      "summary": "KelpDAO has sued LayerZero and CEO Bryan Pellegrino over April’s $292M rsETH exploit, alleging security and disclosure failures.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "b5202313f7ed0f90cd94",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 351600000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/bitget-probe-points-to-backend-breach/"
      ],
      "firstSeen": "2026-09-25T00:47:36.000Z",
      "updatedAt": "2026-09-25T06:06:01.658Z",
      "summary": "Bitget says a $351.6M wallet breach hit hot and warm wallets, with withdrawals paused as investigators examine a backend system compromise.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3420deec30c00fec902d",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 350000000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/bitget-hack-176-million-wallet-movements/",
        "https://decrypt.co/379275/bitget-hack-183-million-crypto-exchange-wallets"
      ],
      "firstSeen": "2026-09-24T20:19:46.000Z",
      "updatedAt": "2026-09-25T00:45:21.115Z",
      "summary": "A newly created wallet drained hot and cold reserves labeled as belonging to Bitget across multiple blockchains in under an hour.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a31a21aeac817a613a21",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-calls-security-withdrawal-claims-unverified-amid-178m-breach-reports",
        "https://www.coindesk.com/markets/2026/09/24/crypto-exchange-bitget-loses-usd352-million-in-hack-claims-user-funds-are-safe"
      ],
      "firstSeen": "2026-09-24T21:47:17.000Z",
      "updatedAt": "2026-09-25T00:45:21.115Z",
      "summary": "Bitget said unauthorized transfers affected a limited number of hot wallets, while cold wallets and most platform assets remained unaffected.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "1d4b2c25feee4eb7a39c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 352000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/bitget-ceo-suspects-north-korea-behind-352m-hack-citing-ip-clues"
      ],
      "firstSeen": "2026-09-25T00:15:22.000Z",
      "updatedAt": "2026-09-25T00:45:21.115Z",
      "summary": "Bitget CEO Gracy Chen said a preliminary investigation found IP addresses matching VPN choices associated with a DPRK hacking group.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Bitget CEO suspects North Korea behind $352M hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "df20dfe175cdcc0aadd0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 351000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/magazine/asia-dominates-crypto-adoption-index-bitgets-356m-hack-asia-express"
      ],
      "firstSeen": "2026-09-24T23:27:17.000Z",
      "updatedAt": "2026-09-25T00:45:21.115Z",
      "summary": "The APAC region accounts for half of the Global Crypto Adoption Index. Bitget suffers massive $351M loss and OpenAI forgets to mention its agents hacked the Australian Government.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Asia dominates Crypto Adoption Index, Bitget’s $351M hack",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e6161cf17c629a38380e",
      "protocol": "Bitget",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 351600000,
      "status": "confirmed",
      "severity": "critical",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/bitget-confirms-over-350m-breach-and-temporarily-pauses-withdrawals/",
        "https://cryptoslate.com/bitgets-351-6-million-hack-pushes-september-crypto-losses-to-2026-high/"
      ],
      "firstSeen": "2026-09-24T21:42:02.000Z",
      "updatedAt": "2026-09-24T22:16:11.229Z",
      "summary": "Bitget confirmed a $351.6 million wallet breach and paused withdrawals, while CEO Gracy Chen said customer funds remain protected. The post Bitget confirms over $350M breach and temporarily pauses withdrawals appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "9e5da1ea7b7794163a33",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 7000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/09/24/crypto-casino-duelbits-goes-offline-after-usd7m-hot-wallet-hack"
      ],
      "firstSeen": "2026-09-24T15:48:20.000Z",
      "updatedAt": "2026-09-24T22:16:11.229Z",
      "summary": "Attackers drained Duelbits' hot wallets across four blockchains; about $6 million in stolen funds now sits in a single Ethereum address.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto casino Duelbits goes offline after $7 million",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "7258a00eacd19d2f9530",
      "protocol": "Reporte",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://es.beincrypto.com/bitget-hackeo-176-millones-movimientos-cartera/"
      ],
      "firstSeen": "2026-09-24T20:58:21.000Z",
      "updatedAt": "2026-09-24T22:16:11.229Z",
      "summary": "El exchange de criptomonedas Bitget ha sido hackeado por más de 350 millones de dólares. El hack se identificó después de que los usuarios reportaran problemas con los retiros. Los primeros datos on-chain mostraron que aproximadamente 176 millones de dólares salieron de wallets etiquetadas como pertenecientes al exchange. Los datos de Arkham muestran una serie El post Reporte: Hackean el exchange Bitget por más de 170 millones de dólares fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "3db677e4444e2a9878bd",
      "protocol": "EQIBank fights",
      "chain": "Not specified",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 89000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/eqibank-fights-recover-90m-seized/"
      ],
      "firstSeen": "2026-09-24T21:35:15.000Z",
      "updatedAt": "2026-09-24T22:16:11.229Z",
      "summary": "EQIBank's legal struggle highlights the vulnerability of offshore banks to US jurisdiction, potentially reshaping digital banking's global landscape. The post EQIBank fights to recover $89M seized from US payment provider accounts appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "bef2199a10c02a7f63ca",
      "protocol": "Payy Network",
      "chain": "Ethereum",
      "technique": "Smart-contract vulnerability",
      "lossUsd": 1920000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/payy-network-halt-usdc-exploit-ethereum-rollup/",
        "https://thedefiant.io/news/hacks/payy-halts-network-after-1-92-million-usdc-drain"
      ],
      "firstSeen": "2026-09-24T10:58:28.000Z",
      "updatedAt": "2026-09-24T18:37:59.237Z",
      "summary": "The Payy Network exploit highlights the ongoing vulnerabilities in DeFi infrastructure, raising concerns about security and user trust in digital finance. The post Payy Network halts operations after $1.92M USDC exploit drains Ethereum rollup appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "4285a7408e91ffe92b1d",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": 7000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://www.coindesk.com/business/2026/09/24/crypto-casino-duelbits-goes-offline-after-usd7m-hot-wallet-hack"
      ],
      "firstSeen": "2026-09-24T15:48:20.000Z",
      "updatedAt": "2026-09-24T18:37:59.237Z",
      "summary": "Attackers drained Duelbits' hot wallets across four blockchains; about $6 million in stolen funds now sits in a single Ethereum address.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Crypto casino Duelbits goes offline after $7 million",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "4be74970a16536bf128d",
      "protocol": "Alpen",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 320000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/alpen-says-ai-diagnosed-liquids-320-million-exploit-in-an-hour-could-a-payout-limit-have-stopped-it/"
      ],
      "firstSeen": "2026-09-24T07:35:10.000Z",
      "updatedAt": "2026-09-24T18:37:59.237Z",
      "summary": "Its post-attack replay explains the cache flaw, while SideSwap says a 4,000 L-BTC order faced no size or velocity hold. The post Alpen says AI identified Liquid’s $320M BTC exploit in an hour. Could a payout limit have stopped it? appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0259983087a373e32d34",
      "protocol": "Alpen",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 320000000,
      "status": "review",
      "severity": "critical",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/alpen-says-ai-diagnosed-liquids-320-million-exploit-in-an-hour-could-a-payout-limit-have-stopped-it/"
      ],
      "firstSeen": "2026-09-24T07:35:10.000Z",
      "updatedAt": "2026-09-24T14:23:12.909Z",
      "summary": "Its post-attack replay explains the cache flaw, while SideSwap says a 4,000 L-BTC order faced no size or velocity hold. The post Alpen says AI identified Liquid’s $320M BTC exploit in an hour. Could a payout limit have stopped it? appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "77f7b3460623330cf952",
      "protocol": "Australia",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/australia-openai-agent-government-hack-altman-warning"
      ],
      "firstSeen": "2026-09-24T08:29:11.000Z",
      "updatedAt": "2026-09-24T09:30:43.365Z",
      "summary": "OpenAI notified Australia nearly three months after its agent breached a government portal while gathering public medicine-spending data.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "822c267b578887f6d9f6",
      "protocol": "FBI crypto forum targets scams, hacks and DPRK",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/fbi-crypto-forum-targets-scams-hacks-and-dprk-threats/"
      ],
      "firstSeen": "2026-09-24T05:15:39.000Z",
      "updatedAt": "2026-09-24T09:30:43.365Z",
      "summary": "FBI’s annual crypto crime forum links investigators with security firms as digital-asset fraud, hacks and state-backed threats keep rising.",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "aadcee0a0a2cb914e04a",
      "protocol": "$20 Million in XRP Stolen From Thousands",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": 20000000,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/xrp-dcent-wallet-drain-20-million/",
        "https://cryptoslate.com/nearly-20-million-in-xrp-drained-from-6678-wallets-across-six-attack-waves/"
      ],
      "firstSeen": "2026-09-23T18:50:05.000Z",
      "updatedAt": "2026-09-24T04:36:28.477Z",
      "summary": "Attackers drained roughly 11.7 million XRP from thousands of D’CENT App Wallet users. The theft, worth close to $20 million, unfolded between September 15 and 20. XRPL.to published the on-chain forensic timeline. The operation unfolded across six separate waves. It hit a combined 6,678 wallets using keys the thief already controlled. How the Attack Actually The post $20 Million in XRP Stolen From Thousands of Hardware Wallets appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": []
    },
    {
      "id": "d760520d0c4904d8d517",
      "protocol": "White hats",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/white-hats-recover-52-bitcoin-from-coldcard-exploit-and-a-new-public-portal-lets-victims-check-eligibility/"
      ],
      "firstSeen": "2026-09-24T01:10:28.000Z",
      "updatedAt": "2026-09-24T04:36:28.477Z",
      "summary": "A Sept. 21 transaction points owners toward a trust address check for an earlier disclosed rescue, with any return subject to verification. The post White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6b97b99aebc1aa5ad87b",
      "protocol": "$20 Million in XRP Stolen From Thousands",
      "chain": "Multi-chain",
      "technique": "Security incident",
      "lossUsd": 20000000,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/xrp-dcent-wallet-drain-20-million/",
        "https://cryptoslate.com/nearly-20-million-in-xrp-drained-from-6678-wallets-across-six-attack-waves/"
      ],
      "firstSeen": "2026-09-23T18:50:05.000Z",
      "updatedAt": "2026-09-23T23:55:16.938Z",
      "summary": "Attackers drained roughly 11.7 million XRP from thousands of D’CENT App Wallet users. The theft, worth close to $20 million, unfolded between September 15 and 20. XRPL.to published the on-chain forensic timeline. The operation unfolded across six separate waves. It hit a combined 6,678 wallets using keys the thief already controlled. How the Attack Actually The post $20 Million in XRP Stolen From Thousands of Hardware Wallets appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "aggregate",
      "qualityFlags": []
    },
    {
      "id": "74ae9ecbe45f6bcbcfb7",
      "protocol": "An AI Agent Just",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/openai-agent-hacks-australia-medicare/",
        "https://decrypt.co/379134/an-ai-agent-just-hacked-a-government-website-for-the-first-time-australia-pm-says"
      ],
      "firstSeen": "2026-09-23T22:31:45.000Z",
      "updatedAt": "2026-09-23T23:55:16.938Z",
      "summary": "Anthony Albanese said the agent accessed public and non-public files on a Medicare statistics portal in June, calling OpenAI's three-month delay in disclosing the breach \"unacceptable.\"",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "57b81f2a5621432c35fd",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/visa-study-finds-americans-more-open-to-stablecoins-with-bank-like-protections/",
        "https://decrypt.co/379073/americans-stablecoins-bank-protections-visa"
      ],
      "firstSeen": "2026-09-23T16:26:03.000Z",
      "updatedAt": "2026-09-23T21:26:14.929Z",
      "summary": "A Visa survey found U.S. willingness to use stablecoins for cross-border transfers rises from 36% to 56% when paired with hypothetical bank-level fraud protection and deposit insurance.",
      "revision": 2,
      "lossBasis": "unknown",
      "sourceHeadline": "Americans Would Use Stablecoins—If They Came With Bank",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "b6b651e8846013bb1344",
      "protocol": "Former Hack VC partner Hsin-Ju Chuang found dead",
      "chain": "Solana",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/former-hack-vc-partner-hsin-ju-chuang-found-dead",
        "https://www.coindesk.com/business/2026/09/23/former-hack-vc-partner-hsin-ju-chuang-found-dead-following-public-dispute-with-firm"
      ],
      "firstSeen": "2026-09-23T18:59:36.000Z",
      "updatedAt": "2026-09-23T21:26:14.929Z",
      "summary": "The crypto executive and Dystopia Labs founder previously held senior roles at Stellar and Solana before joining venture capital firm Hack VC.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "9f15202e05aeedfe9012",
      "protocol": "Nearly $20 million in XRP",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 20000000,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/nearly-20-million-in-xrp-drained-from-6678-wallets-across-six-attack-waves/"
      ],
      "firstSeen": "2026-09-23T18:50:05.000Z",
      "updatedAt": "2026-09-23T21:26:14.929Z",
      "summary": "XRPL.to traces six waves through Sept. 20, while DCENT says exposed App Wallet phrases must be replaced, even on hardware. The post Nearly $20 million in XRP drained from 6,678 wallets across six attack waves appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "5bb9cf7b1828a3f59b1b",
      "protocol": "Cosmos Hub restarts after 25-hour",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 2000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/cosmos-hub-restarts-25-hour-halt-stolen-tokens/"
      ],
      "firstSeen": "2026-09-23T16:27:54.000Z",
      "updatedAt": "2026-09-23T17:57:15.891Z",
      "summary": "The incident highlights the critical need for robust governance security and cross-chain risk management in decentralized ecosystems. The post Cosmos Hub restarts after 25-hour halt, moves $2M in stolen tokens from attacker’s wallet appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "053bbce2e7e08029b084",
      "protocol": "EU central banks attack MiCA",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/eu-central-banks-attack-mica-rules-and-stablecoin-runs-are-blamed/"
      ],
      "firstSeen": "2026-09-23T08:10:31.000Z",
      "updatedAt": "2026-09-23T13:35:09.821Z",
      "summary": "The reported plan swaps mandatory bank deposits for one-day and five-day liquidity tests, shifting where redemption risk lands. The post EU central banks attack MiCA rules and stablecoin runs are blamed appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ece3c94158e6c177b802",
      "protocol": "North Korea's Fake Job Interviews",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/379032/north-koreas-fake-job-interviews-drained-11m-from-7000-crypto-wallets"
      ],
      "firstSeen": "2026-09-23T12:15:18.000Z",
      "updatedAt": "2026-09-23T13:35:09.821Z",
      "summary": "A seven-agency advisory ties the WaterPlum hacking crew and Pyongyang's remote IT worker scheme to the same bureau.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cecec1892fc611dbb706",
      "protocol": "Whitehats",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto.news/coldcard-whitehats-move-52-37-btc-to-recovery-trust/",
        "https://cryptobriefing.com/coldcard-white-hats-btc-crypto-recovery-trust/",
        "https://www.coindesk.com/markets/2026/09/22/whitehats-move-52-bitcoin-from-the-coldcard-hack-to-a-recovery-trust"
      ],
      "firstSeen": "2026-09-22T02:04:58.000Z",
      "updatedAt": "2026-09-22T12:33:03.904Z",
      "summary": "According to Galaxy Digital, the good guys have moved 52 BTC to an address carrying an OP_RETURN message reading \"claim:cryptorecoverytrust dot com.\"",
      "revision": 2,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "ad04c5e9229fda321330",
      "protocol": "Unattributed",
      "chain": "Bitcoin",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/white-hats-coldcard-btc-exploit-galaxy"
      ],
      "firstSeen": "2026-09-22T09:06:59.000Z",
      "updatedAt": "2026-09-22T12:33:03.904Z",
      "summary": "White hats secured about 40% of the Bitcoin moved in the Coldcard exploit’s second wave, transferring it to a Wyoming trust for victims.",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "White hats outrun Coldcard hackers in 52-Bitcoin evacuation",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "1da56050f4d2d3db9e38",
      "protocol": "Ledger CTO",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto-economy.com/ledger-cto-warns-of-darksword-safari-attack-that-can-steal-crypto-keys-from-iphones/"
      ],
      "firstSeen": "2026-09-21T21:10:56.000Z",
      "updatedAt": "2026-09-22T01:34:32.855Z",
      "summary": "TL;DR: Charles Guillemet, Chief Technology Officer at Ledger, issued a public alert on September 21, 2026, regarding the DarkSword exploit chain targeting Safari. The threat chains six iOS security flaws that compromise the JavaScriptCore engine, bypass sandbox isolation, and exploit the system kernel. Google confirmed that the original vulnerabilities in the chain were patched starting ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2be8eb335177c67ed8aa",
      "protocol": "SlowMist",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/slowmist-warns-darksword-may-target-wallets-on-ios/"
      ],
      "firstSeen": "2026-09-21T20:47:23.000Z",
      "updatedAt": "2026-09-22T01:34:32.855Z",
      "summary": "SlowMist has warned that attackers may have adapted the Darksword exploit chain to compromise devices running iOS 26.5 and extract private keys from self-custody crypto wallets. SlowMist Chief Information Security Officer 23pds said attackers are using Darksword to bypass Apple’s…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ed542bd5dee162cd2092",
      "protocol": "Pragma flags 6 price feeds as critical risk",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 3500000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/pragma-flags-6-price-feeds-as-critical-risk-following-3-5m-starknet-lending-exploit/"
      ],
      "firstSeen": "2026-09-22T01:10:56.000Z",
      "updatedAt": "2026-09-22T01:34:32.855Z",
      "summary": "The September 18 assessment exposes a gap between oracle valuations and the liquidity lenders need to sell collateral. The post Pragma flags 6 price feeds as critical risk following $3.5M Starknet lending exploit appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "3e7c09b56c61abeef8e5",
      "protocol": "SlowMist",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/slowmist-warns-darksword-may-target-wallets-on-ios/"
      ],
      "firstSeen": "2026-09-21T19:29:05.000Z",
      "updatedAt": "2026-09-21T22:47:34.480Z",
      "summary": "SlowMist has warned that attackers may have adapted the Darksword exploit chain to compromise devices running iOS 26.5 and extract private keys from self-custody crypto wallets. SlowMist Chief Information Security Officer 23pds said attackers are using Darksword to bypass Apple’s…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "71cf00fec12c758ab75a",
      "protocol": "Google",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/378900/google-gemini-ai-hacked-companies-stayed-silent"
      ],
      "firstSeen": "2026-09-21T22:46:03.000Z",
      "updatedAt": "2026-09-21T22:47:34.480Z",
      "summary": "Google learned in late July that Gemini had breached three real companies during a May security test, but said nothing publicly for seven weeks.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2555d919deed38ecb2d4",
      "protocol": "Why Balancer’s $1.4M hack recovery won’t",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1400000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/why-balancers-1-4m-hack-recovery-wont-pay-lps-anytime-soon/"
      ],
      "firstSeen": "2026-09-21T15:35:58.000Z",
      "updatedAt": "2026-09-21T22:47:34.480Z",
      "summary": "The pending plan uses attack-time losses and pre-exploit pool balances, but no V1 claim window is open. The post Why Balancer’s $1.4M hack recovery won’t pay LPs anytime soon appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "53f41d458c6047ea76e2",
      "protocol": "Why Balancer’s $1.4M hack recovery won’t",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 1400000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/why-balancers-1-4m-hack-recovery-wont-pay-lps-anytime-soon/"
      ],
      "firstSeen": "2026-09-21T15:35:58.000Z",
      "updatedAt": "2026-09-21T19:19:06.173Z",
      "summary": "The pending plan uses attack-time losses and pre-exploit pool balances, but no V1 claim window is open. The post Why Balancer’s $1.4M hack recovery won’t pay LPs anytime soon appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "0457bbfb00023dc66d6a",
      "protocol": "One wallet links $1.55 million FetchAI theft",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 1550000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/one-wallet-links-1-55-million-fetchai-theft-to-massive-408-5-million-ntx-mint/"
      ],
      "firstSeen": "2026-09-21T18:40:14.000Z",
      "updatedAt": "2026-09-21T19:19:06.173Z",
      "summary": "Fetch.ai says its own contracts were unaffected, while shared bridge routes leave an unresolved NTX supply question. The post One wallet links $1.55 million FetchAI theft to massive 408.5 million NTX mint appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "69971e874cd698cd21aa",
      "protocol": "SecondFi",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/"
      ],
      "firstSeen": "2026-09-21T09:43:06.000Z",
      "updatedAt": "2026-09-21T19:19:06.173Z",
      "summary": "SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet address. According to SecondFi, some users affected by its June security incident…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "5e6561b3e40322710a83",
      "protocol": "X",
      "chain": "Bitcoin",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/x-lawsuit-bitcoin-accounts-alleged-scheme",
        "https://www.theblock.co/news/regulation/2026-09-21-x-sues-uk-duo-over-alleged-277k-crypto-account-payout-fraud-415889"
      ],
      "firstSeen": "2026-09-21T09:24:27.000Z",
      "updatedAt": "2026-09-21T14:00:30.025Z",
      "summary": "X alleges six Bitcoin-focused accounts coordinated posts and engagement to inflate creator payouts, with claimed and projected losses of at least $378,000.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown"
      ]
    },
    {
      "id": "62eb7b0f37a1a5386a89",
      "protocol": "SecondFi",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/secondfi-warns-users-not-to-claim-night-tokens-from-compromised-wallets/"
      ],
      "firstSeen": "2026-09-21T09:43:06.000Z",
      "updatedAt": "2026-09-21T14:00:30.025Z",
      "summary": "SecondFi has warned holders of compromised wallets not to redeem upcoming NIGHT allocations after confirming that Midnight’s claim system requires tokens to be claimed through the original wallet address. According to SecondFi, some users affected by its June security incident…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "c1cbb4f917b6b3daf76d",
      "protocol": "MultiversX",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/multiversx-hit-by-upbit-warning-after-mainnet-exploit/"
      ],
      "firstSeen": "2026-09-21T08:47:27.000Z",
      "updatedAt": "2026-09-21T14:00:30.025Z",
      "summary": "MultiversX has come under formal trading review at Upbit after the South Korean exchange flagged EGLD on Sept. 21 following a mainnet security incident that forced the network to stop progressing. Upbit’s official notice designated EGLD/KRW, EGLD/BTC and EGLD/USDT as…",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "2126d9c0cab4a94b3edd",
      "protocol": "Fetch.ai",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://coinfomania.com/fetch-ai-confirms-singularitynet-exploit/"
      ],
      "firstSeen": "2026-09-20T16:33:52.000Z",
      "updatedAt": "2026-09-20T17:38:34.095Z",
      "summary": "Fetch.ai reports a security breach affecting SingularityNET contracts, revealing crucial operational updates. The post Fetch.ai Confirms SingularityNET Exploit appeared first on Coinfomania .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "cabc1a141b108b9ca345",
      "protocol": "Fetch.ai and NuNet",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 2000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/fetch-ai-nunet-2-million-exploit/"
      ],
      "firstSeen": "2026-09-20T06:00:00.000Z",
      "updatedAt": "2026-09-20T10:03:48.123Z",
      "summary": "The same exploiter was linked to attacks involving Fetch.ai (FET) and NuNet (NTX), with roughly $2 million in assets involved. Security firms tied both events to the same wallet. NuNet’s token lost more than 70% of its value and touched an all-time low on September 20. How One Attacker Reached Two Protocols Blockaid said on The post Fetch.ai and NuNet Exploited for $2 Million by Same Attacker, NTX Hits All-Time Low appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "cb893047da048000dbe4",
      "protocol": "Blink Wallet",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptobriefing.com/blink-wallet-pauses-custodial-breach/"
      ],
      "firstSeen": "2026-09-19T19:51:56.000Z",
      "updatedAt": "2026-09-19T22:27:23.940Z",
      "summary": "The breach underscores the inherent risks of custodial crypto services, accelerating the shift towards self-custody amid regulatory pressures. The post Blink Wallet pauses services after attacker drains custodial accounts appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "6ab0666d0b2e50a5f0e5",
      "protocol": "Google",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/gemini-hacked-three-companies-security-test/",
        "https://cryptobriefing.com/gemini-ai-hacked-companies-security-test/"
      ],
      "firstSeen": "2026-09-19T06:24:57.000Z",
      "updatedAt": "2026-09-19T14:43:56.120Z",
      "summary": "Four frontier AI labs have now confirmed that their models reached the open internet and then accessed the systems of real companies. Google joined that list on Friday, roughly four months after its own incidents happened. Gemini accessed three real companies during a May evaluation. Notably, the model stopped in all three cases. Google’s Gemini The post Google Confirms Gemini Hacked 3 Real Companies in May Safety Test appeared first on BeInCrypto .",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "08e9f9b2425cbef16175",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": 6500,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://beincrypto.com/claude-openai-breach-hacktron-exploit/",
        "https://es.beincrypto.com/claude-openai-filtracion-hacktron-exploit/"
      ],
      "firstSeen": "2026-09-18T16:29:11.000Z",
      "updatedAt": "2026-09-18T21:11:44.059Z",
      "summary": "El propio modelo de IA de un competidor terminó haciendo la mayor parte del trabajo en un ataque contra OpenAI. Los investigadores de Hacktron AI usaron Claude, de Anthropic, para escribir código de exploit funcional. Toda la intrusión tomó menos de 72 horas. OpenAI terminó pagando una recompensa de 6,500 dólares cuando el equipo demostró El post Investigadores ganan $6,500 tras hackear OpenAI con Claude de Anthropic fue visto por primera vez en BeInCrypto .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Investigadores ganan $6,500 tras hackear OpenAI con Claude",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "6aee94a1b5f108f1be8f",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": 10710000,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://crypto-economy.com/7000-crypto-wallets-targeted-as-north-korean-hackers-infect-30000-devices/",
        "https://crypto.news/north-korean-hackers-stole-7000-crypto-wallet-records-japan-says/"
      ],
      "firstSeen": "2026-09-18T14:38:37.000Z",
      "updatedAt": "2026-09-18T21:11:44.059Z",
      "summary": "TL;DR: Japan’s National Police Agency and the FBI confirmed the infection of over 30,000 devices and the theft of credentials from 7,000 wallets across more than 100 countries. Addresses controlled by the attackers received at least 1.7 billion yen (approximately $10.71 million) between December 2025 and July 2026. Law enforcement dismantled Japan’s first operational “laptop ... Read more",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "7,000 Crypto Wallets Targeted as North Korean Hackers",
      "qualityFlags": [
        "chain-unspecified"
      ]
    },
    {
      "id": "a7a104dc4375e09c1f44",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/north-korean-hackers-stole-7000-crypto-wallet-records-japan-says/"
      ],
      "firstSeen": "2026-09-18T14:38:37.000Z",
      "updatedAt": "2026-09-18T14:57:13.454Z",
      "summary": "North Korea linked hacking group WaterPlum has compromised more than 30,000 devices across over 100 countries and regions, stealing information from more than 7,000 cryptocurrency wallets while targeting developers through fake recruitment campaigns. Japan’s National Police Agency said on Sept.…",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "North Korean hackers stole 7,000 crypto wallet records",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "397495d2e76c1dd6c841",
      "protocol": "Blockchain malware activity",
      "chain": "Not specified",
      "technique": "Malware",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/blockchain-malware-activity-jumps-440-as-ai-lowers-the-barrier-for-hackers/"
      ],
      "firstSeen": "2026-09-18T10:50:46.000Z",
      "updatedAt": "2026-09-18T11:05:09.686Z",
      "summary": "Public chains preserve malware instructions beyond ordinary domain takedowns, shifting defense toward monitoring wallets, contracts and off-chain servers. The post Blockchain malware activity jumps 440% as AI lowers the barrier for North Korea and Iran-linked hackers appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b3438bb2e2dd89945150",
      "protocol": "Ethereum Founder Vitalik Buterin",
      "chain": "Ethereum",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/378544/ethereum-vitalik-buterin-ai-crypto-security"
      ],
      "firstSeen": "2026-09-17T19:01:05.000Z",
      "updatedAt": "2026-09-18T05:50:28.934Z",
      "summary": "The Ethereum co-founder said AI could help developers mathematically verify entire software systems, turning the same technology powering new attacks into a tool for defense.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "f9a92ad20a6237514e5c",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/cardanos-splash-fix-patches-the-exploit-but-leaves-2-4m-ada-missing-and-holders-trapped/"
      ],
      "firstSeen": "2026-09-17T15:45:48.000Z",
      "updatedAt": "2026-09-17T22:24:36.081Z",
      "summary": "The exploit drained 2.42 million ADA net, while OADA lacks protocol redemption and faces a thin-pool overhang. The post Cardano’s Splash fix patches the exploit, but leaves 2.4M ADA missing and holders trapped appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "sourceHeadline": "Cardano’s Splash fix patches the exploit, but leaves",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "deda18affc9416e4a95d",
      "protocol": "Hacker turned 55 days of failed transactions",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": 3000000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/hacker-turned-55-days-of-failed-transactions-into-a-3-million-master-key-that-drained-galachain-wallets/"
      ],
      "firstSeen": "2026-09-17T11:30:07.000Z",
      "updatedAt": "2026-09-17T15:17:07.714Z",
      "summary": "Ledger timestamps and SDK patches show why signed intent needed automatic checks before funds reached a bridge. The post Hacker turned 55 days of failed transactions into a $3 million master key that drained GalaChain wallets appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "under-review"
      ]
    },
    {
      "id": "e3eba2b0fa67f4f56c86",
      "protocol": "State hackers drive 420%",
      "chain": "Bitcoin",
      "technique": "Malware",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/onchain-malware-writes-surge-420-north-korea-iran-chainalysis"
      ],
      "firstSeen": "2026-09-17T12:00:00.000Z",
      "updatedAt": "2026-09-17T15:17:07.714Z",
      "summary": "North Korea-linked hackers used Tron, Aptos and BNB Chain to maintain malware infrastructure, while suspected Iran-linked actors embedded directions in Bitcoin transactions.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "46c6b0d34023204fdfd4",
      "protocol": "Chainflip to reset TRON USDT provider balances",
      "chain": "Tron",
      "technique": "Exploit",
      "lossUsd": 736000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/chainflip-to-reset-tron-usdt-provider-balances-to-zero-following-736000-exploit/"
      ],
      "firstSeen": "2026-09-17T08:00:08.000Z",
      "updatedAt": "2026-09-17T15:17:07.714Z",
      "summary": "Providers retain a separate on-chain record of what they are owed, but Chainflip has not disclosed repayment timing. The post Chainflip to reset TRON USDT provider balances to zero following $736,000 exploit appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "161988243888f557886d",
      "protocol": "Revolut",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": 3000000,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cointelegraph.com/news/revolut-data-breach-monero-ransom-no-direct-contact",
        "https://crypto-economy.com/financial-times-reports-revolut-hackers-cut-ransom-to-3m-with-24-hour-deadline/"
      ],
      "firstSeen": "2026-09-17T02:04:43.000Z",
      "updatedAt": "2026-09-17T10:22:26.407Z",
      "summary": "Revolut says it received no direct contact despite separate ransom demands for $3 million in Monero and 10,000 Bitcoin from competing breach claimants.",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": []
    },
    {
      "id": "67e8ec0e0b99f07d1099",
      "protocol": "Chainflip to reset TRON USDT provider balances",
      "chain": "Tron",
      "technique": "Exploit",
      "lossUsd": 736000,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/chainflip-to-reset-tron-usdt-provider-balances-to-zero-following-736000-exploit/"
      ],
      "firstSeen": "2026-09-17T08:00:08.000Z",
      "updatedAt": "2026-09-17T10:22:26.407Z",
      "summary": "Providers retain a separate on-chain record of what they are owed, but Chainflip has not disclosed repayment timing. The post Chainflip to reset TRON USDT provider balances to zero following $736,000 exploit appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "under-review"
      ]
    },
    {
      "id": "1014a9ac86fd3b0f158c",
      "protocol": "ERA",
      "chain": "Multi-chain",
      "technique": "Credential compromise",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://beincrypto.com/era-software-wallet-14-network-self-custody/"
      ],
      "firstSeen": "2026-09-16T20:24:07.000Z",
      "updatedAt": "2026-09-17T05:16:27.770Z",
      "summary": "The companion app connects to the ERA hardware wallet to add portfolio management, swaps, and dApp access across 14 networks — while private keys never leave the device. The release follows a full independent security audit by Cure53, and lands alongside a major update to ERA Lens, ERA’s on-device scam-warning system, plus new hardware-side capabilities The post ERA Launches Software Wallet, Turning Its Hardware Device Into a Full Self-Custody Ecosystem appeared first on BeInCrypto .",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "4d3a6619ed0e0450b6f6",
      "protocol": "OpenAI's Rogue AI Agents Were Probing Hugging",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/378446/openai-rogue-agents-hugging-face-two-months-before-hack"
      ],
      "firstSeen": "2026-09-16T20:31:03.000Z",
      "updatedAt": "2026-09-17T05:16:27.770Z",
      "summary": "An independent researcher found the agents hijacked Hugging Face accounts and mapped the platform's defenses as early as May 13—activity OpenAI's own incident report never fully described.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ce1c326c2e34e67eb8ba",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Malware",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "medium",
      "confidence": 0.8,
      "sourceUrls": [
        "https://decrypt.co/378401/hackers-hbo-max-reddit-account-crypto-malware",
        "https://www.diariobitcoin.com/criptomonedas/hackers-toman-control-de-la-cuenta-verificada-de-hbo-max-en-reddit-para-distribuir-malware/"
      ],
      "firstSeen": "2026-09-16T17:06:02.000Z",
      "updatedAt": "2026-09-16T18:50:30.388Z",
      "summary": "Attackers ran 108 malicious ads through the streaming service’s verified account, directing users to fake software downloads.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Hackers Hijack HBO Max’s Reddit Account to Spread",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "17fa6a7392b4038452c8",
      "protocol": "Celsius",
      "chain": "Bitcoin",
      "technique": "Market event",
      "lossUsd": null,
      "status": "review",
      "severity": "low",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/celsius-sues-bitmex-for-495-million-just-11-days-before-exchange-shutdown/"
      ],
      "firstSeen": "2026-09-16T13:20:18.000Z",
      "updatedAt": "2026-09-16T14:51:35.167Z",
      "summary": "Celsius Network’s bankruptcy estate has sued BitMEX over a 2020 liquidation cascade it says cost more than 6,360 Bitcoin. The complaint, filed Sept. 12 in the US Bankruptcy Court for the Southern District of New York, accuses entities behind the crypto derivatives exchange of fraud, market manipulation and wrongful liquidations during Bitcoin’s historic March 2020 […] The post Celsius sues BitMEX for $495 million just 11 days before exchange shutdown appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "69b85bec1b8b3a5ab378",
      "protocol": "Vymopay",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/vymopay-the-no-kyc-alternative-to-crypto-exchange-custody/"
      ],
      "firstSeen": "2026-09-16T13:39:55.000Z",
      "updatedAt": "2026-09-16T14:51:35.167Z",
      "summary": "Most people searching for a no-kyc crypto exchange alternative are not looking for less compliance, they are looking for less exposure. Less counterparty risk. Less reliance on a custodian that could be hacked, frozen, or insolvent when they need their…",
      "revision": 1,
      "lossBasis": "event",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "b7050b05bd7986c1fe72",
      "protocol": "Unattributed",
      "chain": "Ethereum",
      "technique": "Malware",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://crypto.news/kremlin-malware-uses-ethereum-to-update-attack-servers/"
      ],
      "firstSeen": "2026-09-16T12:26:23.000Z",
      "updatedAt": "2026-09-16T14:51:35.167Z",
      "summary": "KREMLIN malware uses malicious Chrome and Edge extensions plus Ethereum smart contracts, with Elastic tracing 1,515 infected hosts, mostly in Brazil.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "KREMLIN malware uses Ethereum to update attack servers",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "505c5b9fa7234441024b",
      "protocol": "Did crypto’s $20 Billion DeFi",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cryptoslate.com/did-cryptos-20-billion-defi-surge-just-get-stolen-by-price-inflation/"
      ],
      "firstSeen": "2026-09-15T18:15:37.000Z",
      "updatedAt": "2026-09-16T00:44:53.099Z",
      "summary": "Stablecoin growth stayed below 6% while ETH and SOL gained more than 32%, leaving the inflow picture unresolved. The post Did crypto’s $20 Billion DeFi surge just get stolen by price inflation? appeared first on CryptoSlate .",
      "revision": 1,
      "lossBasis": "market",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "148be221f9698b7b29c0",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Exploit",
      "lossUsd": null,
      "status": "confirmed",
      "severity": "high",
      "confidence": 0.8,
      "sourceUrls": [
        "https://cryptobriefing.com/balancer-proposes-shutdown-treasury-distribution/",
        "https://thedefiant.io/news/defi/balancer-proposes-shutting-down-and-distributing-treasury-to-bal-holders"
      ],
      "firstSeen": "2026-09-14T20:33:35.000Z",
      "updatedAt": "2026-09-15T00:09:35.706Z",
      "summary": "Balancer's shutdown highlights governance challenges in DeFi, emphasizing the need for adaptive strategies amid financial instability and exploits. The post Balancer proposes shutdown and treasury distribution to BAL holders appeared first on Crypto Briefing .",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Balancer proposes shutdown and treasury distribution to BAL",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown"
      ]
    },
    {
      "id": "639b97dac7f7f370d1e0",
      "protocol": "MetaMask",
      "chain": "Not specified",
      "technique": "Fraud or scam",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/378117/metamask-adds-wallet-protections"
      ],
      "firstSeen": "2026-09-14T14:01:04.000Z",
      "updatedAt": "2026-09-15T00:09:35.706Z",
      "summary": "MetaMask’s latest safeguards flag suspicious transfers and stop transactions that don’t match their previews.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "ea03c0b1031683ce7b32",
      "protocol": "AI Agents Just Slashed the Cost",
      "chain": "Bitcoin",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/377925/ai-agents-slash-cost-quantum-attack-bitcoin"
      ],
      "firstSeen": "2026-09-10T20:34:50.000Z",
      "updatedAt": "2026-09-11T00:00:32.285Z",
      "summary": "The ECDSA.Fail challenge cut a resource benchmark for one component of a potential quantum attack by 86%.",
      "revision": 1,
      "lossBasis": "unknown",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "889beb7db1ac84f59735",
      "protocol": "Unattributed",
      "chain": "Not specified",
      "technique": "Security incident",
      "lossUsd": null,
      "status": "review",
      "severity": "high",
      "confidence": 0.55,
      "sourceUrls": [
        "https://decrypt.co/377889/anthropic-discloses-fourth-claude-hacking-incident-as-debate-around-regulation-grows"
      ],
      "firstSeen": "2026-09-10T15:33:11.000Z",
      "updatedAt": "2026-09-11T00:00:32.285Z",
      "summary": "The company now says attacks during security tests exposed model behavior failures, after initially emphasizing errors in its testing infrastructure.",
      "revision": 1,
      "lossBasis": "unknown",
      "sourceHeadline": "Anthropic Discloses Fourth Claude Hacking Incident as Debate",
      "qualityFlags": [
        "chain-unspecified",
        "loss-unknown",
        "under-review"
      ]
    },
    {
      "id": "e20c7aa6b643e9ae430d",
      "protocol": "Trezor, BitBox",
      "chain": "Multi-chain",
      "technique": "Phishing",
      "lossUsd": null,
      "status": "review",
      "severity": "medium",
      "confidence": 0.55,
      "sourceUrls": [
        "https://cointelegraph.com/news/trezor-bitbox-hardware-wallet-phishing-emails"
      ],
      "firstSeen": "2026-09-10T05:34:21.000Z",
      "updatedAt": "2026-09-10T13:42:26.127Z",
      "summary": "BitBox said multiple Bitcoin companies appeared to have been targeted through a shared newsletter provider, while Trezor confirmed a breach at its email service.",
      "revision": 2,
      "lossBasis": "event",
      "qualityFlags": [
        "loss-unknown",
        "under-review"
      ]
    }
  ]
}