The 15 biggest crypto exploits of H1 2026 revealed. See how hackers stole nearly $1B using compromised keys and cloud breaches.

CertiK recently released the CertiK Hack3D: H1 2026 Report, a data-driven analysis of Web3 security incidents from January through June 2026. Across 344 incidents, the ecosystem lost $1.3 billion, ...

CertiK's H1 2026 Hack3d report finds $1.32B lost across 344 incidents — down 47% on paper, but roughly 28% higher than H1 ...

Nightmare Eclipse Zero-Days: Three zero-day vulnerabilities disclosed by Nightmare Eclipse, complete with exploit code, were patched in the June 2026 update. RoguePlanet Release: Nightmare Eclipse ...

How I stopped a massive WordPress spam attack with 4,700 lines of code in two days - thanks to Codex and Claude ...

North Korean threat actors are escalating the PolinRider supply chain attack across Go, Packagist, and npm package ...

The $292 million KelpDAO bridge exploit in April and the Humanity Protocol private key theft in June were already suspected ...

A newly disclosed macOS infostealer exploits Apple's own authentication framework to silently confirm that a stolen password actually works before exfiltrating it — a technique that leaves fewer ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal ...

Breaches don't always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier ...