TrapDoor Malware Targets Crypto Developers Through Fake Open-Source Packages
Socket Security researchers uncovered TrapDoor Malware, a supply-chain attack targeting crypto and AI developers through malicious open-source packages. The campaign affected npm, PyPI, and Crates.io ecosystems while attempting to steal credentials, wallet data, and developer access tokens.
How an Old Private Key Triggered the Polymarket Exploit
Polymarket said a compromised internal wallet caused the recent exploit on Polygon, not a breach of its core contracts. Investigators traced losses between $573,000 and $700,000, while questions remain about legacy wallet management and operational security controls.
MoneyGram Takes Validator Role on Stripe-Backed Tempo Network
TL;DR
The MoneyGram–Tempo partnership will make the remittance company an anchor validator on Tempo, a stablecoin-focused blockchain incubated...
IG Europe Chooses Bitpanda to Scale Crypto Infrastructure
Bitpanda partnered with IG Europe to expand institutional crypto infrastructure services across Europe. The agreement highlights growing demand among regulated financial firms for compliant digital asset access as Bitpanda continues scaling its enterprise business ahead of a reported IPO exploration.
Unauthorized eBTC Mint Pressures Echo Token and DeFi Markets
Echo Protocol paused cross-chain transactions after an attacker minted roughly 1,000 unauthorized eBTC on its Monad deployment. While the unauthorized supply was valued near $76.7 million, researchers said the realized extraction appeared far smaller. The incident has renewed scrutiny around DeFi bridge security and privileged access controls.
