Hacker Wakes After 2 Years, Deposits $5.4M Into Tornado Cash

U.S. sanctions Cambodian officials’ billion-dollar scam resort! Tether freezes more than $344 million in USDT

The U.S. Treasury Department and the Department of Justice have recently launched a joint law enforcement action targeting “pig butchering” romance scams involving cryptocurrencies that have become increasingly rampant in Southeast Asia. In an official announcement, the government has imposed sanctions on Cambodian Senator Kok An and 28 individuals and entities within his criminal network, accusing them of using political influence and their network of casino compounds to shelter large-scale fraud and human trafficking activities. Estimates indicate that these scam operations have led to losses for U.S. residents of as much as $10 billion in a single year. In conjunction with this crackdown, the stablecoin issuer Rether has also frozen more than $344 million in digital assets involved in the case. Romance “Pig Butchering” scams: U.S. residents lose over $10 billion in a single year In recent years, multinational criminal organizations based in Southeast Asia have made extensive use of the scam method known as “Pig Butchering.” Scammers will, through social media or messaging apps, spend months

U.S. Army Soldier Arrested for Using Classified Intel to Bet on Maduro's Capture on Polymarket

Gate News message, April 24 — The U.S. Department of Justice has arrested active-duty Army soldier Gannon Ken Van Dyke, 38, on charges of using confidential information to place bets on Polymarket, a prediction market, regarding former Venezuelan President Nicolás Maduro's capture. Van Dyke particip

Zondacrypto Exchange Faces Allegations of Misappropriating $350 Million, CEO Publicly Denies

One of Poland’s largest cryptocurrency exchanges, Zondacrypto, announced on April 16 via social media that its CEO, Przemysław Kral, said the exchange could not access a wallet holding 4,503 bitcoins, worth more than $350 million in current value. Kral published the address of the wallet in question to rebut allegations of misappropriation, but this disclosure immediately triggered a large-scale withdrawal.

Bitwarden CLI malicious npm package exposed, encrypted wallets face risk of theft

Misty Fog Chief Information Security Officer 23pds forwards a warning from the Bitwarden security team. The Bitwarden CLI 2026.4.0 version had an npm version that had been tampered with—where a malicious package was distributed through npm—within a 1.5-hour window from 5:57 PM to 7:30 PM Eastern Time on April 22, and that version has been withdrawn. Bitwarden has officially confirmed that password vault data and production systems were not affected.

JPMorgan Chase: KelpDAO bug wipes out $20 billion in DeFi TVL, institutional appeal damaged

A J.P. Morgan research team led by analyst Nikolaos Panigirtzoglou released a report on April 23 stating that persistent security vulnerabilities and stagnant total locked value (TVL) are weakening DeFi’s appeal to institutional investors. The report emphasized that the KelpDAO vulnerability wiped out roughly $20 billion worth of DeFi TVL within days, exposing structural risks.

Slow Mist Alert: North Korean hacker group recruits and tricks Web3 developers, stealing 12 million in 3 months

SlowMist, a security organization, has issued an emergency alert. North Korea’s Lazarus organization’s subsidiary, HexagonalRodent, is launching attacks against Web3 developers, using social engineering tactics such as high-paying remote positions to lure developers into executing skill assessment code that includes malicious software backdoors, ultimately stealing crypto assets. According to an Expel investigation report, in the first three months of 2026, the loss amount reached $12 million.