Security Incidents

According to Polymarket's official statement, the prediction market platform has denied recent allegations that it suffered a data breach, saying the information being circulated involves public API endpoints and on-chain blockchain data. A hacker using the pseudonym "xorcat" claimed to have

The Hong Kong Monetary Authority (HKMA) issued a public warning on April 28 regarding fraudulent digital tokens circulating under the names of two newly licensed stablecoin issuers. Tokens carrying the tickers "HKDAP" and "HSBC" have appeared in the market without authorization from Anchorpoint

According to Bitcoin.pl, customer data from failed Polish exchange Zondacrypto has been offered for sale on the darknet, with two packages available. The smaller package, containing email addresses and basic identification data, is priced at approximately 550 euros, while the larger set—including

According to Blockaid, Aftermath Finance's perpetual contract protocol on Sui Network suffered an ongoing attack, with approximately $1.1 million USDC stolen through 11 transactions in 36 minutes. The vulnerability stemmed from a fee accounting defect in the perpetual contract liquidation system, wh

According to Manifold researcher Ax Sharma, 30 plugins on ClawHub disguised as legitimate AI tools have been downloaded over 9,800 times while secretly converting users' AI assistants into cryptocurrency workers. The plugins, published under the account imaflytok, appear as routine task schedulers a

Gate News message, April 29 — Ethereum mainnet experienced four smart contract attacks over the past 48 hours (April 27-29), resulting in combined losses exceeding $1.5 million, according to GoPlus Security. The incidents included an attack on the Onchain aggregator contract causing $983,000 in los

Gate News message, April 29 — ZetaChain released a post-mortem report confirming that the April 24 attack exploited vulnerabilities in its cross-chain messaging pipeline. The incident resulted in a total loss of $333,868 (primarily USDC and USDT) across nine transactions on Ethereum, Arbitrum,

Gate News message, April 29 — A U.S. court has sentenced Maximilien de Hoop Cartier, a descendant of the Cartier luxury jewelry family, to eight years in prison for operating an unlicensed over-the-counter crypto exchange. Prosecutors said the operation moved more than $470 million in drug

Gate News message, April 29 — South Korea's Financial Commission decided at its eighth regular meeting to refer two virtual asset market manipulation cases to investigative authorities. The detected manipulation methods combined traditional securities market tactics with API abuse techniques

According to CertiK, Syndicate's Commons bridge—the Ethereum infrastructure platform's official cross-chain bridge—suffered an exploit on Wednesday (April 29), resulting in at least $330,000 in losses. The attacker acquired approximately 18.5 million SYND tokens and sold them for about $330,000, whi

Gate News message, April 29 — Kyber Network hacker Andean Medjedovic is transferring stolen funds to Tornado Cash, according to Arkham's blockchain monitoring data. Medjedovic previously stole $48.8 million from KyberSwap in late 2023 and $16.5 million from Indexed Finance in an earlier

According to posts on dark web forums, Polymarket denied allegations that a hacker stole over 300,000 customer records and 10,000 user profiles. The platform stated that the data referenced by the attacker was already publicly accessible through its open APIs and on-chain blockchain records, not the

根據 a16z Crypto 於 4 月 29 日發布的研究報告，AI 代理在配備結構化領域知識的條件下，重現以太坊價格操縱漏洞的成功率達 70%；在無任何領域知識的沙盒環境中，成功率僅為 10%。報告同時記錄了 AI 代理獨立繞過沙盒限制存取未來交易資訊的案例，及代理在建立多步驟可盈利攻擊方案時的系統性失敗模式。

根據 Polymarket 於 4 月 29 日在 X 貼文，網路安全帳號 Dark Web Informer 指控去中心化預測市場平台 Polymarket 遭到入侵，超過 30 萬筆記錄及一個漏洞利用工具包被洩露至網路犯罪論壇；Polymarket 隨即在 X 聲明否認，表示所有鏈上數據公開可審計。

Gate News message, April 29 — Slow Mist detected a malicious transaction exploiting a vulnerability in an EIP-7702 account, resulting in the loss of 1,988.5 QNT (approximately 54.93 ETH) from a QNT reserve pool. The vulnerability stemmed from a structural flaw in the reserve pool's access

根據區塊鏈安全審計機構 CertiK 於 4 月 28 日發布的報告，反洗錢（AML）執法已取代證券違規認定，成為加密公司面臨的首要監管威脅。報告顯示，美國司法部和金融犯罪執法網絡（FinCEN）在 2025 年上半年共開出 9 億美元的 AML 相關罰款；同期，美國證券交易委員會（SEC）加密資產罰款年跌 97%。

Gate News message, April 29 — Bitcoin spot ETFs recorded net outflows of $89.68 million yesterday (April 28), with BlackRock's IBIT leading losses at $112 million. Ethereum spot ETFs saw net outflows of $21.8 million, with BlackRock's ETHA accounting for $13.17 million of the decline. Meanwhile, Mi

根據印度網路犯罪協調中心（I4C）於 4 月 28 日發布官方警示，針對 Trust Wallet 用戶的「錢包竊取」詐騙案件持續增加，攻擊者透過偽造「加密資產驗證」步驟誘騙用戶向惡意智能合約授予錢包權限，資金隨即被自動化腳本轉出。I4C 表示，上述詐騙案件的增長趨勢，源於國家網路犯罪舉報入口網站收到的投訴數量激增。

香港金融管理局（HKMA）於 4 月 28 日發布官方公告，指出市場上出現使用「HKDAP」或「HSBC」為代號的代幣，上述代幣並非由持牌穩定幣發行人發行，亦與相關持牌發行人無任何關聯。根據 HKMA 同日公告，兩名持牌穩定幣發行人——碇點金融科技有限公司及香港上海匯豐銀行有限公司——均已聲明未發行任何受監管穩定幣。