News Center
Pump.fun Transfers $5.83M in SOL to Kraken
SOLPump.funKraken
Google's PageBreak Uncovers Over 500 XSS Flaws in Its Own Web Apps
Google revealed that its AI security agent, PageBreak, has discovered more than 500 cross-site scripting (XSS) vulnerabilities across its own web applications, including some sensitive domains, though the company did not disclose which apps were affected or how severe the flaws were. Launched as a pilot in November 2025 and promoted to a full project in January 2026, PageBreak relies on models like Gemini 3.1 Pro and 3.5 Flash to scan for bugs, then uses an independent verifier to inject JavaScript payloads and confirm whether each flaw is actually exploitable, keeping false positives near zero. Google also plans to integrate PageBreak more tightly with CodeMender, which can automatically generate fix code.
2026-09-25
Google Built an AI That Hunts Down Its Own Security Bugs
Google has unveiled PageBreak, an internal AI agent built by its product security team to automatically find and verify real vulnerabilities in its own web apps. Unlike typical AI scanners, it only reports a flaw after confirming it through actual exploitation, keeping false positives near zero. It has already uncovered over 500 XSS bugs and is set to work alongside CodeMender, an automated patching agent. The article also touches on the flood of low-quality AI-generated vulnerability reports and the growing buzz around AI in security.
2026-09-25
£10K Reward Offered After UK Couple Attacked in Crypto Home Invasion
A couple in the West Midlands, UK, were forced to transfer a large amount of cryptocurrency to attackers' wallets after three men broke into their home, with a fourth directing the operation remotely via video call. Police believe it was a premeditated, targeted robbery, and Crimestoppers is offering up to £10,000 for information. CertiK data shows home invasions became the dominant form of physical attacks on crypto holders in the first half of 2026, with 52 incidents recorded and about $124.1 million involved.
2026-09-24
FBI Crypto Forum Tackles Scams, Hacks, and North Korean Threats
The FBI hosted its ninth Virtual Assets Technical Exchange in San Antonio, bringing together hundreds of investigators, foreign law enforcement partners, and crypto security experts to address rising digital asset fraud, hacking, and state-sponsored cyber threats. FBI data shows crypto-related complaints caused over $11 billion in losses in 2025, while Chainalysis estimates sanctioned entities received $104 billion in crypto that year, up 694% year-over-year. TRM Labs reports North Korea-linked crypto theft reached $643 million in the first half of 2026. Topics included terrorist financing, scams, human trafficking, and violent attacks targeting crypto holders.
2026-09-24
Binance Backs Zilliqa's EVM Migration as Legacy ZIL Network Shuts Down
Zilliqa is retiring its legacy transaction system and migrating to Zilliqa EVM after a Schnorr signature vulnerability in the Ledger app exposed 6,772 accounts and led to at least 683 million ZIL being stolen. Binance will support the migration, moving users' ZIL from the old mainnet to the EVM network at a 1:1 ratio and handling the technical process on their behalf. Deposits and withdrawals on the old network have been suspended since August 5, and only EVM network transactions will be supported once the migration is complete. Spot, futures, and Earn products are unaffected. Self-custody users will migrate through a separate zero-knowledge proof-based process.
ZILLedger vulnerabilitySchnorr signaturesecurity incident2026-09-23
French Family Held Hostage for Hours as Attackers Demand €40,000 in Crypto
Four masked men broke into the home of a 40-year-old crypto industry IT worker in Vendin-le-Vieil, northern France, tying up the family of four for over three hours. They beat the father and forced him to hand over crypto access codes, stealing roughly €40,000 (about $46,000) in digital assets. The 12-year-old daughter was struck in the face with a car key. Police are investigating it as an organized kidnapping and extortion case; all four suspects remain at large. France has recorded over 70 crypto-related kidnapping and unlawful confinement cases in the first eight months of 2026.
2026-09-21
Crypto Worker's Family Held Hostage in French 'Wrench Attack,' $46K Stolen
In Vendin-le-Vieil, northern France, four masked men broke into a crypto IT worker's home before dawn, bound the family of four with tape, beat the father, and forced him to hand over account access, stealing about €40,000 (~$46,000) in crypto. His 12-year-old daughter was struck in the face with a car key. The suspects remain at large. France leads the world in such attacks, with over 70 crypto-related kidnappings and unlawful confinements recorded in the first eight months of 2026.
2026-09-21
Crypto Executive Tied Up in French Home Invasion, €40,000 Stolen: Report
French police are hunting four suspects after a crypto professional and his family were held captive for over three hours at their home in Vendin-le-Vieil, northern France. The attackers forced him to hand over access codes and stole about €40,000 in cryptocurrency. The father managed to alert police, prompting the suspects to flee by car. France has recorded 77 crypto-related kidnapping and confinement cases so far this year through July. Police have not released the suspects' identities or said whether the stolen assets were recovered.
2026-09-20
Polymarket Hit by Alleged $10M Stolen-Card Fraud Scheme
The Wall Street Journal reports that Polymarket's U.S. operation was hit by a large-scale card fraud in February, with criminals linking stolen debit cards to thousands of accounts in an attempt to make at least $10 million in illicit deposits and bets. Payment processor Checkout.com rejected over 80% of its deposits at the February peak, far above the industry norm of about 1%. Employees reportedly raised compliance concerns to CEO Shayne Coplan, who was said to prioritize growth. Polymarket says fraud rates have since returned to normal after tighter card controls and an expanded compliance and risk team.
2026-09-20
North Korean Hackers Stole 7,000 Crypto Wallet Records, Japan Says
Japan's National Police Agency reported on September 18 that WaterPlum, a North Korea-linked hacking group also known as the "Contagious Interview" threat campaign, infected over 30,000 devices across more than 100 countries and regions between December 2025 and July 2026, stealing more than 7,000 crypto wallet records. The affected wallets received at least 1.7 billion yen (about $10.7 million). Posing as crypto, AI, and NFT companies, the attackers lured developers through social media and job platforms with fake interviews and coding tests that delivered malware. Japanese and U.S. authorities have linked the group and some North Korean IT workers to Bureau 313 of the Workers' Party of Korea's Munitions Industry Department. Japan also dismantled a laptop farm used for remote job applications.
2026-09-18