Security Incidents

PANews February 15 News, according to Bitcoin News, attacks on Bitcoin holders in France are accelerating. Since 2017, France has recorded 47 attacks targeting Bitcoin holders, with 38 of them occurring in the past 13 months. The vast majority of these incidents have happened recently, indicating that crimes against cryptocurrencies are escalating rapidly.

A kidnapping case occurred in Tucson, Arizona. Nancy, the 84-year-old mother of NBC anchor Savannah Guthrie, was forcibly taken on February 1st. The kidnappers demanded a ransom of $6 million in Bitcoin. Although Bitcoin appears anonymous, it is actually traceable, and the FBI has offered a $100,000 reward to assist with the investigation. Subsequently, a fake ransom letter appeared, complicating the case further. The investigation is ongoing, and Nancy's whereabouts remain unknown.

On February 1st, Nancy, the mother of well-known host Savannah Guthrie in Tucson, Arizona, went missing. Authorities believe she was kidnapped. The case has garnered widespread attention, with the kidnappers anonymously demanding Bitcoin ransom. The FBI has intervened in the investigation and is urging the public to provide any information.

In brief Figure confirmed a data breach, saying that an employee was tricked in a social engineering attack. Stolen files allegedly include names, addresses, dates of birth, and phone numbers, per a report. The publicly traded lender says it is offering free credit monitoring to

The cryptocurrency market has experienced significant fluctuations recently. Blockfills has temporarily suspended customer deposits and withdrawals due to liquidity pressure, although certain transactions can still be conducted. As a liquidity platform serving multiple institutions, its suspension has raised market concerns, reminiscent of the 2022 crypto winter. Backed by strong shareholders, whether Blockfills can resume normal operations smoothly in the future remains to be seen.

South Korean authorities reported that 22 bitcoin, valued at $1.5 million, were missing from a cold wallet after being surrendered during a 2021 investigation. An audit in 2026 revealed the funds were transferred without physical breach, raising concerns about cryptocurrency custody protocols.

A dormant hacker wallet from the 2023 Mixin exploit transferred $3.85 million in Ethereum to Tornado Cash. The Mixin hack caused a $200 million loss. Mixin plans to repay affected users $23 million by September 2026, but continues operations with $1 billion in assets.

_Figure probes customer data breach as hackers leak files, adding to rising crypto fraud and identity crime concerns._ Figure Technology, a blockchain-based lending company, has confirmed a data breach following a social engineering attack. Hackers gained access after tricking an employee and st

Israeli Defense Forces reservists and civilians have been charged for placing bets on military secrets on Polymarket,涉嫌 insider trading. This incident highlights the risks of unfair competition and insider involvement in prediction markets, especially in sensitive areas like war. It calls for potential future regulation to prevent similar issues.

Figure Tech breached after an employee fell for a scam; ShinyHunters leaked 2.5GB of sensitive data. Step Finance lost $29M in SOL after hackers accessed treasury wallets, cause remains unclear. Social engineering and AI scams are rising, threatening both tech firms and crypto platforms a

On February 14, former Ripple Chief Technology Officer and current Honorary CTO David Schwartz reiterated that XRP has no issuer, so in cases of theft or scam, no one can freeze, revoke, or recover these tokens. This statement was made in response to a recent "LP Reward Coupon" NFT scam, which resulted in a major liquidity provider’s wallet funds being transferred out and sparked widespread discussion in the community about the XRP Ledger’s recovery features. The first to disclose this was X platform user Apex589, who pointed out that a liquidity provider suffered losses after receiving suspicious NFTs. Subsequently, GTFXRP added that the affected address belongs to a venture capital firm and called for the situation to be directly reported to David Schwartz. Some users asked whether losses could be recovered through XRPL’s recovery mechanism, but Schwartz responded that only assets with an issuer can be recovered, and since XRP is a native asset with no issuer, it cannot be recovered.

The Brave research team released a report indicating that the blockchain transaction authorization system zkLogin has three inherent vulnerabilities related to external document dependencies, authentication document conversion, and trust centralization, which pose privacy and governance risks. These issues stem from architectural flaws rather than cryptographic breaches.

David Schwartz, Ripple's CTO, clarified that the "Clawback" feature cannot reverse fraudulent transactions involving XRP after a security incident within the GTF community. He emphasized that XRP is not a recoverable asset since it lacks an issuing account, distinguishing it from other tokens on the XRP Ledger that can be subject to Clawback mechanisms.

Vương Tiễn

Recently, a liquidity pool on the BSC chain was attacked, with approximately 422,000 USDC being withdrawn. The attacker exploited a vulnerability in the OCA token through three transactions, ultimately profiting about $340,000. The attack also involved bribing block builders.

Investors in Missouri, USA, filed a lawsuit in federal court accusing Trump ally Steve Bannon and his company of defrauding investors through unregistered cryptocurrencies, claiming they concealed risks while promoting "Let's Go Brandon Coin" and "Patriot Pay," resulting in losses for thousands of investors. The plaintiffs are seeking compensation.

Blockchain lending platform Figure confirms a customer data breach caused by an employee falling victim to social engineering attacks. Figure is working with cybersecurity experts to investigate and strengthen system security, while advising affected customers to monitor their accounts for unusual activity. The hacker group ShinyHunters claims responsibility for this incident and has released the stolen data.