Web3 Security Weekly News Review — October 5–11, 2026
A hardware wallet's distribution channel — not its chip — leaked the seed phrases of hundreds of users for the better part of $90M, and the stolen stablecoins went straight for…
Weekly review of 10-20 important Web3/security events, classified and verified against a source whitelist.
A hardware wallet's distribution channel — not its chip — leaked the seed phrases of hundreds of users for the better part of $90M, and the stolen stablecoins went straight for…
A vault with no named owner lost $6M to a whitelist entry, a swap protocol got its $3.8M back in 36 hours with a public ultimatum, and the exchange breached for $387.5M finished…
A $20K governance vote took over a chain's applications, an exchange lost $387.5M without a single private key being stolen, and the costliest month of 2026 got that way in seven…
Two signing keys drove the week's damage — a prepared list worked for six days, and a bridge minted from a compromised key — while the other failures shared one shape, a check…
A quiet dollar week with a loud pattern: three unbacked-mint failures on Bitcoin wrappers in six days, two settlement-layer checks that were never made, plus Tether's $39.27M…
The largest Bitcoin-sidechain incident of the year defines the week: 3,998.5 unbacked L-BTC minted via a cache-key collision, pegged out within minutes, mostly returned on-chain…
10 events; ~$33.8M realized; two price-manipulation lending attacks define the week and the month — plus a chain rollback that reversed $111.2M.
9 whitelist-sourced events; ~$22.2M realized losses; a $8.5M governance takeover takes the headline while a shared-infrastructure bug spreads across six Cosmos EVM chains.