Web3 Security Weekly News Review — October 5–11, 2026
A hardware wallet's distribution channel — not its chip — leaked the seed phrases of hundreds of users for the better part of $90M, and the stolen stablecoins went straight for…
Articles tagged Private Keys
A hardware wallet's distribution channel — not its chip — leaked the seed phrases of hundreds of users for the better part of $90M, and the stolen stablecoins went straight for…
The week's number was one incident: a reseller channel that leaked seed phrases for the better part of $86M. Strip it out and the other five events total under $14M — the same…
The seed phrase was read off the screen before the buyer ever used the device, and the stolen dollars pivoted to the one stablecoin that has no kill switch — the week's two facts…
The wallets were never hacked — they were shipped compromised. A chip behind the screen read the words as they appeared, and the one precaution that matters in self-custody…
A vault with no named owner lost $6M to a whitelist entry, a swap protocol got its $3.8M back in 36 hours with a public ultimatum, and the exchange breached for $387.5M finished…
Every dollar lost this week sat in the glue — an allowlist, a Safe module, a hook, a deposit rail — and for the first time in this column's coverage, a public ultimatum brought…
A $20K governance vote took over a chain's applications, an exchange lost $387.5M without a single private key being stolen, and the costliest month of 2026 got that way in seven…
The week's losses came from the layer above the keys: an exchange backend that could forge transactions, a governance process that could reassign contract admins, and a rollup…
Two signing keys drove the week's damage — a prepared list worked for six days, and a bridge minted from a compromised key — while the other failures shared one shape, a check…
The week's largest loss needed no exploit at all: a list of keys, an app that kept signing with them, and six days in which nobody stopped it. The rest of the damage came from an…
10 events; ~$33.8M realized; two price-manipulation lending attacks define the week and the month — plus a chain rollback that reversed $111.2M.
~$33.8M realized losses across 9 loss events (plus one data breach tracked separately), up 52% week-over-week; price manipulation dominates and a rollback changed what the…
9 whitelist-sourced events; ~$22.2M realized losses; a $8.5M governance takeover takes the headline while a shared-infrastructure bug spreads across six Cosmos EVM chains.