Found 9894 news
Security researchers linked a new “Mach-O Man” malware kit to a Lazarus campaign that uses fake meeting invites and ClickFix prompts to steal credentials and access corporate systems on macOS. Security researchers have linked a new macOS malware campaign to the Lazarus Group, the North Korea-linked hacking operation behind some of the crypto industry’s biggest thefts. Flagged on Tuesday, the new “Mach-O Man” malware kit is distributed via “ClickFix” social engineering schemes across traditional businesses and crypto companies, according to Mauro Eldritch, offensive security expert and founder of threat intelligence company BCA Ltd. Victims are lured into a fake Zoom or Google Meet call where they are prompted to execute commands that download the malware in the background, allowing attackers to bypass traditional controls without detection to gain access to credentials and corporate systems, the security researcher said in a Tuesday report. Read more
The exchange set maker fees at 0% and taker fees at 0.02% across all pairs, extending near-zero pricing to all users with no volume tiers or subscription requirements. Update (April 22 7:49 PM UTC): This article has been updated to reflect the relationship between Binance.US and Binance in the eighth paragraph. Binance.US has reduced spot trading fees to 0% for makers and 0.02% for takers across all trading pairs, extending near-zero pricing to all users without volume thresholds or subscription requirements. The new pricing replaces the platform’s tiered fee structure and applies to all accounts, with the company saying the move could reduce trading costs by as much as 98% compared with competitors such as Coinbase. Read more
Aave’s supplied balance has tanked since the Kelp DAO bridge exploit, as users pull funds amid uncertainty over how much of the rsETH-linked shortfall the protocol will ultimately absorb. Aave, the largest decentralized lending protocol, has seen around $15 billion in deposits withdrawn since the Kelp Dao exploit on Saturday. Total value supplied to Aave fell from $45.8 billion on Saturday to $30.8 billion on Wednesday, according to Aavescan data. The decline followed an attack that drained about 116,500 restaked Ether (rsETH), worth roughly $293 million, from Kelp DAO’s LayerZero-powered rsETH bridge. The exploiter then used part of the stolen funds to borrow on Aave. Read more
The Financial Conduct Authority has raided eight locations suspected of illegal peer-to-peer crypto trading, issuing cease-and-desist orders. The United Kingdom’s Financial Conduct Authority (FCA) has raided multiple sites suspected of running illegal peer-to-peer (P2P) crypto trading operations. The financial services and markets watchdog said Wednesday that it worked alongside HM Revenue & Customs and the South West Regional Organised Crime Unit to inspect eight locations linked to illegal crypto trading. Officials issued cease-and-desist notices on site, ordering operators to halt activity immediately, while gathering evidence tied to ongoing criminal investigations. “Unregistered peer-to-peer crypto traders operating in the UK are doing so illegally and pose a financial crime risk,” Steve Smart, the FCA’s executive director of enforcement and market oversight, said. Read more
Smaller crypto companies across Europe face mounting compliance costs as MiCA moves from framework to enforcement, raising fears of market consolidation. The European Union’s Markets in Crypto Assets Regulation (MiCA) transition period is entering its final stretch, forcing smaller crypto firms across the EU to either secure authorization quickly or prepare to shut down regulated services. The transitional period ends across the bloc on July 1, after which any crypto asset service provider operating without a MiCA license must stop serving EU clients. Early movers like United Kingdom-based exchange CoinJar, which said it secured MiCA authorization in Ireland in 2025, call the regime a necessary maturation that rewards compliance-first players, but founders in markets like Poland warn thousands of virtual asset service providers (VASPs) could fall off a regulatory cliff as deadlines hit. Companies face a hard stop of July 1 for the longest 18-month grandfathering window, with some national regimes already clos...
Russian lawmakers passed a first reading of a bill regulating crypto through licensed intermediaries, with key rules set to take effect in July 2026 and 2027. Russia’s lower house of parliament passed a bill in first reading on Tuesday that would create the country’s core legal framework for digital currency, moving Moscow closer to a system that channels crypto trading through licensed intermediaries under Bank of Russia oversight. The draft bill No. 1194918-8, titled “On Digital Currency and Digital Rights,” passed its first reading in the State Duma on Tuesday, according to official records. The bill would allow Russians to buy and sell crypto through approved intermediaries as early as July, while banning unlicensed crypto platforms beginning in July 2027, if the draft becomes law. Read more
DPRK-linked crypto theft topped $578M in April after the Kelp DAO exploit, as attacks continue to expand across protocols, companies and end users. Kelp DAO suffered a $292 million hack on Saturday, overtaking Drift as the largest crypto exploit of the year so far. North Korea-linked hackers are suspected to be behind the attack. Kelp DAO said Monday that the exploit stemmed from a failure of cross-chain messaging protocol LayerZero’s infrastructure. LayerZero said the breach was enabled by Kelp DAO’s use of a single verifier configuration to approve cross-chain messages. LayerZero said that “preliminary indicators” attributed the exploit to TraderTraitor, a subgroup of North Korea’s state-backed hacking unit known as Lazarus Group. Read more
SEC Chair Paul Atkins says the SEC is “on the cusp” of an innovation exemption to enable compliant onchain trading of tokenized securities. US Securities and Exchange Commission Chair Paul Atkins said the agency is nearing the release of an exemption that would allow market participants to trade tokenized securities onchain within a compliant framework. Speaking at the Economic Club of Washington on Tuesday, Atkins said the SEC is close to introducing what he described as an exemption aimed at enabling limited activity in tokenized markets while the agency develops longer-term rules. “We are on the cusp of releasing what I call an ‘innovation exemption,’ which will provide market participants with a cabined framework to begin facilitating the trading of tokenized securities onchain in a compliant fashion as the Commission works toward long-term rules of the road,” he said. Read more
Bitcoin’s technical indicators predicted a significant move ahead for BTC, but the price must first break resistance at $80,000. Bitcoin (BTC) could see further upside volatility as several technical indicators suggested the BTC price was due for a “powerful“ upward move. Key takeaways: Bitcoin’s Bollinger Bands indicator now sees the potential for a massive price breakout. Read more
Coinbase legal chief Paul Grewal says the company removed New York’s prediction markets lawsuit to federal court, setting up a sharper fight over CFTC authority and state gambling laws. Coinbase’s chief legal officer, Paul Grewal, said Wednesday that the company had removed New York Attorney General Letitia James’ prediction markets lawsuit from state court to federal court, arguing that the case turns on disputed questions of federal law over how event contracts are regulated. The move escalates a legal fight that could help define whether prediction markets fall under federal commodities regulation and the scope of the US Commodities and Futures Trading Commission’s (CFTC) or state gambling laws, with broader implications for the oversight of platforms like Coinbase and Gemini. “We have removed this action to federal court,” wrote Grewal in a Wednesday X post, adding that New York’s claims raise “disputed and substantial questions of federal law” and are subject to “complete preemption.” Read more
Bitcoin price metrics saw a broad recovery in April, but analysis warns that the 2022 bear-market breakdown could still repeat. Bitcoin (BTC) price metrics are showing relief this month, but the risk of repeating the 2022 bear market remains. Key points: Bitcoin’s Bull Score Index combined price metric reaches its highest levels since October last year. Read more
Volo Protocol has confirmed a $3.5 million exploit affecting select vaults, adding that it has frozen assets and started fund recovery efforts amid ongoing investigation. Decentralized finance (DeFi) protocol Volo has disclosed a security breach that resulted in the loss of approximately $3.5 million in digital assets, marking the latest incident in a series of exploits targeting DeFi platforms. In a Wednesday post on X, the team said the attack affected select vaults and involved assets including Wrapped Bitcoin (WBTC), Matrixdock Gold XAUm and USDC (USDC). “We detected the attack, immediately notified the Sui Foundation and ecosystem partners to contain the damage, and froze the vaults to prevent any further exposure,” the team wrote. The protocol added that around $28 million in total value locked across other vaults is safe, with the exploit limited to three isolated vaults and no shared vulnerability identified. It also revealed plans to absorb the losses rather than pass them on to users, though details...
Uzbekistan has created a supervised crypto mining zone in Karakalpakstan, allowing foreign sales while requiring proceeds to flow through local bank accounts. Uzbekistan has created a special crypto mining zone across Karakalpakstan under a presidential resolution signed on Friday, opening a supervised framework that lets approved mining companies sell mined digital assets on foreign platforms while keeping the proceeds inside the country’s banking system. A presidential decree effective Monday creates the “Besqala Mining Valley,” a special mining zone across the Republic of Karakalpakstan, where registered legal entities can carry out crypto mining, use a mix of power sources and apply for resident status through a new directorate under the republic’s Council of Ministers. The framework gives miners in the zone the right to sell crypto assets obtained through mining on national crypto exchanges or foreign platforms, including through direct contracts, and to exchange them for other liquid crypto assets. Stil...
Stratiphy is reopening a tax-free route to crypto ETNs in the UK after HMRC’s ISA rule change left retail investors with little practical access. UK fintech platform Stratiphy launched a new offering with a practical, tax-free route back into crypto exchange-traded notes (ETNs) for UK investors after a series of regulatory shifts effectively shut them out. In October 2025, the Financial Conduct Authority lifted its four-year ban on retail access to crypto ETNs tied to assets like Bitcoin (BTC) and Ether (ETH). These products could initially be held in standard stocks-and-shares Individual Savings Accounts (ISAs), offering tax-free exposure. However, that changed at the start of the new tax year, when HM Revenue & Customs ruled that new purchases of crypto ETNs would no longer qualify for those ISAs. Instead, eligibility was limited to Innovative Finance (IF) ISAs, a niche wrapper typically used for peer-to-peer lending, and no platform offered both, resulting in a dead end for investors seeking access. Read m...
HackerOne, one of the largest bug bounty platforms in the world, reported there were 85,000 valid bounty submissions in 2025, up 7% from the previous year. Crypto protocols have warned that an increase in AI use has led to a flood of bogus bug bounty submissions, putting a strain on teams trying to identify real threats to their protocols. Bug bounties are a system to reward “good” hackers for submitting reports about potential vulnerabilities and are popular in the crypto industry. AI has now made it easier to sift through large amounts of code to find possible bugs, though AI is also known to hallucinate. “AI is changing the way that bug bounty programs must operate,” said Barry Plunkett, co-CEO of Cosmos Labs, on Tuesday, responding to a bug bounty hunter who accused the protocol of ignoring their vulnerability report. Read more
Umbra has shut down its front end to stop hackers, but says it can’t stop the use of its smart contracts or another version of its open-source front end. Privacy-focused crypto protocol Umbra said it has taken down its front-end website to make it more difficult for hackers who have been using it to move funds from recent “high-profile hacks.” Umbra posted to X on Tuesday that it is aware that around $800,000 worth of stolen funds were moved via its protocol. It added that it made the decision to move the hosted version of its front end into maintenance mode and would restore it “as soon as we are assured that doing so won't create obstacles to the current recovery efforts.” Read more
According to reports, Kalshi plans to launch crypto perpetual futures, expanding beyond prediction markets as regulated derivatives offerings in the US continue to evolve. Prediction market exchange Kalshi is reportedly preparing to expand into cryptocurrency trading by introducing perpetual futures contracts, marking a major shift beyond its core event-based derivatives business. In a Tuesday report, The Information cited people familiar with the matter as saying Kalshi plans to offer perpetual futures — commonly known as “perps” — on cryptocurrencies such as Bitcoin (BTC). Perpetual futures are a type of derivative contract that allows traders to speculate on price movements without an expiration date. Read more
Tempo announced the integration of ”stablecoin-powered payment infrastructure” with DoorDash, Stripe, Paradigm, Coastal Bank and ARQ. DoorDash plans to offer its users, “dashers” and merchants the option to use stablecoins in their transactions with the food delivery app, according to the Tempo blockchain. In a Tuesday notice, Tempo said that together with DoorDash, it was “building stablecoin-powered payment infrastructure” in a move for its delivery drivers, also known as “dashers,” merchants, and users to settle transactions using digital currency. The blockchain cited payout speed, lower cross-border cost and transaction flexibility in its reasons for the integration, expected to apply to users in more than 40 countries. “If we can get merchants and Dashers their money faster, and do that in a way that's affordable for them, that's a no-brainer for the entire ecosystem,” said DoorDash co-founder Andy Wang. Read more
With a CFTC greenlight expected soon, industry momentum is building for the derivative contracts still only available to non-US investors. Blockchain.com has rolled out perpetual futures trading in its non-custodial DeFi wallet, allowing users to open leveraged positions directly from self-custodied Bitcoin used as collateral without transferring funds to an exchange. According to Tuesday’s announcement, the feature is routed through decentralized derivatives exchange Hyperliquid and gives users access to more than 190 crypto markets with up to 40x leverage. Perpetual futures are derivative contracts that allow traders to take leveraged positions on an asset’s price without an expiration date. Michael Selig, chair of the Commodity Futures Trading Commission (CFTC), said last month that the derivatives regulator plans to allow the contracts in the coming weeks. Read more9894 items