Crypto hack stories fall into three kinds: a protocol exploit, an exchange breach and a user-level drain. The first two lose money from shared pools. The third affects one wallet.

How to read an exploit report

Check how much was taken, whether funds were frozen or returned, which contract flaw was used, and whether users must act. We link to the on-chain transaction when it is public.

Wallet drains

Drains almost always start with a signature the user approved on a fake site. Revoke token approvals regularly and keep long-term funds on a hardware wallet.

Where to follow it

All current incidents are in Web3 Watch.

North Korea and Lazarus

US investigators have attributed several of the largest crypto thefts to groups linked to North Korea, often referred to as the Lazarus Group. The 2025 Bybit theft, about 1.5 billion dollars in Ether, was attributed to them by the FBI.

How the attacks work

The groups often target people rather than code: fake job offers, malicious files and compromised signing tools give them access to keys.

How funds are laundered

Stolen coins are swapped across chains, split across many wallets and moved through mixers and fast exchanges. Exchanges and tracing firms then freeze what they can.

Our reporting

Incidents and attribution updates are in Web3 Watch.

Crypto airdrop news and scams

An airdrop gives free tokens to users who used a product early or meet some other rule. Real airdrops are announced by the project through official channels.

Safety rules

  • Never share your seed phrase. No real airdrop asks for it.
  • Use only the claim link posted on the project’s verified site or account.
  • Be wary of any airdrop that needs you to approve a token spend.

Why scams cluster around airdrops

Scammers copy the project site and send links through direct messages. A wallet drainer can empty your account with a single signature.

Latest hack and exploit stories

Questions readers ask

Can stolen crypto be recovered?

Sometimes, when an exchange freezes it quickly or a hacker returns it for a bounty. Often it is not.

Is attribution certain?

Attribution is by investigators and can change. We state who made each claim.

Are airdrops taxable?

In many countries they are, at the market value when received. Ask a local tax adviser.