Is Crypto a Security? The 2026 Guide to US Digital Asset Law (Part One)

This research report originates from a multi-part series titled Law and Ledger, which examines one of the most important and unsettled questions in digital-asset law: when, and under what circumstances, crypto falls within the reach of U.S. securities regulation. Written by: Michael Handelsman and Alex Forehand for Kelman.Law This research report contains five additional sections. … Read more

Polymarket Suffers $700K Breach After Internal Admin Wallet is Compromised

Blockchain investigator ZachXBT first pointed to a possible hack, indicating that $520K were drained so far. Polymarket acknowledged the security event and stressed that it was taking action after the compromise of an alleged private key, explaining that user funds were safe. Polymarket Faces Security Event: No User Funds Affected Polymarket, one of the largest … Read more

KuCoin In The Spotlight For Alleged Complicity In Illicit Crypto Flows, Victim Appeals To ZachXBT

A cryptocurrency user, whose assets were stolen, has reignited the debate around user exchange culpability by offering $100,000 to blockchain investigator ZachXBT as a public bounty for finding his stolen funds. He claims 15 years of savings all vanished from a Trust Wallet account and were transferred to KuCoin which has been accused of ignoring … Read more

GitHub Worm Hits npm Packages With 16M Downloads

A self-replicating worm that hijacks GitHub Actions pipelines to publish malicious npm packages has struck again, compromising AntV, echarts-for-react, and Microsoft’s durabletask SDK. Mini Shai-Hulud Exploits GitHub Actions to Hit 16 Million Weekly Downloads The Mini Shai-Hulud campaign, attributed to the threat group Team PCP, does not work the way most supply chain attacks do … Read more

Echo Protocol Pauses Monad Bridge After Admin Key Breach Sparks $816K Loss

Decentralized finance platform Echo Protocol suffered a security breach on its Monad network deployment after an attacker compromised an administrative key. Liquidity Limits Prevent Massive Losses Echo Protocol, a decentralized finance ( DeFi) platform focused on bitcoin liquidity, was hit by a security exploit on Monday, May 18, after an attacker compromised an administrative key … Read more

Layerzero Discloses RPC Poisoning Incident Linked to $292M KelpDAO Hack

The cross-chain communication protocol Layerzero Labs disclosed on Friday that its internal infrastructure was compromised by North Korean hackers and a simultaneous DDoS attack during the KelpDAO breach. Layerzero Labs Apologizes for Lazarus Group Security Breach Response Layerzero Labs issued a candid apology for a three-week communication silence following a security breach involving the Lazarus … Read more

Binance Launches ‘Withdraw Protection’ as Crypto Wrench Attacks Rise 75%

Binance has rolled out a new safety feature called ‘Withdraw Protection,’ letting users freeze outgoing transfers from their accounts for up to seven days, a direct response to a global surge in violent physical attacks targeting crypto holders. Key Takeaways: Binance launched ‘Withdraw Protection’ on May 4, offering users a provision to block outgoing transfers … Read more

Ripple Shares DPRK Threat Data on Fraud Domains, Wallets, Campaigns

Ripple will share DPRK-linked threat intelligence with Crypto ISAC to help crypto firms screen applicants, contractors, and vendors. The program covers fraud domains, wallets, and compromise indicators tied to active campaigns. Key Takeaways: Ripple will provide Crypto ISAC members intelligence on DPRK-linked fraud domains, wallets, and campaigns. Security teams can use enriched identity signals to … Read more

Binance Launches Withdrawal Lock Feature to Block Forced Fund Transfers

Binance added Withdraw Protection to block on-chain withdrawals for one to seven days, targeting forced crypto transfers during in-person coercion. The feature keeps trading and account access available while delaying outgoing transfers by default. Key Takeaways: Binance introduced Withdraw Protection to block on-chain withdrawals during user-selected lockdown windows. Coercion risks can bypass passwords, 2FA, and … Read more

ZachXBT Flags Polyarb as Fake Prediction Market With an Active Wallet Drainer

Onchain investigator ZachXBT has warned that Polyarb, a site presenting itself as a prediction market platform, is running an active wallet drainer and is gaining reach through prominent crypto accounts replying to its posts. Key Takeaways: ZachXBT warned on May 4, 2026, that Polyarb hosts an active wallet drainer targeting crypto users. Prominent accounts replying … Read more

You have not selected any currencies to display