Twenty malicious packages impersonating the Hardhat development environment used by Ethereum developers are targeting private keys and other sensitive data. Collectively, the malicious packages have ...

A malicious Python Package Index (PyPI) package named "set-utils" has been stealing Ethereum private keys through intercepted wallet creation functions and exfiltrating them via the Polygon blockchain ...

The social recovery tool requires users to have first transferred all their assets to an invoker contract, which will perform all future transactions for the user. Ethereum users may no longer need to ...

The Ethereum Foundation published a roadmap for implementing on-chain privacy features, a layer-1 (L1) smart contract ...

On May 26, 2025, a crypto investor fell victim to a series of onchain phishing attacks. Crypto compliance firm Cyvers announced that the victim lost a total of $2.6 million worth of cryptocurrencies.