CRIME [t3]

⚠️ Revolut faces extortion after attackers leak customer KYC data, demand 10,000 BTC ransom (source)

⚠️ Spiral suffers $38K exploit after Uniswap V4 spot price manipulation bypasses same-block swap guard via multiple EOAs (source)

⚠️ Revolut allegedly leaks user data including ID documents, bank statements, and Bitcoin records, targeting high-net-worth individuals (source)

⚠️ Revolut discloses data breach with passports, bank statements and Bitcoin transaction records leaked, affecting customers holding crypto assets and financial data. (source)

⚠️ ORB exploited for $32.6k due to reentrancy in ORBCore addPoolAndSell function enabling tax-free sell-offs and reserve manipulation (source)

⚠️ Blockstream refuses ransom after 85% of stolen Liquid BTC returned, 598.5 BTC still missing (source)

⚠️ Ether.fi loses ~15.45 ETH due to missing access control in AtomicQueue.solve(), allowing attacker to abuse victim's pre-existing ERC-20 approvals (source)

⚠️ OMNI404 exploited for 2.4 WETH due to NFT mint/burn accounting flaw in transfer function (source)

⚠️ Symbiosis.Fi exploited on BSC: attacker mints ~46.1B syBTC, dumps 4.39 WBTC on Ethereum (source)

⚠️ Brevo login flaw enabled phishing email targeting 347K Trezor subscribers (source)

⚠️ Trezor Reveals Another Data Breach After Scammers Target Marketing Platform (source)

⚠️ Trezor warns of phishing emails after third-party email provider breach (source)

⚠️ Osmosis: Nomic chain suffers nBTC double-spend exploit, 22.65 BTC frozen in attacker's address (source)

⚠️ EnsoBuild exploited for ~5.6 ETH due to oracle price calculation error in DPI Strategy Vault using flawed UniV3 TWAP implementation with reused fee parameter as secondsAgo, enabling manipulation via low-liquidity pools (source)

⚠️ Missing access control in order factory drains ~24.7 ETH via unauthorized buyer account manipulation (source)

⚠️ WealthManagementV2 exploited for 26,414 USDT after owner privileges hijacked, enabling inflated interest minting (source)

⚠️ Router vulnerability exploited, attacker drains 62.28 BNB by spoofing V3 Pool and abusing transferFrom via unsafe callback (source)

⚠️ Liquid Network white hats return 3,400 BTC ($315.36M), keep 598.5 BTC ($47.38M) (source)

⚠️ Liquid recovers 3,400 BTC after on-chain negotiations; white hats retain 598.5 BTC from $320M hack (source)

⚠️ Coldcard hacker moves 45% of stolen Bitcoin (source)