# Hack Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Hack", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

All about why blockchain firms will now become part of U.S Treasury’s cybersecurity program

The U.S. Department of the Treasury has launched a new initiative through its Office of Cybersecurity and Critical Infrastructure Protection (OCCIP) to include blockchain and crypto firms in a cybersecurity program. This move aims to share timely cyber threat intelligence to help these firms prevent and respond to attacks. The announcement comes amid ongoing security challenges in the crypto industry, highlighted by incidents like the 2026 Drift Protocol attack, which resulted in approximately $285 million in losses and was linked to state-backed cyber operations. The article underscores that security vulnerabilities remain a critical systemic risk in crypto, capable of triggering prolonged market downturns, as seen during the 2022 crash following the collapse of FTX. By providing early warnings and fostering coordinated risk management, the Treasury’s program seeks to strengthen institutional confidence and reduce the likelihood of future large-scale market disruptions.

ambcrypto04/10 23:02

All about why blockchain firms will now become part of U.S Treasury’s cybersecurity program

ambcrypto04/10 23:02

A $280 Million Lesson! The 2026 DeFi Security Guide to Avoiding Pitfalls

"DeFi Security Lessons from a $280M Hack: A 2026 Guide to Avoiding Pitfalls" The rapid growth of DeFi has turned it from a niche interest into a mainstream pursuit for high yields. However, this comes with significant risks, highlighted by a major attack on Solana's Drift Protocol in April 2026, resulting in losses between $220-$285 million. This event underscores that in DeFi, users bear full responsibility for their assets. Most losses occur during normal operations through common vulnerabilities: 1. **Excessive Token Approvals**: Granting unlimited contract permissions can lead to complete asset drainage. 2. **Phishing Websites**: Fake sites mimic legitimate projects to steal wallet credentials. 3. **Contract Exploits**: Code vulnerabilities allow hackers to legally drain funds. 4. **Rug Pulls**: Malicious projects withdraw liquidity, causing tokens to crash. The guide outlines five essential pre-interaction checks: 1. **Contract Security**: Verify contracts are open-source and audited by firms like CertiK. Avoid unaudited or newly deployed contracts. 2. **Authorization Management**: Avoid unlimited approvals; use minimal permissions and regularly revoke unused allowances via tools like revoke.cash. 3. **Official Access Points**: Bookmark official sites from trusted sources (e.g., project Twitter/Discord) to avoid phishing scams, which cause over 60% of losses. 4. **Abnormal Yields**: Extreme APYs (e.g., stablecoins >20%) often signal scams. Compare rates to established protocols like Aave. 5. **Asset Segregation**: Use a multi-wallet system (hot, DeFi, cold) to isolate assets and prevent total loss from a single breach. Additional risks include insider threats from developers or employees with privileged access. Psychological biases (e.g., FOMO) and AI-powered phishing make users susceptible. Core principles: never grant unlimited approvals, avoid unknown links, and diversify investments. Security is not optional but a fundamental requirement in DeFi.

marsbit04/08 00:06

A $280 Million Lesson! The 2026 DeFi Security Guide to Avoiding Pitfalls

marsbit04/08 00:06

Solana Tries To Turn Fear Into FOMO — Can STRIDE Really Stop The Next $300M Rug?

The Solana Foundation has launched a new security initiative called STRIDE (Solana Trust, Resilience and Infrastructure for DeFi Enterprises) in collaboration with Asymmetric Research. This framework is designed to continuously assess and oversee the security of projects built on Solana through an eight-pillar system, with results made public. Alongside STRIDE, the Solana Incident Response Network (SIRN) was introduced—a coalition of security firms focused on threat intelligence and coordinated responses to hacks. These efforts follow a recent $286 million exploit on the Drift Protocol and represent a shift toward continuous, foundation-funded security monitoring rather than one-time audits. While these measures may help restore trust, new exploits on unaudited protocols could still face severe market reactions.

bitcoinist04/07 21:01

Solana Tries To Turn Fear Into FOMO — Can STRIDE Really Stop The Next $300M Rug?

bitcoinist04/07 21:01

Solana rolls out ‘STRIDE,’ a DeFi-wide security push after $285 mln Drift breach

In response to the $285 million Drift protocol hack, the Solana Foundation has launched a comprehensive, two-tiered security initiative called STRIDE (Solana Trust, Resilience, and Infrastructure for DeFi Enterprises). This program will proactively evaluate, monitor, and escalate security issues for DeFi projects with over $10M in total value locked (TVL), setting new security standards and requiring independent audits. For protocols with over $100M TVL, the Foundation will support formal security checks. A second layer, the Solana Incident Response Network (SIRN), unites security firms to react to active threats. The move aims to rebuild trust and prevent future incidents, with early data showing investor liquidity on Solana remained stable despite the recent breach.

ambcrypto04/07 09:17

Solana rolls out ‘STRIDE,’ a DeFi-wide security push after $285 mln Drift breach

ambcrypto04/07 09:17

DeFi loses $169M in Q1 as Circle pushes for quantum security – Details

DeFi security in Q1 saw $169 million lost across 34 protocols, primarily to operational weaknesses rather than cryptographic failures. Key compromises and permission errors accounted for a majority of attacks, with 63% linked to access control issues. While immediate threats remain execution-based, long-term quantum risks are gaining attention. Circle is proactively adopting Post-Quantum Cryptography (PQC), and new chains like Arc are building quantum-resistant features natively to avoid future upgrade challenges. Legacy chains, however, face slow adoption due to scalability and coordination hurdles, with significant value still locked in incumbent systems. The market currently prioritizes liquidity and usability, delaying broader PQC transition despite rising future threats.

ambcrypto04/07 03:58

DeFi loses $169M in Q1 as Circle pushes for quantum security – Details

ambcrypto04/07 03:58

Drift Protocol incident uncovered: Did ‘negligence’ lead to the $285M loss?

Drift Protocol's $285 million hack underscores a critical industry lesson: security cannot be sacrificed for scalability. This incident, potentially linked to the same group behind the 2024 Radiant Capital hack, reveals a meticulously planned attack where perpetrators posed as a legitimate firm to gain trust. In response, Drift froze protocol functions and collaborated with law enforcement, though market confidence remained shaken. The timing is significant, as Solana recently tested quantum-resistant upgrades that slowed the network by 90%, highlighting the inherent trade-offs between security and performance. Public scrutiny has intensified, with some labeling the breach "civil negligence," signaling a shift in the 2026 cycle toward prioritizing security, accountability, and quantum-threat preparedness over mere scalability.

ambcrypto04/06 20:17

Drift Protocol incident uncovered: Did ‘negligence’ lead to the $285M loss?

ambcrypto04/06 20:17

‘Beyond code errors’ – How Drift Protocol’s $285mln drain shifts DeFi security bar

The Drift Protocol exploit, resulting in a $285 million loss, marks a significant shift in DeFi security threats, moving beyond simple code errors to sophisticated attacks on governance and operational control layers. The attacker used pre-signed transactions and manipulated a multi-signature mechanism to gain admin access rapidly. This incident underscores that security now depends more on protecting protocol operations and user assets than solely fixing smart contract bugs. Drift’s response demonstrated the critical role of fast crisis management—halting deposits and withdrawals quickly, coordinating with security partners, and providing transparency—which helped contain cross-protocol risks and maintain market confidence. The event reflects a broader trend in DeFi, where attackers increasingly target access and control mechanisms. This has elevated the importance of operational security, prompting protocols to compete not only on yield but also on their ability to manage risk, protect capital, and respond effectively during crises. Industry data shows a growing focus on security investments, such as signer rotation and emergency controls, as key factors in building resilience and trust.

ambcrypto04/06 05:03

‘Beyond code errors’ – How Drift Protocol’s $285mln drain shifts DeFi security bar

ambcrypto04/06 05:03

‘The Circle USDC Files’: ZachXBT Finds $420M In Suspect Transactions, Weak Oversight

On-chain investigator ZachXBT's report, "The Circle USDC Files," alleges over $420 million in compliance failures by Circle related to its stablecoin USDC since 2022. The report claims Circle repeatedly failed to use its on-chain freezing and blacklist functions to halt stolen funds in high-profile DeFi exploits, despite having the contractual right and technical capability to do so. Notable cases include the April 2026 Drift Protocol hack ($280M) and the January 2026 SwapNet attack ($16M), where Circle allegedly delayed or refused freeze requests from law enforcement and analysts. Compared to other stablecoin issuers, Circle was significantly slower to act, taking months longer to freeze addresses in some instances. ZachXBT argues this pattern of inaction has caused nine-figure losses to the crypto ecosystem.

bitcoinist04/04 11:02

‘The Circle USDC Files’: ZachXBT Finds $420M In Suspect Transactions, Weak Oversight

bitcoinist04/04 11:02

ZachXBT flags $420m in alleged USDC compliance lapses, raising questions over Circle’s enforcement

A report by ZachXBT alleges over $420 million in USDC compliance lapses by Circle since 2022, raising questions about the effectiveness of its enforcement. The report, published on April 3, highlights cases where USDC linked to hacks or illicit activities was not frozen or faced significant delays. Key examples include the $280 million Drift Protocol exploit, where $232 million in USDC was moved without freezing, and historical incidents like the $223 million Cetus Protocol and $110 million Mango Markets exploits. While Circle has compliance tools to freeze funds, the report questions their consistent application, especially in fast-moving, cross-chain scenarios. The findings could pressure stablecoin issuers to prove real-time enforcement as regulators advance oversight frameworks.

ambcrypto04/03 17:02

ZachXBT flags $420m in alleged USDC compliance lapses, raising questions over Circle’s enforcement

ambcrypto04/03 17:02

‘Circle had 6 hours to freeze funds’ – ZachXBT slams CEO after DRIFT hack

In the past 24 hours, Drift Protocol on Solana suffered a $285 million hack, including the theft of Circle’s USDC. Blockchain investigator ZachXBT accused Circle of failing to freeze $230 million in stolen USDC that was bridged from Solana to Ethereum via CCTP, despite having a 6-hour window to act. He criticized Circle and its CEO Jeremy Allaire for incompetence, alleging they use compliance buzzwords without real implementation. The hack impacted 11 protocols, with Ranger Finance losing $900K. Although Solana’s Chief Product Officer called it an isolated incident, the event raised broader DeFi security concerns. Circle’s stock extended its decline, with indicators showing oversold conditions and continued selling pressure.

ambcrypto04/02 12:53

‘Circle had 6 hours to freeze funds’ – ZachXBT slams CEO after DRIFT hack

ambcrypto04/02 12:53

活动图片

Hot Categoriesright-arrow

Hot Tagsright-arrow

Market Analysisright-arrow