February 21, 2025. A sophisticated attack compromised Bybit's multisig cold storage signing process. The exchange's own security team unknowingly authorized the transfer. This report examines the timeline, the method attributed to the Lazarus Group, and the broader implications for exchange security architecture.
A factual overview of how prominent individuals and state actors have interacted with cryptocurrency in 2025–2026, based on public records and corporate disclosures.
Corporate Holdings: Tesla disclosed a $1.5 billion Bitcoin purchase in 2021. SpaceX's balance sheet reportedly includes an estimated 18,712 BTC (valued at ~$1.16B by mid-2026), held as a long-term treasury asset.
Platform Integration: In April 2026, X (formerly Twitter) rolled out "Smart Cashtags" — a feature that auto-links ticker symbols to integrated brokerage partners. The feature generated $1 billion in trading volume within 3 days of launch, demonstrating the reach of social media-driven trading behavior.
Context: Corporate treasury diversification into Bitcoin and social platform brokerage integration represent two distinct models of institutional crypto adoption. Public filings provide transparency into these strategies.
Disclosure Overview: June 2026 financial filings revealed $1.4 billion in crypto-related earnings across multiple ventures. The $TRUMP meme coin, launched in January 2025, generated over $636 million in transaction fees through built-in fee structures.
Token Performance: The $TRUMP token declined approximately 97% from its all-time high. Public data shows significant retail participation during the decline. The World Liberty Financial (WLF) token launch in September 2025 raised $515 million.
Regulatory Context: The administration's GENIUS Act establishes a regulatory framework for stablecoins. WLF's upcoming USD1 stablecoin is positioned within this legislative context. The intersection of public policy and private business is documented here for transparency.
National Strategy: Since legalizing mining in 2019, Iran has developed a state-supported crypto infrastructure, using subsidized energy resources for Bitcoin mining operations. The country's crypto ecosystem reached $7.8 billion in 2025 according to blockchain analytics firms.
Scale of Operations: IRGC-linked addresses accounted for a significant portion of national crypto inflows by Q4 2025. These operations use Bitcoin and USDT to conduct international trade outside the traditional SWIFT banking system.
International Response: In July 2026, the U.S. Treasury's OFAC sanctioned 4 Tron addresses linked to Iran's Central Bank. Tether froze over $131 million in USDT associated with these addresses, demonstrating the enforceability of sanctions on "decentralized" stablecoins.
A digest of major blockchain events from 2025–2026, covering exchange security incidents, protocol exploits, and social engineering campaigns.
A sophisticated phishing attack compromised Bybit's multisig cold wallet signing process. The incident is attributed to the Lazarus Group and represents the largest exchange security breach by reported value.
X rolled out "Smart Cashtags" in April 2026, auto-linking ticker symbols to brokerage partners. The feature generated $1B in trading volume within 72 hours. SpaceX continues to hold 18,712 BTC as a treasury asset.
June 2026 financial disclosures reveal over $1.4B in crypto-related earnings. The $TRUMP token declined 97% from peak. WLF raised $515M. The GENIUS Act provides regulatory clarity for upcoming USD1 stablecoin.
State-sponsored mining operations use subsidized energy. $3B in crypto moved through IRGC-linked addresses in 2025. U.S. Treasury sanctioned 4 Tron addresses. Tether froze $131M USDT.
Former Singapore Naval Diving Unit captain Teo Rong Xuan stole $1.7M in USDT after taking a photo of a victim's seed phrase written on paper. The case highlights physical security vulnerabilities in crypto asset storage.
A scammer impersonating a senior UK law enforcement officer convinced a Bitcoin investor to enter their seed phrase on a spoofed website. $2.8M transferred in minutes. Police confirmed they never request seed phrases.
Attackers compromised a Ledger Discord moderator account and posted a fake security alert, directing users to a phishing site requesting 24-word recovery phrases. The incident underscores the risks of community platform security.
The most sophisticated wallet drainer remains operational. Uses a service model where operators receive 20-30% of affected funds. 30,000+ wallets affected across multiple chains. Still active as of 2026.
Attackers sent a forged Zoom invitation posing as project partners. The victim signed a "permit" transaction granting delegated authority. $27M moved in minutes. A case study in DeFi social engineering.
Ethereum's Pectra upgrade (May 2025) introduced EIP-7702. Within weeks, scammers bundled malicious approvals into routine transactions. Largest single loss: $2.54M. Combined with Permit approvals, these signature abuses account for 38% of major incidents.
A collection of notable blockchain transactions, security advisories, and protocol risk disclosures from public on-chain data, updated July 2026.
A wallet inactive since 2014 transferred 2,400 BTC (worth ~$156M) to Binance. The coins were originally mined in 2010. The transaction is publicly visible on the Bitcoin blockchain.
A contract exploiting Uniswap's Permit2 approval system has been identified. Users who signed what appeared to be routine token approvals granted the attacker spending authority. 1,200+ wallets affected on Ethereum and BSC.
The U.S. Department of Justice, working with the FBI and Europol, seized approximately $344 million in cryptocurrency from Russian exchange Garantex, accused of laundering over $96 billion in illicit funds. The exchange admin was arrested in India.
Combined data from Scam Sniffer and SlowMist shows 38% of major crypto security incidents in 2025-2026 involved malicious "permit" or "increaseAllowance" signatures. Users sign one routine-looking transaction and unintentionally grant spending authority.
A viral rumor about Binance's solvency triggered a withdrawal wave. In 24 hours, users withdrew $320M more than deposits — the largest net outflow since the FTX collapse in 2022. On-chain data later confirmed the rumor was unfounded.
An unknown entity withdrew 15,000 ETH from Coinbase in batches over 3 days, totaling $39M. The address has no prior transaction history. Speculation includes institutional accumulation or sovereign wealth fund activity.
A vulnerability in a popular cross-chain bridge allowed unauthorized withdrawals from users who had previously approved the contract. Arbitrum, Optimism, Base, and Polygon were affected. The bridge was paused after $12M was drained.
A chronological record of major blockchain events throughout 2025 and into 2026.
The $TRUMP meme coin launched with built-in transaction fees. Public data shows the token declined 97% from peak while generating $636M in fees for the issuing team.
Centralized exchange Phemex suffered a major breach, with attackers draining approximately $85 million from the platform's hot wallets.
Attackers compromised Bybit's multisig cold wallet signing process using a sophisticated phishing attack. The incident is attributed to the Lazarus Group.
Attackers exploited a flaw in Bitget's internal market-making bot logic, triggering and front-running abnormal quotes to drain approximately $100 million.
Hackers took over a Ledger Discord moderator account and posted a fake security alert, directing users to a site requesting 24-word recovery phrases.
Weeks after Ethereum's Pectra upgrade enabled EIP-7702, scammers began bundling malicious approvals into single signatures, leading to millions in losses.
BigONE exchange's hot wallet was compromised, resulting in the loss of 120 BTC, 350 ETH, 7.1M USDT, and millions in other tokens across multiple blockchains.
A user was tricked into signing a malicious "permit" transaction during a fake Zoom meeting, granting attackers delegated control over $27 million in DeFi assets.
The DeFi platform World Liberty Financial launched its governance token, raising $515M. The project's upcoming USD1 stablecoin is positioned within the GENIUS Act framework.
Former Navy diver Teo Rong Xuan sentenced for housebreaking and stealing $1.7M in crypto after photographing a victim's seed phrase written on paper.
U.S. Treasury sanctioned 4 Tron addresses linked to Iran's Central Bank. Tether froze over $131M in USDT, demonstrating stablecoin enforceability in geopolitical contexts.
Notable statistics from blockchain security incidents and market events in 2025-2026, compiled from public reports.
In the world of blockchain, information is the foundation of security. Understanding what has happened is the first step toward understanding what could happen.