Relying solely on VASP licenses and superficial compliance policies isn’t enough.

According to CertiK Alert monitoring, Slurpycoin on BSC has suffered a flash loan attack. The attacker manipulated the token price using a buyback mechanism and made a profit of about $3,000 from sandwich arbitrage. This attack is also responsible for the $10,000 loss of MRP tokens on July 2.

On December 19th, the European police organization collaborated with law enforcement agencies from six countries to dismantle an international drug trafficking group that used cryptocurrency. The operation resulted in the arrest of 9 suspects. During the operation, valuable items including gold and luxury goods, €35,000 in cash, and €25 million in cryptocurrency (equivalent to $26.23 million) were seized. The total value of assets seized was €27 million, equivalent to $28.33 million.

scammers are forging support emails from hardware wallet manufacturer Ledger, in order to trick users into sharing their seed phrases under the guise of checking for security vulnerabilities. Ledger users have reported that phishing scammers are forging support emails from the cryptocurrency hardware wallet provider in order to trick users into revealing their wallet keys.

official X account of the artificial intelligence startup company Anthropic was hacked this morning and an unknown token contract address was posted. The tweet has since been deleted. Anthropic stated that the root cause of the unauthorized post on the account has been identified and confirmed that no Anthropic system or service was compromised or involved in this incident.

the Economic and Financial Crimes Commission (EFCC) of Nigeria raided a cryptocurrency scam center in Lagos on December 10th, arresting 792 suspects, including 148 Chinese citizens and 40 Filipino citizens. The organization primarily targeted North American and European users for Ponzi schemes, forcing victims to transfer funds for false cryptocurrency plans and other non-existent projects.

On December 17th, Chain analyst ZachXBT revealed that LastPass attackers launched attacks on more than 40 victim addresses, stealing approximately $5.36 million in encrypted assets. The attacker then exchanged the stolen funds for ETH and transferred the assets from the Ethereum network to the Bitcoin network through multiple instant exchanges, attempting to conceal the flow of funds.

On December 17th, according to community reports, the on-chain trading tool SolTradingBot was suspected to have been attacked, and some users reported that their funds were stolen. Please be aware of the risks.

According to a report by Cointelegraph, a man in Arizona, USA is suspected of impersonating an Uber driver and stealing $300,000 worth of cryptocurrency. The Scottsdale Police Department has charged Nuruhussein Hussein with pretending to be an Uber driver twice in March and October of this year, and specifically talking to passengers by name to lure them into waiting outside the W Hotel in Scottsdale. Once in the car, Nuruhussein Hussein asked to borrow the passengers' phones, then used them to access their Coinbase accounts and transfer cryptocurrency. Nuruhussein Hussein will appear in court again on December 18th.

23pds, the Chief Information Security Officer of SlowMist, tweeted that the cryptocurrency theft Trojan MacOS Stealer has been open-sourced. Previously, its attack source code was sold for 1 BTC, but now that it is open-sourced, more malicious attackers can easily obtain this tool. This may not only allow attackers to have an attack library at their disposal, but may also give rise to more covert and complex attack methods, posing greater challenges to the security of cryptocurrency assets.