Wallet

On 20 December 2025, a crypto user mistakenly transferred nearly $50 million in USDT to a scam-controlled wallet by copying a spoofed address from their transaction history. Investigators describe this as an address poisoning attack, where the malicious address closely mimicked a legitimate one, leading the victim to send a successful test payment before moving the full amount. Analysts note that the incident is part of a wider rise in onchain losses and highlights how behavioral exploits can bypass technical safeguards.

In 2025, Dfinity Foundation vice president Lomesh Dutta told Cointelegraph that AI-powered no-code apps on decentralized blockchains could weaken AWS cloud dominance and cut dependence on centralized servers. AWS outages in April and on Oct. 20 disrupted Binance, KuCoin, MEXC and Coinbase for about 15 hours, highlighting the gap between crypto’s decentralization narrative and its underlying infrastructure.

On December 20, 2025, a crypto investor mistakenly sent $50 million in USDT to a poisoned address. Within 30 minutes, the funds were swapped to DAI and then 16,690 ETH, with 16,680 ETH routed through Tornado Cash; on-chain timestamps show a 0.005 USDT test and the large transfer minutes apart.

On December 20 2025, cybersecurity firm Kaspersky detailed a new infostealer malware called Stealka that is being distributed through pirated mods and cheats for Roblox and other Windows games. The malware targets browser data, crypto wallet extensions, standalone wallet apps, password managers, 2FA tools, and messaging and VPN clients to capture credentials and digital assets. Kaspersky reported detections mainly in Russia with cases also seen in Türkiye, Brazil, Germany, and India, and urged users to avoid unofficial mods, secure their accounts, and limit sensitive data stored in browsers.

A long-inactive Ethereum pre-mine address holding 2,000 ETH, valued at about $5.9 million, has moved again after more than a decade. The tokens were acquired during the first 14 days of the 2014 sale at a fixed rate of 2,000 ETH per 1 BTC, with the buyer paying exactly 1 Bitcoin (around $600). Other large wallets also reactivated on Dec. 1 and Dec. 10.

On Dec. 19, 2025, Binance Alpha plans to delist nine tokens, including the FROG memecoin, following a recent review that found they no longer meet its standards. The tokens will be removed from the platform's featuring list at 7:00 a.m. (UTC), while eight spot trading pairs on Binance will be delisted at 3:00 a.m. (UTC). Binance has also rolled out Web3 Loan via Binance Wallet and introduced recurring send options for Binance Pay and crypto withdrawals.

Bitcoin does not store encrypted secrets on-chain, so a quantum computer would target signature forgery on revealed public keys rather than "decrypt" the ledger. The near‑term levers are public‑key exposure and wallet behavior, while migration to quantum‑resistant spending paths is a protocol and UX challenge rather than an immediate crisis.

Intercontinental Exchange is in discussions to take a stake in MoonPay as part of a new funding round that could value the crypto payments company near $5 billion. MoonPay has been expanding into regulated custody via a New York Limited Purpose Trust Charter and broadening partnerships, while ICE builds its digital asset footprint through Bakkt, Polymarket and Chainlink.

Kraken said Thursday that xStocks, a tokenized securities platform it backs, is now live on TON Wallet, the self-custodial wallet integrated with Telegram. At launch, the service will be accessible in nearly all markets where TON Wallet operates, but not in the U.S., the European Union, or Australia, according to Egor Danilov.

On December 18, 2025, PeckShield reported a crypto whale’s 1-of-1 multisignature wallet was compromised and about $27.3 million was stolen. Etherscan data showed the drainer moving 4,100 ETH in 100 ETH batches through Tornado Cash, and PeckShield said roughly $2 million in liquid assets remained under the attacker’s control.