Wallet

Wiz reported on May 27, 2026 that a threat group it tracks as JINX-0164 has been approaching crypto developers on LinkedIn and luring them into fake meeting links that install macOS malware. The campaign is designed to steal credentials and take over CI/CD pipelines, and it includes a confirmed supply-chain incident involving a trojanized npm package version released on April 7, 2026.

A Rust-based infostealer dubbed IronWorm was embedded in 36 npm packages connected to the Arweave/WeaveDB ecosystem, targeting developer credentials, SSH keys, and Exodus wallet files. The malware ran via a preinstall hook during npm install, searched 86 environment variables and 20 credential files, and used stolen GitHub tokens to spread through malicious commits. Security researchers advised anyone who installed the affected packages to rotate exposed secrets and harden npm/GitHub accounts.

Oobit says USDT accounts for nearly all stablecoin transaction volume across most Latin American markets where it operates, including effectively 100% in Bolivia, Peru, and Ecuador. The report also cites Brazil posting 202% activity growth since Oobit launched, with active users averaging 20 transactions per month, and notes the service lets people spend from self-custody wallets at Visa-accepting merchants.

Binance will discontinue NFT support on its centralized exchange on July 3, 2026, requiring users to withdraw transferable NFTs by 00:00 UTC or risk losing access. The exchange said NFT management will move to Binance Wallet, and it will offer 1 USDC to up to 100,000 users who complete eligible non-CR7 withdrawals before June 17, 2026. The move comes as NFT trading volumes fell from nearly $23.8 billion in 2022 to roughly $1.2 billion year-to-date in 2026.

Trezor and Tropic Square disclosed a hardware weakness affecting the TROPIC01 secure element used in the Trezor Safe 7 after Ledger's Donjon team found it during an audit. The issue involves bypassing signature verification via lab-grade laser fault injection, but Trezor says private keys and user funds are not exposed because the chip is only one of three independent security layers. Tropic Square is producing a revised chip batch, while existing devices cannot be fixed through software updates.

Ledger's Donjon security team demonstrated a lab laser technique that can bypass firmware verification on the TROPIC01 chip used in the Trezor Safe 7. Trezor says user funds, backups and private keys are not stored on that chip, and no user action is required. Tropic Square also reported a separate potential issue tied to the chip's MAC-and-Destroy mechanism, with a hardened revision targeted for late 2026 and fuller publication planned for spring 2027.

The Cardano Foundation announced a partnership with the Brazilian Olympic Committee (COB) on June 2, 2026, outlining a three-year plan centered on identity and certification, fan engagement, equipment tracking, and governance and transparency. The collaboration is intended to apply AI, blockchain, and IoT to sports administration, boost institutional transparency, and expand engagement with athletes, coaches, and fans. The foundation said the process began with a first executive workshop last week, with institutional pilots expected next.

Crypto exploits and scams led to about $68.3 million in losses across 60 confirmed incidents in May 2026, with $9.38 million later returned. Verus and Thorchain were the largest single events at $11.52 million and $10.12 million, while phishing contributed roughly $2.6 million. Code vulnerabilities dominated the breakdown at $45.13 million, followed by wallet compromises at $13.77 million.

Cyble reports that an Android banking trojan dubbed OverlayPhantom is targeting more than 180 banking, financial and cryptocurrency apps across 10 countries. The malware is spread via malicious URLs that mimic trusted apps, then shows convincing fake in-app screens to steal PINs and other credentials and enable account takeover.

Americanfortress has rolled out a beta of its compliance-oriented privacy infrastructure on Arbitrum, adding stealth-address tooling and name-based transfers aimed at institutional and high-volume DeFi use. The company says Arbitrum holds more than $15 billion in total value locked, and the beta includes a “Receive on Arbitrum Privately” campaign that will grant the first 500 eligible participants a lifetime FortressName.