FlagThis - Latest Cybersecurity News

A critical security failure within the Harmony Protocol enabled an unauthorized minting event of 4 billion ONE tokens, precipitating an immediate 30-40% market crash. The exploit targeted the smart contract's minting logic, creating massive circulating supply inflation and immediate dilution for existing holders. There was a significant five-hour window of vulnerability between the initial unauthorized transaction and the deployment of a corrective patch. This incident underscores the systemic risks of centralized minting authorities and the volatility inherent in DeFi-based supply shock events.

Aeternum is a persistent botnet loader that utilizes the Polygon blockchain to implement a decentralized Command and Control (C2) architecture. By embedding encrypted commands and payload locations within smart contracts and blockchain transactions, the threat actor eliminates the need for centralized C2 servers. This methodology renders standard mitigation techniques, such as DNS sinkholing or IP blocking, ineffective. The malware leverages "ClickFix" techniques for C2 domain distribution and blends malicious signaling with legitimate Web3 traffic, ensuring high resilience against law enforcement and security vendor takedown efforts.

Criminal entities have transitioned from opportunistic exploits to an industrialized ecosystem centered on Laundering-as-a-Service (LaaS) infrastructure. This professionalization is marked by a 152-fold increase in specialized laundering activities, designed to exploit the "45-day window"—the critical period before rapid dispersion, chain-hopping, and cross-chain bridging render stolen digital assets effectively untraceable. With $1 billion in assets stolen in the first half of 2026 alone, the velocity of these automated laundering machines is outpacing traditional on-chain forensic investigation speeds, creating a widening gap in asset recovery capabilities and systemic financial risk.

Argentine Federal Judge Marcelo Martinez has mandated an emergency freeze on 25 cryptocurrency wallets linked to a $LIBRA token fraud investigation. The judicial action follows the forensic tracing of millions of dollars across multiple blockchain networks. Authorities are specifically targeting the de-anonymization of wallet holders by integrating on-chain transaction data with KYC (Know Your Customer) datasets provided by centralized exchanges (CEXs). This coordinated effort between the Argentine Federal Judiciary and major exchanges aims to bridge the gap between pseudonymous blockchain activity and real-world identities to facilitate asset recovery and legal prosecution.