Dunamu, which operates the Upbit exchange, is competing with at least six other firms to become South Korea’s official custodian for seized bitcoin as the National Police Agency seeks to prevent further mishandling of confiscated crypto. The winner will partner with the agency under a 267 million won ($179,000) contract to hold and manage digital assets taken in criminal investigations, according to procurement records posted on the government’s KONEPS platform. Local South Korean media reports said other bidders include custody and blockchain firms such as KDAC-Korbit and BDACS.

A faith-based coalition delivered a letter signed by 82 Catholic leaders to Senate Majority Leader John Thune and Minority Leader Chuck Schumer urging opposition to Section 604 of the CLARITY Act. The group said the provision’s DeFi carve-out would create dangerous anti-money-laundering gaps that traffickers could exploit.

Cardano users reported losing ADA and NFTs after an attacker gained access to private keys tied to the SecondFi wallet. The incident stems from compromised private keys, allowing the attacker to drain affected wallets.

SecondFi reported a wallet-generation vulnerability on 23 June that exposed private keys used to create Cardano (ADA) wallets, opening a path for unauthorized access. The exploit was linked to losses of roughly 16 million ADA, worth about $2.4 million. Further investigation suggested SecondFi may have lost up to 129 million ADA after other tokens and NFTs were also exposed. The incident has fueled broader concerns about user trust in the platform.

Three cryptocurrency wallets made a combined $24.25 million profit on World Cup prediction markets before sending the proceeds to the same Binance deposit address, raising questions over whether a single trader controlled the accounts. On June 21, blockchain analytics platform Lookonchain identified the wallets as mintblade, GRIMDRIP, and EndlessFate. The shared funding route suggests a potential link between the accounts, but it does not establish who operated them or whether any nonpublic information was involved, Lookonchain said.

The Ethereum Foundation has proposed “clear signing” standards aimed at replacing blind signing and making wallet approvals easier to understand. The guidelines would present Web3 transactions in human-readable summaries rather than raw hexadecimal data. The goal is to reduce the risk of phishing scams that trick users into authorizing malicious transactions.

Microsoft warned of malware that spreads via USB flash drives by using Windows shortcut files to infect devices. The so-called “clipper” malware looks for cryptocurrency addresses copied to a user’s clipboard and replaces them with attacker-controlled addresses. The alert came from the Microsoft Defender team, Windows’ built-in security tool.

A New York Supreme Court dispute involving 39,069 bitcoin wallet addresses shifted again this week after attorney Ian R. Cohen opposed a bid to lift a court-ordered stay. Onchain data also showed billions of dollars’ worth of bitcoin moving from addresses listed in the lawsuit. The case, ABC Company, XYZ Company, and Noah […]

A newly identified Android banking trojan is targeting 217 banking and cryptocurrency apps and can give attackers extensive control over infected devices. The malware, dubbed Rokarolla, is spread via malicious websites that impersonate popular apps such as TikTok and Google Chrome, according to mobile cybersecurity firm Zimperium. It uses deceptive overlay screens to capture sensitive information from users.

Microsoft flagged a USB-spread crypto clipper malware on June 17, 2026, saying the activity has been ongoing since February. The threat monitors the clipboard and swaps wallet addresses when users paste them. It also steals seed phrases.