Smart contract auditing, on-chain forensics, key management, MEV defence, and incident response. The most defensible career path in crypto after every multi-million-dollar exploit.
Browse open Security positions. New listings added daily, filterable by location, salary, and seniority.
Echo Protocol on Monad was exploited via a compromised admin key — minting 1,000 fake eBTC worth $76.7M. The attacker could only cash out $816K before the team burned the rest. Here's what actually happened.
THORChain was drained across Bitcoin, Ethereum, BNB Chain, and Base simultaneously on May 15. RUNE dropped 12%, all trading and signing was halted, and the team still hasn't explained the attack vector.
Bitcoin Core quietly patched its first-ever memory safety bug in late 2024, disguising the fix as a logging improvement. The vulnerability — now public — let miners remotely crash nodes running versions 0.14.0 through 28.x. Nearly half the network is still exposed.
In 30 days, Tether silently blacklisted 371 wallets and froze $515 million in USDT across Tron and Ethereum — no court order required. That's 40% of everything they froze in all of 2025, done in a single month. Here's how the kill switch works, who's using it, and what it means for crypto.
A single obfuscated tweet tricked xAI's Grok into executing a $175K on-chain transfer — no private keys stolen, no smart contract exploit. Just a chatbot doing what it was told.
Kraken's parent Payward just sued its former custodian Etana for misappropriating $25 million in client funds in what it calls a 'Ponzi-like' scheme. Etana allegedly stalled withdrawals with fake reconciliation issues while plugging holes with new deposits.
The FBI coordinated with Dubai Police and Thai authorities to bust 276 people across 9 pig butchering scam centers — the same fraud method that put Trump's World Liberty Financial in headlines last week.
A coordinated attacker swept over 500 long-dormant Ethereum addresses, stealing ~$800K and routing funds through ThorChain. The compromise vector is still unknown — and your old wallets may not be safe.
April 2026 was the worst month in crypto hack history: 30 attacks, $625M drained, North Korea behind 76% of it. Now a developer is claiming DPRK trained an AI to autonomously exploit DeFi — and the Wasabi Protocol's $5M multi-chain drain may be its latest hit.
DeFi United drops its technical rescue blueprint today, with Consensys, Aave, Compound, the Solana Foundation and 14 other protocols pledging $300M+ in ETH to re-collateralize rsETH after the $292M Lazarus-linked KelpDAO exploit. This is the most coordinated cross-protocol rescue in DeFi history.
Discover Solidity Developer salaries in 2026: $90k-$350k. Get the numbers and insights on what crypto protocols are offering.
DeFi hacks hit $606M in 18 days, while Kalshi and Polymarket battle for the U.S. crypto derivatives market.
A zero-day exploit in Litecoin's MimbleWimble privacy layer triggered a 13-block chain reorg, wiping three hours of transactions. Litecoin denied it was a zero-day. GitHub commits say otherwise.
Bitmine Immersion Technologies (NYSE: BMNR) has quietly amassed 4.976 million ETH worth $12.9B, staked 70% of it through Coinbase Prime, and is now printing $221M a year in staking rewards — on autopilot.
Lazarus Group's new 'Mach-O Man' macOS malware is targeting crypto and fintech executives with convincing fake meeting invites, stealing keychain data and wallet credentials before erasing itself completely.
April 2026 is already the worst month for crypto hacks since February 2025. $606 million gone in 18 days. 3.7x the entire first quarter. Today, Congress is holding hearings. Here's what broke.
Hackers breached Vercel — the hosting backbone for thousands of DeFi apps — by exploiting a compromised third-party AI platform. API keys, tokens, and source code are on sale for $2M on BreachForums.
Kelp DAO's rsETH bridge was drained in minutes after an attacker forged LayerZero cross-chain messages. Bad debt cascaded across Aave, Compound, and Euler. It's 2026's biggest DeFi hack — so far.
Tether is bailing out Drift Protocol with $148M after North Korea's $285M heist — but the real play is quietly replacing Circle's USDC as Solana DeFi's settlement currency.
A forged cross-chain proof let an attacker mint 1,000,000,000 fake DOT tokens on Ethereum in a single transaction. Thin liquidity saved Polkadot. Twelve days earlier, Hyperbridge had posted an April Fools' joke about exactly this.
Treasury and FinCEN dropped a joint proposed rule under the GENIUS Act that forces stablecoin issuers to implement full AML programs, freeze bad transactions, and hire compliance officers — by January 2027.
A whale built a $15M leveraged Fartcoin position across four wallets, then intentionally imploded it — weaponizing Hyperliquid's auto-deleveraging system to dump losses onto the exchange's own vault.
Chaos Labs is walking away from Aave after 3 years and 'zero material bad debt.' They're the third core contributor to quit since March. No one knows who's watching the money.
MicroStrategy's rebranded successor posted the largest Q1 Bitcoin loss since 2018, then spent another $330 million on BTC the following week. This is what conviction looks like — or what it costs.
Australia's parliament passed the Digital Assets Framework Bill, the country's first comprehensive crypto licensing law. Exchanges and custodians must now get licensed like brokers. Here's what it means for jobs.
Drift Protocol confirmed today that the April 1 exploit wasn't opportunistic — DPRK-linked hackers spent six months attending crypto conferences, building real relationships, and depositing real money before draining $270M.
ZachXBT just published a damning thread showing Circle had the power to freeze $232M in stolen Drift Protocol funds — during business hours, over 6 hours — and chose not to. It's part of a pattern spanning $420M across 15 cases since 2022.
The CFTC settled with Nishad Singh — FTX's ex-engineering chief who built the backdoor that let Alameda silently drain billions in customer funds. The case is closed. The industry can stop looking over its shoulder. Almost.
Oracle cut 18% of its workforce overnight to fund a $156B AI buildout. If you're one of the 30,000, crypto infrastructure needs your exact skill set.
Drift Protocol, Solana's leading perpetuals DEX, was drained of up to $285M in a still-unconfirmed exploit on April 1 — and the attacker is still moving funds right now.
Google says breaking Bitcoin may need 20x fewer qubits than thought. 6.9M BTC already exposed. The race to hire post-quantum crypto engineers starts now.
512K lines of TypeScript and 44 feature flags exposed via npm. If your crypto team uses AI coding tools, your threat model just changed.
The Axios supply chain attack dropped a crypto-wallet-stealing RAT on 100M weekly installs. What happened, why AI missed it, and the security roles crypto needs now.
Only 1 million BTC remain after the 20 millionth was mined. The engineers building infrastructure around that scarcity are crypto's most in-demand hires.
Solidity or Rust — which language should you invest in if you want a high-paying crypto job in 2026? We break down the real trade-offs.
A practical guide to landing a Web3 or crypto job in 2026 — what skills companies are actually hiring for, how to stand out, and where to apply.
AI is reshaping the crypto job market fast. Here's what's in demand, what's compressing, and what skills get you hired at a Web3 company in 2026.