hodler

20 Mar 2026, 17:48

South Korea shifts to private crypto custody after costly security failures and asset losses

South Korea’s National Tax Service (NTS) plans to hire professional private custodians to store the digital assets seized from criminal proceedings. The decision to switch from self-custody to private custody is due to embarrassing mishaps on the part of the NTS and other national agencies that caused significant financial and reputational damage. Why is South Korea changing its crypto storage policy? South Korea’s National Tax Service (NTS) has confirmed that it will be switching from self-storage methods to private, professional custody providers within the first half of the year. For years, South Korean officials have managed to seize Bitcoin and other tokens using hardware wallets stored in physical evidence rooms, but recent embarrassing and costly security breaches have led to a change. Cryptopolitan recently reported that the National Tax Service accidentally published a press release that included a high-resolution photograph of a hardware wallet. Unfortunately, the image clearly showed the 24-word mnemonic seed phrase, and within minutes, an anonymous observer used those words to drain approximately $4.8 million (8.1 billion won) in seized tokens. In 2025, prosecutors in Gwangju lost control of 320 Bitcoins to a phishing attack on a government computer. Thankfully, the funds were eventually recovered. Under the new plan , the NTS will form a Virtual Asset Management System Advancement Task Force (TF) to vet private companies. According to Ko Young-il, the Director of the NTS Advanced Virtual Asset Management System, the agency will prioritize security requirements, the size of the company, and its insurance coverage when selecting a partner. The NTS is also working with the Ministry of Public Administration and Security to establish a dedicated Digital Asset General Division. The new department will oversee the entire lifecycle of a seized asset, from when it’s initially acquired to the final sale and liquidation into the national treasury. Can private custodians truly protect the state’s assets? The National Police Agency (NPA) recently completed a draft for the first-ever guidelines on managing dark coins. They pose a technical problem to the proposed system because they often cannot be stored on standard hardware wallets (cold wallets); police must use software wallets (hot wallets) installed on dedicated servers. The NPA currently holds roughly 54.5 billion won (~$39.5 million) in seized assets, with Bitcoin accounting for over 90% of that value. Despite this, three of the NPA’s bidding attempts failed last year because the police budget for the project was only 83 million won. Assets held by professional custodians can also be targeted, as seen in the case of the United States. Cryptopolitan reported that the U.S. Marshals Service (USMS) utilized a private firm called CMDSS to manage its seized Bitcoin, but this did not prevent the alleged theft of $46 million in BTC by John “Lick” Daghita, the son of the firm’s owner. Suggestions that the government employ a public custody model have been made. The model involves a government-led professional trustee rather than a purely private contractor. Still letting the bank keep the best part? Watch our free video on being your own bank .

20 Mar 2026, 11:38

Apple iOS Malware Targets Crypto Apps on Unpatched iPhones: Google

The DarkSword exploit chain affects older versions of iOS 18, delivering malware that specifically hunts for exchange and wallet apps.

20 Mar 2026, 02:50

UXLINK Hacker’s Alarming $11.8M ETH Liquidation Sparks Fresh Security Concerns

BitcoinWorld UXLINK Hacker’s Alarming $11.8M ETH Liquidation Sparks Fresh Security Concerns In a significant on-chain movement, the perpetrator behind the UXLINK exploit has liquidated a staggering $11.8 million worth of Ethereum, raising fresh alarms about the security of decentralized protocols and the fate of stolen digital assets. According to blockchain analyst Onchain Lens, the hacker swapped 5,496 ETH for the stablecoin DAI within a single hour, marking a critical development in the ongoing saga of one of 2024’s major cryptocurrency breaches. This transaction directly stems from the $44 million UXLINK exploit that occurred on September 22 last year, highlighting the persistent challenges in tracking and recovering stolen funds in the decentralized finance (DeFi) ecosystem. Anatomy of the UXLINK Exploit and Subsequent ETH Sale The recent $11.8 million ETH liquidation represents a substantial chapter in the UXLINK incident’s aftermath. Onchain data reveals the hacker executed the swap through a decentralized exchange, converting the ill-gotten Ethereum into DAI to presumably stabilize its value. This move is a common tactic among exploiters seeking to avoid price volatility associated with major cryptocurrencies like ETH. Furthermore, the choice of DAI, a decentralized stablecoin, complicates potential asset freezing efforts by traditional authorities. Consequently, this activity provides a real-time case study in blockchain forensics. Analysts monitor such large, sudden swaps for patterns that might reveal the attacker’s identity or next steps. The original September 2024 exploit involved a sophisticated attack on UXLINK’s smart contract logic, draining funds from the protocol’s liquidity pools. The stolen assets, initially comprising various tokens, were later consolidated into Ethereum, setting the stage for this recent liquidation event. Context and Impact of the $44 Million Breach The UXLINK hack last year sent shockwaves through the DeFi community, underscoring the inherent risks of complex smart contract interactions. UXLINK operated as a cross-chain interoperability protocol, facilitating asset transfers between different blockchain networks. The $44 million loss ranked among the top ten DeFi exploits of 2024, eroding user confidence and prompting urgent calls for enhanced security audits. Importantly, the protocol’s team acknowledged the breach, initiated an investigation, and collaborated with security firms to trace the funds. However, the hacker’s ability to hold and now liquidate a portion of the assets demonstrates the significant challenges in fund recovery. Unlike traditional finance, decentralized networks operate without a central reversing authority. This reality forces projects and victims to rely on negotiation, on-chain tracking, and sometimes legal pressure on centralized exchanges where funds may eventually surface. The table below outlines key details of the exploit and the recent transaction. Event Date Asset Approx. Value Key Detail UXLINK Exploit Sept 22, 2024 Multiple Tokens $44 Million Smart contract vulnerability ETH Consolidation Post-Exploit Ethereum (ETH) N/A Hacker converted stolen tokens to ETH DAI Swap Recent (Past Hour) 5,496 ETH to DAI $11.82 Million Liquidation via decentralized exchange Expert Analysis from Blockchain Security Researchers Security experts emphasize that such liquidations are a critical phase in the lifecycle of a hack. “The conversion to a stablecoin like DAI is a clear attempt to cash out or prepare for further obfuscation,” notes a researcher from a leading blockchain analytics firm. “It moves the value from a traceable but volatile asset into a stable one that can be more easily moved across chains or into the traditional financial system.” This action triggers several community responses: Enhanced Monitoring: Analytics platforms increase scrutiny on addresses receiving the DAI. Exchange Alerts: Centralized exchanges receive notifications to flag incoming transactions from the hacker’s wallets. Governance Actions: Stablecoin governance communities, like MakerDAO for DAI, may discuss blacklisting the specific addresses, though this is a contentious decentralized decision. Moreover, the timing of the sale may relate to market conditions or the hacker’s assessment of legal pressure. The event serves as a stark reminder of the on-chain security imperative for all DeFi projects. Protocols must invest in rigorous, continuous auditing and implement robust emergency response plans, including bug bounty programs and decentralized insurance mechanisms. The Broader Implications for DeFi Security This incident reinforces several enduring lessons for the decentralized finance sector. First, the pseudo-anonymous nature of blockchain does not guarantee invisibility; sophisticated chain analysis can often track fund flows. Second, the time between an exploit and asset liquidation can be months, requiring persistent vigilance from security teams. Finally, the event highlights the growing professionalization of blockchain forensics as an essential industry, with firms like Chainalysis, Elliptic, and independent analysts like Onchain Lens playing pivotal roles. For users, the UXLINK saga underscores the importance of due diligence. Engaging with any DeFi protocol requires understanding its audit history, insurance coverage, and the team’s security posture. The community’s ability to learn from each exploit gradually strengthens the overall ecosystem’s defenses, driving innovation in secure smart contract design and real-time monitoring tools. Conclusion The UXLINK hacker’s sale of $11.8 million in ETH marks a pivotal moment in the post-exploit timeline, demonstrating how stolen cryptocurrency assets are managed and liquidated. This event, stemming from the $44 million UXLINK exploit , provides critical insights into attacker behavior, the effectiveness of on-chain tracking, and the ongoing challenges of asset recovery in DeFi. As the industry evolves, such incidents continue to shape security standards, regulatory discussions, and the technological arms race between protocol developers and malicious actors. The ultimate resolution of this case will be closely watched as a benchmark for the ecosystem’s maturity in handling major security breaches. FAQs Q1: What was the UXLINK exploit? The UXLINK exploit was a $44 million security breach that occurred on September 22, 2024, where a hacker exploited a vulnerability in the UXLINK protocol’s smart contract to drain funds from its liquidity pools. Q2: Why did the hacker swap ETH for DAI? The hacker likely swapped 5,496 ETH for DAI to convert the volatile stolen cryptocurrency into a stablecoin, preserving its dollar value and potentially making it easier to move or cash out through other channels while avoiding price fluctuations. Q3: Can the stolen funds be recovered? Fund recovery in DeFi is complex. It typically requires tracing the funds, collaboration with exchanges to freeze assets if they are deposited, and sometimes negotiation with the hacker. There is no central authority to reverse transactions on the blockchain. Q4: What is on-chain analysis, and how does it help? On-chain analysis involves examining public blockchain data to track transactions, identify wallet addresses, and uncover patterns. Firms like Chainalysis and independent analysts use it to monitor hacker movements, as seen with the UXLINK ETH sale. Q5: What does this mean for the safety of DeFi protocols? This incident highlights the persistent security risks in DeFi. It underscores the need for protocols to undergo extensive, repeated smart contract audits, have emergency response plans, and for users to practice rigorous due diligence before investing. Q6: Has the UXLINK team responded to this recent transaction? While the provided content does not include a new statement, following standard protocol, the UXLINK team and associated security partners are almost certainly monitoring the situation and updating their investigation based on this new on-chain activity. This post UXLINK Hacker’s Alarming $11.8M ETH Liquidation Sparks Fresh Security Concerns first appeared on BitcoinWorld .

19 Mar 2026, 17:05

Xaman Wallet Sends Security Warning to XRP Holders

Security continues to define the experience of every participant in the crypto ecosystem. As digital assets gain broader adoption, users increasingly face the responsibility of protecting their funds without relying on traditional safeguards such as banks or centralized authorities. This shift emphasizes ownership, control, and disciplined asset management. Xaman Wallet recently warned XRP holders about this through a clear message on X. The wallet emphasized the importance of self-custody, urging users to take full responsibility for their private keys and avoid depending on intermediaries when managing their assets. Ownership Begins With Control Xaman Wallet’s message centers on a fundamental principle in crypto: control determines ownership. When users store assets on centralized platforms, those platforms retain custody of the private keys. This arrangement introduces dependency on third parties for access, withdrawals, and account security. Not your keys, not your $XRP . Self-custody with Xaman is the answer. No intermediaries. No compromises. Just ultimate freedom. — Xaman® Wallet (@XamanWallet) March 18, 2026 Self-custody removes that dependency. Users who manage their own wallets maintain direct control over their assets without requiring permission from any intermediary. This approach aligns with the decentralized nature of blockchain systems and ensures that ownership remains entirely with the individual. The Role of Private Keys in XRP Security Private keys serve as the cryptographic backbone of wallets on networks such as XRP. These keys authorize transactions and confirm ownership of funds. Whoever controls the private keys controls the assets associated with them. Xaman Wallet encourages users to safeguard these keys carefully. Loss of a private key or seed phrase results in permanent loss of access to the associated funds. No recovery mechanism exists through centralized support, which makes personal responsibility essential in maintaining security. Removing Intermediaries From the Equation Xaman Wallet’s guidance also highlights the risks associated with intermediaries. Centralized platforms can introduce vulnerabilities such as account freezes, custodial failures, or security breaches. By contrast, self-custody eliminates these external points of failure. We are on X, follow us to connect with us :- @TimesTabloid1 — TimesTabloid (@TimesTabloid1) June 15, 2025 Users interact directly with the blockchain when they manage their own wallets. This way, transactions happen without needing approval from anyone else, making things smoother and more independent. It also reinforces the original vision of decentralized finance, where individuals maintain full control over their assets. Balancing Freedom With Responsibility Self-custody offers significant advantages, but it also requires users to adopt strong security practices. Protecting seed phrases, avoiding phishing attempts, and using secure devices all play a critical role in preventing unauthorized access. Xaman Wallet’s message reflects this balance between freedom and responsibility. Users gain complete control over their assets, but they must also ensure that they manage them securely. Unlike traditional financial systems, blockchain transactions cannot be reversed or disputed once executed. A Clear Reminder for XRP Holders Xaman Wallet’s warning delivers a straightforward but important message. True ownership in crypto depends on personal control of private keys. For XRP holders, adopting self-custody strengthens security , removes reliance on intermediaries, and aligns with the core principles of blockchain technology. By managing their own assets, users not only protect their holdings but also fully embrace the decentralized nature of the ecosystem. Disclaimer : This content is meant to inform and should not be considered financial advice. The views expressed in this article may include the author’s personal opinions and do not represent Times Tabloid’s opinion. Readers are urged to do in-depth research before making any investment decisions. Any action taken by the reader is strictly at their own risk. Times Tabloid is not responsible for any financial losses. Follow us on Twitter , Facebook , Telegram , and Google News The post Xaman Wallet Sends Security Warning to XRP Holders appeared first on Times Tabloid .

19 Mar 2026, 16:00

Critical Strike: Iran’s Missile Attack on Israel’s Bazan Refinery Escalates Regional Tensions

BitcoinWorld Critical Strike: Iran’s Missile Attack on Israel’s Bazan Refinery Escalates Regional Tensions HAIFA, Israel – March 15, 2025 – Iran launched a significant missile strike against the Haifa refinery complex operated by Bazan Group, Israel’s largest oil company. This attack represents a dangerous escalation in regional hostilities. Fortunately, local Israeli media confirmed no casualties resulted from the assault. The incident immediately raised concerns about energy security and geopolitical stability across the Middle East. Iran’s Missile Attack Targets Critical Energy Infrastructure The missile strike specifically targeted Bazan’s Haifa refinery operations. This facility processes approximately 9.8 million tons of crude oil annually. Consequently, it supplies about 40% of Israel’s refined petroleum products. The attack occurred during nighttime hours, according to multiple reports. Security systems successfully intercepted some projectiles. However, others reached their intended targets. The refinery’s emergency protocols activated immediately. Furthermore, firefighting teams contained resulting fires within hours. The Israeli Defense Forces confirmed the attack originated from Iranian territory. They also stated the missiles traveled approximately 1,000 kilometers before impact. Bazan Group, formerly known as Oil Refineries Ltd., represents Israel’s most significant energy asset. The company operates two main facilities in Haifa. Additionally, it employs over 1,500 workers directly. The complex includes advanced refining units and storage tanks. It also features sophisticated petrochemical production lines. The Haifa Bay area contains numerous industrial facilities. Therefore, the attack created widespread concern about potential collateral damage. Local authorities quickly implemented safety measures. They also established exclusion zones around affected areas. Geopolitical Context and Regional Implications This incident occurs within a complex geopolitical landscape. Iran and Israel have engaged in shadow conflicts for decades. Recently, tensions have escalated significantly. The attack follows months of proxy warfare across the region. It also coincides with stalled nuclear negotiations. International observers express growing concern about direct confrontation. The United Nations Security Council plans emergency discussions. Meanwhile, regional powers monitor developments closely. Historical Precedents and Strategic Calculations Energy infrastructure has frequently become a target during Middle Eastern conflicts. Historically, refineries represent strategic assets. Their destruction can cripple national economies. Iran possesses substantial missile capabilities. The country has developed various precision-guided systems. Israeli defense systems, particularly Iron Dome and Arrow, provide layered protection. However, no system guarantees complete interception. The attack demonstrates Iran’s willingness to escalate directly. It also tests Israeli response thresholds. The regional energy market faces immediate disruption concerns. Israel maintains strategic petroleum reserves. Nevertheless, prolonged refinery downtime could affect supplies. Neighboring countries might experience secondary effects. Global oil prices typically react to Middle Eastern instability. Market analysts already observe increased volatility. Brent crude futures rose 3.2% following the attack announcement. Furthermore, shipping insurance premiums for Eastern Mediterranean routes increased. Technical Analysis of Refinery Operations and Security Modern refineries incorporate sophisticated safety systems. Bazan’s Haifa facility features multiple protective layers. These include blast walls and emergency shutdown procedures. The complex also maintains redundant control systems. Security protocols involve both physical and cyber defenses. Israel’s critical infrastructure protection unit coordinates with private operators. They conduct regular vulnerability assessments. Additionally, they implement advanced monitoring technologies. The attack’s timing suggests careful planning. Night operations potentially reduce interception effectiveness. They also minimize workforce presence. Bazan implemented automated processes years ago. Therefore, limited personnel were onsite during the strike. The company’s crisis management team activated immediately. They coordinated with national emergency services. They also communicated with international partners. Supply chain adjustments began within hours. Economic Impact Assessment and Market Response Energy economists quickly analyzed potential consequences. Israel’s refined product inventory covers approximately 30 days of consumption. The country also maintains diversified import options. However, refinery operations affect local employment and related industries. The petrochemical sector depends heavily on Bazan’s outputs. Manufacturing plants require consistent feedstock supplies. Transportation networks need reliable fuel availability. International energy markets demonstrate specific sensitivity patterns. The table below illustrates immediate market reactions: Market Indicator Pre-Attack Level Post-Attack Change Brent Crude Futures $82.45/barrel +3.2% Mediterranean Shipping Premiums 0.8% +1.5% Israeli Shekel (USD) 3.65 -0.9% Regional Stock Indices Various -2.1% average The attack’s psychological impact might exceed physical damage. Investor confidence requires stability assurances. International companies reconsider regional operations. Insurance providers reassess risk models. Global energy traders monitor alternative supply routes. International Response and Diplomatic Developments World leaders issued statements within hours. The United States condemned the attack unequivocally. European Union officials called for immediate de-escalation. Regional powers offered measured responses. Saudi Arabia expressed concern about energy security. Egypt emphasized maritime safety in adjacent waters. Turkey proposed mediation efforts. Russia urged restraint from all parties. United Nations mechanisms activated promptly. The Security Council scheduled emergency consultations. The International Atomic Energy Agency monitored nuclear safety aspects. Regional organizations like the Arab League convened special sessions. Diplomatic channels experienced intense activity. Backchannel communications reportedly continued throughout the crisis. Legal and Normative Considerations International law clearly prohibits attacks on civilian infrastructure. The Geneva Conventions establish specific protections. Energy facilities serving civilian populations enjoy particular safeguards. However, interpretations vary during armed conflicts. Legal experts debate applicable frameworks. Some argue the attack constitutes a war crime. Others reference self-defense provisions. The international community generally condemns such strikes. Norms against targeting critical infrastructure have strengthened recently. Israel possesses legal options for response. The country maintains the right to self-defense under Article 51 of the UN Charter. Proportionality principles guide acceptable countermeasures. Retaliatory actions must distinguish between military and civilian targets. The government consults extensively with legal advisors. International allies provide additional perspectives. Ultimately, decisions balance multiple considerations. Technological and Defense Implications Modern missile defense systems face evolving challenges. Iran’s missile arsenal includes various types: Ballistic missiles with ranges exceeding 2,000 kilometers Cruise missiles capable of low-altitude penetration Drone swarms that overwhelm defense systems Precision-guided munitions with improved accuracy Israel’s multi-layered defense architecture demonstrated effectiveness. However, complete protection remains impossible. The attack provides valuable performance data. Defense analysts will study interception rates. They will also evaluate system coordination. Future upgrades might incorporate lessons learned. International defense partnerships could strengthen accordingly. Critical infrastructure protection requires continuous innovation. Emerging technologies offer promising solutions: Artificial intelligence for threat detection Directed energy weapons for cost-effective interception Quantum sensors for improved early warning Autonomous response systems for rapid reaction Conclusion Iran’s missile attack on Israel’s Bazan refinery represents a significant escalation in regional conflict. The strike targeted critical energy infrastructure but fortunately caused no casualties. This incident demonstrates the vulnerability of essential facilities during geopolitical tensions. Furthermore, it highlights the interconnected nature of energy security and regional stability. International responses emphasize diplomatic solutions while preparing for various scenarios. The attack’s long-term consequences will unfold across multiple dimensions including economic, strategic, and technological spheres. Ultimately, this event underscores the urgent need for conflict de-escalation mechanisms in the Middle East. FAQs Q1: What is the Bazan Group and why is it significant? The Bazan Group, formerly Oil Refineries Ltd., is Israel’s largest oil company. It operates the Haifa refinery complex which processes approximately 40% of the country’s refined petroleum products, making it critical to Israel’s energy security and economy. Q2: Were there any casualties in the missile attack? According to local Israeli media reports, there were no casualties resulting from the attack. The refinery’s automated systems and nighttime timing likely minimized personnel exposure. Q3: How might this attack affect global oil prices? The attack immediately increased Brent crude futures by 3.2%. Prolonged disruption could cause further volatility, though Israel represents a relatively small portion of global production. The psychological impact on markets often exceeds physical supply disruptions. Q4: What defense systems protect Israel from such attacks? Israel employs a multi-layered defense system including Iron Dome for short-range threats, David’s Sling for medium-range missiles, and Arrow systems for long-range ballistic missiles. These systems work in coordination to intercept incoming threats. Q5: What are the potential diplomatic consequences of this attack? The attack has triggered emergency UN Security Council consultations and widespread international condemnation. It could lead to increased sanctions against Iran, strengthened Israeli defense partnerships, and potentially renewed diplomatic efforts to de-escalate regional tensions. This post Critical Strike: Iran’s Missile Attack on Israel’s Bazan Refinery Escalates Regional Tensions first appeared on BitcoinWorld .

19 Mar 2026, 14:11

Quantum Threat Looms Over Bitcoin, But Market Stays Unfazed

Quantum computers could threaten Bitcoin, but practical risks remain distant, Galaxy Digital reports. Older Bitcoin addresses face higher vulnerability; upgrades and research continue across the industry. Continue Reading: Quantum Threat Looms Over Bitcoin, But Market Stays Unfazed The post Quantum Threat Looms Over Bitcoin, But Market Stays Unfazed appeared first on COINTURK NEWS .