The CoinSec Podcast by The CoinSec Podcast

04.28.2023

Episode 76: Coinbase Issued Wells Notice, Euler Finance Hack, Bitcoin ATM Hack, and Wallet Vulns

In this episode we discussed how Coinbase was issued a Wells notice from the SEC. Do Kwon was arrested with fraud charges. Euler Finance, a permissionless borrowing and lending protocol on Ethereum, was the victim of a flash loan attack....

03.20.2023

Episode 75 - Lazarus Group Moving ETH, Hacked via Ads, Bitzlato, and HIVE Shutdown

In this episode we discussed how North Korea-linked cybercrime syndicate Lazarus Group has reportedly transferred $63.4 million in Ethereum from 2022’s mammoth Harmony bridge hack. Advertisements on popular search engines like Google have been used to serve malware to unsuspecting...

01.23.2023

Episode 74: Review of 2022, Last Pass Breach, and Multiple Hacks Against Individuals

In the episode we discussed a report that Immunefi put out regarding crypto losses in 2022. One of the original core developers of Bitcoin, Luke Dashjr, claimed that someone stole 216 BTC from them. A class action lawsuit has been...

01.17.2023

Episode 73: SBF Arrest, Lodestar Hack, CoinTracker Leak, and Gemini User Data For Sale

In this episode we talked about how FTX co-founder and former CEO Sam Bankman-Fried has been arrested. Lodestar Finance was hacked for $6.9 million. FTX apparently stored wallet private keys unencrypted. A new phishing campaign that creates similar wallet addresses...

12.12.2022

Episode 72: Ankr Hack, FTX Fund Movement, Bo Shen Hack, Infura Privacy Policy Update, and ChatGPT

In this episode we gave an update on the FTX collapse. A crypto scammer was sentenced to 18 months in prison. Ankr was victim to a potential private key compromise. An investor was hacked for $42 million in crypto. Attackers...

11.23.2022

Episode 71: FTX Collapse, Deribit Hot Wallet Compromise, Skyward Finance Hack, and 50k BTC Seized

In this episode we primarily talked about the collapse of major cryptocurrency exchange FTS. We also talked about how Crypto.com accidentally sent $400 million to the wrong wallet address. Deribit was hacked for $28 million. Skyward Finance was hacked for...

10.25.2022

Episode 70: Bitkeep Hack, More Hackers Returning Stolen Funds & MEV Bot Hack

In this episode we discussed how Bitkeep was exploited for $1 million. Hackers who stole funds from Transit Finance, Moola Market, and Mango Market have returned some of the stolen funds. A bug in the smart contract code for the...

10.03.2022

Episode 69: ETH Merge, Profanity Vulnerability, Wintermute Hack, Shiba Inu Creds Leak, and Rug Pulls

Ethereum has successfully transitioned to a Proof-of-Stake consensus mechanism. A vulnerability was discovered in the Profanity vanity address generator that may allow attackers to drain funds from wallets that used it. Wintermute was hacked for $160 million. Shiba Inu developers...

08.23.2022

Episode 68: Velodrome Insider, Acala Network Exploit, CelerNetwork DNS Hijack, Crypto Phishing

In this episode we talked about how attackers are leveraging Google Sites and Azure App Services for crypto-related phishing. Chainalysis released a mid-year report indicating that scams are down, but hacks are up. Acala Network was exploited for $1.6 million....

08.16.2022

Episode 67: Guests from AnChain.AI, Tornado Cash Sanctions, DeBridge Phishing Attack, Curve Hack

In this episode we were joined by guests from AnChain.ai who talked about their upcoming CTFs they are putting on. Tornado Cash has been sanctioned by OFAC. We talked about the repercussions of these sanctions. We discussed a phishing attack...

08.10.2022

Episode 66: Nomad Bridge Hack, Solana Wallet Draining Attack, New Threat Intel Discord Bots

In this episode of the CoinSec Podcast we talked about the $190 million Nomad bridge hack. Users of the Solana wallet Slope found that their tokens were being sent without authorization resulting in $6 million in losses across 9000 wallets....

08.02.2022

Episode 65: Nirvana Hack, Audius Governance Takeover, Premint Hack, and Uniswap Phishing Attack

In this episode we talked about a $3.5 million theft from the Solana stablecoin Nirvana via a flash loan attack. The music-related token Audius was hit by a governance takeover. Premint's website suffered an issue where it appeared that malicious...

06.21.2022

Episode 64: Steven Walbroehl from Halborn, Critical Wallet Vuln, Served via NFT & Multiple Hacks

In this episode we are joined by special guest Steven Walbroehl from Halborn Security to discuss a critical wallet vulnerability they discovered. A law firm served a hacker with a restraining order via NFT. ApolloX had a bug in their...

06.08.2022

Episode 63: Solana Halted, Former OpenSea Employee Arrested, Mirror Protocol Hack, and Puzzles

In this episode we discussed Solana network downtime due to a bug that led to non-determinism resulting in a lack of consensus. A former OpenSea employee was arrested after being accused of using his knowledge of which NFTs would be...

06.01.2022

Episode 62: CoinZilla Malicious Ads, Blizz Finance and Venus Protocol Hacks, Mee6 Bot Compromise

A phishing attack targeting users of popular crypto data sites like Etherscan and CoinGecko was found that uses CoinZilla ad networks. Two lending platforms, Venus Protocol on BSC and Blizz Finance on Avalanche, have been drained of $13.5 and $8.3M,...

05.20.2022

Episode 61: UST Depeg, FEI Rari, Saddle Finance, Deus DAO, MMFinance, & Fortress Protocol Hacks

In this episode we discussed the $UST (Terra Luna) depeg issue that is ongoing. Multiple hacks were discussed this week including FEI Rari, Saddle Finance, Deus DAO, MMFinance, and Fortress protocol. An Internet sleuth helped track down stolen funds for...

04.20.2022

Episode 60: Ronin Bridge Hack, Sanctions, Elephant Money Hack, Beanstalk Hack, Metamask Phishing

In this episode we discuss Axie Infinity's Ronin Bridge hack and how it has been tied to the North Korean Lazarus group. An Ethereum developer has been imprisoned for helping North Korea evade sanctions. Tornado Cash has implemented a measure...

04.06.2022

Episode 59: Agave, Hundred, Deus Finance, & Paraluni hacks, CoinJoin Blocking Illicit Transactions

In this episode we covered hacks against Agave, Hundred, Deus Finance, and Paraluni. The Bitcoin mixing tool CoinJoin announced that it will block transactions associated or flagged as illegal. Malicious NPM packages are being used to compromise Discord servers. $APE...

03.18.2022

Episode 58: Executive Crypto Order, Bacon Protocol Hack, Fantasm Finance Hack & Mining Malware

In episode 58 we discussed an executive order signed by U.S. president Joe Biden calling on the government to examine the risks and benefits of cryptocurrencies. Bacon Protocol reportedly lost $1 million due to a reentrancy vulnerability. Fantasm Finance was...

03.02.2022

Episode 57: DAO Hacker Identified, OpenSea Phishing, and Geopolitical Crypto Issues

In episode 57 we discussed how some investigative journalism was performed in which the potential identity of the DAO hacker was discovered. An OpenSea-based phishing attack was successful in stealing $1.7 million worth of NFTs. Canada attempted to freeze at...

02.25.2022

Episode 56: Optimism Bounty, BGP Hijack, IRA Trust Financial Hack, Elaborate Scams and More Vulns

In episode 56 we discussed Optimism paying out a $2 million bug bounty. A BGP hijack occurred in South Korea and the KLAYswap platform was affected for roughly $1.9 million. IRA Financial Trust was hacked for $36 million. The ArrowDAO...

02.15.2022

Episode 55: Bitfinex Hack Funds Seized and Arrests Made, MeterIO, Superfluid, & Dego Finance Hacked

In 2016, Bitfinex was hacked, and 120,000 Bitcoin were stolen. A New York couple was arrested and charged with laundering $4.5 billion in connection with the Bitfinex hack. Meter.io was hacked for $4.4 million. The Superfluid contract on QiDao was...

02.10.2022

Episode 54: Wormhole Hack, Qubit Finance Hack, SMS Phishing, $5 Wrench Attacks, & Token Approvals

In this episode we discussed the Wormhole exploit that resulted in $323 million being stolen. We also discussed an $80 million hack against Qubit Finance. A person was apparently phished where they accepted token approvals on their behalf and lost...

01.28.2022

Episode 53: Tal Be'ery, Multichain Hack, Crypto.com Hack, & Float Protocol Oracle Manipulation

In this episode of the podcast we were joined by Tal Be'ery, Co-Founder & CTO of ZenGo. We discussed the ongoing attacks against Multichain. OpenSea continues to have listing issues resulting in NFTs being purchased for way lower than floor...

01.19.2022

Episode 52: Jack Rhysider, Notional Critical Bug Bounty, Smart Contract AV, and North Korean Hackers

In episode 52 we were joined by Jack Rhysider from Darknet Diaries. He gave us additional insight into a story we covered in episode 44 around Coinbase accounts getting hacked. We also talked about a $1 million bug bounty that...

01.12.2022

Episode 51: Wallet Recovery, Critical Polygon Bug, Norton AV Cryptomining, Exploits, and Rug Pulls

2022 is already starting off hot for crypto hacks, scams and rug pulls. We recap 2021 as $14 billion were stolen in crypto-related incidents. A follow-up from episode 50 in regard to Polygon hard forking due to a critical bug...

01.03.2022

Episode 50: Helium Mining, Polygon Hard Fork, Adidas NFT, Bent - Grim - Visor Hacks, Discord Hacks

In episode 50 we discussed the Helium network, how to mine HNT, and a hack for getting a miner. Multiple Discord hacks happened to various NFT projects. Grim Finance, Bent Finance, and Visor all dealt with hacks. Polygon silently hard...

12.17.2021

Episode 49: Log4J Vuln, BadgerDAO Hack, MonoX Exploit, Multiple Key Compromises, Bored Ape $3k Sale

In this episode of the CoinSec Podcast we talked about the critical Log4J issue and how that may affect crypto-related software. BadgerDAO was compromised for $120 million due to an attacker gaining CloudFlare API access. Four different private key compromise...

12.03.2021

Episode 48: ConstitutionDAO, Etherscan 0-day, MediaMarkt Ransomware, Robinhood Hack, and other Vulns

MediaMarkt was infected with Hive Ransomware preventing their cash registers from accepting credit cards. More than 5 million email addresses were stolen in a hack on Robinhood. A man threatened to burn down the Upbit Exchange. Blizzard Network was allegedly...

11.16.2021

Episode 47: AnubisDAO & Squid Game Rug Pulls, Malicious Browser Extensions, NFT Contract Vulns

In episode 47 we talked about two separate rug pulls that happened recently. Also, a number of fake Metamask and Phantom wallet extensions have been on the rise. We discussed potential vulnerabilities in smart contracts written for NFTs. BZX appeared...

11.03.2021

Episode 46: Mudit Gupta Interview, Cream Finance Hacked Again, NFT Discord Hacks, 45 BTC Seized

In this episode we are joined by Mudit Gupta of SushiSwap to help break down the latest CREAM Finance hack. We explore how multiple Discord servers related to NFTs have been compromised recently. Police seized 48 BTC from a UK-based...

10.27.2021

Episode 45: OpenSea Malicious NFTs, ETH 2.0 Front-Running attacks, Indexed Finance hacked & more

In this episode we talked about the largest crypto-related bug bounty payout ever. Compound accidentally sent millions in rewards due to a bug. StakeSteak left private keys on a Github repo resulting in compromise. A vulnerability was discovered in Rocketpool...

10.06.2021

Episode 44: Bitcoin.org, pNetwork, and VeeFinance Hacks, Malicious Wallet, Compound Bug, & Puzzles

In episode 44 we talked about Bitcoin.org being compromised to redirect people to a scam. A Compound bug caused excess rewards to be sent out. pNetwork and VeeFinance were both hacked for millions of dollars. A malicious browser extension called...

09.22.2021

Episode 43: MISO Supply Chain Hack, Gelato Front-Run, NowSwap & Zabu Hacks, Solana DoS & ETH Attack

In this episode we discuss one of the first major exploits on the Avalanche blockchain in Zabu Protocol. Some fake news surrounding Litecoin being accepted as payment at Wal-Mart was spread by major news outlets. An attack on Ethereum managed...

09.15.2021

Episode 42: Track Transactions With BitQuery, MEV Protections, DAOMaker Hack, & Token Sniffer

In this episode of the CoinSec Podcast Steve Borosh (@424f424f) show how to track transactions using BitQuery. We talk about Miner Exctractable Value (MEV) and some potential protection mechanisms. DAOMaker was hacked for a 2nd time. Mastercard acquired CipherTrace. A...

09.07.2021

Episode 41: CREAM, Bilaxy, & X-Token Hacks, PancakeSwap Prediction Bot, & A Blockchain Hacking Guide

C.R.E.A.M. v1 market on Ethereum suffered an exploit draining $18.8 million. Bilaxy Exchange was hacked for $21 million. X-Token's xSNX smart contract was exploited with an estimate $4.5 million lost. Banksy was warned about a vulnerability in website prior to...

08.31.2021

Episode 40: Geth Vuln Causes Eth Fork, Poly Hack Update, Antinalysis, OpenZeppelin Vuln & Rug Pulls

Geth version 1.10.7 and older has a vulnerability currently being exploited that split Ethereum's chain. Poly Network has announced that they have regained control of all stolen funds. Potential rug pull in Luna Yield protocol. Maze Protocol hack investigation update....

08.24.2021

Episode 39: SushiSwap Fix Vuln, Liquid Global Hack, Ransomware Bribes & a Flash Loan Exploit Demo

In episode 39 we discuss how SushiSwap was able to fix an issue in their MISO auction potentially saving $350 million in funds. Japanese exchange Liquid Global was hacked for close to $90 million. Some cybercrime...

08.16.2021

Episode 38: Poly Network Hack, Popsicle Finance Hack, DAO Maker Hack, and the Infrastructure Bill

CoinSec is back after a lengthy hiatus. Much has happened in the crypto space since the last episode. In this episode we discuss the largest DeFi hack ever along with two other hacks that resulted in large financial loss. Also,...

02.02.2018

Episode 4: Smart Contract Security Issues, Coincheck Hack, NIST Guidance on Blockchain, Coinhive in Google Ads, and WannaMine

On this episode Mike Felch (@ustayready) details some of the critical vulnerabilities that can be introduced into Ethereum smart contracts. The largest cryptocurrency hack ever happened to Coincheck. Coinhive made it's way into Google ads, and a new malware called...

01.25.2018

Episode 3: Intro to Mining, Sia ASICs, VeChain DRP Plan, Hacken, and North Korea Hacking South Korean Exchanges

Steve Borosh (@424f424f) gives an introduction to mining cryptocurrencies. The hosts chat about the idea of splitting up private keys in different physical locations. News items for the week included VeChain's first ever cryptocurrency disaster recovery plan, reports of North...

01.19.2018

Episode 2: Chris Gates (carnal0wnage), Blackwallet Hack, Lisk Vuln, and Cryptocurrency Mining Malware

This episode welcomes Chris Gates (AKA carnal0wnage) to the show to discuss how he got into cryptocurrency, and his new cryptocurrency project "The Great Altcoin Chase" (www.thegreataltcoinchase.com). Oracle WebLogic servers were being exploited to mine Monero, and Checkpoint states that...

01.10.2018

Episode 1: Intro to CoinSec!

In this inaugural episode of the CoinSec Podcast each host provided a brief history of their involvement in the InfoSec industry, and how they each got into cryptocurrency. Discussions were had around the latest vulnerabilities in the crypto space. Critical...

What's The CoinSec Podcast about?

Download our free app to listen on your phone

The CoinSec Podcast episodes: