Private keys are one of the foundations of crypto security, helping users verify ownership and authorize transactions. They play an essential role in protecting access to digital assets and ensuring only the rightful owner can approve actions.

⚠️ALERT: An app called FomoPeek has been caught stealing private keys and seed phrases from iPhones. SlowMist says versions 1.1 to 1.2 contain malicious code that exploits iOS vulnerabilities to gain the highest level of device access. Once the exploit succeeds, wallet data, login credentials, chat history and files from ALL apps on the device can be accessed. Binance is urging anyone who installed FomoPeek to delete it immediately, create a new wallet on a clean device and transfer all assets.

SlowMist: Hackers Implement Full-Chain iOS Exploit to Steal Private Keys and Mnemonic Phrases Across Versions 13 to 26.5 SlowMist Chief Information Security Officer 23pds has issued an urgent security warning advising all iOS users to update their devices immediately. He disclosed that cybercriminals have actively operationalized a full-chain exploit framework capable of silently exfiltrating private keys and mnemonic seed phrases directly from iOS devices. The attack execution pathway involves: luring targets to a malicious webpage via Safari through social engineering or watering-hole tactics, triggering memory corruption in WebKit/JavaScriptCore (JSC) to secure arbitrary read/write access at the JavaScript layer, subsequently bypassing Pointer Authentication Codes (PAC) to achieve native code execution, escaping the WebContent sandbox, and completing kernel privilege escalation to root to drain device Keychains and local crypto wallet application data. The potentially affected versions are reported to span iOS 13 through iOS 26.5 (pending final confirmation).

You can now manage multiple wallets faster with Private Key Bulk Import on #Binance# Wallet Extension. With a single paste, import multiple private keys instantly. How to import: 1️⃣ Log in to the Binance Wallet Extension 2️⃣ Go to [My Wallet] and tap [Add Wallet] 3️⃣ Select [Import private key wallet], then choose [Bulk import private key] 4️⃣ Paste your private keys ⚠️ Please update your wallet extension to version 1.13.0 or above. Extension upgrade instructions:

A tax agency once lost $4.8 MILLION because it accidentally published the private keys in a press release On February 26 the South Korean National Tax Service wrapped up an enforcement against 124 high value tax delinquents, walking away with 8.1 billion won in seized crypto The agency then published a press release showcasing the confiscated assets. Among the photos were the seized Ledger hardware wallets with the handwritten seed phrases sitting right next to them. Within hours, one of the exposed wallets was drained On chain data shows the thief first deposited a small amount of ETH to cover gas fees, then moved 4 million PRTG tokens worth $4.8 million to a fresh address in three transactions A blockchain professor at Hansung University traced the transactions and called the leak "an advertisement inviting people to take your money" The NTS deleted the press release, but the pattern around it is even worse In January, prosecutors in Gwangju lost over $48 million in seized Bitcoin to phishing A month later a Seoul police station discovered 22 Bitcoin seized back in 2021 had vanished from a cold wallet, because the suspects kept a copy of the recovery phrase and simply took the evidence back Three crypto custody failures in two months involving more than $50 million in seized assets Seoul's answer was a national audit of every government held wallet and a plan to hand seized crypto to private custodians, an admission that the state cannot even keep its own funds safe

GoPlus: Bitget’s $387.5M Hack Exploited the Transaction-Signing Trust Chain, Not Private Keys GoPlus Security said its review of Bitget’s $387.5 million security incident found that the attack did not involve a private-key leak, but rather a compromise of the transaction-signing trust chain. Attackers breached a critical wallet backend system, forged transaction data, and caused Bitget’s authorized signing flow to generate valid signatures for transfers the exchange did not intend to make. GoPlus said the fund-drain window lasted about 2 hours and 25 minutes, with the largest wave moving roughly $185 million in about one minute. It has blacklisted attacker-linked addresses and shared them with ecosystem partners. GoPlus said the incident shows structural similarities to the 2025 Bybit hack, though Bitget has not yet published a full technical report and the initial intrusion method remains unconfirmed.

i interviewed a few new grads asking for $150k+ salary and had them to ssh into a server three sent me their ssh private keys, two never heard of it, one tried to rdp the host, one gave me their computer's teamviewer token. some of them are phd btw.