Cryptohack Roundup: Concord, BTCPay Exploits

Each week, ISMG rounds up cybersecurity incidents in digital property. This week, Concord and BTCPay hacked, violent crypto thefts surged, the U.S. CFTC filed a $48 million fraud case, an NFT founder charged, North Koreans used synthetic intelligence for crypto exploits, and the U.S. sanctioned two Iranian exchanges.

See Additionally: Revolutionizing Cross-Border Transactions with Permissioned DeFi

Concord confirmed an exploit after an attacker created about 4 billion of its One tokens with out authorization.

An X person named Juiceberg first reported the assault, saying the hacker minted the tokens by exploiting empty transaction data. Most had reached exchanges, whereas about 115 million One tokens may nonetheless be offered immediately on the community.

Concord stated it was working with exchanges to cease and freeze the funds. The blockchain platform can also be making ready a software program repair and contemplating whether or not to reverse transactions. It has not but disclosed what technical weak spot allowed the assault.

One fell 34% over 24 hours to round $0.0008, valuing the newly created tokens at roughly $3.2 million.

Concord suffered a serious hack in 2022, when attackers stole practically $100 million from its Horizon bridge. The FBI attributed the assault to North Korea (see: Horizon Provides $1M Bounty to Hackers Who Stole $100M).

BTCPay Server warned customers that attackers are exploiting a vital safety flaw that would put funds in danger. The mission urged customers to instantly replace their servers to model 2.4.2.

Customers who can’t set up the replace ought to shut down their BTCPay Server till they will improve, the staff stated.

BTCPay Server didn’t disclose what number of customers have been affected or whether or not attackers stole any funds.

BTCPay Server is free software program that enables people and companies to just accept bitcoin funds with out counting on a fee firm. Customers host the software program themselves.

Violent criminals stole greater than $30 million in cryptocurrency through the first half of 2026, placing the yr on target for a document, Chainalysis stated. These assaults embody kidnappings, dwelling invasions and hostage conditions the place victims are compelled to switch digital property.

France emerged as a serious hotspot. Chainalysis recorded 30 publicly identified circumstances within the nation by mid-year, in contrast with 19 throughout all of 2025. French authorities have reported much more incidents and made about 200 arrests.

Chainalysis linked the surge to leaks of non-public details about cryptocurrency holders. Attackers are additionally more and more focusing on victims’ family and acquaintances.

Regardless of the rise in violence, criminals are succeeding much less typically, Chainalysis stated. A few quarter of theft makes an attempt resulted in funds by way of late June, down sharply from earlier years.

The U.S. Commodity Futures Buying and selling Fee filed a grievance in opposition to Florida businessman Christopher Delgado for misusing $48 million in buyer funds, spending the cash on a yacht, luxurious items, journey and pet grooming.

The CFTC alleged that Delgado and his firm Goliath Ventures operated a Ponzi scheme, the place cash from newer clients is used to pay earlier clients as an alternative of producing real funding returns. Greater than 1,600 clients gave Goliath about $397 million, the company stated.

Delgado allegedly informed clients their cash would earn returns by way of cryptocurrency buying and selling companies that enable customers to trade property with out a central firm. As an alternative, buyer funds have been allegedly used for private bills and funds to different clients. The CFTC stated company playing cards funded thousands and thousands of {dollars} in journey, luxurious purchases and household bills.

The U.S. Securities and Trade Fee additionally initiated litigation. Delgado individually pleaded responsible in June to federal fraud and cash laundering expenses.

U.S. federal prosecutors charged non-fungible tokens startup founder Taj Tarsha with securities and wire fraud, alleging he diverted thousands and thousands of {dollars} from traders to non-public bills. Every cost carries a most jail sentence of 20 years.

Tarsha raised greater than $10 million from practically 70 traders by way of Few and Far Restricted. He offered agreements that promised traders digital tokens sooner or later to assist a deliberate on-line market for NFTs, that are digital data used to point out possession of distinctive objects.

Prosecutors stated Tarsha as an alternative spent investor cash on playing, dangerous digital property, a mortgage for a Miami condominium, inside design and his DJ actions. An audit uncovered the alleged misuse.

Tarsha additionally allegedly misled traders about token gross sales and continued improvement. Prosecutors stated he had dismissed practically all staff whereas directing a remaining contractor to make {the marketplace} seem energetic.

North Korean nation-state menace actor Kimsuky is utilizing synthetic intelligence instruments to strengthen cyberattacks in opposition to cryptocurrency and monetary firms, statedSouth Korean cybersecurity agency Genians.

The researchers discovered proof that Kimsuky operated three AI techniques by itself computer systems. Working these techniques domestically permits hackers to investigate data and generate content material with out sending delicate knowledge to outdoors on-line companies.

Genians stated Kimsuky is combining current publicly accessible AI know-how with malicious software program, knowledge evaluation and instruments that may automate components of an assault. The group doesn’t look like constructing its personal AI fashions.

Kimsuky can also be utilizing AI to create convincing phishing paperwork designed to trick individuals into revealing data or opening dangerous information. Some supplies copied the looks of a Korean funding platform and centered on digital property and monetary companies.

North Korean hackers stole $2 billion in cryptocurrency final yr.

The U.S. Division of the Treasury sanctioned crypto exchanges Shelbit and Aban Tether, increasing the Trump administration’s “Financial Fury” marketing campaign in opposition to Iranian monetary networks.

Treasury alleged that the exchanges helped transfer massive quantities of cryptocurrency, evade U.S. sanctions and assist Iran’s Islamic Revolutionary Guard Corps and different U.S.-designated terrorist teams. It additionally sanctioned Shelbit operator Siavash Kayvanpour and a number of other firms he controls.

Wallets belonging to the Revolutionary Guard despatched greater than $1 million to Shelbit and acquired over $2 million from the trade, in line with the Treasury. Officers additionally accused Shelbit of serving greater than 2,000 playing web sites concerned in laundering tens of thousands and thousands of {dollars}.

The sanctions comply with a Reuters investigation that discovered Shelbit processed no less than $4 billion over two years by way of networks linked to Iranian playing websites and different entities.

Aban Tether allegedly dealt with thousands and thousands of {dollars} involving beforehand sanctioned Iranian crypto platforms.