Toronto police laid 82 charges across seven people, three of them Canadian Armed Forces members, over a July abduction to reach a man's crypto. Police say it shows crime involving digital assets turning more targeted, though the record covers one victim.
Perspective Coverage
6 publishers
- Builder
- Builder 7%
- Operator
- Operator 45%
- Investor
- Investor 48%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence66
Gamdom says its hot-wallet breach cost just over $3 million, while on-chain investigator vxdb counts $4.208 million. The gap is up to $1.2 million, about 40% of Gamdom's own figure, across an attack that reached eight networks.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence55
Three knife-wielding intruders took about $800,000 from a UK trader, he says, including $720,000 from a Ledger hardware wallet. Police have not confirmed it; Chainalysis counts over $30 million in confirmed losses from such attacks in the first half of 2026.
Perspective Coverage
4 publishers
- Builder
- Builder 18%
- Operator
- Operator 50%
- Investor
- Investor 32%
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence58
An attacker minted 19 million unauthorized THEO on Base and swapped it for 700.8 ETH, about $1.76 million, as the token fell 92%. Autheo has not named a root cause, so the case that a bridge minting right failed is still a suspicion.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence58
buildOne report1 publisher Sui's 40 million TPS record checks out on mainnet as a payment-channel benchmark
Mainnet settlement records rebuilt by a dev.to author put Sui's 7 October peak at 39.86 million TPS, within 2% of the official 40.6 million. Every counted update ran in pre-funded off-chain tunnels, so the figure measures payment-channel speed.
Reality
- Evidence70
- Adoption8
- Hype gap+40
- Incentives65
- Confidence66
Three armed men forced an expatriate near Pattaya, Thailand, to transfer about $820,000 in cryptocurrency at gunpoint. Only 12 of the 46 such attacks Chainalysis counted in early 2026 paid out, crypto.news reported, but those 12 took more than $30 million between them.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence55
Sui's offchain tunnels peaked at 40.6 million transactions per second in a live AI-agent test in Singapore, up from about 6.1 million in July. Because mainnet recorded only each tunnel's opening and closing, and CertiK's audit is still pending, the figure is an unverified benchmark of channel capacity.
Perspective Coverage
4 publishers
- Builder
- Builder 35%
- Operator
- Operator 26%
- Investor
- Investor 39%
Reality
- Evidence40
- Adoption12
- Hype gap+45
- Incentives70
- Confidence55
Security firms traced about 1,783 wstETH, worth more than $6 million, out of a Base vault on Oct. 4 whose owner is an anonymous 3-of-7 Safe. With Base and Aave's core contracts not blamed, the loss lands on a custody setup whose seven signers no one has publicly identified.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence58
S&P writes a risk scale for crypto lending vaults that now hold $10 billion
S&P Global launched a framework on Oct. 4 to grade crypto lending vaults, a market it says grew from $1.5 billion to about $10 billion in two years. The same day, an incident on Base pulled about $6 million out of a vault without exploiting Aave, the vault-level risk S&P now scores apart from the protocol.
Reality
- Evidence45
- Adoption10
- Hype gap+15
- Incentives
- Not scored
- Confidence45
Ethereum Foundation's answer to Bybit-style theft waits until 2027 at the earliest
Ethereum Foundation says EIP-7906, a check that could have reverted the $1.5 billion Bybit theft, will not ship before 2027. Its own post concedes the check cannot stop the stolen-key and social-engineering attacks behind most of 2026's losses.
Reality
- Evidence45
- Adoption2
- Hype gap+10
- Incentives55
- Confidence50
AI agents that suspend accounts on their own need managing like staff, CertiK argues
CertiK argues AI agents that can suspend accounts on their own should be managed like staff, with set permissions, human checkpoints and someone accountable. For the team rolling one out, every action the agent may take needs an owner and a review rule before it goes live.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence35
Bitget's wallet breach accounts for about four-fifths of September's crypto theft after returns
Bitget lost about $387.5 million to forged withdrawals from its wallet system, more than half of September's $742 million in crypto thefts. Most of Liquid Network's loss was handed back, so what stayed stolen sits mainly with one exchange's withdrawal infrastructure.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+8
- Incentives
- Not scored
- Confidence55
Bitget says attackers may have used a flaw in a third-party security product to get internal credentials and forge $388 million of withdrawals. The account puts vendor software that can reach a withdrawal system inside an exchange's counterparty risk, alongside its own wallet controls.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence50
One Bitget breach supplied half of September's record $766 million in crypto hack losses
Crypto hacks drained $766.49 million in September, a 2026 monthly record, and $387.5 million came from one breach of Bitget's hot wallets. After the money returned from the Liquid Network exploit, that one exchange accounts for about 80% of what stayed stolen.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
678,000 DGFiP records are being marketed with names, addresses and income figures together. France logged 33 of CertiK's 52 verified physical coercion attacks on crypto holders in H1 2026.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+25
- Incentives40
- Confidence60
The wallets held. The customer list did not: 39,798 names, phone numbers and shipping addresses, taken through commerce plumbing nobody threat-models.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 55%
- Investor
- Investor 17%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence70
No seed phrases were touched. What was taken is names, phone numbers and shipping addresses for people known to own a hardware wallet, now advertised on a crime forum.
Perspective Coverage
8 publishers
- Builder
- Builder 21%
- Operator
- Operator 70%
- Investor
- Investor 9%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+10
- Incentives55
- Confidence68
Brevo says an intruder reached 120 customer accounts and used them to mail phishing from those customers' own domains. Three crypto companies confirmed their newsletter lists were hit. Only one named the provider.
Perspective Coverage
4 publishers
- Builder
- Builder 15%
- Operator
- Operator 69%
- Investor
- Investor 16%
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap−20
- Incentives40
- Confidence70
The group calling itself iamnotavillain wants 6,000 Monero within 24 hours and Revolut says no demand has reached it. The data went out through a government email account the bank was obliged to answer.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence55
Seven agencies price North Korea's fake-recruiter funnel at $1,530 a wallet
Japan, the US, Australia and Germany put eight months of North Korea's developer-targeting campaign at $10.71 million taken from more than 7,000 wallets. CertiK counted $2.06 billion of North Korea-linked crypto theft in 2025 alone.
Reality
- Evidence72
- Adoption70
- Hype gap+8
- Incentives45
- Confidence62