Altcoins experienced $33 million inflows after five weeks of outflows. …

Learn MoreCrypto Investment Products See $226 Million in Inflows, Signaling Cautious Optimism

The hacker behind the $9.6 million exploit of the decentralized money-lending protocol zkLend in February claims they’ve just fallen victim to a phishing website impersonating Tornado Cash, resulting in the loss of a significant portion of the stolen funds.

In a message sent to zkLend through Etherscan on March 31, the hacker claimed to have lost 2,930 Ether (ETH) from the stolen funds to a phishing website posing as a front-end for Tornado Cash. 

In a series of March 31 transfers, the zkLend thief sent 100 Ether at a time to an address named Tornado.Cash: Router, finishing with three deposits of 10 Ether.

“Hello, I tried to move funds to a Tornado, but I used a phishing website, and all the funds have been lost. I am devastated. I am terribly sorry for all the havoc and losses caused,” the hacker said.

“All the 2,930 Eth have been taken by that site owners. I do not have coins. Please redirect your efforts towards those site owners to see if you can recover some of the money,” they added.

zkLend responded to the message by asking the hacker to “Return all the funds left in your wallets” to the zkLend wallet address. However, according to Etherscan, another 25 Ether was then sent to a wallet listed as Chainflip1. 

Earlier, another user warned the exploiter about the error, telling them, “don’t celebrate,” because all the funds were sent to the scam Tornado Cash URL.

“It is so devastating. Everything gone with one wrong website,” the hacker replied.

How zkLend was exploited for $9.6 million

zkLend suffered an empty market exploit on Feb. 11 when an attacker used a small deposit and flash loans to inflate the lending accumulator, according to the protocol’s Feb. 14 post-mortem. 

The hacker then repeatedly deposited and withdrew funds, exploiting rounding errors that became significant due to the inflated accumulator. 

The attacker bridged the stolen funds to Ethereum and later failed to launder them through Railgun after protocol policies returned them to the original address. 

Following the exploit, zkLend proposed the hacker could keep 10% of the funds as a bounty and offered to release the culprit from legal liability and scrutiny from law enforcement if the remaining Ether was returned.

Related: DeFi protocol SIR.trading loses entire $355K TVL in ‘worst news’ possible

The offer deadline of Feb. 14 passed with no public response from either party. In a Feb. 19 update to X, zkLend said it was now offering a $500,000 bounty for any verifiable information that could lead to the hacker being arrested and the funds recovered.

Losses to crypto scams, exploits and hacks totaled over $33 million, according to blockchain security firm CertiK, but dropped to $28 million after decentralized exchange aggregator 1inch successfully recovered its stolen funds. 

Losses to crypto scams, exploits and hacks totaled nearly $1.53 billion in February. The $1.4 billion Feb. 21 attack on Bybit by North Korea’s Lazarus Group made up the lion’s share and took the title for largest crypto hack ever, doubling the $650 million Ronin bridge hack in March 2022. 

Magazine: Lazarus Group’s favorite exploit revealed — Crypto hacks analysis

…

Learn MorezkLend hacker claims losing stolen ETH to Tornado Cash phishing site

The post Global state of crypto regulation appeared first on CryptoSlate.

…

Learn MoreGlobal state of crypto regulation

A court in Brazil has authorized the use of non-fungible tokens (NFTs) to notify unidentified defendants in a case involving missing Bitcoins (BTC) tied to an alleged pyramid scheme, BWA Brazil. The decision stems from legal action filed by the court-appointed trustee of BWA Brazil’s bankrupt estate seeking to interrupt the statute of limitations on […]

The post Brazilian judge allows NFT subpoenas to Bitcoin wallets in high-profile fraud case appeared first on CryptoSlate.

…

Learn MoreBrazilian judge allows NFT subpoenas to Bitcoin wallets in high-profile fraud case

California’s AB-1052 protects cryptocurrency users’ self-custody rights, in a bid to ensure that they can manage digital assets without governmental interference or restrictions. …

Learn MoreCalifornia’s AB-1052 Proposes Key Protections for Bitcoin and Digital Asset Users

North Korean cyberwarfare attacks on the cryptocurrency industry are growing in sophistication and in the number of groups involved in such criminal activity, crypto firm Paradigm warns in report titled “Demystifying the North Korean Threat.”

North Korea-originated cyberattacks range from assaults on exchanges and social engineering attempts to phishing attacks and complex supply chain hijacks, the report says. In some cases, the attacks take a year to play out, with North Korean operatives biding their time.

The United Nations estimates that between 2017 and 2023, North Korean hackers have netted the country $3 billion. The total haul has skyrocketed in 2024 and this year, with successful attacks against crypto exchanges WazirX and Bybit, which together netted attackers around $1.7 billion.

Paradigm writes that the North Korean organizations orchestrating these attacks number at least five: Lazarus Group, Spinout, AppleJeus, Dangerous Password, and TraitorTrader. There is also a coalition of North Korean operatives who pose as IT workers, infiltrating tech companies around the world.

Related: Typosquatting in crypto, explained: How hackers exploit small mistakes

High-profile attacks and predictable laundering methods

Lazarus Group, the most well-known North Korean hacking team, is given credit for some of the most high-profile cyberattacks since 2016. According to Paradigm, the group hacked Sony and the Bank of Bangladesh in 2016 and helped orchestrate the WannaCry 2.0 ransomware attack in 2017.

It has also taken aim at the cryptocurrency industry, sometimes to great effect. In 2017, the group hit two crypto exchanges — Youbit and Bithumb. In 2022, Lazarus Group exploited the Ronin Bridge, resulting in hundreds of millions in lost assets. And in 2025, it infamously stole $1.5 billion from Bybit, sending shock throughout the crypto community. The group may be behind some Solana memecoin scams.

As Chainalysis and other organizations have explained, Lazarus Group also has predictable money laundering methods after securing a haul. It breaks up the stolen amount into smaller and smaller pieces, sending them to countless other wallets. It then swaps the more illiquid coins for those with higher liquidity and converts much of it to Bitcoin (BTC). After that, the group may sit on the stolen money for a long period of time until the attention from law enforcement dies down.

The FBI has so far identified three alleged members of the Lazarus Group, accusing them of cybercrimes. In February 2021, the US Justice Department indicted two of those members for involvement in global cybercrimes. 

Magazine: Lazarus Group’s favorite exploit revealed — Crypto hacks analysis

…

Learn MoreNorth Korean crypto attacks rising in sophistication, actors — Paradigm

Despite Bitcoin (BTC) falling nearly 12% in the first quarter to $82,683.16 amid the market uncertainty, it has outperformed the S&P 500 and gold since Election Day. Gold recently hit a new all-time high of over $3100, up by nearly 14% since Nov. 5. Conversely, the S&P 500 is down by roughly 3% in the […]

The post Bitcoin beats gold and S&P 500 since Election Day despite Q1 decline appeared first on CryptoSlate.

…

Learn MoreBitcoin beats gold and S&P 500 since Election Day despite Q1 decline

Hyperliquid is one of the current bull market’s standout DeFi success stories. With daily trading volumes having reached $4 billion, the exchange has become the largest decentralized (DEX) derivatives platform, commanding nearly 60% of the market.

Hyperliquid still lags far behind Binance Futures’ $50 billion daily average volume, but the trend suggests that it has started to encroach on centralized exchange (CEX) territory.

What’s behind Hyperliquid’s parabolic rise?

Launched in 2023, Hyperliquid gained popularity in April 2024 after launching spot trading. This, combined with its aggressive listing strategy and easy-to-use onchain user interface, helped to lure in a wave of new users.

The platform’s real explosion, however, came in November 2024, following the launch of its HYPE (HYPE) token. Hyperliquid’s trading volume skyrocketed, and it now boasts over 400,000 users and more than 50 billion trades processed, according to data from Dune.

While Hyperliquid started as a high-performance perpetual futures and spot DEX, its ambitions have since expanded. With the launch of HyperEVM on Feb. 18, the project has become a general-purpose layer-1 chain capable of supporting third-party DeFi apps built on top of its infrastructure. 

As one of Hyperliquid’s founders, Jeff Yan, put it, 

“Most L1s build infrastructure and hope that others will come build the killer apps. Hyperliquid takes the opposite approach: polish a native application and then grow into general-purpose infrastructure.”

If this approach works, the liquidity driven by Hyperliquid’s core DEX could naturally feed into the broader ecosystem and vice versa, creating a flywheel effect.

Related: Hyperliquid flips Solana in fees, but is the ‘HYPE’ justified?

Will Hyperliquid become a sustainable CEX alternative?

According to CoinGecko, Hyperliquid now ranks 14th among derivatives exchanges by open interest, sitting at $3.1 billion. That’s still behind Binance’s $22 billion but ahead of older names like Deribit or derivatives divisions of Crypto.com, BitMEX, or KuCoin. It’s the first time a DEX is competing so closely with established CEXs.

Furthermore, as Hyperliquid deepens its focus on specialized trading pairs, it continues to chip away at the market share of major exchanges. The DEX accepts not only Arbitrum USDC as collateral but also native BTC. This makes it one of the few decentralized platforms that handle BTC wrapping and unwrapping natively, giving users the option to use BTC for Web3-wallet-based trading.

X user Skewga.hl noted that Hyperliquid’s BTC perpetual futures volume share recently hit an all-time high, reaching almost 50% of Bybit’s and 21% of Binance’s. Skewga.hl wrote,

“No DEX has ever come this close to matching Tier 1 CEX volume.” 

Since 2024, perpetual swaps have seen a revival as a trading tool. During the 2021–2022 bull market, daily perps volume averaged around $5 billion. In early 2025, that number often exceeded $15 billion, with Hyperliquid accounting for nearly two-thirds of it.

Data from DefiLlama illustrates the shift: while dYdX (green) dominated in 2023–2024, the landscape diversified significantly in 2024—and by 2025, Hyperliquid (pink) had taken the lead.

Despite the recent JELLY token scandal, which involved the exchange halting trading and delisting a low-market-cap token that a whale had exploited, Hyperliquid remains a popular exchange among DeFi and DEX traders. It has yet to capture institutional investor flows or scale to the level of top-tier CEXs. However, if its layer 1 ecosystem gains traction with developers, Hyperliquid could evolve into more than just a leading DEX.

This article does not contain investment advice or recommendations. Every investment and trading move involves risk, and readers should conduct their own research when making a decision.

…

Learn MoreHyperliquid DEX trading volumes cut into CEX market share: Data