The US Treasury has sanctioned Cambodian senator Kok An, alleging his involvement in a large-scale crypto scam network. The sanctions, announced on April 23, 2026, target An’s resorts and casinos, which are accused of facilitating the illegal operation. This move highlights ongoing efforts to combat crypto-related financial crimes linked to political figures.
Lido Finance has flagged a 9% exposure to rsETH following the KelpDAO exploit, which has impacted rsETH markets. On April 23, 2026, Lido paused EarnETH withdrawals to limit risk amid the liquidity crunch. The firm confirmed limited exposure and deployed safeguards as the fallout from the KelpDAO breach continues to spread across DeFi platforms.
Trigona ransomware attacks now employ a custom command-line exfiltration tool to enhance data theft efficiency. The attacks, observed recently, demonstrate an evolution in their tactics, allowing faster and more effective data exfiltration from compromised systems. This development highlights ongoing security challenges in the Web3 space, emphasizing the need for robust defenses against sophisticated ransomware threats.
The U.S. government restrained $700 million in crypto assets in a crackdown on global scam networks. The enforcement action, announced on April 23, 2026, aims to combat widespread fraud and dismantle illicit operations within the crypto space, demonstrating increased regulatory efforts to protect investors and maintain security in the digital asset ecosystem.
The EU has proposed new security measures for jet fuel supplies amid ongoing tensions with Iran, highlighting vulnerabilities in energy security. The move aims to diversify sources and prevent disruptions, reflecting lessons from past crises. While specific amounts or dates are not provided, the initiative underscores the EU’s focus on safeguarding critical energy infrastructure during geopolitical conflicts.
Circle's Chief Economist proposed raising USDC borrow rates on Aave V3 after a $292 million exploit against KelpDAO froze the pool for days. The proposal aims to mitigate risks and prevent future exploits, reflecting ongoing concerns about DeFi security and the need for higher collateral costs to protect liquidity pools.
Cybersecurity researchers identified UNC6692, a threat group using social engineering via Microsoft Teams to deploy SNOW malware. The group impersonates IT helpdesk staff, convincing victims to accept chat invitations from malicious accounts. The campaign highlights evolving tactics in social engineering attacks leveraging popular collaboration tools, with ongoing investigations into the threat actor.
