Blockchain & Cryptocurrency,
Cryptocurrency Fraud,
Fraud Management & Cybercrime
Also: CFTC-led $48M Fraud Case; NFT Founder Charged in $10M Scam
In the rapidly evolving landscape of digital assets, incidents of cybersecurity breaches have become alarmingly frequent. The current week highlights a series of significant events, showcasing vulnerable areas in blockchain technology and the proliferation of cryptocurrency-related crime. Notably, attacks on Harmony and BTCPay Server raised urgent concerns among users, while the U.S. Commodity Futures Trading Commission (CFTC) and federal prosecutors took action against fraudulent activities totaling millions of dollars. Moreover, North Korea’s threat actor Kimsuky has begun utilizing artificial intelligence to enhance its cyberattack strategies.
Harmony Confirms Exploit After Billions of Tokens Minted
Harmony, a blockchain platform, has recently confirmed a significant exploit where an attacker minted approximately 4 billion of its One tokens without proper authorization. This incident came to light when a user on social media platform X, known as Juiceberg, reported that the hacker manipulated empty transaction records to generate the tokens, most of which had already reached various exchanges. Approximately 115 million One tokens, however, remained directly accessible on the network.
In response to this alarming situation, Harmony announced its collaboration with exchanges to halt and freeze any potentially illicit funds. The company is in the process of developing a software fix while also evaluating the possibility of reversing the unauthorized transactions. As of now, the technical vulnerability that facilitated the breach remains undisclosed. Consequently, the market price of One witnessed a drastic decline of 34%, reducing its value to approximately $0.0008, and estimating the worth of the newly minted tokens at around $3.2 million.
This is not Harmony’s first brush with disaster; the platform faced a considerable hack in 2022 when attackers absconded with nearly $100 million from its Horizon bridge. At that time, the FBI identified the culprits as North Korean operatives.
BTCPay Server Warns Of Active Security Attack
Meanwhile, BTCPay Server, a platform designed to enable individuals and businesses to accept bitcoin payments without relying on a third-party payment processor, issued a warning about an active security attack exploiting a critical vulnerability. The organization urged all users to update their servers to version 2.4.2 immediately or to shut down their servers until an update could be performed. The extent of the impact on users remains unreported, as does whether any funds have been compromised.
Violent Crypto Thefts Surge In 2026
In a deteriorating climate of safety surrounding digital assets, reports from Chainalysis reveal that violent criminals targeted cryptocurrency holders aggressively. In the first half of 2026 alone, over $30 million in cryptocurrency was stolen, positioning the year to reach record-breaking figures. France has emerged as an unsettling hotspot for violent crimes associated with digital assets, recording 30 publicly known incidents within the country by mid-2026, a stark increase from 19 reported throughout all of 2025. French authorities have stated they made approximately 200 arrests linked to these violent thefts.
Chainalysis attributes this alarming trend to the dissemination of personal information regarding cryptocurrency holders, enabling attackers to target victims’ families and friends. Despite the increase in violence, the success rate for criminals has plummeted, with only about a quarter of theft attempts resulting in actual payment—a marked decrease from previous years.
US CFTC Accuses Florida Man Of $48 Million Crypto Fraud
The CFTC has launched a significant fraud case against Christopher Delgado, a Florida businessman accused of misappropriating $48 million in customer funds. The commission claims Delgado operated a Ponzi scheme through his company, Goliath Ventures, wherein he utilized new customer investments to pay off earlier clients rather than producing legitimate returns. Allegedly, more than 1,600 customers invested nearly $397 million into Delgado’s scheme. Instead of investing these funds, he purportedly spent lavishly on luxury goods, travel, and even pet grooming. Additionally, both the CFTC and the Securities and Exchange Commission (SEC) have initiated legal actions against him, as Delgado pleaded guilty to federal fraud and money laundering charges in June.
NFT Founder Faces Federal Fraud Charges
Federal prosecutors have charged Taj Tarsha, the founder of an NFT startup, with securities and wire fraud. Tarsha allegedly misappropriated millions raised from investors, diverting funds to personal expenses rather than honoring commitments to develop a digital marketplace for NFTs. More than $10 million was reportedly raised from nearly 70 investors, who were promised future digital tokens. Instead of fulfilling these commitments, Tarsha allegedly used investor contributions for gambling, a condominium loan, and other unrelated expenditures.
North Korean Hackers Use AI to Target Crypto Firms
From the realm of state-sponsored cybercriminality, North Korean threat group Kimsuky is reportedly employing artificial intelligence to enhance its cyberattack tactics against cryptocurrency firms. South Korean firm Genians has indicated that Kimsuky operates AI systems locally, making it easier for the group to analyze data without resorting to external online services. This strategy is coupled with sophisticated malware to automate components of their cyberattacks and create realistic phishing documents.
US Sanctions Two Iranian Crypto Exchanges
Further demonstrating the global dimension of cryptocurrency enforcement, the U.S. Treasury has sanctioned two Iranian crypto exchanges—Shelbit and Aban Tether—citing their roles in facilitating large flows of cryptocurrency and evading U.S. sanctions. The Treasury’s allegations suggest these exchanges have assisted the Iranian Revolutionary Guard Corps, among other designated terrorist groups. The sanctions serve as part of a broader strategy to curtail illicit financial networks stemming from Iran.