On December 28, deBridge co-founder Alex Smirnov criticized Flow's blockchain rollback, executed without coordination with key partners, following a $3.9 million exploit. The rollback removed around six hours of activity and Flow halted new transaction validations, while requests for freezes were sent to major exchanges and users were told to resubmit transactions.

On December 28, 2025, OKX CEO Star Xu warned about wallet theft risks in DEX Bot products after a DeBot-linked incident resulted in an estimated $255,000 loss. He argued that products uploading user private keys to servers face risks comparable to centralized exchanges and therefore should follow exchange-level security standards. The comments came amid broader 2025 crypto platform attacks, where reported losses have surpassed $3.40 billion.

On December 28, 2025, OKX CEO Star Xu called for decentralized exchanges and trading bots to meet exchange-level security standards after weekend exploits exposed risks. He warned that many bot products store users' private keys on centralized servers, and highlighted OKX's planned smart accounts using TEE and the conceptual OKX Pay. The Flow team said about $3.9M was moved off-network in a recent attack.

In late 2025, crypto breaches escalated as Chainalysis tallied $3.4 billion in losses for the year. During Christmas week, Trust Wallet disclosed a $7 million Chrome-extension breach, while DeBot confirmed a $255,000 theft traced to a server in Japan; OKX's Star Xu cautioned that DEX bots and custodial wallets heighten risk.

On December 28, 2025, Kaspersky's SecureList reported that stolen crypto accounts listed on dark-web markets fetch an average of $105, with individual prices ranging from $60 to $400. The data is harvested by phishing kits, exfiltrated via email, Telegram bots, or admin panels, and then monetized immediately or routed into broader resale pipelines.

On December 28, 2025, Bitfinex Securities' Head of Operations Jesse Knutson projected strong 2026 growth in tokenized real‑world assets led by emerging markets. He cited on‑chain capital formation and fractional ownership as catalysts, contrasted developed‑market Treasuries with developing‑market real estate and commodities, and said the market could reach one trillion dollars within the next decade despite legal, liquidity, and interoperability hurdles.

On December 28, DeBot disclosed a wallet security breach involving compromised private keys and about $255,000 in unauthorized transfers. The team says it will fully compensate affected users, is monitoring impacted accounts, and warns against fake claim forms. Community responses urged moving funds to secure addresses as the attacker consolidates stolen assets.

Indian police in Hyderabad have arrested a former Coinbase customer support agent over an alleged role in the crypto exchange's data breach that began in December 2024 and exposed information for 69,461 users. Coinbase declined to pay a $20 million ransom, instead incurring $307 million in related costs and offering bounties while also facing a shareholder lawsuit over its handling of the incident.