A practical guide to verifying software wallets, covering fake Firefox extensions stealing recovery phrases and an Electrum signing flaw.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
CoinDCX confirmed a $16 million loss from retired wallets, days after its CEO dismissed breach reports as a false alarm.
Keystone customers say a breach exposed data the hardware wallet maker said it deletes after 180 days, casting doubt on its privacy claims.
Explains what holders of USDC and JPM Coin actually own and can redeem, clarifying tokenized deposits versus stablecoins.
A security advisory: Electrum has a critical exploit, and users should upgrade to 4.8.3 before signing any transactions.
Electrum users can be tricked by malicious servers that substitute fake payments and raise fees before signing, and one user reportedly lost money.
OCC letter confirms GENIUS-compliant stablecoin issuers cannot pay holders interest, pushing yield into DeFi protocols.
An attacker minted tokens on Initia and bridged out $2.7M, with a suspected MoveVM flaw and the chain halted with no restart date.
Uses Uniswap's executed funding proposal to explain how a DAO sentiment poll, binding vote and treasury-authorizing contract differ.
Twenty-two companies, including Wells Fargo, Cisco and Intuit, now object to their shares trading on the planned OKX-ICE tokenized stock venue.
A draft Ethereum ERC proposes an Agent Safety Framework for attributable, versioned safety specs for agents holding credentials; it is a standards proposal, not a use case.