A Bitcoin wallet flaw let rogue servers swap in fake transactions and raise fees, and at least one user lost bitcoin before a patch.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
A widely used agent wallet toolkit had a web3.py status check that always failed, so successful Permit2 approvals were reported as failures and agents could re-approve.
A test harness builder reports recurring payment bugs in agent payment flows, like lost replies causing double payments, across about 30 projects on test tokens.
Foundation traced Passport phishing emails to compromised Cloudflare API keys, with the company saying hardware wallets and funds were not affected.
Keystone's website breach exposed hardware wallet buyers' shipping details, raising risks of targeted scams and physical attacks.
CoinDCX confirmed a $16 million loss from retired wallets, days after its CEO dismissed breach reports as a false alarm.
Keystone customers say a breach exposed data the hardware wallet maker said it deletes after 180 days, casting doubt on its privacy claims.
Explains what holders of USDC and JPM Coin actually own and can redeem, clarifying tokenized deposits versus stablecoins.
A security advisory: Electrum has a critical exploit, and users should upgrade to 4.8.3 before signing any transactions.
Electrum users can be tricked by malicious servers that substitute fake payments and raise fees before signing, and one user reportedly lost money.
OCC letter confirms GENIUS-compliant stablecoin issuers cannot pay holders interest, pushing yield into DeFi protocols.