Keystone says an intruder exposed customer names and addresses from its website, with no payment data or recovery phrases taken; its shipping-data retention policies conflict.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
Consensys warns Ethereum node operators about eMudhra signing exposure; Web3Signer deployments may need immediate access-control changes.
A widely used agent wallet toolkit had a web3.py status check that always failed, so successful Permit2 approvals were reported as failures and agents could re-approve.
A test harness builder reports recurring payment bugs in agent payment flows, like lost replies causing double payments, across about 30 projects on test tokens.
A Bitcoin wallet flaw let rogue servers swap in fake transactions and raise fees, and at least one user lost bitcoin before a patch.
Foundation traced Passport phishing emails to compromised Cloudflare API keys, with the company saying hardware wallets and funds were not affected.
Keystone's website breach exposed hardware wallet buyers' shipping details, raising risks of targeted scams and physical attacks.
CoinDCX confirmed a $16 million loss from retired wallets, days after its CEO dismissed breach reports as a false alarm.
Keystone customers say a breach exposed data the hardware wallet maker said it deletes after 180 days, casting doubt on its privacy claims.
Explains what holders of USDC and JPM Coin actually own and can redeem, clarifying tokenized deposits versus stablecoins.