Immunefi's CEO says the PHP flaw shows AI-driven vulnerability discovery is arriving, with smaller sites slow to patch.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
CoinDCX confirmed a $16 million loss from retired wallets, days after its CEO dismissed breach reports as a false alarm.
Keystone will destroy 18,835 wallets after a device-authentication key theft, and owners of old-key devices need extra checks.
Canada's draft stablecoin rules require 1:1 reserves and three-day redemptions, and keep the ban on yields.
A readable mirror of the bitcoin-dev mailing list archive, one page per thread, useful for anyone following protocol debates.
Compares claim mechanics for Nexus Mutual direct cover and Kraken's Firelight arrangement, which caps cover at $100,000 per depositor address.
Consensys warns Ethereum node operators about eMudhra signing exposure; Web3Signer deployments may need immediate access-control changes.
A Bitcoin wallet flaw let rogue servers swap in fake transactions and raise fees, and at least one user lost bitcoin before a patch.
Foundation traced Passport phishing emails to compromised Cloudflare API keys, with the company saying hardware wallets and funds were not affected.
Keystone's website breach exposed hardware wallet buyers' shipping details, raising risks of targeted scams and physical attacks.