Keystone's breach widened as an attacker took its device authentication key; it will destroy 18,835 devices and cannot rule out fakes sold after Oct. 20.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
Keystone will destroy almost 19,000 hardware wallets after a device key leak, raising phishing and impersonation risks for owners.
CoinDCX confirmed a $16 million loss from retired wallets, days after its CEO dismissed breach reports as a false alarm.
Canada's draft stablecoin rules require 1:1 reserves and three-day redemptions, and keep the ban on yields.
A readable mirror of the bitcoin-dev mailing list archive, one page per thread, useful for anyone following protocol debates.
Compares claim mechanics for Nexus Mutual direct cover and Kraken's Firelight arrangement, which caps cover at $100,000 per depositor address.
Consensys warns Ethereum node operators about eMudhra signing exposure; Web3Signer deployments may need immediate access-control changes.
A Bitcoin wallet flaw let rogue servers swap in fake transactions and raise fees, and at least one user lost bitcoin before a patch.
Foundation traced Passport phishing emails to compromised Cloudflare API keys, with the company saying hardware wallets and funds were not affected.