SlowMist found Udesk script malware that can swap displayed and copied crypto deposit addresses, a clipboard-style theft risk.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Keystone's breach has expanded: hackers also stole a key that could let counterfeit wallets pass authenticity checks, a serious hardware wallet security issue.
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
Ripple received final OCC approval to become a national trust bank, letting it manage RLUSD reserves and provide digital asset custody.
Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets, and says no private keys were accessed.
Solana now requires a 1 SOL burn per bug report after AI-generated spam flooded security teams, with 809 reports in one contest.
Ethereum developers fixed a Glamsterdam bug that could have sent staking deposits to builders, after initially rejecting the change.
Zcash co-founder Sean Bowe proposes ending the grants committee's 8% share of new ZEC, redirecting it to a reserve for future miners while the committee keeps funds already received.
The OCC is urging community banks to issue payment stablecoins after finalizing GENIUS Act rules that take effect in January.
Keystone will destroy 18,835 wallets after a device-authentication key theft, and owners of old-key devices need extra checks.