SlowMist found hidden code in a Udesk chat script that stole login data and rewrote deposit addresses on three trading sites.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Keystone's breach has expanded: hackers also stole a key that could let counterfeit wallets pass authenticity checks, a serious hardware wallet security issue.
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
Janus Henderson and Centrifuge launched an issuer-sponsored Nasdaq-100 fund on Stellar, a licensed alternative to third-party stock tokens.
Explains how an employer paid in bitcoin can track the wallet's spending through output sizes and known addresses, a real privacy leak.
Multiple high-severity bugs patched in bitcoinjs-lib, bip39, bip32 and tiny-secp256k1, which many wallets and SDKs depend on; check and upgrade.
Zcash co-founder Sean Bowe proposes ending the grants committee's 8% share of new ZEC, redirecting it to a reserve for future miners while the committee keeps funds already received.
Ripple received final OCC approval to become a national trust bank, letting it manage RLUSD reserves and provide digital asset custody.
Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets, and says no private keys were accessed.
Solana now requires a 1 SOL burn per bug report after AI-generated spam flooded security teams, with 809 reports in one contest.