Multiple high-severity bugs patched in bitcoinjs-lib, bip39, bip32 and tiny-secp256k1, which many wallets and SDKs depend on; check and upgrade.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Keystone's breach has expanded: hackers also stole a key that could let counterfeit wallets pass authenticity checks, a serious hardware wallet security issue.
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
SlowMist found Udesk script malware that can swap displayed and copied crypto deposit addresses, a clipboard-style theft risk.
Janus Henderson and Centrifuge launched an issuer-sponsored Nasdaq-100 fund on Stellar, a licensed alternative to third-party stock tokens.
Explains how an employer paid in bitcoin can track the wallet's spending through output sizes and known addresses, a real privacy leak.
Zcash co-founder Sean Bowe proposes ending the grants committee's 8% share of new ZEC, redirecting it to a reserve for future miners while the committee keeps funds already received.
Ripple received final OCC approval to become a national trust bank, letting it manage RLUSD reserves and provide digital asset custody.
Bloom pledged to reimburse nine traders after $953,000 was drained from 48 wallets, and says no private keys were accessed.
Solana now requires a 1 SOL burn per bug report after AI-generated spam flooded security teams, with 809 reports in one contest.