Attackers obtained Keystone's factory authenticity key, so Keystone pulled devices and 25,964 buyer records were exposed; the company says seeds and private keys were not involved.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Keystone's breach has expanded: hackers also stole a key that could let counterfeit wallets pass authenticity checks, a serious hardware wallet security issue.
Electrum fixed a critical flaw where rogue servers could replace pending transactions and redirect bitcoin to attacker addresses.
Malicious Electrum servers baited users into fee-bump actions that stole bitcoin; users on versions before 4.8.3 should upgrade.
Myriad voids 10 prediction markets after an admin-wallet compromise and promises refunds at pre-attack prices.
SlowMist found Udesk script malware that can swap displayed and copied crypto deposit addresses, a clipboard-style theft risk.
Janus Henderson and Centrifuge launched an issuer-sponsored Nasdaq-100 fund on Stellar, a licensed alternative to third-party stock tokens.
Explains how an employer paid in bitcoin can track the wallet's spending through output sizes and known addresses, a real privacy leak.
Multiple high-severity bugs patched in bitcoinjs-lib, bip39, bip32 and tiny-secp256k1, which many wallets and SDKs depend on; check and upgrade.
Zcash co-founder Sean Bowe proposes ending the grants committee's 8% share of new ZEC, redirecting it to a reserve for future miners while the committee keeps funds already received.
Ripple received final OCC approval to become a national trust bank, letting it manage RLUSD reserves and provide digital asset custody.