Trezor raised its password limit after the July Coldcard attacks that cost about $100M, showing how passphrase strength protected some users.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Liquid's bitcoin peg is fully backed again after a $320M exploit, but the federation has not disclosed who paid to fill the gap.
Chainalysis-style tracing shows Binance hack funds moved via Tron bridges Relay, THORChain, Chainflip and Symbiosis, with the FBI pressing THORChain.
A builder's post-mortem on a pricing engine for a 90-minute match-linked derivative: a unit test passed while the price was off by 26 points, and the fix exposed a free arbitrage.
Arbitrum's Security Council froze 8,426 ETH and 74.6M ARB in a Binance-linked wallet, and a walkthrough shows it moved funds without the holder's key.
ZachXBT published 11 addresses and a TRM Labs graph tracing $106M suspected stolen from an EU entity toward Monero and a Tron bridge.
Brazilian exchange Mercado Bitcoin halted withdrawals after a security incident; Hypernative attributes over $40M in outflows to it, while the exchange says no clients lost money.
BTCPay Server told operators to shut down with ./btcpay-down.sh after reports of hot-wallet sweeps. The alert names no affected versions and no patch yet.
Liquid's reserves are fully backed again two months after the $320M exploit, and Adam Back warns developers not to trust AI-suggested fixes blindly.
ZachXBT alleges a cover-up as suspected EU-linked theft reaches $133M, with funds still leaving exchanges after his first alert.
ZachXBT's suspected EU theft estimate has risen to $133M, with another $27M in exchange withdrawals traced, some after he first flagged it.