Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 2 of 28- 1
Tron and Tether bring in Chainalysis after T3 crime unit folds
Tron, Tether and Chainalysis are teaming up after the T3 crime unit folded, to trace illicit USDT on Tron and freeze funds faster.
- 2
Ethlabs drops Hegotá slot proposal in push for 2027 quantum readiness
Ethlabs' roadmap proposes a Hegotá slot for quantum readiness, aiming to protect Ethereum accounts by 2027.
- 3
Chainstack says AI-powered security breach exposed customer data; threat now contained
Node provider Chainstack had an AI-powered breach exposing customer data; customers must rotate node credentials.
- 4
Ethlabs proposes advancing Ethereum’s post-quantum to 2027, citing AI acceleration
Ethlabs proposes moving Ethereum's post-quantum migration to 2027, citing AI-driven cryptographic risk.
- 5
South Korea to permit crypto withdrawal freezes during hacking threats
South Korea will allow exchanges to freeze crypto withdrawals when hacking threats arise, following GOPAX's suspension and a $70,000 Prabang hot-wallet breach.
- 6
Bitcoin Core reveals bug that made thousands of nodes trust any stranger on Tor
Bitcoin Core disclosed a fixed October 2025 bug that let thousands of Tor-connected nodes trust any peer, plus a separate bug that could halt block production until a restart.
- 7
Binance CSO unwittingly foreshadowed $6.3B hack tactic months before attack
Binance's security chief described fake coding assessments as a device-compromise tactic in July, a method later used in the exchange's record $6.3B hack.
- 8
Ledger’s SDK snitched users’ transaction data and device info
A code review shows Ledger's SDK sends signing details and transaction metadata to Ledger servers, a privacy and trust issue for wallet users.
- 9
Arkham Traces $63 Million in Bitget Hack Funds to CoinJoin
Arkham traced $63 million of Bitget hack funds into CoinJoin mixing, with another 959 BTC in labelled wallets.
- 10
Bitcoin Core Discloses 3 Patched Bugs, Including a High-Severity Mining Flaw
Bitcoin Core disclosed three bugs fixed in October 2025, including a high-severity mining flaw, now public under its disclosure policy with no known exploitation.
- 11
Aave V3.8 Goes Live With New Reentrancy Guard
Aave V3.8 adds a pool-wide reentrancy lock across 15 networks after governance approval with no opposing votes.
- 12
LlamaRisk Asks Aave to Freeze StakeWise, Lombard and Rocket Pool Tokens on Its V3 Core Market
LlamaRisk asks Aave to freeze five liquid staking and restaking tokens on its V3 core market, a notable risk governance move.
- 13
Across Back Online After Namecheap Social Engineering Handed Domain to Attacker
Across's domain was handed to an attacker through Namecheap social engineering; the site is back under the protocol's control, though the loss estimate is unconfirmed.
- 14
A High-Severity Bug Could Have Stalled Bitcoin Mining—Bitcoin Core Has a Fix
Three Bitcoin Core bugs, one able to halt a miner's block building, have been patched; no coin theft involved.
- 15
Bitcoin Core Discloses Bugs That Could Freeze Mining Nodes
Bitcoin Core disclosed bugs that could freeze mining nodes; fixes shipped in October 2025 and details were held until the vulnerable 29.x line reached end of life on Oct. 27.
- 16
Stacks Tests Post-Quantum Signatures With sBTC Transfer
Stacks tested a post-quantum Lamport signature on a mainnet sBTC vault withdrawal; ordinary sBTC wallets are not upgraded.
- 17
Keplr User Reports 1,200 ATOM Move Amid Recovery Effort
Onchain records show 1,200 ATOM from a Keplr user moved outside the Nov. 8 recovery list, though the snippet does not establish who controls the address.
- 18
Bitcoin Core discloses three patched security flaws, including high-severity mining bug
Bitcoin Core disclosed three patched flaws, including a high-severity block template bug affecting miners.
- 19
Ledger’s Developer Kit Reports Every Signature to Ledger Unless Wallets Opt Out, Ambire Developer Says
Ledger's developer kit reports every signature to Ledger unless wallets opt out, a privacy issue wallet users should know about.
- 20
iOS 27.2.1 Leaves Sandbox Flaw Open, Researcher Says
SlowMist says an iOS 27.2.1 sandbox flaw could expose plaintext wallet data; Trust Wallet and Zerion say their users are not affected.
- 21
Crosschain protocol Across restores systems after domain hijack
Attackers hijacked crosschain protocol Across's domain through a social engineering attack on its registrar, Namecheap, and the team is restoring systems.
- 22
Anyone else keeping an eye on Uphold? Not saying it's over(for now), but the last few months are a bit too much.
A timeline of regulatory actions and user losses at Uphold, compiled from public settlement information, raising solvency concerns without proof of insolvency.
- 23
Prisoner Jailed for 8 Years Over $2.7M Crypto Theft Plot Run From His Cell
Robert Barr got eight years for plotting to force a crypto investor to install remote-access software so he could drain the wallet from prison.
- 24
Initia confirms second exploit in 3 weeks, $3.27M stolen in latest attack
Initia suffered its second exploit in three weeks: attacker used compromised cloud credentials to move $3.27M, with about $2.16M still frozen as the network stays halted.
- 25
Across Protocol restores website after hackers hijack domain
Across Protocol's website was hijacked via a social engineering attack on its domain registrar Namecheap, redirecting users to a phishing site; the site has been restored.
- 26
Addressing the Post-Quantum signature bloat problem without sacrificing consumer node validation
Quantifies the ~3,300-byte overhead of ML-DSA-65 signatures and frames the node-validation bottleneck for a post-quantum Bitcoin transition.
- 27
LNbits rushes emergency patch after reported Bitcoin wallet thefts
LNbits issued an emergency patch after reported Bitcoin wallet thefts and warns that older versions are vulnerable and exposed credentials should be replaced even after upgrading.
- 28
LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds
LNbits shipped urgent 1.7.0 after attacks on November 8 drained funds; operators must upgrade before restarting servers, since older versions risk theft.
- 29
Across Protocol warns users to avoid app amid reports of drained wallets
Across Protocol is investigating a possible domain-level security incident, with users reporting drained wallets; avoid the app until resolved.
- 30
Across Urges Users to Avoid App Over Domain Issue
Across bridge warns users to avoid its app over a domain issue, with effect on contracts still unknown.