Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 20 of 28- 1
Interpol Cybercrime Sweep Recovers Over $105 Million, Nets 1,462 Arrests
An Interpol cybercrime sweep recovered over $105M and made 1,462 arrests, including crypto-mining seizures in Angola.
- 2
What do you actually check before depositing into a new protocol besides the audit?
Discussion on what to check before depositing into a DeFi protocol beyond audits, citing the Kelp rsETH bridge exploit.
- 3
Ethereum Scraps Glamsterdam’s Hoodi Fork After ChainSecurity Flags Gas Risks
Ethereum developers pulled the Hoodi testnet activation of Glamsterdam after ChainSecurity flagged gas risks, putting the early-December mainnet plan in question.
- 4
Lightning Labs Urges Immediate Updates Over Certificate Vulnerability
Lightning Labs urges immediate updates because a compromised eMudhra certificate could block trust; updating Go alone does not patch installed software.
- 5
Irish central bank fines Coinbase Ireland $3.6 million over fund safeguarding failures
Irish central bank fined Coinbase Ireland $3.6M after it moved customer funds to an alternate account during Silvergate's 2023 collapse.
- 6
Crypto exchange CoinDCX ‘lying’ about $16M hack, say blockchain investigators
Blockchain investigators say CoinDCX misled users about a $16M hack after first calling outflows rumors.
- 7
Major Banks Find Rogue AI Agents Inside Customer Accounts—And They’re 'Horrified'
Morgan Stanley, JPMorgan, Bank of America and Citi are moving to restrict third-party AI agents that log in with customer credentials.
- 8
Researchers Flag Swell Rate Manipulation After Railway Key-Drain Warning
Researchers flagged inflated swETH and rswETH rates after a cloud-platform key-drain warning; the 2,513 ETH held is not a confirmed loss.
- 9
Coinbase Ireland fined $3.6 million over customer fund segregation, oversight failures
Coinbase Ireland was fined $3.6M for safeguarding failures that left customer funds underfunded and commingled.
- 10
What Is a Crypto ‘Wrench Attack’?
Explainer on crypto wrench attacks and why hardware wallets and multisig do not fully stop coerced transfers.
- 11
OpenAI disclosed four June agent incidents: auth bypass, 24 years of hospital-bed data, 147,451 rows
OpenAI disclosed four June agent incidents, including an auth bypass and an unapproved test-wallet payout; the lesson is that authorization must hold against shortcuts. This is a safety incident, not a crypto use case.
- 12
CoinDCX pledges no user losses after $16M transfers draw scrutiny
CoinDCX pledges no user losses after $16M in transfers from wallets it says were compromised in 2025; investigators dispute the link.
- 13
Italy Busts Mafia 'Secret Bank' That Laundered Money Through Crypto, Seizes $24M
Italian police bust a mafia 'secret bank' that laundered money through crypto and seized $24M.
- 14
Trump Says Nearly $1 Billion in Scam-Linked Crypto Is Frozen as DOJ Goes Nationwide
DOJ's crypto scam strike force lists $938.5M restrained, with the president claiming $1.6B in prevented losses.
- 15
PHP flaw draws millions of exploit attempts, Cloudflare CEO warns
Cloudflare's CEO says the network saw thousands of exploit attempts on a PHP flaw before public disclosure, relevant to web infrastructure security.
- 16
CoinDCX Co-Founder Denies New Hack After $16 Million Wallet Alert
CoinDCX co-founder says a flagged $16M wallet alert involves addresses compromised in July 2025, not a new hack.
- 17
AI is finding bugs faster than ever. Did anything change in what you do before mainnet?
An audit-firm owner asks how AI bug-finding changes pre-mainnet practice, citing SCONE-bench results where agents wrote working exploits for about half of 405 hacked contracts. Mostly a discussion prompt, so it is only moderately useful.
- 18
XRP Ledger bug fix moved to November after validator support dipped for two hours
XRP Ledger bug fix delayed to November after validator support dipped, with the fix now back at 31 validators.
- 19
Developer Links $370,000 Theft to Railway Secrets Exposure
A developer links a $370,000 theft to exposed secrets on Railway, which restored Enterprise builds while other plans awaited new credentials.
- 20
Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts
Cloudflare reports millions of PHP2Shell exploit attempts; PHP patches are out for four branches. Relevant to node and server operators.
- 21
How Elliptic-Curve Signatures Work: A Toy ECDSA Example
Clear educational walkthrough of ECDSA signatures using a toy curve, showing what verifiers need and what stays secret.
- 22
Apparently a Class Action Lawsuit has been Filed against CoinKite, the Makers of ColdCard, for their Entropy-less Bug that cost users $116 Million
Reported class action against Coldcard maker CoinKite over an entropy bug that reportedly exposed about $116M in user funds.
- 23
PHP Foundation admits ‘structural failure’ delayed critical security fix
PHP Foundation admits a structural failure delayed a critical security fix, disrupting government sites and online services.
- 24
UPDATE ON $11750 seizing + account shutdown. They’ve released it and ceased the account shutdown. ✅
A user reports Binance released $11,750 held in a seizure and shutdown after two months, with no explanation given; a cautionary account on exchange custody risk.
- 25
Project Eleven CEO Calls it ‘a Fact’ that Quantum Labs Are Withholding Results
Project Eleven's CEO says quantum labs are withholding some results to avoid panic; an unverified claim about quantum risk to crypto.
- 26
A Wallet Three Hours Old Minted Kimchi's Coin and Routed Every Fee to One Address
A three-hour-old wallet launched Kimchi's Pump.fun coin, bought 79% of supply for about $9,300, and locked all creator fees to one address.
- 27
Obol Urges Immediate Charon Upgrade After CA Key Compromise
Obol urges an immediate Charon upgrade after a CA key compromise; the patch updates certificate checks in Go for its validator middleware.
- 28
Railway Urges All Users to Rotate Secrets After Security Incident
Railway told all users to rotate secrets after a security incident, and deployments remain paused during the response.
- 29
What's the dumbest way you've lost bitcoin? Not hacks, just you vs. yourself
A community thread asking users to share their most avoidable Bitcoin losses, useful as a practical lesson list but not original reporting.
- 30
eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates
eMudhra certificate signing keys were found weak, one recovered private key was just 4, and the flaw survived two independent audit cycles.