Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 3 of 28- 1
Crypto Privacy Expands to the Network Layer
Zodl makes IP shielding default for Zcash users, part of a wider push to hide transaction origins at the network layer.
- 2
Ripple-linked Uphold faces withdrawal delays amid ‘bank run’ claims
Uphold faces withdrawal delays, layoffs and regulatory issues, with the company saying funds are safe. A useful counterparty-risk signal for users.
- 3
Phylax and Titan Bring Circuit Breakers to Ethereum
Phylax and Titan add circuit breakers that check transactions against app safety rules before settlement; Titan builds about half of Ethereum's blocks.
- 4
Mercado Bitcoin to resume cash withdrawals after $49M hack
Mercado Bitcoin restores fiat withdrawals after a $49M hack, while crypto transfers stay suspended.
- 5
Binance Warns iOS Flaw Could Expose Wallet Seed Phrases as Apple’s Latest iPhone Patch Stays Silent
Binance warns of an unpatched iOS sandbox escape that could expose wallet seed phrases to other apps, a security alert wallet users should see.
- 6
Ledger SDK Sends Signing Metadata by Default
A Ledger SDK sent signing metadata including addresses and device details by default; a security issue for wallet users.
- 7
Ethereum’s Glamsterdam Upgrade Stalls on Gas-Change Risks to Live Contracts, Pending Audits
Glamsterdam stalls with no testnet date while auditors check whether gas changes could break live Ethereum contracts.
- 8
Consumer Protection Tuesday: Announcing Security Checkup - your account's security score
Coinbase launches an account security score feature for users, a product announcement of modest interest.
- 9
Binance Tells iPhone Users to Delete Sideloaded Apps Over iOS Exploit
Binance warns iPhone users to delete sideloaded apps because an iOS exploit could expose seed phrases and keys.
- 10
Malicious Pull Requests Target Vizor and Zingo Wallets
Malicious pull requests targeted Vizor and Zingo wallet repos with instructions to make AI reviewers ignore secret uploads; none merged, a useful supply-chain security warning.
- 11
Onramp Launches Business Bitcoin Accounts With Two-Person Withdrawal Approvals as Wrench Attacks Climb
Onramp launched business bitcoin accounts with two-person withdrawal approvals, a response to rising wrench attacks.
- 12
Binance Labs-backed Initia hacked again, $3.3M lost in three weeks
Initia lost $3.3M across two hacks in under three weeks, more than its remaining TVL.
- 13
Initia Halts L1 After $605,000 USDC Outflow, Team Says
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
- 14
Binance warns iOS flaw could expose crypto wallet keys
Binance warns of an iOS flaw that could expose iPhone wallet keys, and it is unclear whether Apple's latest updates fix it.
- 15
A vulnerability affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
- 16
Ethlabs Urges Glamsterdam Hold Pending Audit Findings
Ethlabs urges holding the Glamsterdam upgrade as four audit reports flag deployed contracts that could break.
- 17
An 11-year-old Ethereum wallet moved $4.6 million and dodged a scam set up in minutes
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
- 18
SlowMist Flags iOS Sandbox Escape Risk to Wallet Data
SlowMist warns that iOS sandbox escape flaws could expose plaintext secrets stored locally in wallet apps.
- 19
Crypto exchanges need hard dollar caps on hot wallets, CertiK says
CertiK argues exchanges need hard dollar caps on hot wallet exposure, not just cold-storage ratios as a security measure.
- 20
XRP Ledger maps out quantum-proof accounts, with no extra fees for users
XRP Ledger Foundation lays out a quantum-resistant account design with no extra user fees and a path to full transition by 2028.
- 21
Sigma Prime Releases High-Priority Lighthouse Security Update
Sigma Prime released a high-priority Lighthouse security update; details are withheld until operators upgrade.
- 22
North Korean hackers create memecoins to launder funds from Binance hack: Elliptic
Elliptic traced Binance-hack proceeds through six new NEAR memecoins used to obscure transfers, a concrete laundering investigation.
- 23
Attackers Exploit Alpine SSH Password-Bypass Flaw
Attackers are exploiting an Alpine SSH password-bypass flaw; operators should patch and restart SSH or disable password authentication.
- 24
Binance Hack Launderers Mint Elon Musk and Animal Meme Coins to Move Stolen Crypto
Elliptic says Binance hack launderers are minting meme tokens with Elon Musk and animal logos and routing stolen funds through liquidity pools to obscure the trail.
- 25
Anza’s Plan to Kill Solana’s Durable Nonces Puts Custodians on a Six-Month Clock
Anza's draft to remove Solana durable nonces would bar activation before May 5, 2027, putting custodians on a six-month clock after Drift's $295.7M exploit.
- 26
Sanctioned Canadian Crypto OTCs Served Iran and Drug Cartels
Chainalysis details sanctioned Canadian OTCs that moved millions for Iranian networks and drug cartels after OFAC designations.
- 27
Mercado Bitcoin begins post-hack reopening without a timeline for withdrawals
Mercado Bitcoin is reopening in phases after a hack, with pre-hack balances visible but no withdrawal timeline.
- 28
Chainalysis Reopens Compliance Tools With Mandatory Credential Resets
Chainalysis reopens compliance tools with mandatory credential resets after an incident; operational news.
- 29
North Korea Turns DIY Meme Coins Into a Laundering Pipe for Stolen Binance Crypto, Elliptic Says
Elliptic traced about $430,000 of stolen Binance funds through six NEAR memecoins launched by North Korean launderers.
- 30
North Korea Is Minting Its Own Meme Coins to Launder Binance Hack Loot
Elliptic traced North Korean launderers minting six throwaway memecoins on NEAR to move about $430,000 of Binance hack funds.