Security
Every Security read CryptoBloggers has picked: 828 so far, 722 in the last 30 days, strongest first under “Start here” and newest first below.
Security picks in the 6:30 email
The day’s five best crypto reads, plus AI agents doing real things on-chain. Free, every morning at 6:30 a.m. Central.
Every Security card
newest first · page 6 of 28- 1
EIP-8037/EIP-8038 Glamsterdam
ChainSecurity found projects that rely on gas invariants that EIP-8037 and EIP-8038 break, so they could be vulnerable after Glamsterdam.
- 2
Aave’s Risk Manager Wants a Borrowing Speed Limit After Binance Hackers Took $44.6 Million
Aave's risk manager proposes borrowing speed limits after a $44.6M ETH loan tied to the Binance hack.
- 3
Bitcoin Fixes This? Paraguay President Resigns After Bank Lockout Hits 60% of Country
Paraguay's president resigned after a bank lockout hit a large share of depositors at Ueno, reviving the self-custody argument.
- 4
Former FBI Agent Pleads Guilty to $2.47 Million Crypto Theft
Former FBI agent pleaded guilty to a $2.47M crypto theft using credentials tied to 35 investigations.
- 5
Mercado Bitcoin Said Its Hack Was Contained, But Blockchain Data Tells a Different Story
Forensic tracing finds $48.6M moved across 11 chains from Mercado Bitcoin, with customer deposit addresses drained hours after the exchange said the breach was contained.
- 6
Zcash Upgrade Could Lock $16 Million in Crypto Forever
Zcash's upgrade will stop accepting withdrawals from an older privacy pool, potentially stranding roughly $16 million in coins held there.
- 7
OpenAI Found 948 Linux Security Flaws—And Figured Out How to Exploit Them
OpenAI's automated system found 948 Linux security flaws and produced working exploits and fixes at about $1,279 per flaw. Not crypto, so this is a security story outside our scope.
- 8
The Time Warp: How Lying About the Time Could Break Bitcoin's Difficulty
Explains the Bitcoin time warp weakness in difficulty adjustment, where a majority miner can distort retargeting by timestamp manipulation.
- 9
Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack
Binance and Deribit revoked SignalPlus API keys after a fake Teams invite attack on an engineer's computer, with under $82,000 in losses to be reimbursed.
- 10
Fed, OCC check US banks after Binance hack as experts flag security risks
US regulators reportedly contacted banks after a $6.3 billion Binance security hack, raising transaction security concerns.
- 11
Blockaid Warns Reth Bug Can Produce Incorrect State Proofs
Blockaid warns a reth bug can produce incorrect state proofs, with patched builds for reth, op-reth and Base.
- 12
Gauntlet Restricts V1 Vault Deposits After Reported op-reth Vulnerability
Gauntlet restricted V1 vault deposits after a reported op-reth vulnerability and is pausing allocations.
- 13
Floki Takes Trading Bot Offline Amid Exploit Investigation
Floki took its trading bot offline during an exploit investigation and is moving users to new wallets.
- 14
What is TraderTraitor, the hacking squad behind the $6.3 billion Binance heist
Profile of TraderTraitor, the North Korea-linked group behind the $6.3 billion Binance heist and other major thefts.
- 15
If Crypto Can Be Frozen, Is It Yours?
After a $6.43B Binance hack, Tether and Circle froze most stolen stablecoins within an hour and Arbitrum's council moved the hacker's ether, raising questions about who controls frozen crypto.
- 16
Fed and OCC Quiz U.S. Banks After $6.3 Billion Binance Hack
Fed and OCC are checking U.S. banks for vulnerabilities after the reported $6.3 billion Binance hack.
- 17
Binance Pulls Every SignalPlus API Key, Tells Users to Check Their Positions and Orders
Binance pulled every SignalPlus API key and told users to check positions and orders, but neither party has explained the issue or whether anyone lost money.
- 18
Gate CEO says crypto exchanges must prove they can survive a hack like Binance’s
Gate's CEO says the exchange holds cold-storage reserves to cover customer balances even if hot wallets are drained, with an independent audit underway. Useful post-hack signal, but a self-description until the audit lands.
- 19
VerifiedX Ships Vault Update Aimed at Stopping Hacked vBTC Transfers
VerifiedX added a vault feature letting owners set their own delay before vBTC transfers settle, after attackers took 18,000 BTC from Binance. The main claim is a product response to a hack.
- 20
Binance cuts SignalPlus access after security warning, urges users to check accounts
Binance removed trading connections to SignalPlus as a precaution after a security warning; its own systems are reported unaffected.
- 21
Canadian Man Extradited to US Over Plot to Hijack University Supercomputers for Crypto
Canadian Ryan Roach was extradited to the US over a plot to hijack university supercomputers to secretly mine crypto.
- 22
Binance Revokes SignalPlus API Keys After Security Warning
Binance revoked SignalPlus API keys after a security warning and told users to check positions and orders before reconnecting.
- 23
Coinbase Lays Out Hot Wallet Controls as Customers Ask if a Binance-Style Hack Could Hit It
Coinbase outlined hot wallet safeguards, including keys never reassembled and caps on hot wallet refills, after the Binance breach.
- 24
Mercado Bitcoin hack continued hours after exchange said attack was contained, report finds
Bitquery reports the Mercado Bitcoin attacker kept draining funds for hours after the exchange said the hack was contained, taking about $391,000 and possibly linked to BitMart.
- 25
Crédit Mutuel Arkéa Says Attackers Drained Its Own Account and May Have Cashed Out in Crypto
Crédit Mutuel Arkéa says attackers drained its own bank account, with a reported €118 million loss and possible crypto cash-out.
- 26
XRP Ledger Turns On Fix for Delegated Burn Permission That Could Mint New Tokens
XRP Ledger enabled a fix for delegated burn permissions that could allow minting new tokens, after a first attempt broke 12 days into the window.
- 27
OpenAI says its AI can break into Linux at scale. Here's what it means for crypto
OpenAI reports its AI found 948 Linux flaws and wrote working attacks; CoinDesk looks at what this means for crypto security.
- 28
Crédit Mutuel Arkéa resumes operations after attack, assesses losses
Crédit Mutuel Arkéa resumed operations after an attack via a service provider; customer funds reportedly unaffected, losses being assessed.
- 29
Binance, Polymarket seek Polygon hard fork to recover $6.8M in stolen crypto
Binance and Polymarket are seeking a Polygon hard fork to return $6.8M in stolen tokens, which are already frozen by block producers.
- 30
Zcash is about to freeze $16 million in its oldest privacy pool
Zcash is set to freeze about 12,200 ZEC, roughly $16M, left in its oldest privacy pool, Sprout.