Security News
Latest Security News
News
Besu discloses five CertiK-found flaws after patching them in version 26.7.1, released July 27. Besu published detailed advisories on August 14 covering five Besu security vulnerabilities found by CertiK and fixed in version 26.7.1, released on July 27. The issues…
News
MANTRA Chain halted validators and transactions during an incident investigation, freezing asset transfers with no restart timeline announced.
News
Wyoming moved its state-issued FRNT stablecoin from LayerZero to Chainlink CCIP after reviewing security and disclosure practices.
Feature
Three hardware wallet and broker breaches in a single week exposed 253,487 customers. The common thread is not the companies themselves but the third party vendors they trusted with physical addresses, and a single Metabase zero day that connected two of the three incidents.
News
Payward joined Anthropic’s Project Glasswing and plans to use Claude Mythos 5 to scan its environments for software vulnerabilities.
Feature
A $550,000 community audit contest uncovered two critical vulnerabilities in XRP Ledger features that could have drained user accounts without private keys. The findings reveal how Ripple’s audit-before-release model diverges sharply from the broader crypto industry’s patch-after-exploit norm. XRP Ledger…
News
BNB Chain has scheduled its Pasteur hard fork for Aug. 25, introducing three changes intended to strengthen cross-chain transfers, tighten validator controls, and raise tested transaction capacity from 1,237 to 2,324 transactions per second. BNB Chain said in an Aug.…
News
The Coldcard seed-generation failure has exposed about $116 million in Bitcoin to theft while renewing questions about how users verify the security of self-custody tools, according to TEXITcoin founder Bobby Gray. Bobby Gray, founder of TEXITcoin, told crypto.news that Coldcard…
News
Harmony is working with exchanges and weighing a rollback after an analyst reported an unauthorized 4 billion ONE mint that sent ONE lower.
Feature
A five-year firmware error turned Coldcard into the largest known Bitcoin seed-theft, while AI-assisted analysis of the broader ecosystem is surfacing how systematically the industry has underestimated the same class of vulnerability. On July 30, 2026, a coordinated sweep removed…
News
Ethereum Foundation is recruiting a protocol security researcher to use artificial intelligence, fuzz testing, and manual audits to find vulnerabilities across Ethereum’s core infrastructure. Ethereum security role covers the full protocol According to the job posting, the researcher will join…
Learn
Bridges move assets between blockchains using lock-and-mint, burn-and-mint, or liquidity pool mechanisms, but their trust assumptions have made them the most exploited category in crypto. Introduction Blockchains do not talk to each other. Ethereum cannot read Solana’s state. Arbitrum cannot…
Learn
Smart accounts replace seed phrases with passkeys, social recovery, and gas sponsorship, making self-custody usable without memorizing 12 words. Introduction The standard advice for anyone entering crypto has not changed in a decade: write down 12 words, store them offline,…
Learn
A testnet is a separate blockchain network that mirrors a production chain’s rules and functionality but uses tokens with no monetary value. It is where developers break things, test upgrades, and discover bugs before those bugs can cost anyone real…
Learn
A zero-knowledge proof lets one party prove to another that a statement is true without revealing any information beyond the truth of the statement itself. It is the cryptographic technique behind blockchain privacy, scalable rollups, and a growing number of…
Learn
On November 29, 2024, a perpetual futures exchange called Hyperliquid distributed 31% of its total token supply to users who had traded on the platform. There was no venture capital allocation to dilute the drop. There was no points program…