Tag Archives: security

BTCPay Server Patches Critical LND Credential Bug After Lightning Wallet Drain

Posted on by — No Comments ↓

BTCPay Server has released version 2.4.2 to patch a critical vulnerability that allowed unauthenticated remote access to LND credential files, after attackers used the issue to drain merchant Lightning wallets. The project’s release notes describe a serious bug involving .macaroon files, which are used by LND to manage access permissions. In plain English, those files… Continue reading BTCPay Server Patches Critical LND Credential Bug After Lightning Wallet Drain→

Coldcard Security Notice Puts Bitcoin Wallet Entropy Risk Back In Focus

Posted on by — No Comments ↓

A Coldcard security issue has put Bitcoin hardware-wallet safety back under the microscope after reports that a firmware flaw affected seed generation on some older device versions. According to the validated incident notes, the issue relates to Coldcard Mk3 firmware versions 4.0.1 through 5.0.3, along with Mk4 and Mk5 devices before firmware 5.6.0, and Q… Continue reading Coldcard Security Notice Puts Bitcoin Wallet Entropy Risk Back In Focus→

Ostium Halts Trading After $18M Oracle Key Breach

Posted on by — No Comments ↓

Ostium Halts Trading After $18M Oracle Key Breach Arbitrum-based perpetuals exchange Ostium has suspended trading after an $18.4 million exploit tied to a compromised off-chain oracle key, highlighting again how vulnerable trading venues can be when price infrastructure fails. The attack did not appear to stem from a direct breach of Ostium’s smart contract code.… Continue reading Ostium Halts Trading After $18M Oracle Key Breach→

Bitcoin BIP-361 Draft Puts Quantum Security Back On The Agenda

Posted on by — No Comments ↓

Reference: GitHub Bitcoin BIP-361 Draft Puts Quantum Security Back On The Agenda Bitcoin developers have introduced BIP-361, a draft proposal designed to prepare the network for a future migration away from legacy signature schemes that could become vulnerable in a post-quantum environment. The proposal, titled “Post Quantum Migration and Legacy Signature Sunset,” was authored by… Continue reading Bitcoin BIP-361 Draft Puts Quantum Security Back On The Agenda→

Trusted Volumes Hacker Returns 1,122 ETH, Keeps $2M Bounty

Posted on by — No Comments ↓

A hacker tied to the Trusted Volumes exploit has returned 1,122 ETH to the protocol, closing part of a security incident that began with a multi-million-dollar exploit earlier this year. The on-chain recovery is unusual because the attacker did not return everything. Instead, the wallet linked to the exploit sent back roughly $2 million worth… Continue reading Trusted Volumes Hacker Returns 1,122 ETH, Keeps $2M Bounty→

Ethereum Research Thread Puts Sybil Resistance Back In Focus For Decentralized Networks

Posted on by — No Comments ↓

Ethereum Research Thread Puts Sybil Resistance Back In Focus For Decentralized Networks is a useful reminder that crypto coverage is not only about token prices. Sometimes the more important story is the infrastructure, regulation, security, or product layer sitting underneath the market noise. The immediate point is straightforward: an Ethereum Research post examines Sybil risks… Continue reading Ethereum Research Thread Puts Sybil Resistance Back In Focus For Decentralized Networks→

Cardano Activity Recovers After Yoroi Wallet Sync Fix

Posted on by — No Comments ↓

Cardano activity is showing signs of recovery after EMURGO addressed user concerns tied to Yoroi wallet syncing and connection lag. The issue was a client-side wallet problem, not a protocol exploit, and there has been no indication that user funds were lost or that the Cardano network itself was compromised. TL;DR EMURGO patched Yoroi wallet… Continue reading Cardano Activity Recovers After Yoroi Wallet Sync Fix→

SecondFi Completes Refund Snapshot for Wallets Impacted by Recent Cardano Exploit

Posted on by — No Comments ↓

TL;DR SecondFi completed a final balance snapshot on June 26, 2026, after a Cardano wallet exploit. The snapshot covers 374 compromised wallets affected between June 21 and June 23. The snapshot is a refund-preparation step, not confirmation that users have already been paid. We have completed the final balance snapshot for affected wallets. — SecondFi… Continue reading SecondFi Completes Refund Snapshot for Wallets Impacted by Recent Cardano Exploit→

Top Ethereum MEV Bot JaredfromSubway.eth Drained of Up to $15M in Counter-MEV Honeypot Exploit

Posted on by — No Comments ↓

TL;DR A prominent Ethereum MEV bot reportedly lost between $7.5 million and $15 million in a counter-MEV exploit. The attacker allegedly used fake token contracts to bait approvals and drain assets. The incident highlights approval hygiene risks for automated on-chain trading systems. Security Alert: The MEV bot JaredfromSubway.eth was exploited. — BlockSec (@BlockSecTeam) June 26,… Continue reading Top Ethereum MEV Bot JaredfromSubway.eth Drained of Up to $15M in Counter-MEV Honeypot Exploit→

Legacy Aztec Connect Contract Drained Of $2.1 Million Three Years After Shutdown

Posted on by — No Comments ↓

TL;DR A legacy Aztec Connect smart contract was reportedly drained of about 909 ETH, worth roughly $2.1 million. The affected product was deprecated in 2023 and is separate from Aztec’s current network work. The exploit reportedly targeted the immutable RollupProcessorV3 contract. The case shows why abandoned or discontinued DeFi contracts can remain risky long after… Continue reading Legacy Aztec Connect Contract Drained Of $2.1 Million Three Years After Shutdown→