Security
Security
THORChain Keeps ZEC Swaps Halted After Bug Triggers Vault Slash
Onchain records show about 140 RUNE deducted from 18 node accounts. The fix is scheduled for the v3.21 upgrade around Oct. 23.
Security
THORChain Targets Rujira Restart With v3.21 Exploit Fix
The upgrade targets block 28,366,100 around Oct. 23, while Rujira plans to request a conditional 24-hour liquidation grace period for borrowers.
Security
Anthropic Says Claude Traced NIST Curve Seeds to 1990s Timestamps
The finding is not a cryptographic break; published code covers five NIST prime-curve seeds and four binary-curve seeds.
Security
Karpelès Reports Ledger Implants in Devices From Two More Resellers
Ledger says German stock inspections found no tampering and it has not verified a drain tied to a device bought outside Southeast Asia. Its authenticity check cannot detect the added hardware.
Security
NEAR Intents Postmortem Links $3.8 Million Exploit to Deposit Bug
The protocol removed deposit notifications after another critical bug report and says all affected users were made whole.
Security
bOSMO Bug Leaves Little Backing, Prompts Holder Compensation Plan
The contract still allows cheap minting, putting liquidity pools at risk. bOSMO bought after the snapshot will not be compensated.
Security
Safe Launches Safenet Aegis Security Network on Three Chains
Checks cost 0.40 USDC, paid to security providers, while onchain enforcement requires enabling a Guard on the Safe account.
Security
Ledger Blames Organized Group for Months-Long Wallet Tampering Campaign
The company is keeping devices off authorized resellers' displays and reiterating an existing ban on reselling returns.
Security
HashKey Chain Admin Moves 142,818 USDT With Temporary Contract Swap
The original deposit code was restored about six minutes later, but a three-of-five multisig retains immediate upgrade powers.
Security
Ledger Wallet Tampering: What Is Confirmed and What Owners Should Know
Karpelès confirmed implants in devices linked to Metapod and MediaMarkt, while Ledger says it has not verified a fund drain tied to a device bought outside Southeast Asia.
