Security

Security
THORChain Targets Rujira Restart With v3.21 Exploit Fix
The upgrade targets block 28,366,100 around Oct. 23, while Rujira plans to request a conditional 24-hour liquidation grace period for borrowers.

Security
Anthropic Says Claude Traced NIST Curve Seeds to 1990s Timestamps
The finding is not a cryptographic break; published code covers five NIST prime-curve seeds and four binary-curve seeds.

Security
Karpelès Reports Ledger Implants in Devices From Two More Resellers
Ledger says German stock inspections found no tampering and it has not verified a drain tied to a device bought outside Southeast Asia. Its authenticity check cannot detect the added hardware.

Security
NEAR Intents Postmortem Links $3.8 Million Exploit to Deposit Bug
The protocol removed deposit notifications after another critical bug report and says all affected users were made whole.

Security
bOSMO Bug Leaves Little Backing, Prompts Holder Compensation Plan
The contract still allows cheap minting, putting liquidity pools at risk. bOSMO bought after the snapshot will not be compensated.

Security
Safe Launches Safenet Aegis Security Network on Three Chains
Checks cost 0.40 USDC, paid to security providers, while onchain enforcement requires enabling a Guard on the Safe account.

Security
Ledger Blames Organized Group for Months-Long Wallet Tampering Campaign
The company is keeping devices off authorized resellers' displays and reiterating an existing ban on reselling returns.

Security
HashKey Chain Admin Moves 142,818 USDT With Temporary Contract Swap
The original deposit code was restored about six minutes later, but a three-of-five multisig retains immediate upgrade powers.

Security
Ledger Wallet Tampering: What Is Confirmed and What Owners Should Know
Ledger tells CryptoBilis buyers to leave unused wallets uninitialized and move assets from already-set-up devices to a new device with a new recovery phrase.

Security
Ledger Asks Resellers to Halt Sales in Seven Asian Markets
The hardware-wallet maker says confirmed incidents remain confined to Southeast Asia, with no indication its systems or direct sales channel were compromised.





