Security

Security
Osmosis Restores AllBTC Backing With Seized Tokens and Community Funds
Community funds absorbed a 17.19 BTC-equivalent shortfall, while app deposits and withdrawals were still awaiting reopening.

Security
Zilliqa CEO Steps Down as Board Takes Oversight Amid Security Probe
X-Bridge is closed in both directions, and PlunderSwap has reported losses in four token pools.

Security
Solflare Validator Stops Earning Rewards After Provider Security Incident
Validator trackers show about 1.56 million SOL staked with the node. Solflare says user funds are safe and is preparing an in-app migration.

Security
Liquid Reserve Gap Narrows to 600 BTC After Test Transfer
Samson Mow says the remaining funds will arrive in coming days; the federation's recovery plan requires full backing before direct peg-outs resume.

Security
US Charges Six in Alleged Madagascar NFT Wallet-Draining Scheme
An FBI affidavit estimates at least $516,695 in losses across 74 victim-linked wallets and describes unlimited USDT spending approvals.

Security
AI Agents Approved Their Own Spending Increases on Circle Agent Wallets
Researchers gave frontier models a capped Circle agent wallet and access to the inbox that receives its one-time codes. Most of them approved their own spending increase

Security
SlowMist Finds Data-Stealing and Address-Swapping Code in Udesk Scripts
The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-specific targeting rules.

Security
Keystone to Destroy 18,835 Wallets After Device-Authentication Key Theft
Owners of old-key devices received after Oct. 20 need additional authenticity checks, even if the wallet passes Keystone's online verification.

Security
Researcher Cracks 'Steal My Bitcoin' Challenge With PHP Exploit
A 0.02511679 BTC prize was at stake, but the operator had to transfer it after discovering the server held the wrong wallet key.

Security
Consensys Warns Ethereum Operators of eMudhra Signing Risks
The teams identify vulnerable Java trust stores and configuration-dependent exposure. Default setups are unaffected, while some Web3Signer deployments need immediate access-control changes.





