News
"Defenders Lose Every Time": Open Zeppelin's Founder on AI and De Fi's Fatal Flaw
2+ hour, 2+ min ago (542+ words) Open Zeppelin co-founder Manuel Araoz says all of De Fi is now unsafe, warning AI coding agents give attackers an edge defenders can never fully close. The person who helped write De Fi's security rulebook now thinks the game is…...
WUSD. fi Sybil Farming Attack Drains $200 K from GLOVE Pools
1+ day, 2+ hour ago (381+ words) A sybil farming attack on WUSD. fi and GLOVE drained roughly $200 K from Uniswap V3 liquidity pools on Ethereum. No audit caught the reward mechanic flaw. Somebody figured out the math before the protocol did. On May 25, a single attacker walked away…...
Cardano's Decentralized Governance Enters Make-or-Break Week
2+ day, 8+ hour ago (492+ words) This week, Cardano is set for its final historical tests as an important vote on the mainnet nears. It is at a critical juncture, and its future directions will be decided by the network." Crypto experts are in the eye…...
Ethereum's Hidden Privacy Engine Just Went Public
3+ day, 1+ hour ago (628+ words) The Ethereum Foundation published its Kohaku-Railgun package, embedding ZK privacy directly into wallets. Here's what Vitalik's push for native shielded transactions actually means. The Kohaku repository on Git Hub updated 12 hours ago. Not a whitepaper. Not a tweet thread. Actual…...
One Hash Collision Just Wiped Out 96% of MAPO - Here Is What Happened
6+ day, 3+ hour ago (494+ words) MAPO crashed over 96% after a hash collision exploit on Butter Bridge let an attacker mint nearly 1 quadrillion tokens. MAP Protocol has now suspended trading and plans a new contract. The token did not bleed out slowly. MAPO dropped over 96% in…...
A New Node Waited Two Weeks. Then It Took $10. 7 M From THORChain
6+ day, 5+ hour ago (740+ words) A rogue node operator drained $10. 7 M from THORChain on May 15 via a GG20 vulnerability. Here is the full timeline, the security response, and what comes next. Someone joined THORChain's developer Discord on May 1 under the handle Dinosauruss. The account was fresh....
L2 BEAT Just Removed a Major Trust Risk From This Ethereum L2
1+ week, 2+ hour ago (450+ words) ZK circuits used by Lighter, a perpetual decentralized exchange on Ethereum, have cleared a critical trust barrier." L2 BEAT, the blockchain research organization, independently regenerated all ZK circuits from source code for the first time." Users no longer need to rely…...
Git Hub Got Hit Through a Poisoned VS Code Extension Nobody Saw Coming
1+ week, 5+ hour ago (405+ words) A poisoned VS Code extension breached Git Hub's internal repositories. Around 3, 800 repos may be exposed as Git Hub rotates secrets and investigates the attack. A single employee's device. That was the way in. Git Hub confirmed it detected and contained…...
BNB Chain Flags Data Overhead After BSC Post-Quantum Upgrade Test
1+ week, 1+ day ago (523+ words) BNB Chain tests BSC post-quantum upgrade with ML-DSA-44, as signature size rises to 2, 420 bytes and TPS falls about 40%. BNB Chain said its BSC post-quantum upgrade test proved technical readiness, but it also exposed clear data limits. The test used ML-DSA…...
Cardano Founder Says Quantum Risks May Hit Modern Crypto Security Before 2033
1+ week, 3+ day ago (471+ words) Charles Hoskinson says quantum systems may threaten modern crypto security before 2033 as Cardano plans post-quantum upgrades. Cardano founder Charles Hoskinson said quantum risks may threaten modern crypto security before 2033, according to Crowdfund Insider. Speaking at Consensus Miami, he said commercial…...