Protocols & Foundations

Celestia publishes technical deep dive on Voyager hyperscale blockchain architecture targeting 21M TPS for agentic commerce payments.

Exa launches AI-agent search engine on Base, charging per query in USDC.

CVE-2025-62861 (High): Bitcoin Core 28.0-28.2, 29.0-29.1 mempool inconsistency; TRUC sibling eviction during reorg halts block template creation; patched in v30.0.

CVE-2025-62860: Bitcoin Core <28.3, 29.2, 30.0 incorrectly whitelists inbound Tor peers, bypassing DoS limits and privacy mitigations if Tor proxy IP matches -whitelist range.

CVE-2025-62859: Bitcoin Core <29.2, 30.0 vulnerable to block processing stalls via witness malleation in compact blocks; malicious peers can trigger 10-minute timeouts.

Elysium launches on Arbitrum mainnet, offering 100 ms blocks and routing 25% of sequencer revenue to builders via Hyperliquid integration.

Glamsterdam (EIP-8037/EIP-8038) tested on Ethereum testnets; Chainsecurity identified projects vulnerable to gas-cost changes in the upgrade.

Base Denim upgrade activates on mainnet, fourth protocol upgrade for Coinbase's Layer 2.

Spiko launches yield-bearing fund product and API on Base for businesses and platforms.

Base Batches 004 cohort announced: ten teams building payments, trading, finance and AI projects.

Ethereum Foundation essay on using Ethereum as digital public infrastructure for government and humanitarian institutions.

Celestia announces Voyager blockchain architecture benchmarked at 21M TPS for agentic commerce and on-demand service payments.

Shopify Payments adds USDC checkout on Base, with merchant settlement in local currency.

CVE-2026-117349 (Medium): Bitcoin Core paused pre-BIP31 peers allow unbounded memory growth in announcement queue; fixed in v29.5, 30.4, 31.2, 32.1.

Bitcoin Core 29.5 released with bug fixes; node operators should update for security and stability improvements.

Bitcoin Core 31.2 released with bug fixes; node operators should update for security and stability improvements.

CVE-2026-117346 (Low): Bitcoin Core undo file overflow allows miners to corrupt other nodes' data under extreme reorg conditions; impractical exploit; 32-bit and FAT32 systems remain affected.

CVE-2026-117350 (Medium): Non-Linux Bitcoin Core nodes vulnerable to memory exhaustion via TCP urgent data; affects select()-based platforms; patched in v29.5, 30.4, 31.2, 32.1.

Bitcoin Core 30.4 released with bug fixes; node operators should update for security and stability improvements.

Bitcoin Core 32.1 released with bug fixes; node operators should update for security and stability improvements.

Derive, an onchain options exchange, publishes case study on why it chose to build on Celestia for scaling.

Aave enables USDC loans collateralized by Coinbase tokenized stocks on Base.

Glamsterdam upgrade on Hoodi testnet postponed from October 26, 2026; new activation date not yet set.

Glamsterdam activated on Sepolia October 6, 2026; Hoodi testnet activation postponed from October 26 with gas-limit increase deferred.