Research, security and tooling: a16z crypto, Flashbots, Chainalysis, Coin Center, OpenZeppelin, Trail of Bits, Bitcoin Optech, and the client releases behind the networks.
Forge Fixes fix(symbolic): run delegate code for EIP-7702 calls (#18459) by @stevencartavia fix(forge): recompile artifacts missing storage layouts (#18458) by @stevencartavia Other chore(deps): bump tempo dependencies to 3e5d8fd (#18430) by @github-actions[bot] test(cast)…
Summary Under Operation Economic Outcast, the Financial Crimes Enforcement Network (FinCEN) issued an order blocking U.S. financial institutions from sending… The post FinCEN Bars U.S. Institutions From Moving Funds for MEXC Global appeared first on Chainalysis.
We’re thrilled to announce that PEARL is available for trading on Kraken! Funding and trading PEARL trading is live as of Nov. 13, 2026. To add an asset to your Kraken account, navigate to Funding, select the asset you’re after, and hit ‘Deposit’. Make sure to deposit your…
Other feat(tempo): detect configurable account senders in cast and forge (#18410) by @mablr feat(cheatcodes): Tempo configurable account signing (#18408) by @mablr fix(cast): decode Safe v1.3.0 result events (#18425) by @0xKarl98 feat(cast): authorize access keys as a Tempo…
This week’s newsletter links to draft BIPs for exfiltration-resistant signing, summarizes the disclosure of three vulnerabilities affecting older versions of Bitcoin Core, announces a plan for mining the testnet5 genesis block, and describes an investigation into degraded…
On the messy business of inventing an inevitable technology
Other feat(forge): add forge equivalence for symbolic bytecode equivalence (#18065) by @0xalpharush feat(fuzz): compiler-instrumented edge coverage and CmpLog on the plain interpreter loop (#18204) by @0xalpharush feat(anvil): simulate and impersonate Tempo configurable…
Database Migrations There are no migrations in this release. Verifying the Release In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys…
Database Migrations There are no migrations in this release. Verifying the Release In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys…
Summary Reth v2.11.0 is a hardening and performance release. RPC calls that can do unbounded work are now capped or cancellable (eth_callMany, trace_callMany, debug_traceCallMany, eth_getProof, mev_simBundle, eth_simulateV1), and the release brings a broad set of transaction…
Other refactor!: migrate from revm to evm2 (#17541) by @mablr fix(anvil): make reorg blocks differ from the ones they replace (#18275) by @figtracer fix(evm): keep initial call depth across spec changes (#18363) by @mablr fix(anvil): reject blob transactions on OP Stack…
Agents will make it possible to build networks around a much wider range of goods and services
Summary A shadow market is helping Chinese users sidestep U.S. AI export controls. Proxy services provide access to restricted frontier… The post The Shadow Market Behind China’s AI Model Distillation Boom appeared first on Chainalysis.
Other fix(symbolic): decide keccak equality by known inputs (#18193) by @stevencartavia test(tempo): verify native fork proofs (#18187) by @0xKarl98 refactor(forge): share one sandbox module (#18245) by @figtracer perf(invariant): replay persisted corpus prefixes once (#18180)…
Mark “Murch” Erhardt, Gustavo Flores Echaiz, and Mike Schmidt are joined by 0xB10C, Luke Carriere, and Sjors Provoost to discuss Newsletter #430. The Bitcoin Optech Podcast and transcription content is licensed Creative Commons CC BY-SA 2.0 News ● Continued discussion of TCP…
Summary A group of Canadian OTCs have helped move millions for Iranian illicit financial networks: On Friday, OFAC designated eight… The post Sanctioned Canadian Crypto OTCs Served Iran and Drug Cartels appeared first on Chainalysis.
Summary Western Europe’s $2.08 trillion crypto economy held firm despite a global downturn. The region grew 1.2% between July 2025… The post Western Europe’s $2 Trillion Crypto Economy Holds Firm appeared first on Chainalysis.
Other fix(fmt): block default symlink escapes (#18237) by @0xKarl98 fix(invariant): detect all failed handler assertions (#18158) by @stevencartavia fix(forge): fit properties focuses to agent count (#18194) by @stevencartavia fix(invariant): skip history storage in snapshots…
Summary ⚠️ Lighthouse v8.3.3 is a high-priority patch release containing security fixes. All Lighthouse beacon nodes should be upgraded as soon as possible. Details of the vulnerabilities will be disclosed at a later date. There are no breaking changes in this release. If you…
Other refactor: make implicit state machines explicit (#18228) by @gakonst Full Changelog: nightly-5ed12d2918aadf0a1d63f2de52041bb5ab4baf5a...7bff443
Other perf(invariant): replay shared shrink prefixes once (#18166) by @figtracer feat(fuzz): sample touched account addresses as typed values (#18179) by @figtracer fix(cheatcodes): clear stale deals between txs (#18176) by @stevencartavia fix(symbolic): memoize nested ite…
Summary Reth v2.10.1 is a maintenance release. Follow up to the EVM2 release with further performance and stability fixes. Update Priority User Class Priority Payload Builders Medium Non-Payload Builders Medium Binaries See pre-built binaries documentation. The binaries are…
This is a testnet release. https://github.com/anza-xyz/agave/blob/v4.4/CHANGELOG.md What's Changed refactor(cli): use versioned messages and transactions throughout by @apfitzge in #15524 SIMD504: Shred wire format upstream by @alexpyattaev in #15522 keygen, cli: generate…
Treasury and Federal Reserve withdraw 2020 FinCEN proposal to lower crypto fund-transfer reporting threshold from $3,000 to $250.
Other test(symbolic): run invariant depth test once (#18141) by @stevencartavia fix(symbolic): check every invariant predicate (#18144) by @mattsse perf(cheatcodes): cache whether any env override is set (#18125) by @figtracer chore(deps): ignore RUSTSEC-2026-0441 pin-utils…
This week’s newsletter summarizes continued discussion about using TCP hole punching to make nodes behind home routers reachable and describes a draft BIP for standardizing the spending policies that co-signers enforce when emulating covenants. Also included are our regular…
Prediction markets just had their biggest month ever. Notional trading volume hit $123.6B. That’s 1.5x all of 2024 and 2025 combined ($82B). Even if you use a much more conservative measure and look at the cash that buyers paid for contracts (counting parlays at the cents paid…
This is stable release recommended for general adoption. What's Changed v4.4: ignore RUSTSEC-2026-0418 (libz-sys) by @cfkelly18 in #16540 v4.4: ci: don't use sccache in docker run (backport of #16493) by @mergify[bot] in #16561 v4.4: ci: refine pipeline trigger condition…
Summary Reth v2.10.0 is a hardening release. It fixes an engine panic after a reorg below the persisted tip, bounds eth_callBundle work, and stops reth download from deleting files outside the datadir. It also brings several RPC correctness fixes and P2P interop fixes. db…
Other fix(symbolic): clear return data on STOP (#18066) by @stevencartavia fix(anvil): lock Tempo history before storage when mining (#18064) by @stevencartavia fix(traces): map DTL backtrace offsets to disk sources (#17904) by @figtracer fix(symbolic): model aliasing for large…
actor: hold overflowMu while Drain pops the overflow
Summary Binance disclosed that a DPRK fake employment scheme was behind its $6 billion hack: Attackers used a fabricated job… The post DPRK Hackers Perfected Their Fake Interview Playbook Over Dozens of Attacks Before Binance appeared first on Chainalysis.
While software is becoming abundant, networks are not. The software is no longer the moat: the network is. And you can’t vibe code USDC.
Mark “Murch” Erhardt, Gustavo Flores Echaiz, and Mike Schmidt are joined by Elias Rohrer, Greg Sanders, Antoine Poinsot, Oleksandr Kurbatov, and Nishant Bansal to discuss Newsletter #429. The Bitcoin Optech Podcast and transcription content is licensed Creative Commons CC BY-SA…
Early this morning Mercado Bitcoin, Brazil’s largest crypto exchange, suffered a security incident that resulted in approximately $49 million in… The post Disrupting the Mercado Bitcoin Attack: How Chainalysis Led the Freeze of Nearly $10M in Stolen Funds appeared first on…
⚠️ Security: CVE-2026-98432 (Linux kernel) CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP stack. It is not specific to MPTCP, but the demonstrated remote exploit requires an MPTCP listener, which Go 1.24+ enables by default. This release disables MPTCP…
⚠️ Security: CVE-2026-98432 (Linux kernel) CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP stack. It is not specific to MPTCP, but the demonstrated remote exploit requires an MPTCP listener, which Go 1.24+ enables by default. This release disables MPTCP…
For more information and ongoing updates, please see our incident page. Tuesday Nov 10, 2026 3:00 A.M. EST Update: Data… The post Updated Nov 10: Chainalysis Security Incident Information appeared first on Chainalysis.
This is stable release recommended for general adoption. https://github.com/anza-xyz/agave/blob/v4.4/CHANGELOG.md What's Changed v4.4: vote_reward: build vote accounts from a padded vote state encoding (backport of #16381) by @mergify[bot] in #16386 v4.4: pin cargo-build-sbf…
Key takeaways Around 4:20 p.m. ET on October 29, 2026, funds began leaving Binance hot wallets across multiple blockchains. Unauthorized… The post The $6.4 Billion Binance Hack: Tracing the North Korea Link appeared first on Chainalysis.
This week’s newsletter describes a protocol for creating silent payment transactions from multiparty wallets, summarizes the responsible disclosure of a denial-of-service vulnerability that affected older versions of Core Lightning, and explains Bitcoin Core’s updated security…
Reth v2.9.0 replaces revm with evm2 as reth's EVM (#25002). This is a breaking change for SDK users who build on reth's EVM, executor or inspector types. Node operators don't need to change any config. The release also fixes engine, RPC, storage and pipeline-unwind bugs, adds…
Summary Everyday financial needs are driving Sub-Saharan Africa’s crypto growth. The region’s crypto economy grew 13.4% to $101 billion, making… The post South Africa Leads Sub-Saharan Africa’s 13.4% Crypto Growth appeared first on Chainalysis.
actor: add non-blocking TryTell/TryAsk, in-turn overflow sends, AskThen, and a shutdown join
Summary OFAC sanctioned Russian and DPRK nationals that targeted U.S. businesses with fraudulent IT workers, generating cryptocurrency proceeds to fund… The post Treasury Sanctions Russians, North Koreans supporting DPRK IT Worker Fraud appeared first on Chainalysis.
On a generative network, every output also becomes an input for someone else.
Database Migrations There are no migrations in this release. Verifying the Release In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys…
Database Migrations There are no migrations in this release. Verifying the Release In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys…
This is Mainnet-beta Upgrade Candidate release recommended for 10% adoption. https://github.com/anza-xyz/agave/blob/v4.4/CHANGELOG.md What's Changed v4.4: Refactor - Move ComputeMeter from InvokeContext to TransactionContext (backport of #15818) by @mergify[bot] in #15919 v4.4…