§ Security

Kava Lend exploited for $3.8M via LayerZero bridge to BNB Chain; 49.2M KAVA tokens extracted and sold.

Aztec's Tierra V6 upgrade for privacy layer 2 on Ethereum; AI audit harness identified critical vulnerabilities in cryptographic libraries.

Core Lightning v26.06.8 patches DoS vulnerability (LNF-2026-0004): duplicate funding outpoint in channel opening crashes node on reconnect; upgrade required.

Keeper wallets display fake USDT balances in restricted pools that cannot be sold; Forta identified 32 affected tokens.

Binance expanded stolen crypto reserve snapshot to 198 tokens; proof-of-reserves and SAFU restoration remain separate verification tests.

US government disrupted North Korean social-engineering campaign 'FaceStealer' responsible for $400M cryptocurrency theft.

Bitcoin browser extension with 50,000 users is being sold; control transfer raises risk of future malware distribution.

Pennysia protocol users instructed to revoke approvals after exploit drained four addresses; swaps were disabled before public warning.

Cursor Code extension compromise affected up to 5,000 users; tampered Claude integration exposed credentials, users urged to rotate keys.

DOJ seeks to seize $1.2 billion linked to Binance hack; Meta tests prediction-market app using points instead of cash.

Blockstream launches Bitcoin custody system using dedicated hardware for offline transaction signing; Adam Back advocates for simpler security design.

Trezor confirmed malicious hardware implants in three Safe 5 wallets from reseller CryptoBilis designed to exfiltrate recovery phrases via cellular networks; fix released.

FBI reports North Korean hackers used deepfake video calls to social-engineer access in $400M cryptocurrency theft.

US DOJ seizes $1.2 billion in cryptocurrency stolen from Binance, targeting North Korean state-sponsored theft scheme.

Unocoin halted deposits and withdrawals after suspicious transfers signed outside BitGo platform; BitGo confirmed account freeze protocol worked.

DOJ seizes $1.2B of $2.7B frozen Binance hack proceeds; separately disrupts FaceStealer scam that stole $400M over 18 months.

TRM Labs launched law-enforcement service to seize stolen crypto in minutes via Beacon Network (200+ members, 80% trading volume coverage).

BIP draft proposes bc1z post-quantum address format using ML-DSA-65 (FIPS 204) to protect Bitcoin against Shor's algorithm threats.

North Korean-linked hackers launch memecoins to launder stolen Binance funds; xStocks plans Hong Kong equities integration.

DOJ says North Korea stole $400M in crypto via deepfake video calls; also moving to seize $1.2B from Binance hack.

Trezor CTO discusses post-quantum signature trade-offs for Bitcoin wallet security.

Tron, Tether, Chainalysis launch Digital Crime Task Force to trace illicit USDT on Tron; replaces collapsed T3 unit.

EIP draft proposes running leanVM post-quantum signature aggregation in shadow mode alongside BLS until quantum/AI threats emerge, enabling emergency hard fork transition without consensus disruption.

Ethereum Magicians proposal for 2-of-2 MPC wallet using Lindell ECDSA protocol with QR-only setup and NFC signing to prevent unilateral key compromise on either device.

Ethlabs proposes pqai27 roadmap to make Ethereum post-quantum and post-AI resistant by 2027, prioritizing cryptographic migration timeline at protocol layer.

Bitcoin Core discloses three patched bugs including high-severity mining flaw fixed in October 2025; no active exploits reported.

Aave V3.8 activates pool-wide reentrancy guard across 15 networks without opposition from governance vote.

Zodl adds IP shielding as default for Zcash, expanding network-layer privacy across crypto protocols.

Zodl adds IP shielding as default for Zcash, expanding network-layer privacy across crypto protocols.

Phylax and Titan deploy circuit breakers on Ethereum; Titan validates transactions against application safety rules before settlement.

CVE-2025-62861 (High): Bitcoin Core 28.0-28.2, 29.0-29.1 mempool inconsistency; TRUC sibling eviction during reorg halts block template creation; patched in v30.0.

CVE-2025-62859: Bitcoin Core <29.2, 30.0 vulnerable to block processing stalls via witness malleation in compact blocks; malicious peers can trigger 10-minute timeouts.

CVE-2025-62860: Bitcoin Core <28.3, 29.2, 30.0 incorrectly whitelists inbound Tor peers, bypassing DoS limits and privacy mitigations if Tor proxy IP matches -whitelist range.

Study evaluates machine-learning methods for detecting rug pulls on Solana tokens within minutes of launch, testing graph neural networks on limited historical data.

Ethereum post-quantum transaction signature (PQTS) breakout meeting #18 scheduled November 11, 2026 to discuss quantum-resistant signing.

Analysis of verifying deployed contract source matches audited commit: block explorer badges don't link source to audit; method needed to rebuild and verify commits.

Proposes quantum-resistant notary scheme for blockchain interoperability combining ML-KEM, ML-DSA, and AES-256 with dynamic trust model, handling 270 tx/sec.

Eclair 0.14.0 vulnerability: memory-exhaustion DoS via start_batch buffering unlimited commitment_signed messages; fixed in 0.14.1.

Conceptual hardware framework (LATTICE-NOTATION) proposing hybrid lattice-based HSM design for post-quantum signature migration in blockchain networks, addressing bandwidth constraints.

Ablation study evaluates local interaction statistics and machine learning models for Ethereum phishing account detection.

Nethermind benchmarks EIP-8141 mempool DoS risk: MAX_VERIFY_GAS cap of 100k is too low for Groth16 privacy or PQC signatures; raising cap risks CPU exhaustion attacks on block processing.

Glamsterdam (EIP-8037/EIP-8038) tested on Ethereum testnets; Chainsecurity identified projects vulnerable to gas-cost changes in the upgrade.

Discusses agentic AI systems for scambaiting to extract threat intelligence from cryptocurrency scammers and fraud networks.

Measures cost of post-quantum cryptographic signatures on Ethereum for IoT data authentication under EIP-7623 calldata floor and Glamsterdam upgrade.

GRIDSHIELD: privacy-preserving peer-to-peer energy trading using zero-knowledge proofs and secure multi-party computation to prevent clearing-operator manipulation while enforcing grid constraints.

Study of miscompilation vulnerabilities in production zkVMs SP1 and Jolt: compiler bugs in rustc and LLVM can cause valid zero-knowledge proofs of incorrect computations.

TxBench: verified benchmark dataset for smart-contract attack detectors, validating both malicious and legitimate transactions against execution history.

Revisit of Elliptic++ Bitcoin forensics dataset reveals temporal leakage in train-test split and undocumented feature definitions; proposes corrected pipeline for 55 address-level features.

GossipSub and DOG protocol vulnerability: adversary with constant nodes can prevent honest nodes from receiving messages, threatening Ethereum's P2P liveness.

Lean 4 formal proof of soundness for BIP340 batch verification with 128-bit derived randomizers, enabling ~9% speedup in libsecp256k1.