2+ day, 7+ hour ago   (349+ words) Trezor has warned customers about a phishing email that landed after attackers breached one of its third-party email providers. The message tells users about a major Trezor wallet security risk. That warning is false, according to the company. Trezor says…...

2+ day, 19+ hour ago   (355+ words) The issue affects outdated builds of Alby Hub, the self-hosted node software that powers Lightning wallets and payment tools for Alby users. Alby has called it a critical vulnerability. That label matters because it means user funds are directly exposed,…...

2+ day, 23+ hour ago   (290+ words) Enso Finance says a faulty oracle price calculation led to a loss of about 5.6 ETH. The issue hit its DPI Strategy Vault, according to a report shared by security-focused account SlowMist. The problem was not a simple price feed outage....

2+ day, 23+ hour ago   (510+ words) Bitcoin holders who need cash often face a simple choice: sell BTC or find another way. Borrowing against Bitcoin is that other way. It lets them keep price exposure while using the asset as collateral. The catch is that many…...

3+ day, 2+ hour ago   (488+ words) A NEAR-based smart contract lost about 24.7 ETH after an access control flaw let unauthorized users trigger functions they should not have been able to call. The issue was first flagged by @SlowMist_Team and later confirmed through on-chain activity. It was not…...

3+ day, 8+ hour ago   (409+ words) Osmosis has paused deposits and withdrawals after an exploit on the Nomic chain let an attacker double-spend nBTC, the Bitcoin-backed token tied to Nomic. The exchange says 22.65 BTC has been frozen in the attacker’s address. Wu Blockchain flagged the incident…...

3+ day, 8+ hour ago   (481+ words) The Ethereum Foundation will hold Builders Live tomorrow at 2 PM UTC. The online session will feature @jchaskin22 and @kassandraETH from the Foundation. They plan to talk about the Kohaku CLI and how it fits into Ethereum’s privacy work. The event is…...

5+ day, 7+ hour ago   (380+ words) Arbitrum’s Watchdog Committee has given three DeFi projects until a tentative Sept. 10 deadline to respond to high-severity misuse findings and return funds the committee considers unresolved. If they do not, each project could face a separate vote on permanent exclusion…...

2+ week, 4+ day ago   (299+ words) Blockchain security firm PeckShield says the attacker behind the Term Labs governance exploit has started moving stolen funds through Tornado Cash. On July 14, the hacker deposited 300 ETH, worth around $741,000, into the privacy protocol. The deposits were split into three separate…...

2+ week, 6+ day ago   (480+ words) Coinkite has pushed out a new firmware update for Coldcard hardware wallets. The release, dated Aug. 20, changes how seeds are generated. From now on, users must add physical randomness during seed creation. This is not a minor tweak. It is…...