#security
security
1.7M views
2,970 Discussing
Hot
Latest
$ETH LATEST: Ethereum Foundation's AI Agents Just Caught a Real Security Bug
Ethereum's Protocol Security team ran coordinated AI agents against core network code and they found something real: a remotely-triggerable panic in libp2p's gossipsub layer, the peer-to-peer messaging system every Ethereum consensus client depends on to propagate blocks and attestations. It's now disclosed as CVE-2026-34219 and already patched.
Here's the genuinely interesting part: the Foundation said finding the bug wasn't the hard part verifying it was. Most AI-flagged "vulnerabilities" turned out to be false positives, duplicates, or out of scope. The team's own framing: "The time that used to go into finding hypotheses now goes into verifying them at scale. The bottleneck hasn't disappeared — it shifted from finding bugs to trusting the results." (Bitcoin Foundation)
This isn't AI replacing security researchers it's AI expanding what gets tested, while human judgment decides what's real. That's a meaningful shift for a network securing hundreds of billions in value.
Not financial advice this is a security development, not a trading signal. #Ethereum #ETH #AI #security
$ZEC $XRP
Ethereum's Protocol Security team ran coordinated AI agents against core network code and they found something real: a remotely-triggerable panic in libp2p's gossipsub layer, the peer-to-peer messaging system every Ethereum consensus client depends on to propagate blocks and attestations. It's now disclosed as CVE-2026-34219 and already patched.
Here's the genuinely interesting part: the Foundation said finding the bug wasn't the hard part verifying it was. Most AI-flagged "vulnerabilities" turned out to be false positives, duplicates, or out of scope. The team's own framing: "The time that used to go into finding hypotheses now goes into verifying them at scale. The bottleneck hasn't disappeared — it shifted from finding bugs to trusting the results." (Bitcoin Foundation)
This isn't AI replacing security researchers it's AI expanding what gets tested, while human judgment decides what's real. That's a meaningful shift for a network securing hundreds of billions in value.
Not financial advice this is a security development, not a trading signal. #Ethereum #ETH #AI #security
$ZEC $XRP
⚖️ Supply Chain Security in Crypto: Lessons for Developers From the Injective Incident
On July 10, 2026, the attempted backdoor of Injective's npm package serves as a critical reminder for crypto developers. Supply chain attacks target the building blocks of crypto applications.
The crypto industry must adopt stricter code verification: package integrity checks, reproducible builds, multi-sig for deployments, and dependency auditing.
As the ecosystem grows, security at every layer — from npm packages to smart contracts to wallet software — becomes increasingly important for mainstream adoption.
📌 Key Takeaway:
Supply chain security is the next frontier for crypto adoption — as the industry matures, securing every dependency becomes non-negotiable.
#Security #Development
#BinanceAlphaAlert
On July 10, 2026, the attempted backdoor of Injective's npm package serves as a critical reminder for crypto developers. Supply chain attacks target the building blocks of crypto applications.
The crypto industry must adopt stricter code verification: package integrity checks, reproducible builds, multi-sig for deployments, and dependency auditing.
As the ecosystem grows, security at every layer — from npm packages to smart contracts to wallet software — becomes increasingly important for mainstream adoption.
📌 Key Takeaway:
Supply chain security is the next frontier for crypto adoption — as the industry matures, securing every dependency becomes non-negotiable.
#Security #Development
#BinanceAlphaAlert
$BTC HOLDERS BEWARE: LASER ATTACK CAN RESET TANGEM WALLET PASSWORDS 🔥
Ledger researchers have confirmed a laser attack that physically resets the password on all Tangem hardware wallet cards. The exploit requires direct access to the device and roughly $250,000 in lab equipment — meaning targeted attacks are the primary concern, not mass theft.
What stands out here is the permanent nature of the flaw: already circulated cards cannot be patched. For anyone currently storing significant value on a Tangem device, this shifts the risk profile of holding crypto offline. Physical security just became a much higher priority.
Are you using a Tangem wallet or have you moved to a different solution?
Not financial advice. Always manage your risk.
#BTC #Security #HardwareWallet #Vulnerability #Crypto
⚡
Ledger researchers have confirmed a laser attack that physically resets the password on all Tangem hardware wallet cards. The exploit requires direct access to the device and roughly $250,000 in lab equipment — meaning targeted attacks are the primary concern, not mass theft.
What stands out here is the permanent nature of the flaw: already circulated cards cannot be patched. For anyone currently storing significant value on a Tangem device, this shifts the risk profile of holding crypto offline. Physical security just became a much higher priority.
Are you using a Tangem wallet or have you moved to a different solution?
Not financial advice. Always manage your risk.
#BTC #Security #HardwareWallet #Vulnerability #Crypto
⚡
📚 Cold Wallets vs Hot Wallets: Choosing the Right Storage for Your Crypto
On July 10, 2026, the Injective npm hack attempt underscores why wallet security matters. Hot wallets (connected to internet) like browser extensions are convenient for daily use but more vulnerable to hacks.
Cold wallets (hardware devices) store private keys offline, making them immune to online attacks. They're ideal for long-term holdings and larger amounts.
Best practice: use hot wallets for small amounts and daily transactions, cold wallets for savings and long-term holdings. Never keep significant funds on exchanges.
📌 Key Takeaway:
Cold wallets offer maximum security for long-term storage while hot wallets provide convenience — use both strategically based on your needs.
#CryptoWallet #Security
#BinanceAlphaAlert
On July 10, 2026, the Injective npm hack attempt underscores why wallet security matters. Hot wallets (connected to internet) like browser extensions are convenient for daily use but more vulnerable to hacks.
Cold wallets (hardware devices) store private keys offline, making them immune to online attacks. They're ideal for long-term holdings and larger amounts.
Best practice: use hot wallets for small amounts and daily transactions, cold wallets for savings and long-term holdings. Never keep significant funds on exchanges.
📌 Key Takeaway:
Cold wallets offer maximum security for long-term storage while hot wallets provide convenience — use both strategically based on your needs.
#CryptoWallet #Security
#BinanceAlphaAlert
$BTC HONG KONG MANDATES HARDWARE SECURITY FOR CRYPTO PLATFORMS 🔒
The SFC just dropped new rules: all virtual asset trading platforms must ditch SMS and app-based OTPs within 12 months. They're forcing hardware security keys and cryptographic verification instead.
Why this matters: impersonation attacks stole $366 million from crypto in the first half of 2026 alone. Hong Kong saw 57% of cyber incidents tied to scams last year. This isn't noise — it's a regulatory shift that will force platforms to upgrade security or lose access.
Are your funds sitting on a platform still using basic SMS verification?
Not financial advice. Always manage your risk.
#BTC #HongKong #CryptoRegulation #Security
🔥
The SFC just dropped new rules: all virtual asset trading platforms must ditch SMS and app-based OTPs within 12 months. They're forcing hardware security keys and cryptographic verification instead.
Why this matters: impersonation attacks stole $366 million from crypto in the first half of 2026 alone. Hong Kong saw 57% of cyber incidents tied to scams last year. This isn't noise — it's a regulatory shift that will force platforms to upgrade security or lose access.
Are your funds sitting on a platform still using basic SMS verification?
Not financial advice. Always manage your risk.
#BTC #HongKong #CryptoRegulation #Security
🔥
🚨 LATEST NEWS: ZCASH IS MAKING A CRITICAL UPGRADE. ⚡
$ZEC has officially scheduled its Ironwood upgrade for July 28.
Why it matters:
🔒 The upgrade will close the old Orchard privacy pool after an “infinity” bug raised concerns about the potential creation of counterfeit ZEC.
The goal? $TAC
✅ Strengthen security.
✅ Protect the network.
✅ Maintain confidence in the protocol.
While no confirmed counterfeit coins have flooded the market, the Zcash team is acting before the issue becomes a bigger risk.
In crypto, fast upgrades can make the difference between preventing a problem… and reacting too late.
All eyes are now on $ZEC as the network prepares for one of its most important updates this year.
Do you think proactive upgrades like this make privacy coins stronger? 👇
#Zcash #ZEC #Crypto #Blockchain #Security
$ZEC has officially scheduled its Ironwood upgrade for July 28.
Why it matters:
🔒 The upgrade will close the old Orchard privacy pool after an “infinity” bug raised concerns about the potential creation of counterfeit ZEC.
The goal? $TAC
✅ Strengthen security.
✅ Protect the network.
✅ Maintain confidence in the protocol.
While no confirmed counterfeit coins have flooded the market, the Zcash team is acting before the issue becomes a bigger risk.
In crypto, fast upgrades can make the difference between preventing a problem… and reacting too late.
All eyes are now on $ZEC as the network prepares for one of its most important updates this year.
Do you think proactive upgrades like this make privacy coins stronger? 👇
#Zcash #ZEC #Crypto #Blockchain #Security
$SOL FOUNDATION HIRES FORMER TWITTER CISO FOR SECURITY LEADERSHIP 🛡️
Decades of cybersecurity leadership now embedded into the Solana ecosystem. This signals infrastructure maturity — security is no longer an afterthought in blockchain development. The appointment comes as institutional adoption demands trust at every layer.
Execution speed and uptime have been Solana’s narrative, but this move closes the credibility gap on the security side. Does this shift the institutional perception of $SOL as a settlement layer?
Not financial advice. Always manage your risk.
#SOL #Solana #Security #InstitutionalAdoption
🔥
Decades of cybersecurity leadership now embedded into the Solana ecosystem. This signals infrastructure maturity — security is no longer an afterthought in blockchain development. The appointment comes as institutional adoption demands trust at every layer.
Execution speed and uptime have been Solana’s narrative, but this move closes the credibility gap on the security side. Does this shift the institutional perception of $SOL as a settlement layer?
Not financial advice. Always manage your risk.
#SOL #Solana #Security #InstitutionalAdoption
🔥
⚖️ Crypto Supply Chain Security: Lessons From the Injective NPM Backdoor Attempt
On July 10, 2026, an attempted backdoor of the Injective npm package made headlines. Hackers tried to inject malicious code to steal wallet keys, targeting developers in the crypto ecosystem.
Supply chain attacks on npm packages have become increasingly common. The crypto industry must adopt stricter code verification practices, including package integrity checks and multi-sig deployments.
Hardware wallets remain the gold standard for key storage, as hot wallets connected to compromised systems are vulnerable.
📌 Key Takeaway:
The Injective npm incident highlights the critical importance of supply chain security in crypto development — always verify your dependencies.
#Injective #Security
#BinanceAlphaAlert
On July 10, 2026, an attempted backdoor of the Injective npm package made headlines. Hackers tried to inject malicious code to steal wallet keys, targeting developers in the crypto ecosystem.
Supply chain attacks on npm packages have become increasingly common. The crypto industry must adopt stricter code verification practices, including package integrity checks and multi-sig deployments.
Hardware wallets remain the gold standard for key storage, as hot wallets connected to compromised systems are vulnerable.
📌 Key Takeaway:
The Injective npm incident highlights the critical importance of supply chain security in crypto development — always verify your dependencies.
#Injective #Security
#BinanceAlphaAlert
📰 Injective NPM Hack Attempt: Hackers Target Wallet Keys via Backdoored Package
On July 10, 2026, Cointelegraph reported that hackers attempted to backdoor the Injective npm package with malware designed to steal wallet keys. The supply chain attack was detected before causing widespread damage.
This incident highlights the growing sophistication of attacks targeting crypto infrastructure. npm package compromises have become a vector for wallet theft across the ecosystem.
Developers and users are urged to verify package integrity and use hardware wallets for key management.
📌 Key Takeaway:
The Injective npm backdoor attempt is a reminder that crypto security extends beyond blockchain — supply chain attacks are a real threat.
#Injective #Security
#BinanceAlphaAlert
On July 10, 2026, Cointelegraph reported that hackers attempted to backdoor the Injective npm package with malware designed to steal wallet keys. The supply chain attack was detected before causing widespread damage.
This incident highlights the growing sophistication of attacks targeting crypto infrastructure. npm package compromises have become a vector for wallet theft across the ecosystem.
Developers and users are urged to verify package integrity and use hardware wallets for key management.
📌 Key Takeaway:
The Injective npm backdoor attempt is a reminder that crypto security extends beyond blockchain — supply chain attacks are a real threat.
#Injective #Security
#BinanceAlphaAlert
THE HIDDEN TRUST ASSUMPTION IN $NEWT 'S STACK 🔍
I traced Newton's audit dependencies this morning. SP1 has strong independent audits, but the verifiable agent execution and core infrastructure components are still under review. That matters because a flawless proof system can still validate an incorrect authorization path if the policy logic deciding when to act hasn't been independently verified.
The real risk isn't the primitive itself — it's the integration code connecting session keys, permissions, and proof generation. That's where the trust assumption lives in autonomous systems.
When does your confidence in an audited component become confidence in the entire execution path?
Not financial advice. Always manage your risk.
#NEWT #Security #AuditGap #CryptoResearch
🔍
I traced Newton's audit dependencies this morning. SP1 has strong independent audits, but the verifiable agent execution and core infrastructure components are still under review. That matters because a flawless proof system can still validate an incorrect authorization path if the policy logic deciding when to act hasn't been independently verified.
The real risk isn't the primitive itself — it's the integration code connecting session keys, permissions, and proof generation. That's where the trust assumption lives in autonomous systems.
When does your confidence in an audited component become confidence in the entire execution path?
Not financial advice. Always manage your risk.
#NEWT #Security #AuditGap #CryptoResearch
🔍
$ETH AI FOUND REAL VULNERABILITIES IN ITS OWN CODE — HUMAN FILTERING STILL NEEDED ⚡
The Ethereum Foundation's security team deployed coordinated AI agents to audit the core codebase for the first time. They discovered a real P2P layer vulnerability that was patched and published as a CVE — a genuine win for automation.
But here is the catch: over 80% of the AI-generated reports were false positives, duplicates, or unexploitable. The real bottleneck was manual classification — human analysts had to sift through a flood of "credible-looking" noise to find the real threat. This experiment proves AI accelerates discovery but cannot replace final human judgment.
Do you believe AI agents will soon fully replace security auditors, or will humans remain the deciding factor?
Not financial advice. Always manage your risk.
#ETH #AI #Security #CryptoAudit
⚡
The Ethereum Foundation's security team deployed coordinated AI agents to audit the core codebase for the first time. They discovered a real P2P layer vulnerability that was patched and published as a CVE — a genuine win for automation.
But here is the catch: over 80% of the AI-generated reports were false positives, duplicates, or unexploitable. The real bottleneck was manual classification — human analysts had to sift through a flood of "credible-looking" noise to find the real threat. This experiment proves AI accelerates discovery but cannot replace final human judgment.
Do you believe AI agents will soon fully replace security auditors, or will humans remain the deciding factor?
Not financial advice. Always manage your risk.
#ETH #AI #Security #CryptoAudit
⚡
🔥 CRYPTO HOURLY — BREAKING UPDATES 🔥
━━━━━━━━━━━━━━━━━━━━
🟢 Bullish - Ethereum Deploys AI Bug Hunters to Fortify Network
• Researchers deployed AI agents to scan Ethereum for vulnerabilities, finding real bugs before hackers can exploit them, boosting security.
━━━━━━━━━━━━━━━━━━━━
📈 Market Sentiment: 22 (Extreme Fear)
📊 Stay ahead. Think smart. Trade safe.
#cryptonews #ETH #Security $ETH
Disclaimer: Includes third-party opinions. No advice.
BTC: +1.67% (H: 63500 L: 61705.3) | ETH: +0.77% (H: 1762.36 L: 1721.93) | SOL: +1.28% (H: 78.83 L: 76.71)
━━━━━━━━━━━━━━━━━━━━
🟢 Bullish - Ethereum Deploys AI Bug Hunters to Fortify Network
• Researchers deployed AI agents to scan Ethereum for vulnerabilities, finding real bugs before hackers can exploit them, boosting security.
━━━━━━━━━━━━━━━━━━━━
📈 Market Sentiment: 22 (Extreme Fear)
📊 Stay ahead. Think smart. Trade safe.
#cryptonews #ETH #Security $ETH
Disclaimer: Includes third-party opinions. No advice.
BTC: +1.67% (H: 63500 L: 61705.3) | ETH: +0.77% (H: 1762.36 L: 1721.93) | SOL: +1.28% (H: 78.83 L: 76.71)
$GT SECURITY REPORT CONFIRMS THEFT WAS EXTERNAL DATA BREACH NOT PLATFORM FAILURE 🔥
The investigation reveals the breach originated from compromised external credentials, not exchange infrastructure. This distinction is critical for assessing exchange risk premiums — the four-tier verification process cited suggests operational integrity remains intact.
The report confirms the applicant passed Alipay multi-factor authentication using leaked personal info, highlighting the vulnerability of aggregated external data. Does this change your risk assessment for exchange-held assets?
Not financial advice. Always manage your risk.
#GT #Security #CryptoNews #Exchange
🔥
The investigation reveals the breach originated from compromised external credentials, not exchange infrastructure. This distinction is critical for assessing exchange risk premiums — the four-tier verification process cited suggests operational integrity remains intact.
The report confirms the applicant passed Alipay multi-factor authentication using leaked personal info, highlighting the vulnerability of aggregated external data. Does this change your risk assessment for exchange-held assets?
Not financial advice. Always manage your risk.
#GT #Security #CryptoNews #Exchange
🔥
⚠️ Security Alert
Total nightmare!! 😱
A trader just lost $1M after signing a phishing token approval... phishing is getting CRAZY out here... scammers took $14B last year alone... stay vigilant with those approvals!! 🚨👀
#Security #CryptoScams
Total nightmare!! 😱
A trader just lost $1M after signing a phishing token approval... phishing is getting CRAZY out here... scammers took $14B last year alone... stay vigilant with those approvals!! 🚨👀
#Security #CryptoScams
😂 ПРИВАТНЫЙ КЛЮЧ НА GITHUB ДВА ГОДА — ИТОГ $1,7 МЛН
Никакого сложного эксплойта. Никакой уязвимости в коде. RSA-3072 ключ для SGX-прувера Raiko просто лежал в публичном репозитории GitHub. Два года. Файл enclave-key.pem. В открытом доступе.
Хакер нашёл ключ, зарегистрировал свой прувер как легитимный и начал подписывать фейковые запросы на вывод средств — контракты Ethereum принимали их как настоящие. Без реального депозита на той стороне.
Итог: $1,7 млн утекло, сеть встала, токен упал на 20%, около 2 млн токенов успели уйти на MEXC до заморозки.
Это даже не «баг» — это просто файл не в том месте. Безопасность проекта на сотни миллионов TVL держалась на том, что никто не догадается заглянуть в репозиторий.
Догадались.
#Taiko #crypto #Security #Hack
Подпишись — здесь разбираю взломы до того как выйдет официальный постмортем 🔔
Никакого сложного эксплойта. Никакой уязвимости в коде. RSA-3072 ключ для SGX-прувера Raiko просто лежал в публичном репозитории GitHub. Два года. Файл enclave-key.pem. В открытом доступе.
Хакер нашёл ключ, зарегистрировал свой прувер как легитимный и начал подписывать фейковые запросы на вывод средств — контракты Ethereum принимали их как настоящие. Без реального депозита на той стороне.
Итог: $1,7 млн утекло, сеть встала, токен упал на 20%, около 2 млн токенов успели уйти на MEXC до заморозки.
Это даже не «баг» — это просто файл не в том месте. Безопасность проекта на сотни миллионов TVL держалась на том, что никто не догадается заглянуть в репозиторий.
Догадались.
#Taiko #crypto #Security #Hack
Подпишись — здесь разбираю взломы до того как выйдет официальный постмортем 🔔
Log in to explore more content