security

Glassnode’ning 8-oktabrda e’lon qilgan ma’lumotlariga ko‘ra, taxminan 4,33 million $BTC qayta ishlatilgan manzillarda turibdi, oshkor bo‘lgan ommaviy kalitlarning umumiy miqdori esa qariyb 6,26 million BTC’ga yetadi — chiqarilgan taklifning 31,2 foizi. 👀
📊 Muhim jihatlar:
🔹 4,33 mln BTC: Manzillarning qayta ishlatilishi bilan bog‘liq oshkor bo‘lgan miqdor.
🔹 6,26 mln BTC: Ommaviy kalitlari ko‘rinib turgan taklifning taxminiy umumiy miqdori.
🔹 1,94 mln BTC: Tuzilishi bo‘yicha kalitlarni oshkor qiladigan ayrim manzil turlaridan kelib chiqqan qo‘shimcha miqdor.
🔹 1,79 mln BTC: E’lon qilingan tahlilga ko‘ra, oshkor bo‘lgan kalitlar toifasidagi birjalarda saqlanayotgan Bitcoin.

Glassnode’ning 8-oktabrda e’lon qilingan ma’lumotlariga ko‘ra, taxminan 4.33 million $BTC qayta foydalanilgan manzillarda saqlanadi. Bu Bitcoin’ning muomaladagi taklifining qariyb 21.5% ini tashkil etadi.
Ammo umumiy manzara bundan ham qiziqroq. 👀
📊 Kuzatish kerak bo‘lgan asosiy raqamlar:
4.33M $BTC — ochiq kalitlari oshkor bo‘lgan, qayta foydalanilgan manzillarda saqlanmoqda.
6.26M $BTC — turli manzil turlarida ochiq kalitlari oshkor bo‘lgan manzillar bilan bog‘liq jami taxminiy miqdor.
Jami taklifning 31.2% i — bu kengroq doiradagi xatarga duchor bo‘lgan ulushning taxminiy miqdori.

🚨 URGENT SECURITY ADVISORY: ~6,000,000 DRAINED FROM LEDGER WALLETS (SUPPLY CHAIN ATTACK)
Breaking telemetry confirmed by WatcherGuru and verified by Changpeng Zhao (CZ): Approximately 6M worth of digital assets has been drained from Ledger hardware wallet users following a sophisticated third-party distributor supply chain compromise.
🔍 FORENSIC INVESTIGATION & ATTACK VECTOR:
1. Root Cause: This is NOT an on-chain cryptographic exploit or a breach of Ledger Secure Element chips. The vector is an upstream Supply Chain Attack targeting regional distributors and third-party resellers.
2. High-Risk Demographics: Users across Southeast Asia (SEA) who acquired Ledger devices from unauthorized third-party resellers, e-commerce stores, or unverified middlemen may have received pre-tampered or compromised hardware with rogue pre-generated recovery sheets or modified firmware.
3. Exfiltration Mechanism: Private keys and seed phrases were harvested prior to or upon initial wallet generation, allowing automated machine-speed asset sweeps.
🛡️ IMMEDIATE INCIDENT RESPONSE DIRECTIVES:
• Quarantine Reseller Devices: If your device was purchased from an unauthorized reseller, immediately revoke approvals and migrate funds to an authentic multi-sig or verified cold vault.
• Genuine Verification: Always execute Ledger Live Genuine Check on an isolated workstation.
• Direct Supply Chain Rule: Never purchase hardware security modules from third-party marketplace listings.
Real-time on-chain anomaly monitoring powered by CoinXSight Telemetry Engine.
#CoinXSight #Security #Web3

For years the security conversation in crypto was about bugs and about quantum computers, one present and one distant. This week two separate stories suggested a third variable has arrived: artificial intelligence as an attacker's tool, against smart contracts today and, in a worst case, against the cryptography underneath everything.
📌 The news
Per CryptoSlate, Arbitrum's Security Council paused new Stylus program activations on Arbitrum One and Nova on October 2, citing "increasingly sophisticated AI-assisted attacks" using hand-crafted WebAssembly programs built outside the standard compiler toolchain. Days later, Ethereum Foundation researcher Justin Drake urged the industry to prepare for "bunker mode" after OpenAI published 722 math results produced by an internal model, arguing that AI could in the worst case find a shortcut to the elliptic-curve signatures securing Bitcoin and Ethereum "in months, not years", per CryptoSlate and Decrypt.
🔍 What Arbitrum actually did
• Only new Stylus activations are blocked. Solidity deployments and existing Stylus programs are unaffected, and programs can be renewed until they expire.
• The pause was implemented by raising the activation gas cost to a prohibitive level, a configuration change rather than a protocol upgrade.
• Arbitrum said the known bugs mainly threaten chain liveness, such as denial-of-service, and that it found no attack permitting theft of user funds.
• The same action installed a guard on fraud proofs for Arbitrum One that would pause settlement to Ethereum if conflicting proofs were both accepted. No reopening date was given.
📊 The bigger worry, in numbers
• Europol's October 7 report says about 6.9 million bitcoin sit at addresses with exposed public keys, per CoinDesk, and that wallets rather than blockchains are the point of exposure.
• Converting every bitcoin output to a quantum-resistant format would need at least 76 days of block space, per a 2024 study Europol cites.
• Drake named Binance, Bitbank, Robinhood, Bitfinex and Tether as custodians that should harden cold storage, and asked layer-2 security councils to rotate keys or add hash-based signatures.
⚖️ Bull vs bear case
• Bear: AI lowers the cost of finding bugs for everyone, and attackers do not need permission to use it. Arbitrum's pause is the first time a major network has named AI tooling as the reason for a protective action.
• Bull: the same tools help defenders, Arbitrum found no theft vector, Europol says "cryptocurrencies will not collapse due to quantum computing", and Drake's timeline is a conjecture he says should not trigger a rushed migration.
• Market: $ARB trades near $0.18, down about 2.8% today and 11.3% on the week, per CoinGecko, in line with other layer-2 tokens.
👀 What to watch next
• When Arbitrum reopens Stylus activations, and whether it publishes a post-mortem on the attack patterns.
• Whether other rollups with alternative runtimes announce similar reviews.
• Any custodian publicly committing to address rotation or hash-based signatures.
━━━━━━━━━━━━
💡 My take: the Stylus pause is responsible and probably temporary, and the bunker-mode debate is mostly theoretical. What links them is a shift in posture: security teams now plan for adversaries that think faster than humans. That is new, and it will not reverse.
💬 Is AI a bigger threat to smart contracts or to the cryptography beneath them?
#Arbitrum #Security #AI