18+ hour, 30+ min ago   (1831+ words) An attacker drained 736,442 USDT through Chainflip's Tron rail on September 12, 2026, and trading has been at a standstill ever since. On September 13 we measured for ourselves which functions of the protocol are switched off and which are still running. Chainflip is…...

1+ day, 12+ hour ago   (1834+ words) An attacker minted billions of unbacked syBTC on the cross-chain bridge Symbiosis and pulled out roughly $336,000. We checked for ourselves on September 12 which routes are still running: the way into the bridge is suspended, the way out is open. Symbiosis…...

4+ day, 7+ hour ago   (1808+ words) Trezor users received a fake STM32 entropy warning sent from a real Trezor address. Here is what happened and what to do if you clicked. The company confirmed on Wednesday that attackers had gotten into its email infrastructure and used it…...

5+ day, 12+ hour ago   (1787+ words) On September 11, 2026 at 11:15 UTC the amendment fixCleanup3_3_0 can be activated on the XRP Ledger. We measured the state on the ledger ourselves and show who really has to act and who can ignore the date. This analysis was carried out by…...

6+ day, 9+ hour ago   (1769+ words) A little more than half of all Tether dollars sit on a chain whose token contract is steered by a multisig address with a threshold of two out of three. We queried the structure on-chain ourselves on September 8, 2026, and show…...

6+ day, 21+ hour ago   (1809+ words) Compromised private keys overtook smart contract code flaws as the most common attack route for the first time in 2026. What sits behind the shift, and how to check your own setup for its single point of failure. A private key…...

1+ week, 5+ hour ago   (1485+ words) Nearly 4,000 BTC left Liquid Network's federation wallet. The attacker says he is a white hat and is negotiating with Blockstream on-chain. Bitcoin's oldest sidechain just lost almost everything it was holding, and the person who took it is asking politely…...

1+ week, 6+ hour ago   (1841+ words) Harmony is ending its own blockchain and reissuing ONE as an ERC-20 token on Ethereum. Wallet and exchange balances travel across via snapshot, but liquidity pools, multisigs and DeFi positions are yours to unwind beforehand. The window is tight. Reports…...

1+ week, 5+ day ago   (1783+ words) The release schedule for Agave v4.3 names September 28, 2026 as the start of feature activation on Solana mainnet. We measured how much stake already runs on the new version today, and explain what delegators need to draw from it. Solana is not…...

2+ week, 9+ hour ago   (1789+ words) In August 2026 the security firm Socket disclosed two separate campaigns: 40 confirmed malicious Firefox extensions and 19 for Chrome and Edge, all of them from the official marketplaces. Nine of them were harmless sports apps that only turned into wallet thieves through…...