News
AI found an Ethereum bug that could take validators offline, but humans had to prove it
4+ hour, 39+ min ago (366+ words) Developers at the Ethereum Foundation recently set AI agents loose on the software Ethereum runs on, hoping to discover bugs in an ongoing effort to keep strengthening the largest blockchain by value locked. And while bugs were found, meticulous human…...
Hackers tried to backdoor Injective npm package to steal wallet keys
18+ hour, 12+ min ago (544+ words) Hackers compromised a widely used Injective software package in a supply chain attack with malware designed to steal crypto wallet private keys, adding to a growing attack vector involving attackers using legitimate platforms to deliver malicious payloads. Security firm Socket…...
Why Was Sui Built From Scratch Instead of Forking an Existing Blockchain?
23+ hour, 49+ min ago (521+ words) Sui was built from scratch because its engineering team, most of whom worked on Meta's Diem project, needed a data model and a programming language that no existing blockchain offered. Forking Ethereum or Solana would have meant inheriting an account-based…...
Ethereum Foundation says AI agents can find real bugs but triage is the real work
1+ day, 21+ hour ago (674+ words) The Ethereum Foundation's Protocol Security team said AI agents can help uncover real vulnerabilities in protocol code, but warned that the hardest part is not generating bug reports. It is proving which ones are real. The Protocol Security Team has…...
Not a hack: Uniswap Permit2 phishing wiped $1 M with one signature
2+ day, 6+ hour ago (932+ words) One trader is out roughly $1 million after a phishing attack turned Uniswap's own convenience feature against them. No protocol was hacked. No vulnerability was exploited in the traditional sense. The trader simply signed a message they shouldn't have " and that…...
Anthropic Removes Hidden Claude Code Tracker After Researchers Raise Privacy Concerns
3+ day, 8+ hour ago (430+ words) Anthropic has removed a hidden tracking system from Claude Code after a security researcher discovered the AI coding assistant was using undisclosed markers to identify some users" location, proxy use, and possible links to Chinese AI labs. The feature, discovered…...
Ax Labs releases neow3j 3. 24. 2 with Neo 3. 10 RPC support
3+ day, 13+ hour ago (322+ words) Ax Labs released neow3j 3. 24. 2 on July 7, bringing the Java SDK into alignment with Neo 3. 10 by adding support for the new RPC methods introduced in Neo-CLI v3. 10. 0. The release covers message signing and verification, multi-party transaction signing workflows, and Deferred Relay plugin integration,…...
What are cross-chain bridges? Why they keep getting hacked
3+ day, 20+ hour ago (865+ words) There are hundreds of blockchains, and by design none of them can see the others. Ethereum has no native way to know what happened on Solana; a Bitcoin holder cannot directly spend that Bitcoin inside an Ethereum application. Each chain…...
Thousands of crypto wallets at risk from "Ill Bloom" vulnerability: Coinspect
5+ day, 9+ hour ago (414+ words) Thousands of crypto wallets are at risk of being drained due to the use of weaker-than-intended recovery phrases, an exploit that Blockchain security research firm Coinspect has dubbed "Ill Bloom." The wallets at risk span Bitcoin, Ethereum, Polygon, Rootstock, Tron…...
Fake Mac Clipboard App Delivers New Password-Stealing Malware
5+ day, 19+ hour ago (481+ words) Mac users searching for the open-source clipboard manager Maccy are being targeted by a fake version of the app that installs a new Rust-based infostealer dubbed Pam Stealer, according to cybersecurity firm Jamf Threat Labs. If successful, the malware could…...