Blockchain & Crypto

A sophisticated supply-chain attack has been identified where Ledger X hardware wallets were modified with spy implants to steal cryptocurrency. The malicious hardware uses LTE connectivity to exfiltrate seed phrases directly from the device.

Aptos has launched an optional Encrypted Mempool on its mainnet to mitigate MEV-related risks like sandwich attacks. By encrypting transaction contents until ordering is finalized, the network prevents bots from exploiting visible pending orders.

The article provides a technical status report on the Core Solidity prototype as of October 2026. It details the implementation of modern language features like pattern matching and generics while outlining the remaining roadmap for production readiness.

Coinbase has released a detailed framework for Bitcoin's post-quantum readiness, focusing on modular signature schemes and staged migrations. The plan aims to protect the network from cryptographically relevant quantum computers while maintaining compatibility with existing institutional custody tools.

The Solana Foundation introduced Solana DvP, an open-source standard for institutional delivery-versus-payment settlement. Developed with input from J.P. Morgan, the tool aims to replace slow traditional clearing processes with near-instant atomic transactions.

FinCEN has retracted two major regulatory proposals aimed at increasing surveillance of cryptocurrency mixing and unhosted wallet transactions. The agency cited the potential for these rules to stifle legitimate privacy-preserving activities within the digital asset ecosystem.

The article explores the technological metamorphosis of Ethereum from a basic blockchain to a complex cryptographic world computer. It highlights how advancements in cryptography and network theory will enable unprecedented levels of privacy, scalability, and parallelized computation by 2030.

Bitget experienced a massive $387.5 million cryptocurrency theft caused by zero-day exploits in third-party security software. Investigations by SlowMist and Mandiant reveal that attackers used these vulnerabilities to deploy malware and bypass wallet authorization processes.

The U.S. government is moving to dismantle the A7 Network, a Russian-led shadow banking system used to bypass international sanctions. The proposed FinCEN regulations aim to cut off the network's front companies from both fiat and cryptocurrency channels.

Circle has officially launched Arc, a Layer-1 blockchain designed to solve the infrastructure challenges of stablecoin finance. The network provides predictable fees using USDC as gas and features a permissioned validator set composed of global financial leaders.

A sophisticated ClickFix campaign is leveraging the Polygon blockchain to implement 'EtherHiding,' allowing attackers to rotate C2 servers via smart contracts. This technique makes traditional IP and domain blocking ineffective by using a distributed ledger as an attacker-controlled command center.

New research reveals that the smaller key sizes used in blockchain elliptic curve cryptography make them uniquely vulnerable to quantum computing attacks. This threat extends from individual cryptocurrency wallets to systemic risks involving cross-chain bridges and real-world asset tokenization.

QuFi Network has launched a new post-quantum verification layer to secure digital assets against future quantum computing threats. The platform utilizes advanced NIST-standardized cryptographic algorithms to provide lightweight proofs that can be validated without modifying underlying blockchain settlement layers.

The Glamsterdam upgrade implements new gas pricing models to more accurately reflect the resource costs of state creation and access. While most contracts will remain functional, developers must audit code for hardcoded gas values to prevent potential execution failures.

UK law enforcement has seized $1.4 million in cryptocurrency and bank funds linked to historical darknet market operations. The investigation leveraged blockchain transparency to trace assets from defunct marketplaces used for illicit trade.

DeadLock ransomware has introduced a highly resilient infrastructure by leveraging blockchain technology to host command-and-control instructions. This decentralized approach aims to prevent the permanent removal of their communication channels and data leak sites by authorities.

A new report from RUSI reveals that North Korean hackers are leveraging global crime syndicates to launder billions in stolen digital assets. This strategy blurs the lines between state-sponsored theft and organized criminal activity, making detection significantly harder for regulators.

A critical firmware flaw in Coldcard hardware wallets allowed attackers to drain roughly $130 million in Bitcoin by exploiting a weak random number generator. In response, investors moved over $15 billion worth of BTC into more secure, often multisig, storage environments.

Public Bitcoin miners are aggressively cutting mining capacity to pivot toward AI and high-performance computing services. This transition is evidenced by significant drops in realized hashrate among major players who are repurposing power sites for data center colocation.

Circle is launching Arc, a specialized Layer-1 blockchain designed to solve existing fragmentation and volatility issues in stablecoin finance. The platform integrates major institutional validators and uses USDC for predictable transaction costs.

A significant vulnerability in Coldcard hardware wallets' firmware led to a massive reduction in entropy, enabling attackers to steal over $100 million in Bitcoin. The flaw has prompted the cryptocurrency community to move away from trusting hardware-based random number generators in favor of auditable, physical entropy methods like dice rolling.