Summary On September 6, 2026, exploiters created approximately 4,000 unbacked L-BTC and redeemed it through SideSwap for real bitcoin. Liquid and SideSwap reported that their private keys remained secure. The failure was in the software deciding whether the L-BTC was valid. Liquid's incident update The exploiters returned
Deep dive into how to integrate x402 protocol securely.
Soroban is the smart contract platform built on the Stellar network and follows a design that is intentionally different from EVM-based systems. Contracts execute deterministically with explicit authorization, integer-only arithmetic, and a resource-metered storage model. There are no implicit permissions: every sensitive action must call require_auth, and failing to
Private keys represent the ultimate authority in decentralized systems. They control assets, sign transactions, authenticate identities, and anchor an individual’s entire on-chain reputation. Once a private key is compromised, the attacker gains irreversible and total control. There are no chargebacks, no recovery workflows, and no intermediaries who can intervene.
1. Executive Summary CVE-2025-11953 is a Critical (CVSS 9.8) OS Command Injection vulnerability found in the React Native Community CLI's Metro development server. Component Vulnerability Type CVSS Score Impact @react-native-community/cli-server-api (4.8.0 - 20.0.0-alpha.2) OS Command Injection (CWE-78) 9.8 (Critical) Unauthenticated
1. Executive Summary CVE-2025-55182 is a Critical (CVSS 10.0) Pre-auth Remote Code Execution (RCE) vulnerability affecting React Server Components (RSC). The flaw is a Deserialization of Untrusted Data (CWE-502) issue in React's "Flight" protocol. Component Vulnerability Type CVSS Score Impact React Server Components (19.0.
On September 8, 2025, the npm ecosystem experienced a major coordinated supply-chain attack. A total of 18 widely-used JavaScript packages were compromised with malicious code designed to intercept cryptocurrency transactions in browsers. These packages collectively see over 2 billion weekly downloads, making this incident one of the most impactful attacks
INTRODUCTION Crypto wallets are the critical bridge (or gateway) between Web2 and Web3 by which you interact with web3 based dApps. . But what if the very tool you rely on has hidden security flaws? That’s a serious risk. This guide is your essential companion for uncovering bugs in crypto