Security

Bitcoin Core has disclosed CVE-2024-52911, a high-severity memory bug that affected versions after 0.14.0 and before 29.0. The issue involved Bitcoin Core’s script interpreter during block validation and could have allowed a miner to crash vulnerable nodes with a specially crafted invalid block. The flaw was a use-after-free issue, a memory safety bug where software continues accessing data after it has already been destroyed. In this case, Bitcoin Core pre-calculated transaction input data and sent script checks to background validation…

ArbitrumDAO has elected six members to its 12-person Security Council, refreshing the signer group that can act on urgent protocol risks across the Arbitrum ecosystem. The member election phase ran from April 12 to May 3, with full-weight voting in the first seven days and vote weight decaying afterward to reward earlier participation. Michael Lewellen led the final results with 25.19 million weighted votes, followed by DZack23 with 24.01 million, yoav.eth with 21.75 million, Certora with 21.56 million, bartek.eth with…

ZKsync Era still matters in 2026, but not for exactly the same reason it did during its earlier growth phase. At launch and during its first major adoption wave, the case for ZKsync Era was simple enough: it was one of the most ambitious attempts to bring zero-knowledge rollup technology into a general-purpose Ethereum environment. That basic story is still true, but by 2026 it is no longer enough on its own. The rollup market is more crowded, user expectations…

Litecoin’s emergency 13-block reorganization to reverse a zero-day attack has reignited debate about whether transaction finality can be trusted and whether the network is truly secure. The incident reveals an uncomfortable truth: blockchain immutability is conditional, not absolute. Transaction Finality Is Not Guaranteed For years, crypto advocates have marketed blockchains as immutable ledgers where transactions cannot be reversed. Yet the Litecoin network just demonstrated that a coordinated attack, combined with unpatched nodes, can force it to rewrite its history. While…

A researcher has made a small but notable step toward breaking the cryptography that secures Bitcoin, but the claim has already sparked pushback over how meaningful the result really is. Project Eleven said it awarded a 1 BTC “Q-Day Prize” to Giancarlo Lelli for deriving a private key from a public key using a quantum computer.  We awarded the Q-Day Prize today to Giancarlo Lelli for breaking a 15-bit elliptic curve key on a publicly accessible quantum computer. They derived…

Mastercard has joined the Blockchain Security Standards Council (BSSC) as a Charter-level member. The payments company will help shape security frameworks for blockchain networks and tokenized assets. The announcement arrived on April 21, 2026, from Wakefield, Massachusetts. Mastercard will also join working groups that focus on security and privacy guidelines. A Payments Giant Deepens Its Blockchain Commitment The BSSC operates as a nonprofit consortium. It builds audit frameworks and security standards for digital asset ecosystems. Mastercard joins a roster that…

Michael Egorov, founder of Curve Finance, has called for the development of industry-wide security standards in decentralized finance, amid a surge in recent hacks originating largely from centralized single points of failure. The KelpDAO exploit is one of the latest examples and ranks among the largest DeFi breaches in recent months, shaking the confidence of market participants. DeFi Security Overhaul In his latest tweet, Egorov went on to explain that many of these incidents are “absolutely preventable” and are increasingly…

Arbitrum said its Security Council initiated an emergency intervention to secure funds linked to the recent KelpDAO exploit after identifying 30,766 ETH held on Arbitrum One in an address tied to the attacker. User activity remained unaffected during the process. Arbitrum Security Council Steps In The council stated it had coordinated with law enforcement regarding the exploiter’s identity and that the action was carried out with a focus on preserving network integrity. After conducting technical analysis and internal deliberations, Arbitrum’s…

Arbitrum’s Security Council has frozen 30,766 ETH on Arbitrum One tied to the recent KelpDAO exploit. The council said that it acted after coordinating with law enforcement on the identity of the exploiter. Arbitrum Council Moves Funds to a Wallet-Only Governance Can Unlock BeInCrypto reported that attackers drained roughly 116,500 rsETH, worth about $292 million, from KelpDAO on April 18. The attacker then supplied the stolen rsETH as collateral on Aave V3 and borrowed a large volume of WETH against…