security

security

TheDAO Fund Opens ETHSecurity Initiatives

TheDAO Security Fund launches ETHSecurity Initiatives, its second grants round with RFP-based funding.

security

0x Warns Of Aggregator Quote Spoofing Via Univ4 Hooks

0x warns that most Uniswap v4 hooks are malicious due to aggregator quote spoofing.

brief

SEC Proposes Regulation Crypto Assets

The regulation crypto proposal creates two exemptions from Securities Act registration requirements and introduces a conditional safe harbor.

hack

AFX Trade Hacked for $24M in Bridge Validator Key Compromise

AFX Trade was drained of approximately $24.15 million USDC on Arbitrum after attackers compromised its USDC custody bridge.

revoke

Revoke.cash Launches Auto-Revoking Feature

Auto-Revoking leverages MetaMask's implementation of the ERC-7715 permission standard to auto revoke approvals tied to exploits.

ostium

Ostium Loses $23.7m in Oracle Key Compromise

An attacker drained the OLP vault for approximately $23.7 million. The perps DEX has been paused while recovery efforts continue.

digest

#978 - Loopring L2 Shuts Down, Bitmine Holds 5.7M ETH, Vitalik Unpacks Obfuscation

Loopring shuts down DEX/rollup, Bitmine reaches 5.7M ETH, Vitalik unpacks indistinguishability obfuscation, and Aave targets tokenized stock lending.

security

Taiko Bridges Compromised In Verification Exploit

Taiko warns the security assumptions of all bridges on the network can no longer be relied upon after an exploit drained its Ethereum ERC20 vault.

security

Jared From Subway MEV Bot Drained In Honeypot

Blockaid flagged a honeypot that tricked the jaredsmev MEV bot into token approvals later used to drain its funds, per a forensic breakdown by banteg.

zk

ZisK Ships v1.0.0-alpha, Enters Stabilization

The zkVM's codebase is now feature frozen as development shifts to security audits, formal verification, and hardening.

security

Aztec Hit By Second Deprecated Rollup Exploit

Aztec Labs is investigating a second roughly $2M exploit on a deprecated rollup, days after a separate $2.19M Aztec Connect drain.

ai-agents

ERC-8126 Adds Agent Verification Layer

A new standard builds on ERC-8004 to let AI agents prove trustworthiness through independent providers and Zero-Knowledge Proofs.

defi

rsETH Recovery: The Complete Tracker

The full timeline of the $290M KelpDAO LayerZero bridge exploit and the rsETH recovery effort — from the hack to full restoration.

security

Ethereum Security Subsidy Program Cohort 1

The program selected 30 projects from its first cohort, covering up to 30% of audit costs from a $1 million funding pool.

justin-drake

Justin Drake Raises Q-Day Odds

Drake raised his odds of a cryptographically relevant quantum computer to 10% by 2030 and 50% by 2032.

gnosis-pay

Gnosis Pay Hack Root Cause

The vulnerability was tied to Zodiac, an operating layer for Safe wallets. Any project using impacted Zodiac modules should check their exposure.

digest

#958 - Vitalik Pitches Options Synthetics, Gnosis Pay Bug, Fluid Incident

Vitalik proposes options as the base primitive for synthetics, Gnosis Pay suffers a delay module bug, and Fluid rewards compromise.

gnosis-pay

Gnosis Pay Delay Module Hack

Gnosis Pay disclosed a bug in its delay module, and temporarily disabled the Gnosis Chain bridge as a precautionary measure.

fluid

Fluid Rewards Infrastructure Compromise

wonderland

Wonderland And SEAL Introduce DARC

Wonderland and SEAL unveil DARC: A New Standard for Digital Asset Risk and Compliance.

kelpdao

LayerZero Publishes Full Post-Mortem On $292M KelpDAO Exploit

LayerZero Labs traces the $292M April 18 attack on KelpDAO's rsETH bridge to TraderTraitor, a developer machine compromise, and poisoned internal RPC nodes.

ethereum-foundation

Ethereum Foundation Launches Clear Signing Standard

The standard ships ERC-7730 descriptors, a neutral mirrorable registry, ERC-8176 auditor attestations on EAS, and ERC-8213 cryptographic fingerprints, with Ledger, Trezor, MetaMask, and WalletConnect onboard.

arbitrum

ArbitrumDAO Approves rsETH Recovery Effort

ArbitrumDAO voted 90.96% in favor of routing 30,765.67 ETH frozen from the KelpDAO exploiter to the DeFi United recovery multisig.

news

ESP Allocation Update Q1 2026

The Ethereum Foundation's Ecosystem Support Program distributed $9.8M to 57 projects spanning ZK, security, privacy, and developer tooling.

security

Ethereum Security QF Round Goes Live

A $1M quadratic funding round backs ~100 Ethereum and L2 security projects on Giveth, with a 500 ETH match from TheDAO Security Fund.

news

Base Introduces Multiproofs With Azul Upgrade

Base's first standalone upgrade since leaving the Superchain introduces multiproofs combining TEE and ZK, plus a new client stack built on OP Kona.

news

Arbitrum Freezes 30,766 ETH From KelpDAO Exploiter

The Arbitrum Security Council executed an emergency upgrade to freeze $71M in ETH tied to the KelpDAO exploit, briefly modifying an inbox contract to impersonate the exploiter.

news

LayerZero RPC-Poisoning Attack

LayerZero attributed the KelpDAO exploit to an RPC-poisoning attack by the TraderTraitor subgroup of North Korea's Lazarus Group.

news

ETH Limo Nameserver Hijack Via EasyDNS

An attacker impersonated a team member and tricked EasyDNS into executing a fraudulent account recovery, briefly hijacking eth.limo's nameservers.

news

Ethereum Foundation Publishes ETH Rangers Program Results

The ETH Rangers program helped recover more than $5.8 million, uncover over 785 vulnerabilities, and identify around 100 DPRK operatives.