brief - November 9, 2026

Ethereum Transit Authority Tracks Wallet Data Leaks

Ethereum Transit Authority traces what wallet requests reveal, which companies receive the data and where transaction flows can be blocked.

Happy Monday, November 9, 2026.

Austin Griffith introduced Ethereum Transit Authority. Vitalik coins ETH as a store of value. A former employee is suing the Ethereum Foundation. And a Web3Auth flaw results in compromised social-login wallets.

The price of ETH dropped over the weekend to $2,127 amid a broader sell-off in tech stocks.

Support ETH Daily Security

A small donation can help ETH Daily Security reach the threshold to qualify for TheDAO Fund’s vote. We’re building a public hub to help Ethereum users find tools that protect them. Support the initiative here.

Ethereum Wallet Data Flows

Austin Griffith introduced Ethereum Transit Authority, an interactive map of the companies that receive data when people use Ethereum wallets. Each route traces information such as an IP address, wallet address, recipient, transaction intent, holdings and signed transaction through services including RPC providers, screening tools and wallet APIs. The project draws on wallet source code and live network captures.

The maps show where a company can block a user request, return information that shapes what a user signs, or connect data across services. A subway-style layout separates each data type into its own line, marks the signing point, and identifies which stations (aka companies) receive each item. Users can inspect wallet journeys across multiple wallets as well as transaction send, approvals, swaps, and DeFi interactions.

Vitalik Coins ETH A Store Of Value

Vitalik Buterin says that ETH makes more sense as a store of value than as a fee-burning token. He says the case for fee burn was weaker than it appeared because much of the activity behind it came from crypto markets, whose spending could fall alongside ETH's price. EIP-1559 and its burn can remain, he says, but Ethereum should not treat a low burn rate as a failure.

Buterin says optimizing for fee burn could push Ethereum toward high fees, heavier protocol funding, and more interventionist governance, all of which could conflict with decentralization and resistance to capture. He instead ties ETH's store-of-value case to Ethereum's durability and what he calls CROPS: censorship resistance, open source, privacy, and security. He argues these properties support stability, which matters to holders and institutions, especially amid AI-driven disruption.

Former Employee Sues Ethereum Foundation

Kayleen Fulton, a former lead of the Ethereum Foundation’s Protocol Support team known as Nixo, is suing the Ethereum Foundation, Vitalik Buterin, Bastian Aue and three employment-services companies in federal court in Colorado. Her complaint alleges that the Foundation fired her after she disclosed a cancer diagnosis and helped organize staff opposition to a required pledge in the Foundation Mandate.

Kayleen Fulton and Trent Van Epps organized a letter signed by 53 Protocol cluster employees declining to affirm the Mandate under what they described as coercion, while stating they are not resigning. Fulton alleges Aue fired her on April 6, 13 days after her diagnosis disclosure and 12 days after the letter. The complaint says Aue praised her work during the termination call and gave no reason for the decision.

The dispute centers in part on a passage in the Mandate called the “Source Seppuku License,” which included a pledge “to take his or her own life with a sword” upon failure to uphold its terms. The lawsuit says that Aue required employees to commit to the Mandate or be treated as having resigned. She is seeking back pay and future lost wages, compensatory and punitive damages, statutory penalties, and attorney fees.

A security flaw in Web3Auth’s infrastructure exposed Keplr wallets created with Google or Apple login, allowing an attacker to access signing capability and drain some funds. Keplr says wallets created with a recovery phrase or hardware wallet are not affected, and Web3Auth has reported no evidence that regular MetaMask users were impacted. Neither company has disclosed the attack path or an official loss figure.

GoPlus estimates about $1 million reached attacker addresses, while roughly $5.6 million to $6 million was moved to recovery wallets, most of it through a whitehat rescue effort executed by Web3Auth. Keplr's user guidance says affected users should stop sending funds to the original account and move any remaining liquid assets to a fresh recovery-phrase or hardware-wallet account.

Misc News

Ethlabs shares its week 20 update. Bitmine now holds 6.07m ETH. Elysium launches its Arbitrum Orbit L2 for Hyperliquid on mainnet. Coinbase introduces its federally chartered trust company. Ross (z0r0z) introduces the Tacit Chain ZK Rollup on Ethereum. And Ankr's Ethereum bridge was drained of $300K.

Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content is at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created