Miden ZK Chain On Mainnet

Happy Monday, October 26, 2026.

Miden launches its L2 on mainnet for partners. Chainlink launches CustodySync to connect custodied assets to DeFi. Keystone discloses a customer data breach. And Ethereum researchers run agent swarms for security analysis.

You may also like Web3 On Fire

Web3 On Fire brings the latest from Ethereum and Web3 straight to your inbox every Friday, with opinions. Join more than 18,000 people who never miss a thing!

Miden Opens Partner Mainnet

Miden, a STARK-based ZK rollup on Ethereum, has launched to mainnet for invite-only partners. Initial features on the network include Guardian-assisted account security, stablecoin transaction fees, bridges to other chains, and in-protocol swaps. Privacy is limited by temporary launch guardrails: validators inspect transaction inputs to check proofs and threshold-encrypt transaction details for possible review in edge cases.

Miden says a public mainnet launch will follow after work on a Blake3-based hash migration, a fuller block-level proof system, and a more complete fee model. The roadmap calls for peer-to-peer networking and consensus to reduce reliance on a centralized block producer, with guardrails to be removed after the protocol and its ZK circuits are tested and formally verified. Miden uses client-side proving, with private account state kept off-chain and commitments posted onchain.

Chainlink Launches CustodySync

Chainlink introduced CustodySync, a system that connects a qualified custodian’s collateral-management system with DeFi lending markets across a loan’s lifecycle. The assets remain with the custodian, initially Anchorage Digital Bank, while Chainlink Proof of Reserve publishes verifiable custody balances onchain and a transfer-restricted receipt token represents the collateral in the lending market. Chainlink Data Feeds and Data Streams provide the pricing data to the market and custodian.

CustodySync aims to address institutional custody requirements and discrepancies between offchain and onchain pricing that can lead to premature or delayed liquidations. If a position reaches its liquidation threshold, the custodian-managed collateral agent handles the sale and records committed proceeds for settlement. Chainlink cites more than $80 billion in DeFi lending, roughly $700 billion in digital assets under custody, and about $250 trillion in traditional assets under custody.

Keystone Customer Data Breach

Keystone, a hardware wallet provider, suffered a data breach on October 20th, resulting in over 25,964 leaked customer records containing names, contact details, shipping addresses, and order information. An additional 12,873 unpaid checkout records containing contact and shipping information were also leaked. Keystone also disclosed that its WebAuth key was compromised, which is used to verify device authenticity.

The stolen WebAuth key could allow counterfeit devices to pass the company’s authenticity check, creating a supply-chain attack risk. Users might unknowingly trust a device that passes verification but could still steal assets. Keystone says it will destroy 18,835 existing inventory devices containing the old key, use a replacement key in new production, and suspend shipment of unshipped orders.

Misc News

Ethlabs and Ethereum researchers are running agent swarms for autoresearch and EIP vulnerability analysis on smart contracts. L2beat maps the progress on native ZK rollups.

Stani Kulechov says Morpho is not neutral nor ownerless. Jumper launches a perps exchange. Balancer contracts still hold ~$500k in unclaimed positions. Bitso offers yield on Mexican peso stablecoin.

x100 DAO drained of $4.5M via a governance attack. Ethereum developers patch a staking issue that could have let a malicious node operator divert a delegated staker’s ETH deposit to a builder account. And Blast shut down today.

Disclaimer: Content is for informational and educational purposes only and does not constitute financial, investment, legal, or other professional advice. No representations or warranties are made as to accuracy, completeness, or timeliness. Use of this content at your own risk, and you should consult a qualified professional before making decisions. No fiduciary or advisory relationship is created