Every Zipp story tagged #SmartContractSecurity, newest first.
The drain hinged on 79AU token permissions, showing that locking LP receipts does not revoke a privileged address's ability to move tokens from a pool.
The redesign consolidates market infrastructure and adds an OracleAggregator, while audits and a $5M bug bounty aim to strengthen the new system.
The redesign replaces a 2019 foundation with unified market infrastructure, while audited canary markets will precede the planned switchover.
Aave v3’s core contracts were unaffected, but the attack exposed how a third-party integration can put collateral in users’ wallets at risk.
A patch and full reimbursement pledge limit the immediate fallout, but deposits and withdrawals across supported chains face a roughly 12-hour suspension.
The team has pledged full compensation, but deposits and withdrawals across 11 networks face a longer shutdown than the core service.
The exploit exposed two separate control failures: a consensus validation bug and an automated peg-out path with no payout-size or human-review limits.
The deal brings smart-contract security into S&P’s institutional risk stack as tokenized funds, stablecoins and blockchain markets move beyond traditional trading hours.
The deal would connect institutional risk assessment with smart-contract security as banks, funds, stablecoins and DeFi protocols move further onchain.
Credit ratings stop at the issuer. Buying the security firm behind $37T in token transfers gives S&P a way to price the next risk layer banks will face as tokenized money hits their books.
The headline is compute scale. The crypto read is upstream: as automated proving gets cheaper, the cost of poorly specified contracts grows. Terence Tao is already naming the gap that opens.
Flying Tulip's CEO argues the 2020 DeFi trust model no longer fits modern protocols. Upgradeability, circuit breakers and equity-based margin are the new baseline.
A decade after the most consequential smart-contract breach in crypto history, the Ethereum ecosystem has channelled the lesson into a $130 million security fund — a direct institutional response to…
The Mythos tier is the headline, but the auto-routing layer that funnels cyberattack and code-extraction queries down to Opus 4.8 is what DeFi teams will be reading closely.
The bombshell isn't the quote — it's the source. OpenZeppelin audits Aave, Compound, MakerDAO, Uniswap and Coinbase, so its co-founder telling family to exit DeFi is a signal the audit industry…
The consolidation leaves Immunefi as the dominant venue for crowdsourced crypto security audits — a market structure that matters for every protocol paying for pre-deployment review.
CryptoSlate
TheBlock
WuBlockchain
CoinDesk