Faster global financial news!
vulnerability
-
XRP Ledger fixes a critical decade-old bug that could theoretically create billions of XRP out of thin air.
Researchers have discovered and demonstrated a vulnerability in the XRP Ledger payment system that could allow attackers to create spendable XRP out of thin air without providing funds, thereby breaki
-
Zano rolls back a month of transactions, plans to use personal funds for recovery
The Zano team announced it will draw on the blockchain network’s developer fund, team members’ personal funds, and committed contributors to finance recovery from an emergency rollback. The rollback,
-
Core Lightning fixes a vulnerability that could allow channel state revocations to evade penalties.
Core Lightning has fixed a vulnerability in version v26.06.7 that could allow peers to broadcast old, revoked channel states without triggering a cheating penalty. This vulnerability requires specific
-
XRPL Fixes Critical Pre-Mainnet Vulnerability, New Amendment BatchV1_1 to Activate on September 29 UTC
XRP Ledger (XRPL) validators have approved the conditional activation path for the BatchV1_1 amendment, which aims to fix a previously disclosed signer vulnerability. The vulnerability was discovered
-
Bitcoin Optech highlights how cutting power to miners can lead to increased energy consumption due to 'stuck' variable difficulty controllers
Bitcoin Optech on September 18 drew attention to an analysis by mining engineer Eric Price, which explains that some variable difficulty (vardiff) controllers can keep demanding work calibrated for a
-
Galaxy Research: Coldcard exploiters have moved 45% of the stolen funds from the "third wave" of attacks, totaling 97.09 BTC.
Galaxy Research reports that the Coldcard Bitcoin hardware wallet attacker has moved 45% of the stolen assets from the "third wave" of attacks, totaling 97.09 BTC (approximately $7.8 million at Monday
-
OneKey Lab Replicates Ledger Ethereum App Old Version Transaction Replacement Attack; Vulnerability Fixed, No User Funds Lost
OneKey stated that it successfully reproduced an exploit targeting an old version of the Ledger Ethereum application in a lab environment. However, Ledger has already fixed this vulnerability in Ether
-
Moonwell investigates Base lending market issue after security firms flag $8.7M exploit
Decentralized lending protocol Moonwell is investigating an issue affecting the MAMO Core Market on Base, after security firms CertiK and PeckShield estimated losses of approximately $8.7 million. Att
-
Core Lightning confirms multiple vulnerabilities, advises offline mode for unpatched nodes ahead of security update
Core Lightning confirms multiple vulnerabilities, advises offline mode for unpatched nodes ahead of security update
-
A Coldcard firmware vulnerability reportedly led to the theft of nearly $114 million in Bitcoin from over 700 addresses, with the Foundation CEO stating that reputation is not a security model.
CoinDesk published an op-ed by Zach Herbert, CEO of Foundation, stating that attackers exploited a vulnerability in Coldcard's firmware that led to insufficient randomness in wallet seed generation, s
-
New Bitcoin Addresses Jumped to Over 330,000 Last Week Amid Coldcard Exploit
The number of new Bitcoin addresses climbed from roughly 260,000 to over 330,000, sharply reversing a downward trend that had persisted for most of the year. This surge is linked to the ongoing Coldca
-
BTCPay Server Supporters Offer Up to 3 BTC Recovery Bounty After Critical Exploit
Supporters of the open-source Bitcoin payment processor BTCPay Server have offered a recovery bounty of up to 3 Bitcoin (BTC) following a critical exploit of the platform. BTCPay stated that artificia
-
Apple limits vulnerability submissions, citing struggle to keep pace with AI 'bug' hunters
Apple has limited the number of vulnerabilities researchers can submit, stating it struggles to keep pace with the wave of reports from AI 'bug' hunters.
-
XRP Ledger's xrpld 3.3.0 Upgrade Next Week Reintroduces Features Previously Pulled Due to Critical Bugs
The XRP Ledger is set to release its xrpld 3.3.0 software upgrade next week, which will reintroduce five proposed amendments to validators. Among these are two revised features, "Batch" and "Permissio
-
Zcash Activates Ironwood Upgrade, Seals $1.7 Billion Orchard Shielded Pool Over Counterfeiting Bug
Zcash has activated its Ironwood upgrade (formally NU6.3) at block 3,428,143, effectively sealing the previous "Orchard" shielded pool. The Orchard pool holds approximately 3.66 million ZEC, valued at
-
An address exploited an Ostium vulnerability to profit 23.75 million USDC and exchanged it for 12,085 ETH
Svmuu News: According to on-chain analyst Yu Jin, one and a half hours ago, the address (0x321...bfd9) belonging to DeBank user musti_akrep exploited a vulnerability on the Perp DEX Ostium to profit 2
-
Drips Network Lost 24,900 DAI Due to an Integer Conversion Vulnerability
Svmuu News: An integer type conversion vulnerability was discovered in the `give` function of Drips Network’s DaiDripsHub contract, resulting in a loss of 24,900 DAI. The root cause of the vulnerabili
-
Taiko: All proposers have suspended block production while an investigation is underway into the breach of the chain state verification mechanism.
Svmuu News: Taiko posted on X stating that all Proposer nodes (nodes responsible for producing new blocks) have suspended block production. Taiko said the team is currently investigating the breach of
-
Aztec Labs: The affected product was discontinued four years ago, and the company has no control over it.
Svmuu News: According to monitoring by Aztec Labs, the team is investigating a potential vulnerability that may affect the Aztec payment product—which was discontinued in 2021—where approximately $2 m
-
Zcash Ironwood Upgrade Consensus Rule Changes Finalized, Targeting Activation in July
SvmuuNews Zcash developers have finalized consensus rule changes for the upcoming Ironwood upgrade, targeting activation in July. This upgrade stems from a previous vulnerability in the Orchard pool t
-
In a rescue operation worth over $500,000, a white-hat team recovered 66 NFTs from Flooring Protocol
Svmuureports that Solidity security researcher Quit disclosed details of the Flooring Protocol vulnerability, stating that the attacker exploited a flaw in the ownership verification logic of the BT40
-
Polymarket launches "Zcash Orchard Privacy Pool Confirmed Vulnerable Exploit"
Svmuu Seer monitoring shows that Polymarket has launched a new prediction event titled "Was Zcash's Orchard privacy pool confirmed to have been exploited?" On June 4, Zcash's core development team rev
-
Dragonfly Partner: Zcash Vulnerability Incident Overhyped by Market, Majority of Holders Unaffected
Svmuu reported that Haseeb, Managing Partner at Dragonfly, has addressed the recently patched Zcash vulnerability, stating that there are many misconceptions in the market regarding the incident. He p
-
ZEC Treasury Company Cypherpunk Responds to Price Volatility: All Software Has Vulnerabilities, Zcash Will Demonstrate Security Capabilities
Svmuu, Cypherpunk, the company managing the ZEC treasury, stated that all software has vulnerabilities. Historically, Bitcoin once "over-minted" 184 billion BTC due to a bug. However, this does not me
-
Ethereum Client Patches Vulnerability Allowing Attackers to Redirect ETH Rewards
Ethereum clients patched a vulnerability that could have allowed attackers to redirect ETH rewards. The flaw stemmed from an error by Indian certificate authority eMudhra, which led some Teku and Besu
-
Bitcoinjs-lib patches transaction fee vulnerabilities
Bitcoinjs-lib, a library for building Bitcoin applications, has patched two vulnerabilities that could cause related software to underestimate valid transaction fees and miss warnings for excessively
-
Crypto wallet Vultisig has patched a critical private key leakage vulnerability
Crypto wallet Vultisig has patched a critical private key leakage vulnerability, which previously allowed compromised signers to recover private keys through malicious ECDSA messages. Security researc
-
BTCPay Server merged an API key vulnerability fix on October 19
BTCPay Server merged an API key vulnerability fix on October 19, but its latest public release (v2.4.5, Oct 6) still predates the patch as of October 26. The fix addresses a gap that could allow API k
-
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server
On October 25, researcher Killa successfully executed code on the "Steal My Bitcoin" challenge server, extracting hidden wallet credentials and winning a Bitcoin bounty. The challenge aimed to test th
-
Malicious servers could manipulate payment information displayed to users before they authorized additional fees
Electrum Wallet has patched a high-severity vulnerability that allowed hackers to redirect Bitcoin payments when users attempted to increase transaction fees, enabling funds to be stolen without priva
-
CloudFlare CEO warns of PHP-scale internet dangers, detecting 1 million attacks per minute
CloudFlare CEO Matthew Prince stated in an interview with Nikkei on Friday that internet vulnerabilities on the same scale as recent flaws in the PHP programming language will emerge. He is currently
-
Shaw Publishes Daos.fun Reconstruction Report, Claims Critical Flaw
Shaw has published a reconstruction report for Daos.fun, claiming to have discovered a critical flaw. The report indicates that captured and rebuilt binaries match. Daos.fun stated it no longer mainta
-
Succinct fixes SP1 vulnerability that could lead to invalid proofs being accepted.
Zero-knowledge proof infrastructure provider Succinct has fixed a vulnerability in its SP1 proving system that could have allowed invalid proofs to pass. The flaw affected native Rust verification in
-
PHP vulnerability fix released, millions of attack attempts but government claims no successful intrusions yet
PHP released vulnerability fixes for several versions, including 8.5.12, on Wednesday to address the previously discovered PHP2Shell vulnerability. Cloudflare CEO Matthew Prince stated that their netw
-
Cloudflare CEO Matthew Prince warns of millions of exploit attempts targeting PHP flaw, even before public disclosure
Cloudflare CEO Matthew Prince stated that the network observed thousands of exploit attempts related to the PHP vulnerability even before it was publicly disclosed, with millions of attempts occurring
-
Changpeng Zhao warns of a high-severity vulnerability in PHP affecting popular applications like WordPress; a patch was released on October 21.
Binance founder Changpeng Zhao (CZ) issued a warning to users about two high-severity vulnerabilities (CVE-2026-109618 and CVE-2026-109619) discovered in the PHP programming language. These vulnerabil
-
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
The U.S. National Security Agency (NSA) is urging PHP users to patch two critical 9.2-severity vulnerabilities that could allow unauthenticated attackers to execute code on web servers.
-
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns Due to Two Critical Flaws Allowing Remote Code Execution
-
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
OpenAI: PHP Vulnerability Is One of the Most Impactful in Recent Memory Due to Its Severity and Widespread Use
-
Critical PHP Vulnerability Affects 70% of Global Websites; Patch Released Early Due to Details Leak
A company stated that a critical vulnerability exists in PHP, affecting up to 70% of websites globally, including WordPress and many government and e-commerce sites. Security researchers claim the vul
-
CertiK warns eMudhra flaw may leave crypto bots exposed
Blockchain security firm CertiK warns that crypto trading bots and exchange applications may remain exposed to the eMudhra certificate flaw, as browser fixes may not protect all software.
-
Finland, the Netherlands, and France have shut down or taken offline some government internet services/websites due to a PHP vulnerability.
Finland has shut down national internet services due to PHP vulnerabilities, while the Dutch National Cyber Security Centre has taken websites offline, and France has temporarily taken down provincial
-
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to limit exposed services and prepare to patch immediately.
Security researcher Bürgel stated that a critical PHP vulnerability was circulating before the patch was released. PHP plans to release the patch at 10 AM ET, and security advisories urge operators to
-
NEAR Intents Protocol links $3.8M exploit to deposit bug
NEAR Intents Protocol's postmortem report linked a $3.8 million exploit to a deposit bug. The protocol has since removed deposit notifications after another critical bug report and stated that all aff
-
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot date are not eligible for compensation.
The bOSMO project has initiated a compensation plan due to a vulnerability that allowed low-cost token minting, putting liquidity pools at risk. However, tokens purchased after a specific snapshot dat
-
Protos: XRPN Shareholders Voted for Listing Without Knowing About Inflation Bug That Could Allow Trillions of XRP to Be Minted
According to Protos, shareholders of Evernorth Holdings (XRPN) were unaware of a critical inflation bug in the XRP Ledger when they voted on September 30 to approve the company's Nasdaq listing plan.
-
XRP Ledger Foundation addresses critical bug that could have minted trillions of XRP
The XRP Ledger Foundation has addressed a critical vulnerability, present since 2015 and recently uncovered by Veria Labs, that could have allowed malicious actors to mint up to 18.45 trillion XRP, by
-
XRP Kuwait Pushes Back Against Centralization Criticisms After XRP Ledger Emergency Fix for Vulnerability
XRP Kuwait validator issued a public rebuttal, responding to accusations of losing its independence following an emergency network update. Previously, the XRP Ledger was forced to undergo an emergency
- No data
vulnerability
24H Trending
-
1
Samsung Electronics fell 5.99% from its previous close, now trading at ₩227,500.
-
2
Samsung Electronics is down 4.44% from its previous close, now trading at ₩231,250.
-
3
Cryptocurrency Investing for Beginners: A Guide to Buying and Asset Management
-
4
Former Aptos advisor "Buzz" leaves project, shifts meme marketing efforts to Meta stock
-
5
WOL Token: Current Status and Investment Considerations for World of Legends
-
6
The Federal Reserve maintained interest rates, with a 10-2 vote. Lisa Cook and Beth Hammack voted in favor of a rate hike.
-
7
Nikkei Asia: Iranian separatists intensify attacks and seize territory in response to a potential full-scale US assault.
-
8
FOR Token (ForTube) Issuance Price and Project Analysis
-
9
President Trump returns to Ohio, highlighting over $100 billion in private investment attracted to the state during his term.
-
10
A Boston office building was sold at a foreclosure auction for one-third of its 2019 price, representing a discount of approximately $546 million.
Markets Today
Recommended Reading
Hot Topics
Svmuu focuses on blockchain industry trends and cutting-edge cryptocurrency news, while also covering real-time market data and in-depth analysis of the Hong Kong, U.S., and foreign exchange markets. Here, you can not only access professional 24/7 news updates and accurate market data, but also utilize practical investment tools to help you capitalize on opportunities in both digital assets and traditional financial markets. Whether you are a blockchain enthusiast or an investor in Hong Kong, U.S., or foreign exchange markets, we provide efficient and timely information services to empower your investment decisions.
- User Agreement
- Privacy Policy
- Contact Us
- Business Partnerships
- Disclaimer
- Content Statement
- About Us
- Sitemap
Coming Soon!
