Security

The exchange says users are whole after the Oct. 29 theft, paid for from SAFU, its futures insurance fund and treasury, and has published a 198-token proof-of-reserves snapshot that users cannot yet independently verify.

Binance told iPhone users a public iOS sandbox escape called worse_query could let malicious apps read seed phrases and private keys stored by other apps, while Apple's Nov. 9 updates do not mention the bug.

South Korea's Gopax halted standard withdrawals at 2:55 p.m. and trading at 3:53 p.m. Friday after a hacking-threat email, and is transferring all held assets to cold wallets with no loss reported so far.

Credit Mutuel Arkea says a cyberattack through a service provider enabled fraudulent transfers from its own account, while ZachXBT puts the theft above $133 million, a figure the bank has not confirmed.

Brazil’s largest crypto exchange Mercado Bitcoin says customers suffered no losses, but it has not said how much was taken or when it will reopen.

Bitcoin Core updates security as AI automates bug hunting. Jameson Lopp explains the shift to real-time defense, uncensored exploit models, and the PHP flaw.

As global sites go offline over PHP flaws, Bitcoin Magazine's Shinobi explains memory bugs, AI-driven hacking speeds, and whether Bitcoin faces any exposure.

Blockaid launched Risk Exposure, a real-time compliance suite bringing programmable AML controls, transaction screening, and DeFi monitoring to institutional onchain finance as banks deepen crypto exposure.

From The Core Issue: A look at what Bitcoin Core developers do to ensure the software running on your computer is actually the code they wrote.

Alena Vranova’s Glok fights wrench attacks with counter-kidnapping security training and privacy-first app.