# Security Related Articles

Attacker takes over multisig minutes after creation, drains up to $40M slowly

A crypto attacker took control of a multisig wallet just minutes after its creation 44 days ago, ultimately draining up to an estimated $40 million. Blockchain analysis reveals the wallet was created by the victim on November 4th, but ownership was transferred to the attacker only six minutes later. The attacker then patiently drained and laundered the funds in stages, using Tornado Cash over several weeks. Security experts note the wallet was configured as a "1-of-1" multisig, requiring only one signature, which defeats its purpose. Possible attack vectors include malware, phishing, or poor security practices like storing keys in plaintext. The incident highlights growing security concerns, especially as new research shows AI models are already capable of autonomously finding and exploiting smart contract vulnerabilities.

cointelegraph12/18 13:14

Crypto losses near $3.4B as hackers went ‘big game hunting’

cointelegraph12/18 13:02

Bitcoiners push for quantum-resistant BIP-360 upgrade as debate heats up

A group of Bitcoin advocates and fund managers is urging the network to accelerate the adoption of quantum-resistant cryptography, citing BIP-360 as a potential solution. Proponents like Charles Edwards of Capriole warn that a significant portion of Bitcoin could be vulnerable to quantum attacks within years and argue for a migration deadline by 2028. However, critics including Adam Back of Blockstream dismiss these concerns as premature, stating quantum threats are “decades away” and emphasizing that Bitcoin doesn’t rely on encryption vulnerable to near-term quantum breaks. Debate continues as Taproot adoption declines, possibly reflecting user anxiety, while alternative quantum-resistant signature schemes like hash-based proposals from Blockstream Research gain attention.

cointelegraph12/18 12:21

MoveBit Research Release | Belobog: A Move Fuzzing Framework for Real-World Attacks

MoveBit introduces Belobog, a novel fuzzing framework designed specifically for Move smart contracts to address security challenges beyond syntax and type errors. Unlike traditional fuzzing methods that struggle with Move’s strong type system and resource semantics, Belobog leverages type-guided input generation and mutation. It constructs a type graph to produce semantically valid and executable transaction calls, significantly improving the efficiency and depth of state exploration. The framework integrates concolic execution (combining concrete and symbolic execution) to penetrate complex constraints and branch conditions, enabling deeper coverage of potential vulnerabilities. Evaluated on 109 real-world Move contracts, Belobog detected 100% of Critical and 79% of Major vulnerabilities confirmed by manual audits. It also demonstrated the ability to reproduce full exploit paths without prior knowledge of vulnerabilities. Designed to be developer-friendly, Belobog will be released as open-source to encourage community adoption and extension. The work is currently under peer review for PLDI’26. Preprint: https://arxiv.org/abs/2512.02918

marsbit12/16 09:12

Poland's Crypto Regulatory Bill 'Stalled', Pro-Crypto President and Strong-Regulation Prime Minister Engaged in Fierce 'Internal Struggle'

Poland is embroiled in a political standoff over its cryptocurrency regulatory bill, pitting pro-crypto President Karol Duda against Prime Minister Donald Tusk's pro-regulation government. The bill, intended to align with the EU's MiCA framework, mandates strict oversight by Poland's Financial Supervision Authority (KNF), requiring crypto service providers to register, comply with anti-money laundering rules, and adhere to consumer protection measures. It also introduces criminal liability for unlicensed activities. President Duda vetoed the bill, arguing it threatens economic freedom, stifles innovation with high compliance costs, and grants excessive powers to regulators. The ruling coalition, led by Tusk, resubmitted the identical bill unchanged, framing it as a national security necessity to counter Russian influence and illicit financial activities. The deadlock highlights deeper ideological divides: Duda's camp prioritizes market freedom and competitiveness, while Tusk's government emphasizes regulatory rigor and EU integration. The impasse leaves Poland as one of the few EU members yet to fully implement MiCA, with ongoing political negotiations determining the bill's fate.

marsbit12/16 08:03

The U.S. SEC Teaches You How to Custody Crypto Assets Step by Step

The U.S. SEC published an investor bulletin on December 12 to educate retail investors on crypto asset custody. The bulletin explains that crypto custody refers to how and where crypto assets are stored, typically through a crypto wallet that holds private and public keys rather than the assets themselves. Wallets are categorized as either "hot" (internet-connected, convenient but more vulnerable) or "cold" (offline, more secure but less convenient). Investors must also choose between self-custody (full control and responsibility over private keys) and third-party custody (using a service like an exchange, which manages keys but introduces counterparty risk). The SEC provides key questions for both options. For self-custody, these include assessing technical ability, desired control level, wallet type, and costs. For third-party custody, investors are urged to research the provider's background, regulatory status, insurance policies, security measures, asset storage methods, use of client assets (e.g., rehypothecation), privacy practices, and fee structure. General protection tips include never sharing private keys or seed phrases, safeguarding privacy, being wary of phishing scams, and using strong passwords with multi-factor authentication.

marsbit12/16 01:05

Looking Back at the Web3 Wallet Undercurrents of 2025: What Are the Major Players Really Competing On?

In 2025, the Web3 wallet sector is undergoing a quiet but significant transformation, driven by major players integrating advanced technologies to enhance security, usability, and functionality. Key developments include Coinbase and Bitget adopting TEE (Trusted Execution Environment) for secure key management and transaction signing, Binance and OKX leveraging TEE with MPC (Multi-Party Computation) and smart accounts for improved security and cross-chain operations, and MetaMask and Phantom introducing social login features using encrypted key sharding for better recovery and user experience. The evolution reflects a shift from purely self-custodial models to hybrid approaches that balance security with convenience, enabling features like automated trading, gas sponsorship, and seamless multi-chain interactions. This transition is fueled by emerging trends such as Perps (perpetual contracts), RWA (real-world assets), and CeDeFi, which demand more complex transaction capabilities. While no new dominant wallets emerged, existing leaders are repositioning as comprehensive entry points for diverse on-chain activities, moving beyond basic asset storage to integrated financial services. The adoption of TEE and MPC technologies, alongside potential future integration with passkeys, indicates a maturation of wallet infrastructure, setting the stage for broader adoption and more sophisticated applications in the coming years.

marsbit12/15 04:05

Ethereum Is Becoming the New Global Financial Backend

Ethereum is emerging as a global financial backend, reducing the complexity and cost of building financial services while increasing speed and security. It embeds core financial operations—such as ownership recording, value transfer, and obligation enforcement—into software, executed via a distributed validator set. This shared infrastructure eliminates the need for redundant internal systems, transforming capital-intensive processes into software-driven activities. The platform addresses key economic frictions: triangulation (discovery and agreement), transfer (value movement), and trust (enforcement). By providing a transparent, programmable, and cryptographically secured environment, Ethereum enables real-time settlement, automated compliance, and global interoperability. This reduces operational risks and costs, particularly for new entrants and markets with fragile financial systems. Ethereum’s impact is most significant in emerging economies, where it offers immediate functional improvements, while in developed markets, benefits accumulate gradually as more processes become programmable. It shifts institutional focus from infrastructure maintenance to innovation and product design, promoting leaner, more efficient financial services. As a resilient, open, and verifiable system, Ethereum is positioned to serve as the foundational layer for future financial infrastructure, driven by economic incentives favoring transparency and reliability.

marsbit12/13 10:36

Scaramucci predicts ‘exponential opportunity’ for crypto at LONGITUDE

At the LONGITUDE event, Anthony Scaramucci and other industry leaders expressed strong optimism for cryptocurrency in 2026, citing institutional investment and clearer regulations as key drivers. Scaramucci emphasized the potential for blockchain to reduce the $4 trillion spent globally on transaction verification in TradFi, with protocols like Ethereum and Solana offering major efficiency gains. Kristin Smith highlighted regulatory progress in the U.S. and globally, though she noted that trading regulations remain a barrier. Eli Ben-Sasson discussed the rising demand for privacy protocols like Zcash, noting that enterprises seek tailored privacy solutions. Security was also a focus, with Phemex CEO Federico Variola and Ledger's Ian Rodgers addressing risks from social engineering attacks, exemplified by the $1.6B Bybit hack. The event underscored a collective push toward safer, more regulated, and efficient crypto adoption.

cointelegraph12/12 13:37

The 20% Threshold Audit: Which of the Top 20 Cryptocurrencies Will Perish Under the CLARITY Act?

**Audit of the Top 20: Which Cryptocurrencies Will the CLARITY Act Kill?** Scheduled for a final push in December 2025, the U.S. CLARITY Act introduces a critical 20% threshold. If any single entity or affiliated party controls more than 20% of a network's token supply or validation power, the asset is classified as a "digital security" under the SEC's strict jurisdiction. If it remains below, it is a "digital commodity" under the more lenient CFTC. An audit of the top 20 cryptocurrencies reveals a stark divide: **The Safe Haven (Digital Commodities):** * **Bitcoin (BTC):** 0% control. The gold standard of decentralization. * **Ethereum (ETH):** <1% control. Highly dispersed validators and foundation holdings. * **Dogecoin (DOGE) & Litecoin (LTC):** Near 0% control. Their simple, early PoW issuance is now a major compliance advantage. **The Red Zone (At High Risk):** * **XRP:** High risk. Ripple's massive escrowed holdings could be deemed "entity-controlled." * **BNB:** High risk. Strong association with Binance exchange and its controlled burn mechanism. * **TON:** High risk. Historically concentrated supply from early mining. * **Sui & Aptos:** Extreme risk. Classic "VC coins" with teams, investors, and foundations holding over 50%. * **Layer 2 Tokens (e.g., ARB, OP):** Medium-High risk. Their DAO treasuries often hold 30-40+% of supply, which could be viewed as a single entity. **The Grey Zone:** * **Solana (SOL):** Its status is unclear. FTX's collapse dispersed supply, but the foundation and VC holdings remain a focus for regulators. The 360-day grace period will trigger a market reckoning. Projects may desperately airdrop or burn tokens to dilute control, accept a security" label and face liquidity death on major exchanges, or be preemptively delisted. The outcome will be a "gentrification" of crypto, splitting the market into compliant, institutional "digital commodities" and a shadowy world of illiquid "digital securities." Investors must now scrutinize token distribution or risk being locked out of liquidity.

marsbit12/12 09:40