The Weekly Edition — Archive
Issue № 1 · Week of Aug 24, 2026
A 2020 audit finding rated Low drains $1.73M from Notional's dormant V1 escrow, NEAR quietly patches a validator crash a single chunk producer could trigger — plus August's ledger closes at $215M with code bugs the smallest line — plus a $951 governance takeover at Term Finance, Cosmos's silent patch becomes the disclosure, California's meme coin ban, the Ninth Circuit reads Kalshi's marketing back to it, Solana's first binding vote, nothing was hacked at Moonwell, two AIs racing to the same Ledger bug, Core Lightning's embargoed emergency, the BoE's stablecoin mandate, and the H1 damage report
256 drops and one payment could have minted 18 trillion XRP · 111 Ledger wallets emptied in one Bitcoin block, and the reseller had changed hands in March · Eleven seed phrases on an open directory · 'Bunker mode': Drake says AI math could break ECDSA within months; Coinbase's cryptographer calls it FUD · Lloyds settled $750,000 with Visa from Jersey, over a weekend, onto a public chain nobody named · Ten minutes of AI tracing, and a North Korea verdict with the working left out · Lose $100 on Drift, redeem today, get $1.04 · FinCEN wants banks to block a list of companies it won't publish · Blast put 16,148 stETH into Lido's exit queue within hours of its shutdown post · Two days before it shrank to two commissioners, the SEC made one a quorum · MetaMask is pulling its Lido validators over 0.36 ETH in misrouted tips · 'We have identified you, sir': NEAR Intents' $3.8 million came back within a day of the ultimatum · A hidden script inside Bitget was reading a database password on August 31 · Chainlink's 'extra fuzz testing' commit guards against one number stalling every node · On Zano, block 3,833,001 arrived 31 days after block 3,833,000 · NEAR Intents holds $503,000 of the $50 million it turned away · Bitget says the thief came in through a security product it won't name · THORChain says it never blacklisted the thief who took its own $10.7 million · Tokenized stocks and Treasuries are defined out of the SEC's October 20 crypto rule · 23,155 NFTs rescued from a contract nobody could pause · 'No problem': Kelp takes LayerZero's 2024 answer to a Vancouver court · 31 hours after the mint, Meter pushed a branch named 'unconditional consensus validation' · Someone's AI agent tried to sell 10 USDT on Quidax · Bitget's own approval system signed off on $387.5 million · Cosmos Hub validators moved 1.2 million ATOM without a governance vote · Restart a halted chain and six hourly quotas can leave in 36 seconds · Cosmos wrote a warning where a check should have gone · EvilTokens sold a chatbot that picked who to impersonate · Pragma says a third price source would have stopped the Nostra drain · Four governments trace 30,000 infected developer PCs to fake job interviews · Most of the 11.7 million XRP in the D'CENT drain left after the warning · 225,000 empty rounds since MultiversX last produced a block · Tokenize a Treasury at DTCC and it stops counting as collateral · 408.5 million NTX came out of NuNet's own minting key · S&P Global is buying the auditor behind $37 trillion in transfers · A second gossipsub package has the same unguarded check and no advisory · Since 2022, a Bitcoin Core wallet name could carry a shell command · Two Robinhood engineers' Hyperliquid wallets led back to exchange accounts in their names · 2,882 rsETH went back to the Safe's owner 30 hours after an MEV bot took it · Tillis voted no to keep a second CLARITY vote possible · Fifteen months from Tether's freeze to a forfeiture filing · Who watches Balancer's pools after October 30? · 25 fixes Core Lightning kept sealed for two weeks · Revolut gave passports and bitcoin histories to a fake official · $736,442 left Chainflip through refunds for swaps that already paid · Ether.fi's old queue could only rob smart wallets · Hemi's empty claim contract still says it holds 124.5 million tokens · Three clauses now decide what counts as decentralized · Mysten rewrote a Sui verifier for a feature no chain has turned on · 46 billion synthetic bitcoin converted into 4.39 real ones · DeepSeek filed its 9.4 sandbox escape fix under chores · Visa and Mastercard will accept an agent that Ant already cleared · Wormhole is closing a way out of its own four-day quarantine · It tried to abort eight times, then broke into a real machine · Two wallet makers, one newsletter vendor, and the same fake alert · Osmosis will ask its voters to seize an attacker's 22.65 bitcoin · If your Alby Hub predates August 2025, take it off the internet · One signature, counted twice, emptied 2,321 card balances · Block wants a bank that takes no deposits and makes no loans · The 598 bitcoin nobody will call a bounty ·Bridge hacks went from 3 to 26, the same file also says 11 to 39 · Set the clock to 1970 and the wallet looks for its coins in 2149 · Malware moved its address book onto Polygon, where takedowns don't reach · Who re-reads a tool description after you approve it? ·Twenty-one banks have a stablecoin plan, a launch window, and no name · Five days before Liquid's $320 million peg-out, the fix was already in git · Nobody said 'blockchain' in the G7's quantum warning · A $1,000 bounty bought a bug attackers were already using · After weeks of stillness, 20.5 bitcoin tested the exit ·OpenReserve needs $210 million by September 2027 · The wallets emptied, the company has said nothing · Pocket never held a coin, it held the map · The auditors found it in 2020, they marked it low · The comment said the unwrap was safe · The vendor nobody chose ·The agent opened the folder, the folder opened a shell · The vote is set, the text isn't finished · The key check failed, the session opened anyway · Forty years on, the SEC reopens the record of who owns what · The code was public for a month, the reason wasn’t · The only fix was to ask everyone to leave · The cause is still unknown, the label went up anyway · The two firms that count crypto crime are suing each other · In ten days, silence becomes a reportable event · Efficiency mode did exactly what it was built to do · Ontology stopped the chain on a suspicion · The contracts held, the prices didn't ·$951 bought the votes · Cronos turned the blockchain off · The signature was valid ·The chain was fine, the foundation wasn't · The chains learned from the attacker first ·California's half-enforceable meme coin ban · The Ninth Circuit reads Kalshi's marketing back to it · Solana's first real vote · Nothing was hacked · Two machines, one bug · Your patch deadline was set by a machine · The $500,000 isn't in the paper · The safest place in crypto · Core Lightning's embargoed emergency · The BoE gets a second job · The vault got robbed · No coins were touched · "Pennies" · Minting out of thin air · Guardrails for the robot hand · The agent-to-exchange pipe · The half-year ledger