
XRP Ledger patches a decade-old bug that could mint XRP from nothing
Researchers showed a payment could credit a receiver without debiting the sender. An emergency fix has shipped. Nobody has said if it was ever used.
Protocols, security and how the plumbing actually works.
Latest story 15 hours ago

Researchers showed a payment could credit a receiver without debiting the sender. An emergency fix has shipped. Nobody has said if it was ever used.

Justin Drake suggests a gradual move to fresh addresses. Nothing has been broken, and rushing a migration carries risks of its own.

Cardano's new standard lets token issuers freeze and seize balances. It covers assets issued under it, not ADA itself or coins you already hold.

Ledger's Morpho-powered loans let you borrow stablecoins against bitcoin, but the collateral leaves your device and sits in a smart contract.

MetaMask is exiting validators in its staking arm after a security incident it has not described. The browser wallet is a separate product.

SlowMist says two versions of the FomoPeek app hid code aimed at iPhone keychain data. The $580,000 figure is one firm's on-chain estimate.

XRPL.to traced 11.75 million XRP leaving 6,678 wallets between 15 and 20 September. D'CENT warned users on day two. No cause has been published.

Alpenglow targets 150ms finality on Solana, down from roughly 13 seconds. It is a testnet trial, not a mainnet launch, and two validator clients are missing.

TRM Labs traced 274.60 ETH from 224 people who followed YouTube tutorials into deploying a smart contract that quietly forwarded their funds onwards.
No adverts, no sponsored posts, no paywall. The site is paid for by readers. Anything helps, and nothing here buys you anything the site does not already give everyone.
Donate by card or PayPalPrefer crypto? Bitcoin, Ethereum and USDC addresses
Subscribers get the daily and Saturday emails, and the plain-English reason behind any big coin move on its page. Follow up to three coins and we will also email you the moment one has a real incident. No password: we send a one-tap link. The news stays free for everyone either way.
New here? This subscribes you. Already subscribed? The same box signs you in — we send a one-tap link either way.