Hackers found a way to steal Bitcoin without private keys
Hackers found a way to steal Bitcoin without private keysThe Electrum exploit required a manual fee increase; version 4.8.3 patches the flaw.
A routine attempt to speed up a Bitcoin payment became a way to authorize theft. Malicious servers could substitute payment details in older Electrum releases; users who manually raised the fee could then authorize the altered payment without attackers obtaining their private keys. Initia’s bridge exploit also exposed a gap between holding tokens and being able to cash them out. Canada, meanwhile, proposed direct stablecoin redemptions for covered retail holders, with a fee ceiling and a reserve-market liquidity exception. Those proposed rights are not yet in force. Top NewsHackers found a way to steal Bitcoin without private keys
The October 24 disclosure confirmed active exploitation of Electrum versions earlier than 4.8.3 and at least one loss, without disclosing the amount stolen. Attackers used addresses matching the intended recipients’ final four characters and supplied substituted transactions with invalid signatures, which affected clients failed to check before displaying them in unconfirmed history. Version 4.8.3 adds checks on wallet-owned inputs before those transactions enter local history; clients connected exclusively to trusted servers are outside this attack’s scope, according to the advisory. Initia hack drove its USDC bridge reserve down to $63 as withdrawals failedBitquery found Initia’s USDC bridge reserve on Noble hit $63 on October 23 as withdrawals failed. Initia attributed the exploit to a MoveVM script-caching bug; its October 24 update left restart timing and reimbursement unresolved. Canada proposes direct stablecoin cash-outs for small holders with a 1% fee capCanada proposes no minimum redemption amount, a three-business-day issuer deadline and a 1% fee ceiling for covered holders. Reserve-market liquidity shortages could trigger daily limits; implementation is intended for fall 2027. What We’re Watching
Elsewhere in CryptoPump.fun’s biggest winners may be impossible to copy as $752 million study exposes hidden trading gap. Transferred inventory can inflate wallet-level gains without a purchase followers can mirror; actual copy-trader returns remain unmeasured. Paolo Ardoino wants AI to run Bitcoin mines. Who gets permission to act?. Fifteen participants committed to integrations; equipment-command permissions still depend on deployed code, identity checks and site controls. How $37 million stolen from Americans moved through a Bahamas bank into Tether’s USDT. Zhao, presumed innocent, faces US proceedings; prosecutors have not accused Tether or Deltec of knowingly participating. Lido opens larger Ethereum validators with a 32 ETH operator bond. Operators post a separate bond; larger validator allocations depend on activation, capacity approvals and available protocol inflows. Cardano moves closer to 15x scaling breakthrough as developers merge key Leios code. Merged code advances integration; capacity targets still require testing, governance approvals and operator readiness. The Catalyst by CryptoSlateWhat’s moving crypto. Why it matters. What to watch next. CryptoSlate has covered crypto, markets, and decentralized technology since 2017. Read CryptoSlate · Tips, questions & corrections · Sponsor The Catalyst For information, not investment advice.
|
Komentar
Posting Komentar