Hacks, exploits, scams and the state of crypto security.
Ethereum Magicians propose post-quantum steganography for P2P censorship resistance, targeting sub-MTU 0-RTT envelopes to address quantum-era privacy and censorship risks.
Lighthouse released v8.2.1 with two new security fixes for rust-libp2p and missed validator duties, following a same-day v8.2.0 patch addressing five issues.
Quantova proposes a new ERC, the "Quantum Bridge Shield," to secure Ethereum bridges with hash-based LMS signatures, costing up to 1.69 million gas for a 6-of-10 committee.
An overflow bug in the XRP Ledger's payment engine, present since 2015, could have minted 18 trillion XRP, 180 times its supply, before being patched by RippleX.
Compound is debating Institutional Comet governance after the Proposal Guardian cancelled Proposals 612 and 613, which aimed to raise the Treasury Escrow cooldown.
Jonathan Spalletta was convicted of computer fraud and money laundering for two Uranium Finance hacks totaling $54.7 million; DOJ filed civil forfeiture cases for USDC and USDT.
![Spalletta convicted as DOJ files [ticker USDC], [ticker USDT] forfeiture cases](https://coinscoop.org/wp-content/uploads/2026/10/article-1297-200x130.png)
Ethereum is exploring EIP-7906, a proposal for native transaction assertions that would allow transactions to revert if signed outcome rules fail, aiming to combat blind signing.
A new Arbitrum proposal introduces an L1 recovery vote with a 25-day timelock, allowing repairs on Ethereum if L2 governance and Security Council fail.
Arbitrum's Security Council paused Stylus activation and installed a One-Step Proof guard for BoLD due to undisclosed "known risks," setting activation cost prohibitively high.
T-REX Network and OpenZeppelin rebuilt ONCHAINID into a modular smart account for regulated assets, with an audit finding 36 of 39 issues resolved.
