Foundation Links Passport Phishing Emails to Compromised Cloudflare API Keys
Recipients reported personal and purchase details in the messages; the company said Passport hardware and funds were safe…. Read the full story at The Defiant
Consensys Warns Ethereum Operators of eMudhra Signing Risks
The teams identify vulnerable Java trust stores and configuration-dependent exposure. Default setups are unaffected, while some Web3Signer deployments need immediate access-control changes…. Read the full story at The Defiant
Blast Reaches Withdrawal Interface Deadline With $40 Million Still in Bridge
Blast has published contract-level exit guides, but withdrawals still require proofs, a one-day wait and, for USDB, a separate DAI claim…. Read the full story at The Defiant
Tokenized Deposits vs. Stablecoins: What JPM Coin and USDC Holders Own
USDC holders can transfer tokens without a Circle Mint account, but direct dollar redemption requires one. JPM Coin limits participation to approved institutional clients…. Read the full story at The Defiant
Why Tokenized Stocks Can Trade Away From the Share Price
A closed-market buy-and-exit example shows how spreads and trade size affect execution. Minting and redemption follow a separate clock…. Read the full story at The Defiant
How to Check a Software Wallet—and What the Checks Cannot Prove
Fake Firefox extensions targeted recovery phrases; Electrum patched a genuine-client flaw that could trick users into signing a substituted payment…. Read the full story at The Defiant
How a DAO Vote Becomes a Treasury Transfer
Uniswap’s executed funding proposal shows the difference between a sentiment poll, a binding vote and the contract authorized to release tokens…. Read the full story at The Defiant
Dogecoin Foundation and House of Doge End Exclusive Brand Deal
House of Doge keeps limited investment-product rights, while a separate deal would exchange Such App assets for $4 million in Dogecoin Labs stock…. Read the full story at The Defiant
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Developers say one user reported losing money…. Read the full story at The Defiant
Keystone Website Breach Exposes Customer Addresses and Order Details
The hardware-wallet maker says it blocked access and fixed the vulnerability. Payment details, recovery phrases and private keys were not exposed, according to the company…. Read the full story at The Defiant