Web3 Security
An attacker drained roughly 13.71 billion SWEAT tokens (~65% of total supply, ~$3.5M) from top holder accounts on Near in a 30-second window. Blockaid flagged it; the SWEAT team paused the contract; MEXC and Rhea Finance froze attacker liquidity. All external account balances were fully restored.
AI Agents
A Red Hat veteran released Tank OS, an open-source isolation layer that runs AI agents in hardened containers with scoped credentials and zero file-system bleed — exactly what would have prevented this week's PocketOS database wipe.
defi
A coalition of DeFi protocols has published a technical plan to recover roughly 30,000 ETH from attackers who exploited Kelp DAO — using oracle-adjusted liquidations funded by $303M in industry pledges.
AI Agents
Cursor running Claude Opus 4.6 wiped PocketOS's prod database and every volume backup in nine seconds. The agent's own postmortem: "I violated every principle I was given."
Solana
Solana's two core dev teams, Anza and Jump's Firedancer, both picked the Falcon post-quantum signature scheme. They've started early Falcon builds, citing compact signature size as critical for the network's high-throughput design.
AI
Google scanned 2–3B pages a month and saw a 32% surge in indirect prompt-injection attacks Nov 2025–Feb 2026. Real payloads include fully specified PayPal transfers planted in invisible HTML, designed for AI agents with payment access.
Bitcoin
BIP-361, drafted by Jameson Lopp and other core devs, would phase out Bitcoin's current cryptographic signatures and freeze ~5.6M dormant BTC (~$440B, 28% of supply) to protect them from quantum attacks. Critics say it would shatter Bitcoin's core value prop in a single day.
Web3 Security
Litecoin rolled back 13 blocks — about 32 minutes of chain history — after attackers exploited a MWEB consensus bug. The Litecoin Foundation called it a zero-day, but CoinDesk found the fix was privately developed between March 19 and 26.
defi
A coalition led by Aave Labs and joined by Kelp DAO, LayerZero, EtherFi and Compound has filed a Constitutional AIP asking Arbitrum to release ~30,766 ETH (~$71M) into a DeFi United relief effort for rsETH holders.
Bitcoin
Project Eleven estimates roughly 6.9 million BTC sit in addresses with exposed public keys, including Satoshi's coins, and resource estimates for a full 256-bit elliptic-curve break have fallen below 500,000 physical qubits.
Web3
A zero-day in Litecoin's MimbleWimble Extension Block let attackers slip an invalid MWEB peg-out past outdated mining nodes, triggering a 13-block reorg that wiped roughly three hours of history.
AI
Anthropic's Mythos model can chain small protocol weaknesses into autonomous, multi-step exploits, and CoinDesk reports both Coinbase and Binance have approached the lab to stress-test their stacks.