TL;DR: The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology announced a post-quantum cryptography assessment toolkit on November 2. Post-quantum migration is not the same thing as making every blockchain or bank system instantly quantum-secure. Good security planning is often unglamorous. Discovering where keys are issued, which partners rely on…
TL;DR: BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. Disclosure of a serious issue is not proof that it has been exploited in the wild. The appeal of self-hosting is genuine control over funds and infrastructure. The hidden cost is that responsibility cannot be outsourced…
TL;DR: The FBI said on October 31 that North Korean actors associated with the TraderTraitor operation were responsible for the theft of more than $6 billion from Binance. Attribution remains the FBI’s stated finding, and the full investigative record is not public. This is a reminder that incident response extends well beyond technical containment. Security…
TL;DR: Binance said on November 2 that it had completed a zero-knowledge proof-of-reserves procedure for a snapshot taken October 31, following the exchange’s late-October security incident. Proof of reserves should not be described as a full financial audit, a guarantee against losses or evidence that all stolen assets have been returned. In the aftermath of…
TL;DR: Binance’s November 3 security-recovery notice set out a wider withdrawal restart for additional tokens and networks beginning around 04:00 UTC. Binance’s announcement is a company statement, not an independent certification that all systems are secure. The subtle point is that a route reopening is a narrow, testable milestone. It is stronger than a vague…
TL;DR DMG said on October 31 that it and its affiliates were unaffected by the Binance incident. The company described restricted access, separated duties and multiple transaction approvals. Asset exposure and the authority to move funds are different parts of a security assessment. DMG Blockchain Solutions said on October 31 that it and its affiliates…
TL;DR Taurus announced live smart-contract asset support on October 29. The extension covers its custody and tokenization platforms. Institutional adoption depends on controls around the full asset lifecycle. Taurus has expanded its Stellar integration to support smart-contract-based assets, giving institutional clients a broader set of custody and issuance functions. The company said on October 29…
TL;DR Solmate’s October 30 disclosure identifies three custody providers. The company said it had no accounts or exposure to Binance. The statement addresses counterparty exposure, not SOL market risk. Solmate Infrastructure has published a specific answer to a question facing crypto treasury companies after an exchange security incident: where are the assets held? In an…
TL;DR: Satoshi Nakamoto introduced the Bitcoin paper on October 31, 2008. Eighteen years later, its central contribution remains a way to verify payment history without a central transaction ledger. Bitcoin’s white paper reached its eighteenth anniversary on October 31. The original mailing-list message survives as a compact announcement of a peer-to-peer electronic cash proposal, rather…
TL;DR: A Sui design note argues that agents need permissions enforced by the systems they use. Onchain transactions can support those controls, but cannot establish that an agent’s objective is correct. A useful financial agent needs enough authority to complete a task without repeatedly asking for approval. It also needs boundaries that remain effective if…