BTCPay Server 2.4.7 Security Release Adds Urgency for Self-Hosted Merchants
TL;DR: BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. Disclosure of a serious issue is not proof that it has been exploited in the wild. The appeal of self-hosting is genuine control over funds and infrastructure. The hidden cost is that responsibility cannot be outsourced…
Hong Kong Launches Post-Quantum Preparation Toolkit for Banks
TL;DR: The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology announced a post-quantum cryptography assessment toolkit on November 2. Post-quantum migration is not the same thing as making every blockchain or bank system instantly quantum-secure. Good security planning is often unglamorous. Discovering where keys are issued, which partners rely on…
Coinbase Explains Multi-User Architecture as Crypto Accounts Become More Complex
TL;DR: Coinbase published an engineering account of its move toward multi-user infrastructure on October 29, describing how one account or organisation can involve several people with different privileges. A blog describing architecture cannot prove that every application and endpoint is free of bugs. Account controls rarely make headlines until something fails. But the ability to…
Chainalysis Describes Recovery Efforts After Mercado Bitcoin Security Incident
TL;DR: Chainalysis said on November 2 that it had supported tracing and containment efforts following a security incident involving Mercado Bitcoin. Incident estimates can differ between early reports, technical responders and the affected platform. The difference between “identified”, “frozen” and “returned” is easy to lose in fast-moving security coverage. It matters to victims because only…
Chainalysis Discloses Separate October 30 Security Incident Involving User Data
TL;DR: Chainalysis disclosed a security incident on October 30 affecting a subset of customer-related information, including names, email addresses and certain user or role labels, according to the company. “No evidence of compromise” is not proof that a particular system was mathematically impossible to access. The apparent boundary between identity information and investigative data is…
Solmate Discloses 1.26M SOL Custody Positions and Says It Has No Binance Exposure
TL;DR Solmate’s October 30 disclosure identifies three custody providers. The company said it had no accounts or exposure to Binance. The statement addresses counterparty exposure, not SOL market risk. Solmate Infrastructure has published a specific answer to a question facing crypto treasury companies after an exchange security incident: where are the assets held? In an…
Taurus Adds Stellar Smart-Contract Assets to Institutional Custody and Issuance
TL;DR Taurus announced live smart-contract asset support on October 29. The extension covers its custody and tokenization platforms. Institutional adoption depends on controls around the full asset lifecycle. Taurus has expanded its Stellar integration to support smart-contract-based assets, giving institutional clients a broader set of custody and issuance functions. The company said on October 29…
Polymarket Sets $3.9M Refund Plan After Third-Party Script Compromise
TL;DR: Polymarket says its October 29 incident involved a compromised monitoring script. Its October 30 update put total refunds at $3.9 million, including losses linked to the trading pause. Polymarket has published a more detailed account of the third-party compromise that disrupted its international platform on October 29. The update shifts the focus from whether…
Bitcoin Core 32.1 Arrives With Privacy Fixes and New Compatibility Checks
TL;DR: Bitcoin Core 32.1 introduces network, privacy and interface changes, while 31.2 and 30.4 provide maintenance updates. Operators need to check integrations as well as version numbers. Bitcoin Core’s late-October releases give node operators several upgrade paths, but the details deserve more attention than the version labels. The 32.1 release notes explain that 32.0 was…
Chainlink Launches CustodySync With Anchorage to Link Custody and DeFi Loans
TL;DR: Chainlink describes a workflow spanning collateral deposit, borrowing, repayment and liquidation. Keeping assets in custody does not automatically remove smart-contract, oracle, liquidation or legal-enforcement risk. Chainlink announced CustodySync on October 26 with Anchorage Digital as its initial partner. The service aims to synchronize information between qualified custodians and decentralised lending protocols, allowing eligible institutions…