Kiwi News: handpicked crypto news for builders

JUST IN: 🇺🇸 Anti-crypto Senator Elizabeth Warren expected to become Chair of Senate Banking Committee, giving her major power over the financial industry.

Is Trump Media dumping $BTC? Trump Media transferred 4,259 $BTC ($343.67M) to https://Crypto.com 40 minutes ago. https://arkm.com/explorer/entity/trump-m…

New bug in OpenSSH. Security researchers: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Anyone with a SSH server accepting password on alpine/etc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Details: http://sshhole.com

Crypto is being massively stolen from users of various crypto wallets through… 18+ websites - victims have already lost $5,570,000 due to a vulnerability in iOS 18. It’s all because of the DarkSword vulnerability: just open an infected website via Safari and malicious code is already running on your smartphone - passwords, messages, photos, and crypto wallet files (including private keys) are under attack. Update iOS to the latest version as soon as possible. And never ever store photos of your seed phrase in the gallery or write it in Notes!

JUST IN: Google offers voluntary exit packages to staff in Canada, France, Germany, Japan and Switzerland

bullish for crypto $ETH bitcoin:native $BMNR $BMNP

Security release pre-alert: We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities. The highest severity issue fixed in this release is HIGH. https://nodejs.org/en/blog/vulnerability…

Has Ethereum lost its soul? Day 2 at @EFDevcon Mumbai. 🇮🇳 It pains me to say it, but the mood feels a bit disenchanted. You can see it in the half-empty rooms and in the hallway conversations. I've been to every Devcon since Cancún 2017. Back then, the narrative was about inclusion and empowering the weak. For those of us coming from emerging countries, it was a tool to circumvent bad institutions (and maybe build better ones bringing the rule of law where it was lacking.)! Many of us Argentines got into Ethereum because stablecoins were the way around capital controls. It wasn't an ideology. It was a survival tool. For people from advanced economies, it was a way to escape government and big tech surveillance. Then the narrative started drifting. DeFi yields, NFTs, memecoins... Each cycle brought more money and less talk about the common person. There are still talks on those original topics, but more and more the stage seems to reflect the worldview of Silicon Valley elites: transhumanism, longevity, life beyond biology. The contrast couldn't be sharper. Inside, conversations about transcending the human condition, governing societies through futarchy and handing DAO governance decisions over to AI. Outside, the chaos of Mumbai's streets, where millions hustle to survive and deal with very human problems every day. My impression from day 2 is that Ethereum is at a crossroads: solving the problems of nerds and Silicon Valley, or addressing the every day problems of real people. The real test isn't whether Ethereum scales, but for what and for whom. If it ends up as a playground for a tiny niche of insiders talking to each other, we can expect emptier conferences every year. Sorry for the pessimistic take. 🥲 Hoping day 3 finds me in better spirits!

Not your keys, not your coins? Apparently, it's now: Your keys, our RPC. Your coins, our permission. A scammer sends 0.0001 dust to your wallet without your consent. You didn't approve anything. You didn't interact with the scammer. You simply received an unsolicited transaction on a public blockchain. Then Phantom's compliance filter kicks in: "Your address has interacted with a flagged malicious entity. Transactions disabled." Wait. WHAT? So a random scammer can poison my wallet address with dust, trigger your automated risk detection, and suddenly I can't use your wallet interface to move my own assets? Welcome to self-custody, where you own the keys but apparently need corporate permission to use them. The blockchain didn't freeze my account. The centralized frontend did. The irony is almost too good. We built crypto to escape banks freezing our money, only to end up with fintech apps wearing a decentralization costume. If a wallet can unilaterally disable your ability to transact because some random third party sent you dust, maybe it's time to rethink what "self-custody" actually means. Not your keys, not your coins? More like: Your keys. Their rules. Their permission. Peak Web3 UX. 🤡