The best of crypto, tech and the open web. Curated by humans.
Seeing rumors blaming EIP7702 for the Binance hack. From what I can see EIP7702 was just used to preform the hack efficiently but was NOT the root cause.
Loss might be a bit higher than that, but will cover. 🙏
Binance has 144bn of assets under custody, with USDT and USDC frozen the total loss now is around ~1bn, which is only 0.69% of their total assets under custody They'll cover it from balance sheet easily
🚨995 Polymarket accounts just got drained through Polymarket's own website. Let me explain how, because this one should scare everyone in crypto. No fake link. No shady airdrop. These people were on the real Polymarket dot com on Thursday. Polymarket's site loaded a script from DebugBear, a tool whose only job is measuring how fast the page loads. Somebody poisoned it. Once it was running in your browser, it grabbed your logged-in trading session and started dumping every open position you had, first at 3% under market, then at half price, then at the lowest price possible. Then it swapped the whole balance into POL and shipped it to the attacker. Stablecoins can be frozen. POL can't. It even reported back after every hit. Your wallet, your country, your portfolio size, whether the transfer went through. All of it sent home through DebugBear's own data endpoints. The attacker's wallet went from empty to $2M in about 45 minutes. Conor Grogan's final count was $2.65M. One trader said he lost $800K and watched every position get sold. His friend got hit for $600K. Polymarket flipped the exchange to cancel-only, paused the relayer and says everyone will be made whole. Credit where it's due. But this is the third time this year. About $700K in May. About $3M in June, through a hacked third-party script, same as now. I've been phished. I've been drained. Stay in crypto long enough and it happens to you. But the people on Thursday did nothing wrong. They opened the right website. Not one of these three hacks touched a smart contract. We spent ten years making the blockchain unbreakable and then let a page speed tracker sit right next to people's money.
Active attack on the @Polymarket website Do not engage or go to @RevokeCash if you have
We've identified & fixed an issue impacting our international platform, Polymarket.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement. Anyone who has been impacted will be made whole. Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.
Picked by the Kiwi community's upvotes. No spam, unsubscribe anytime. What's in it?
We're impacted by an ongoing security incident. If you use our RUM product, please remove the embed code from your website.
🚨 Fallo crítico en el kernel de Linux: se puede atacar por red, sin login y sin necesidad de ninguna acción por parte del usuario. CVE-2026-98432 ➡️ CVSS 9.8 (crítico) ➡️ Afecta a la gestión de conexiones TCP/IPv4, el código que atiende cualquier conexión a tu servidor. ➡️ Ubuntu marca vulnerables desde la 16.04 hasta la 26.10, también los kernels de AWS, Azure, Google Cloud y Oracle. ➡️ La corrección todavía está «en preparación» en casi todas. Si tienes un servidor o un VPS con Linux, sigue los avisos de tu distribución y actualiza el kernel (y reinicia) en cuanto salga el parche. https://ubuntu.com/security/CVE-2026-984…
