🚨 Major active supply chain attack just hit npm. Popular package @​ctrl/tinycolor was trojanized — and it didn’t stop there. Over 40 packages were silently modified to steal secrets from dev machines & CI pipelines. Our team at Socket caught it. Full report…

We've always sat at the intersection of protocols distributing value and consumers earning ownership in the protocols they use and contribute to. Since launching our marketplace in early 2024, we have distributed more than $40M in tokens and ownership to user…

Today marks 3 years since The Ethereum Merge.