Best crypto stories on Kiwi News this week

JUST IN: Replit CEO Amjad Masad warns users of subsidized AI subscriptions to "get ready to get rug pulled" as companies face unsustainable operating costs.

PSA on today's Reth / OP Reth releases A fix went out across the Reth ecosystem ensuring that all Reth-based nodes, DeFi bridges and state-proof backed systems are all safe. If you depend on Reth, please update to v.2.10.0, OP Reth v2.8.1, and Base version v1.5.3. We appreciate how quickly everyone moved to patch. This bug was identified by the Tempo team's fuzzing process, and Tempo is also patched. Reth’s legacy state root code had an edge case. For certain smart contract storage layouts, a carefully crafted transaction could make it produce the wrong state root. Reth’s block builder uses this legacy trie calculator on lower-end hardware and on OP Stack chains, so those setups were exposed. L2s like OP Stack chains or Base are unaffected because this could not impact their withdrawals system. Ecosystem bridges do not use state roots, they use receipt roots or multisignatures, so they are unaffected by this. Reth is critical infrastructure for the entire EVM ecosystem. We take it very seriously. And we are sorry for the inconvenience caused.

Who pays for crypto hacks? Everyone forgets hacks are an invisible tax on transacting and storing value in crypto. Like shoplifting, the cost gets priced in and users pay for it. Every hack makes crypto less competitive as a network. Since 2018, crypto has lost an average of 24 bps of market cap per year to hacks. The US banking system loses 1.7 bps of deposits to fraud. That’s a 14x gap

New bug in OpenSSH. Security researchers: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Anyone with a SSH server accepting password on alpine/etc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA Details: http://sshhole.com

it's kind of painful to see the devcon keynote after almost 10yrs building ethereum's OSS stack, is this what is left? where is the accountability? how are you going to inspire the next wave of strong devs? not the B players and the rent seekers? in the age of AGI? come on

Update: Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain. This indicates the same actor is likely behind both incidents. The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO. Commingling address: 0x15104a9ce0f08a8f0075a0869ae80e795fe0feb7 Bitget exploit context:

this guy figured out how to leak your exact location from any video with sound using the Doppler curves of nearby airplanes

🚨 NEW: Binance hackers paid just $15 in network fees to drain $2.5 billion in a single transaction via a feature from Ethereum’s EIP-7702 upgrade, per Bloomberg.

JUST IN: Google offers voluntary exit packages to staff in Canada, France, Germany, Japan and Switzerland

It's wild that we've had to protest to protect the protocol twice in the same year First at FarCon, and now during @VitalikButerin's keynote

At this point I really don't know what to say @gnosispay - Full home, name and address details - Card number - All wallet addresses linked to the account Extremely disappointed. You had already lost me as a user but you could have at least protected my data .... Damn shame, really.

BREAKING: Germany warns government officials that their iPhones may have been compromised by sophisticated spyware capable of infecting devices without users clicking anything.

This changes everything. RAILGUN is the first on-chain privacy protocol with real hardware wallet support where your keys never leave the device. Your Ledger signs every private send, swap & unshield. Proofs approved on-device. Live in @anondotinc now https://anon.inc/#ledger

THE BLOCK: ZachXBT says he suspects that a large Western European financial institution was exploited for more than $133 million from CEX accounts, and that the incident is currently being covered up. He notes the lack of proper disclosure has allowed the laundering of over $30 million in stolen funds that EU authorities could have frozen.

Today, as part of Operation Economic Outcast, Treasury’s Office of Foreign Assets Control designated eight money services businesses based in Canada that enable the Iranian regime. Additionally, @FinCENnews issued an order effectively cutting off MEXC Global’s access to the U.S. financial system for facilitating at least $16 billion in illicit transactions, including activity connected to Iran sanctions evasion.

JUST IN: 🇺🇸 Anti-crypto Senator Elizabeth Warren expected to become Chair of Senate Banking Committee, giving her major power over the financial industry.

We’re aware of a security issue affecting Web3Auth’s services used by some third parties. We have temporarily paused the embedded wallet service. After an initial investigation, we’ve found no evidence that MetaMask users are impacted.

If you want to help protect the decentralization of Hypersnap and tell the corporate censor captor polity who took over farcaster to fuck off, we have an open call for validators to join in the fork kickoff: https://github.com/farcasterorg/hypersna… Do your part. Protect the protocol.