SEC Staff Expands Qualified Custodian Definition for Institutional Crypto Asset Custody
        
        
        
        
          
        
        
      
        
    
        
        The No-Action Letter provides a crucial regulatory pathway for Registered Investment Advisers to custody digital assets with state-chartered trust entities.
        
        SEC Staff Permits State Trust Companies as Qualified Crypto Asset Custodians
        
        
        
        
          
        
        
      
        
    
        
        The SEC staff’s custody no-action relief expands the qualified custodian universe, strategically de-risking institutional crypto adoption.
        
        Unity Gaming Flaw Threatens Mobile Crypto Wallets
        
        
        
        
          
        
        
      
        
    
        
        A newly identified vulnerability in the Unity game engine could allow malicious code to compromise mobile crypto wallets, urging immediate user action.
        
        Hyperdrive Protocol Suffers Router Contract Exploit, $773k Drained
        
        
        
        
          
        
        
      
        
    
        
        A critical router contract vulnerability allowed unauthorized arbitrary function calls, compromising user funds within Hyperdrive's Treasury Bill market.
        
        Hyperdrive USDT Markets Exploited, Nearly $782,000 Drained
        
        
        
        
          
        
        
      
        
    
        
        A critical vulnerability in Hyperdrive's USDT markets led to a liquidity freeze, demonstrating systemic risk from inadequate smart contract audits and centralized control.
        
        Force Bridge Compromised, $3.76 Million Drained by Admin Key Exploit
        
        
        
        
          
        
        
      
        
    
        
        Compromised private keys enabled an access control bypass on Force Bridge, draining $3.76M and exposing critical cross-chain asset management risks.
        
        UXLINK Multi-Signature Wallet Compromised, Billions of Tokens Minted
        
        
        
        
          
        
        
      
        
    
        
        A delegate call vulnerability in UXLINK's multi-signature wallet granted administrative control, enabling unauthorized token minting and significant financial loss.
        
        Bedrock uniBTC Minting Logic Flaw Drains $2 Million
        
        
        
        
          
        
        
      
        
    
        
        A critical minting logic vulnerability in Bedrock's uniBTC token allowed attackers to exploit a price discrepancy, leading to a $2 million loss.
        
        Shibarium Bridge Compromised by Validator Key Manipulation via Flash Loan
        
        
        
        
          
        
        
      
        
    
        
        A flash loan exploit manipulating governance token mechanics enabled attackers to seize validator control, exposing critical vulnerabilities in Layer 2 bridge security.
        
        Shibarium Bridge Compromised, $2.4 Million Drained by Flash Loan Exploit
        
        
        
        
          
        
        
      
        
    
        
        A critical Layer 2 bridge vulnerability, leveraging flash loans and validator key compromise, enabled attackers to siphon substantial digital assets.
        
        Chrome V8 Engine Flaw Enables Crypto Wallet Drains
        
        
        
        
          
        
        
      
        
    
        
        A critical type confusion vulnerability in Chrome's V8 engine permits arbitrary code execution, directly exposing user crypto assets to theft.
        
        Nemo Protocol Market Pool Drained via Undisclosed Exploit
        
        
        
        
          
        
        
      
        
    
        
        A lack of immediate root cause disclosure for a market pool drain highlights the inherent risks in nascent DeFi protocols.
        
        Shibarium Bridge Compromised by Flash Loan and Validator Key Exploit
        
        
        
        
          
        
        
      
        
    
        
        A critical vulnerability in Shibarium's validator key management allowed a flash loan attack to drain $2.4 million, exposing systemic bridge risks.
