Topic

Smart Contract Security

Review and audit findings on deployed contracts: privileged-key concentration, missing time-locks, and re-implemented rather than audited security primitives.

Current stories

invest6 publishersConfirmed

Jury convicts Uranium Finance hacker with $31 million of the $53.3 million take already seized

Manhattan federal jurors convicted Jonathan Spalletta of computer fraud and money laundering over the $53.3 million Uranium Finance exploit of 2021. Where the roughly $31 million in crypto seized in February 2025 ends up now turns on restitution and forfeiture rulings still to come.

Publishers:crypto.newscryptobriefing.comcryptopolitan.comgizmodo.comnews.bitcoin.comqz.com

Perspective Coverage

3 publishers

Builder: Builder 27%
Operator: Operator 42%
Investor: Investor 31%

Reality

Evidence74
Adoption: Insufficient
Hype gap+5
Incentives: Insufficient
Confidence70

invest2 publishersConfirmed

Arbitrum's Security Council adds a guard that can delay unconfirmed withdrawals

Arbitrum's Security Council used an October 2 emergency upgrade to pause new Stylus activations on two chains and add a guard that can delay withdrawals. On Arbitrum One, the delay is tied to one case: the dispute system accepting contradictory proofs.

Publishers:cryptobriefing.comcryptoslate.com

Reality

Evidence72
Adoption: Insufficient
Hype gap0
Incentives: Insufficient
Confidence70

build1 publisherOne report

A firmness check built on EXTCODESIZE(owner) is forgeable, and six live contracts prove it

According to a developer's write-up, six contracts satisfy the EXTCODESIZE(owner) > 0 firmness check on an on-chain order book and still pull their depth, each run as a real testnet transaction.

Publishers:dev.to

Reality

Evidence58
Adoption: Insufficient
Hype gap+10
Incentives40
Confidence55

invest1 publisherOne report

Kyber's DTSP defence is a website disclaimer and a two-word distinction

Kyber Network Pte. Ltd. has been a Singapore company since 2017 but says it is not operated from Singapore. After 30 June, that sentence has to hold up against a licensing regime.

Publishers:cryptobriefing.com

Reality

Evidence30
Adoption34
Hype gap+34
Incentives72
Confidence28

invest1 publisherOne report

A code review just made HKMA stablecoin compliance an on-chain question

Analyst Yajin Zhou's team says the KYC and revocation controls in Anchorpoint's live HKDAP contract do not work as coded. The contract is verified on Etherscan, so anyone can check.

Publishers:cryptopolitan.com

Reality

Evidence42
Adoption28
Hype gap+18
Incentives58
Confidence40