1
Getting ready to operate GNU Taler in Germany
Taxable Anonymous Libre Electronic Reserves
New
The latest blog posts to take off on Hacker News. 362 posts.
2
Crypto Capture of Foreign Aid
Founded in 1920, the NBER is a private, non-profit, non-partisan organization dedicated to conducting economic research and to disseminating research findings among academics, public policy makers, and business professionals.
3
IPFS Maintainers Winding Down
We have some difficult news to share with the IPFS and wider peer-to-peer community. Our IPFS funding was cancelled
4
The relay market powering token resellers and fraud
A look inside the gray-market reseller economy that gives mainland China cheap, structured, B2B-grade access to OpenAI, Anthropic, Google, and beyond
5
How Monero’s proof of work works
Monero does not use a simple fixed hash like Bitcoin. Its proof of work, RandomX, turns mining into running random CPU-friendly programs over a large memory dataset, which is why it behaves so differently from ASIC-first systems.
6
The Resolv hack: How one compromised key printed $23M
Web3 security lessons from the Resolv hack: how a compromised key enabled a $23M exploit, what went wrong, and how DeFi protocols can prevent similar attacks.
7
Machine Payments Protocol (MPP)
We’re launching the Machine Payments Protocol (MPP), an open standard, internet-native way for agents to pay—co-authored by Tempo and Stripe. Businesses on Stripe can accept payments over MPP in a few lines of code using our PaymentIntents API.
8
Malicious skills targeting Claude Code and Moltbot users
Malicious ClawdBot skills target ByBit, Polymarket, Axiom, Reddit and LinkedIn, installing malware on unsuspecting OpenClaw user machines.
9
We found cryptography bugs in the elliptic library using Wycheproof
Trail of Bits discovered and disclosed two vulnerabilities in the widely used elliptic JavaScript library that could allow signature forgery or prevent valid signature verification, with one vulnerability still unfixed after the 90-day disclosure window.
10
11
Bitcoin's big secret: How cryptocurrency became law enforcement's secret weapon
WIRED's Andy Greenberg discusses a revelation that turned his decades-long reporting on its head: Bitcoin became a criminal's worst nightmare.
12
The cryptography behind electronic passports
This blog post describes how electronic passports work, the threats within their threat model, and how they protect against those threats using cryptography. It also discusses the implications of using electronic passports for novel applications, such as zero-knowledge identity proofs.
13
Key IOCs for Pegasus and Predator Spyware Removed with iOS 26 Update
iVerify brings operating system-level telemetry, behavioral baselining, and AI-driven threat hunting to hundreds of thousands of mobile devices
14
PayPal to support Ethereum and Bitcoin
Send and receive money as easily as sending a text, across apps, borders, and currencies.
15
Opening up ‘Zero-Knowledge Proof’ technology
Today, we open sourced our Zero-Knowledge Proof (ZKP) libraries, fulfilling a promise and building on our partnership with Sparkasse to support EU age assurance.
16
The cryptography behind passkeys
This post will examine the cryptography behind passkeys, the guarantees they do or do not give, and interesting cryptographic things you can do with them, such as generating cryptographic keys and storing certificates.
17
The $1.5B Bybit Hack
The $1.5B Bybit Hack demonstrates how the Era of Operational Security Failures has arrived, and most cryptocurrency companies are not prepared for its implications.
18
No Bitcoin ETFs at Vanguard (2024)
Vanguard's thought leaders share timely insights about international financial markets, investor behavior, and the investment industry.
19
“YOLO” is not a valid hash construction
Among the cryptographic missteps we see at Trail of Bits, “let’s build our own tool out of a hash function” is one of the most common. Clients have a problem along the lines of “we need to hash a bunch of different values together” or “we need a MAC” or “we need […]
20
21
Quantum is unimportant to post-quantum
You might be hearing a lot about post-quantum (PQ) cryptography lately, and it’s easy to wonder why it’s such a big deal when nobody has actually seen a quantum computer. But even if a quantum computer is never built, new PQ standards are safer, more resilient, and more flexible than their classical […]
22
Google's threat model for post-quantum cryptography
Read on to understand how Google currently evaluates the threat landscape related to post-quantum cryptography, and what implications this has for migrating from classical cryptographic algorithms to PQC.
23
KYC. No, Thanks
KYC was sold as a way to stop criminals. In practice it excludes the unbanked, leaks personal data on dark web markets, and surveils everyone else.
24
EU NGI TALER will bring private and secure online payments to the Eurozone
Taxable Anonymous Libre Electronic Reserves
25
Filecoin Foundation Successfully Deploys IPFS in Space
Filecoin Foundation successfully deploys IPFS in space. Discover the details of this groundbreaking achievement.
26
Why I’m betting on Nostr
Nostr - the simple, decentralized messaging protocol with the potential to replace centralized apps like Twitter and WhatsApp - is going mainstream. And fast.
27
Wash trading gone wrong – how a $100M/day crypto exchange bankrupted itself
This is the story of BaseFEX - a crypto exchange that unintentionally bankrupted itself through wash trading.
28
Case study: fake hardware cryptowallet
Fake hardware cryptowallet, and how bitcoins were stolen from it.
29
Concrete: A fully homomorphic encryption compiler
An introduction on how to use the Zama Concrete open source TFHE compiler
30
Funds of every Trust Wallet browser extension could have been stolen
Seed generation of Trust Wallet was flawed, the total entropy was only 32 bits. We have created a file containing all possible seeds. Fortunately, the Ledger Donjon discovered the vulnerability very quickly and likely avoided one of the biggest hack in the crypto ecosystem.