signature

Slow Fog Analysis stated that the attacker used the same Optimism transaction to construct five forged receipts, and the unauthorized signed source is still under investigation.

According to a report by Bloomingbit, Bitcoin infrastructure company Blockstream stated in its third-quarter business update that Bitcoin can prepare for future quantum computer attacks by adopting new digital signature technology. The Blockstream team previously released a report comparing three lattice-based signature schemes: Dilithium, Falcon, and Hawk.Researchers assessed that Falcon-1024 provides the best balance between data size, verification speed, and the maturity of its security foundation, stating, "If we had to choose a lattice-based signature scheme for Bitcoin today, we would choose Falcon-1024." However, researchers also pointed out that the finalization of the Falcon standard, obtaining verified implementations, and the memory burden on hardware wallets remain key challenges. The team indicated that hash-based signatures are a more conservative choice in the short term, and once the Falcon standard is standardized and implementation technology matures, consideration can be given to combining both methods to enhance security and processing efficiency.

The decentralized machine learning network Bittensor announced on Twitter the launch of a quantum-resistant wallet, supporting three post-quantum signature schemes: ML-DSA-65, Falcon-512, and Falcon-1024, with ML-DSA-65 having been standardized by the National Institute of Standards and Technology (NIST). The quantum-resistant wallet supports both cold keys and hot keys, covering operations such as TAO transfers, staking, and validator weight settings.This update also provides an optional automatic key rotation feature: once a user-signed transaction is recorded on-chain, the wallet will automatically switch to a new signing key, and the old key will no longer authorize transactions for that account. The account address, balance, and staking remain unchanged, and there is no need to change the mnemonic phrase each time. The quantum-resistant wallet without key rotation does not require registration, while enabling key rotation requires registration and a one-time permanent lock of 0.2 TAO. Existing wallets can continue to be used, and users can migrate existing funds and stakes to the new account through transfers or cold key exchanges.

The $6.3 billion security incident at the cryptocurrency exchange Binance involves affected assets with a cumulative value across 10 blockchains. CertiK analyst Jonathan Riss stated that public blockchain records show a hot wallet on Ethereum was repeatedly emptied by attackers after new deposits arrived; on-chain records cannot reveal Binance's internal signature controls and transfer limits.Jonathan Riss pointed out that if the limits are executed by the application that initiated the signature request, those limits may be bypassed if the application is compromised; limits executed independently by the signature system may restrict transfers. Binance previously stated that attackers transferred funds out of the regular withdrawal process through an internal wallet signature service.Idan Ofrat, co-founder and Chief Product Officer of the crypto asset custody company Fireblocks, stated that exchange hot wallets typically hold enough funds to cover expected withdrawals for a few days, often representing a low single-digit percentage of managed assets. Alex Tobol, Chief Technology Officer of Walt, stated that replenishing funds from cold wallets to hot wallets should require separate fund management decisions and manual approvals.

The on-chain trading platform GMX tweeted that the proposal for the second phase of the $10 million GMX token market-making fund, titled "GMX Market-Making Fund Phase Two: Emergency Reserve," has been launched on the governance platform Tally, calling on token holders to vote or delegate their voting rights to active representatives. According to the proposal, the WETH, WBTC, Wrapped SOL, LINK, USDC, GMX, ARB, AAVE, UNI, and PEPE held by the DAO treasury will be transferred in their original tokens to the GMX POL multi-signature on Arbitrum One (4/7), with the asset market value fluctuating with market conditions and not fixed at $7 million.Voting will start on November 6 at 15:14 and end on November 11 at 15:14. This transfer does not increase the total fund amount of $10 million, nor does it represent an immediate use of funds; this reserve will only be utilized in the event of severe market downturns affecting GMX liquidity, allowing for timely responses without the need to initiate another DAO vote. The first phase has provided 3 million USDC, and GM Labs' assessment indicates that the deployed funds are improving GMX's liquidity and market activity. GMX released the governance proposal on September 16, proposing to allocate $10 million from the treasury to establish the GMX token market-making fund.

Consensys and digital signature solution provider eMudhra team jointly issued a security warning, pointing out that Ethereum operators face risks when using the eMudhra signing solution. The team discovered vulnerabilities in some Java trust stores, and certain configurations could lead to exposure risks.According to the disclosure, the default settings are unaffected, but some Web3Signer deployments require immediate changes to access controls. Web3Signer is an open-source remote signing tool developed by Consensys, commonly used for key management in networks such as Ethereum.

Hyperliquid announced that it has adjusted the new priority mechanism based on user feedback on the test network improvements: the noop and scheduleCancel operations no longer affect the priority of other operations, while operations other than noop, scheduleCancel, cancel, cancelByCloid, order, modify, and batchModify will lower the priority of other operations before submission is completed.In addition, Hyperliquid also announced the addition of the cDeposit2 interface operation, which is similar to cDeposit but supports agent-signed.

According to monitoring by Arkham, the address marked as the Polygon multi-signature wallet "0xFA5" has transferred a total of 52,928,000 POL to the staking contract address, valued at approximately 4.82 million USD.Market analysis suggests that the recent increase in Polygon staking activities is related to the rise in APY, which may also provide some support for POL and alleviate its downward price pressure.

According to monitoring by Ai Yi, the Kaito multi-signature address transferred 8 million KAITO (worth approximately 2.25 million USD) to the address 0xd21...B2629 40 minutes ago. This intermediary address had previously received 7 million tokens from the same source three months ago.According to its token unlocking plan, Kaito will have an unlocking of 12.1 million KAITO on October 20, which accounts for approximately 5.01% of its circulating market value. This transfer may be related to the unlocking event.

According to Crypto Briefing, NEAR Protocol has launched a confidential multi-signature treasury management platform called NEAR Business, aimed at crypto-native teams and institutions. It supports handling payroll, vendor payments, cross-chain exchanges, and fund allocation within a single dashboard, covering over 35 blockchains including Bitcoin, Ethereum, and Solana, as well as more than 200 types of assets. Cross-chain transfers are completed through NEAR Intents.The platform operates on NEAR's private sharding infrastructure, with transaction details kept confidential but available for auditing; the platform is free to use, with a 0.35% fee for exchanges, currently limited to invite-only access.

Vitalik Buterin (@VitalikButerin) posted that the ideal path for supporting various cryptographic algorithms is through EIP-8288: users generate arbitrary signatures locally, then prove them through STARK, and aggregate them on-chain via STARK, without occupying calldata on-chain, thus Ethereum does not need to add new precompiles. He also mentioned that if lattice cryptography is proven to have security against AI attacks, it can still be used in scenarios such as accounts and wallets through precompiles in the future.Previously, Starknet co-founder Eli Ben-Sasson expressed disagreement with a16z's related views, stating that lattice cryptography has a rich mathematical structure that is vulnerable to AI attacks, and that a simplified version based on modular SIS only appeared in 2012 and lacks maturity. He suggested waiting another 3-5 years until AI has been thoroughly tested before using it for custody of large assets.

According to on-chain analyst @ai_9684xtpa's monitoring, Sun Yuchen's address 0x176...0a132 received 72 trillion PEPE from the Poloniex multi-signature address 22 hours ago, worth approximately 28.44 million USD. This is the first on-chain operation of PEPE from this address since June 2024.

LayerZero Labs, in collaboration with the a16z Crypto research team, Carnegie Mellon University, and Imperial College London, has released new research results called Aerie, aimed at enhancing the aggregation efficiency of post-quantum cryptography signatures. According to the introduction, Aerie is built on the previously launched lattice-based polynomial commitment scheme Akita.On a MacBook Pro equipped with the Apple M4 Max chip, using 16 CPU cores without GPU acceleration, it can aggregate 32,768 Falcon-512 signatures in 0.65 seconds, with peak memory usage of approximately 2.1 GiB. LayerZero states that compared to the previous Orthus scheme, Aerie's proof generation speed has improved by about 1.5 times, verification speed has increased by 38 times, and proof size has been reduced by about 1.7 times. Additionally, Aerie supports the aggregation of ML-DSA signatures standardized by the National Institute of Standards and Technology (NIST), with specific performance data to be announced later. This research aims to provide a technical path for achieving low-latency, post-quantum secure consensus on blockchain without the need for dedicated hardware.

The Zcash development team plans to add post-quantum signature support to the network in January. Zakura engineer Roman Akhtariev stated in an engineering blog that the team plans to implement post-quantum signature opcodes in Zcash in January. These opcodes will enable Zcash to verify hash-based signatures, thereby resisting quantum computing attacks. The team has not yet confirmed a specific network activation date. This upgrade aims to prevent attackers from using current public keys to reverse-engineer and forge payment authorizations from wallet owners.The initial phase of this upgrade will protect transparent transactions. Zcash has two payment methods: shielded payments hide the sender, receiver, and amount; transparent payments are similar to Bitcoin, where addresses and amounts are visible on the chain. According to CoinDesk, based on ZecStats data, approximately 11.96 million of the 16.98 million issued ZEC are stored in the transparent pool, accounting for about 70%. The January plan primarily targets this public portion. Additionally, Zakura has developed a private query tool that allows wallets to check balances without exposing associated addresses to the server; the experimental version is available in the "Private queries" settings of the Zcash wallet Vizor.Before the release of Zakura's engineering article, Ethereum researcher Justin Drake warned holders on Thursday to prepare for what he called "bunker mode," stating that in the worst-case scenario, AI could find shortcuts to break the mathematical protections of Bitcoin and Ethereum wallets in "months rather than years."

According to Onchain Lens monitoring, less than an hour ago, a certain whale withdrew 28,000 HYPE from HTX, worth approximately 2.57 million dollars, and transferred it to a multi-signature wallet.

Cosmos Labs disclosed that on September 22, Neutron encountered a governance attack that led to the theft of liquidity from protocols such as Astroport, with approximately 1.73 million ATOM subsequently transferred by the attacker to Cosmos Hub. The Cosmos Hub itself was not attacked, and user funds were not affected. To prevent the stolen ATOM from being transferred out, Hub validators temporarily paused the network for about 24.5 hours and resumed block production on September 23 based on the patched Gaia v28.3.0.Cosmos Labs stated that during the pause, 1.227 million ATOM remained in the attacker's Hub address. When the network was restored, these were transferred to a 4/6 multi-signature address composed of Nansen, Keplr, Enigma, Silknodes, Kiln, and Polkachu through a one-time change. Previously, about 500,000 ATOM had been exchanged for ETH via THORChain and could not be recovered; another 169,000 ATOM entered the attacker's address after the network was restored due to THORChain refunds and were sold after being transferred to Osmosis. The current multi-signature address holds approximately 1.227 million ATOM, which can only be returned after authorization from a Cosmos Hub governance proposal. The related funds will not be staked, lent, or traded. The Neutron team expects to submit a recovery plan and related governance proposals next week.

Binance Wallet announced the launch of real-time detection and risk interception features for high-risk signature scenarios to prevent phishing attacks that exploit the authorization mechanisms of DeFi projects.Binance stated that some attacks only require inducing users to complete offline signatures that do not require gas fees, which could lead to asset theft. In the future, it will continue to expand the scope of risk identification scenarios and security protection coverage.

According to on-chain analyst Ai Yi's monitoring, the multi-signature associated address of WLD (Worldcoin) has deposited 42.37 million WLD to Binance in the past 8 hours, worth approximately 19.59 million USD.This is the first time this address has deposited to the exchange in 5 months, and after this deposit, the address has fully liquidated its holdings.