patch

According to Protos, Bitcoin Core developers recently disclosed a high-risk vulnerability numbered CVE-2024-52911, which affects versions 0.14.1 to 28.4, allowing miners to remotely crash other users' nodes and execute code by mining specially crafted blocks.The vulnerability was discovered and responsibly disclosed by developer Cory Fields in November 2024. The fix was merged in December of that year and released with version v29 in April 2025. The last vulnerable 28.x version series was discontinued on April 19, 2026.However, since upgrading Bitcoin full nodes is voluntary, it is estimated that about 43% of nodes are still running the vulnerable old version software, facing potential risks. Fortunately, the cost of implementing such an attack is extremely high—miners would need to allocate significant computational power to mine invalid blocks that do not yield block rewards—so it is likely that it has never been exploited in practice.

ZetaChain official announcement, on the 27th, encountered a premeditated targeted attack. The attacker used Tornado Cash to recharge funds and forged wallet addresses. Cross-chain ZETA transfers were not affected. All affected user funds were not impacted ------ all affected wallets are controlled by ZetaChain. The mainnet patch has been deployed, and cross-chain transactions will be re-enabled after continuous monitoring.

Aave, in collaboration with multiple institutions, has launched the "DeFi United" rescue plan to address the approximately $292 million loss caused by the KelpDAO vulnerability attack and to prevent the spread of bad debts.The attack originated from a vulnerability in the LayerZero integration, where hackers forged uncollateralized rsETH and borrowed approximately $190 million in assets on Aave, leading to collateral distortion and triggering a bank run, causing the platform's TVL to evaporate by about $10 billion at one point.Currently, Lido Finance, EtherFi, and founder Stani Kulechov have proposed funding plans; Arbitrum has frozen some funds, but the remaining assets have been transferred through THORChain, making recovery difficult. The current focus is on joint funding to "patch the holes" and stabilize the DeFi lending system.

Cosmos Labs posted on the X platform, stating that a vulnerability has recently been discovered, affecting certain blockchains built on the Cosmos EVM Stack. This vulnerability has impacted the Layer 1 blockchain Saga in the production environment.Cosmos Labs stated that its team has been investigating the issue in collaboration with Saga and ecosystem partners, and has coordinated the implementation of mitigation measures. A security patch has now been released to the affected blockchains.

ChainCatcher message, Slow Mist released a security alert stating that Google Chrome (@googlechrome) has released an emergency patch to fix a high-risk zero-day vulnerability (CVE-2025-5419) that has been found to be actively exploited. The flaw exists in the V8 JavaScript engine, allowing remote attackers to compromise memory through a crafted HTML page.Please update to: Chrome 137.0.7151.68/.69 (Windows/macOS)Chrome 137.0.7151.68 (Linux)Users of Chromium-based browsers (such as Edge, Brave, Opera, Vivaldi) should also update as soon as the patch is available. Stay safe and update promptly.

ChainCatcher message, Loopscale has released an update on the hacking incident on platform X, disclosing that the withdrawal logic and vulnerability patches have been audited by the security company Sec3 and an independent auditor. The Vault withdrawal function will be reopened to all users at 10:00 AM Eastern Time tomorrow, and the incident analysis report will also be published. To maintain the stability of the protocol, a temporary 24-hour withdrawal limit is expected to be implemented for each user.

ChainCatcher news, according to CoinDesk, the blockchain development project Patchwork, founded by former developers of Coinbase and backed by Coinbase Ventures, has released a new version of its no-code development tool Create-Patchwork. This tool is deployed on the Base Layer 2 network and plans to launch more features in early 2025, aiming to generate smart contracts and applications in seconds through natural language input.Patchwork co-founder Kevin Day stated that the protocol supports features such as on-chain asset ownership transfer, smart contract audit tagging, and reputation scoring. Day was involved in the development of the decentralized exchange Paradex, which was acquired by Coinbase in early 2018. The new version will focus on enhancing the usability of blockchain application development and lowering the barriers to entry for developers.

ChainCatcher news, the Cosmos ecosystem DEX Osmosis announced on platform X that the Osmosis chain has resumed block production after being down for about 2 hours, and node operators should perform the v26.0.1 patch upgrade.ChainCatcher previously reported that DEX Osmosis stated on X that there was a chain interruption after the v26 upgrade. Core contributors are investigating the root cause. The chain will resume operation as soon as possible and provide regular updates.

ChainCatcher news, Solana Foundation Executive Director Dan Albert responded to concerns about the decentralization of the network. He stated that the ability to coordinate patches does not mean that the Solana network is centralized.On August 9, Solana validator nodes discovered a serious vulnerability and coordinated a fix behind the scenes to avoid a network crash. The distribution and coordination of the patches were conducted behind the scenes. Albert emphasized that this should not be confused with centralization. He pointed out that there are 1,500 block production nodes globally, operated by numerous individuals, and the patches are open source, maintaining the characteristics of network decentralization.

ChainCatcher message, Illuvium announced on social media that Illuvium Zero Patch 1.0.4 is now live.It is reported that this patch aligns the fuel supply of land more closely with current demand. Although this is a more significant update, it only applies to the backend system, so there is no need to download a new client. Simply restart the game.

ChainCatcher news, according to The Block, Solana developers, validators, and client teams have come together to address a serious security vulnerability.Solana validator Laine stated that the process began on August 7, when the Solana Foundation contacted well-known network operators through private channels. This contact was part of a secret patching strategy aimed at preventing the vulnerability from being exploited in any way. The patch was provided through Anza engineers' GitHub repository, allowing operators to independently verify and apply the changes. As of 14:00 UTC on Thursday, August 8, detailed instructions for implementing the patch had been distributed to stakeholders, ultimately ensuring 66.6% of the network's stake. The vulnerability was publicly disclosed only after 70% of the network had implemented the patch.

ChainCatcher message, Terra tweeted that the Terra chain briefly halted at block height 11430400, during which no transactions will be processed. Terra will work with validators on Terra (phoenix-1) and subsequently apply an emergency patch to fix the suspected vulnerability.

ChainCatcher message, Casper blockchain has released a security incident update, having discovered a security vulnerability on July 26. Currently, the number of affected accounts has been confirmed to be fewer than 15. The Casper team has developed a patch and is currently testing it. To prevent further losses, the validator community has decided to suspend consensus and block production.The Casper network remains online, and consensus and validation will resume after the patch is released and verified. The Casper Association will conduct a comprehensive investigation and work with relevant authorities to recover any unauthorized transfers of funds.

ChainCatcher message, CrowdStrike founder George Kurtz posted on the X platform that CrowdStrike is actively working with customers affected by the Windows host content update defect. Mac and Linux hosts are not affected, this incident is not a security incident or cyber attack, the issue has been identified, isolated, and a fix has been deployed. CrowdStrike advises customers to visit the support portal for the latest information and to communicate with CrowdStrike representatives through official channels. The company team has been fully mobilized to ensure the safety and stability of customers.

ChainCatcher news, Solana's new software development company Anza tweeted that it has made significant progress after collaborating with core contributors to analyze the root causes of Solana network congestion and evaluate multiple potential changes, with hopes to start releasing fixes next week. In addition, the Anza team tested a patch for the current network congestion yesterday. The officials stated that the core issues are related to the QUIC implementation and the behavior of the Agave validator client when handling a large number of requests. The team will roll out more improvements and changes over the coming months.

ChainCatcher news, CertiK tweeted that a significant vulnerability has been discovered in the smart contract platform CosmWasm within the Cosmos ecosystem, which could lead to a network-wide outage. They have promptly reported it and collaborated with the CosmWasm team to release an effective patch, and have notified potentially affected application chains to ensure preventive measures are taken to address the issue without impacting users.

ChainCatcher news, the ARC20 project Atomicals Protocol announced that it will create a patch to address the current instability and speed issues of the indexer. The patch has improved the speed of decentralized minting (DFT) by 20 times in testing. The improvements are awaiting confirmation and will be merged into the version within a day.

ChainCatcher message, Telcoin has released a security incident update on platform X: "The root cause has been identified; it is not an issue with the Telcoin wallet code itself, but rather a problem with the proxy implementation of the wallet on Polygon, primarily affecting wallets that have never initiated a transaction. A fix has been deployed to prevent further exploitation. We plan to restore all wallets to their previous balances (for all affected assets) before restarting the application services, which may take some time. No keys, backend systems, or user data have been compromised."Previously reported, the Telcoin wallet was attacked with an estimated loss of $1.2 million.