ChainCatcher news, Bitcoin Ordinals browser Ord.io posted on social media X that there are rumors indicating that insiders at Coinbase have revealed that the exchange is conducting an internal security audit and regulatory compliance assessment of the Runes protocol. These claims have not yet been independently verified.

ChainCatcher news, the European Securities and Markets Authority (ESMA) stated on Wednesday that cryptocurrency companies should be required to undergo external audits of their network defenses, and urged lawmakers in Brussels to amend the region's flagship regulatory framework for the crypto industry to better protect consumers.The agency believes that stricter cybersecurity rules are an important component of the EU's regulation of the crypto asset market (MiCA), which will come into full effect in December.ESMA has been advocating for the inclusion of a requirement for cryptocurrency companies to have their ability to withstand cyberattacks audited by a third party, as the agency works to finalize the implementation of these rules. These rules were passed by EU lawmakers last year.However, the European Commission opposed this move, stating that ESMA is overstepping its authority and going beyond the legislative mandate. Both sides declined to comment.

ChainCatcher message, Ronin announced on social media that the cross-chain bridge, after experiencing a security vulnerability incident and undergoing a comprehensive audit, is now ready to reopen.Previously, due to a critical configuration error, the cross-chain bridge was hacked for 12 million dollars and was suspended to prevent further financial loss. All funds have now been safely recovered, and the white hat hackers received a bounty of 500,000 dollars.Currently, the proposal for the reopening of the cross-chain bridge has been submitted for operator voting, and services are expected to resume within 10 days, with no further updates planned for the time being.

ChainCatcher news, according to The Block, blockchain security audit provider Zellic has acquired the smart contract auditing platform Code4rena. This is its first acquisition, aimed at providing clients with more comprehensive security review services.The CEO of Code4rena stated that it will continue to operate independently.

ChainCatcher news indicates that according to Optimism governance information, OP Labs protocol engineer Mofi has released an upgrade proposal called Granite Network Upgrade. This proposal aims to address security vulnerabilities identified in a series of third-party security audits conducted by Spearbit, Cantina, and Code4 rena. The related vulnerabilities have not been exploited, and user assets have never been at risk. The proposal states that this upgrade will include a series of smart contract upgrades to fix the vulnerabilities found in the audits, as well as an L2 hard fork to enhance the stability and performance of the error prevention system. A permissioned rollback mechanism has been initiated as a precaution to avoid any potential instability during the vulnerability patching process.If the proposal is approved by vote, the Granite Network Upgrade is scheduled to take place on September 10 at 16:00 UTC. This upgrade has been coordinated with Base and Conduit to launch on the internal development network and Sepolia Superchain.

ChainCatcher message, according to monitoring by the blockchain security audit company Beosin Alert, the Ronin Bridge project has exhibited abnormal behavior in extracting cross-chain assets. According to the Beosin security team analysis, the root cause of this abnormal behavior lies in the project team's failure to properly initialize the operator weights required for cross-chain transaction confirmation when upgrading the contract, resulting in the minimumVoteWeight parameter in the contract being zero, allowing any signature to pass cross-chain verification.Currently, the Ronin bridge has lost 3,996 ETH, with funds stored at an address starting with 0xc6a (this address is an MEV bot, so it is speculated that it may be a white hat action). Beosin is currently collaborating with the project team to address this incident.

ChainCatcher news, regarding "why $7.6 million was raised, and TGE just started a few weeks ago, ZKX announced it would cease operations," ZKX founder Eduard responded, stating that the $7.6 million funding was raised from 2021 to 2024 to support a 30-person team developing a dedicated blockchain to scale perpetual contracts. Eduard mentioned that this funding covers multiple code audits with Nethermind, TGE listing fees, AWS cloud service expenses (high L3 costs), and developer promotion activities for Cairo programming.He emphasized that all user funds have been fully returned, over 80% of users have withdrawn from the protocol, and the main wallet is self-custodied. The core founders did not sell any tokens, but four years of effort and life achievements have gone to waste. Additionally, Eduard noted that the DeFi team faced immense community pressure, vulnerabilities, scams, and hacking attacks. He stated that the team did its best to protect customer funds, and Binance is aware of the identities of some attackers. Finally, he reflected that choosing a full-chain smart contract protocol instead of L3 and other strategic decisions might have been financially wiser, and expressed that the team has learned lessons from this painful experience.Earlier, ChainCatcher reported that the Starknet ecosystem DEX ZKX would cease operations and advised users to withdraw funds before September.

ChainCatcher news, according to The Block, blockchain security company Veridise reports that the likelihood of finding critical issues in zero-knowledge project audits is twice that of other types of audits.Veridise analyzed 1,605 vulnerabilities found in the most recent 100 audits, with an average of about 16 issues discovered per audit, while ZK audits had a slightly higher average of 18 issues. When focusing on critical vulnerabilities, Veridise found that 55% (11 out of 20) of ZK audits contained critical issues, compared to 27.5% (22 out of 80) for other audits, including smart contracts, wallet integrations, blockchain implementations, and relayers.

ChainCatcher news, MakerDAO announces a partnership with Sherlock to launch a security audit competition with a total prize pool of up to $1.35 million. This is the largest audit competition in the field's history, set to kick off on July 8 and run until August 5.

ChainCatcher news, the L1 blockchain Sei indicates that Sei v2 has passed the security audit by the security company Zellic, and a full report will be released afterwards.

ChainCatcher message, Mango Network has been fully audited by MoveBit. This audit method includes dependency checks, fuzz testing, static code analysis, manual reviews, etc., aiming to conduct comprehensive security testing of the code in a way that closely resembles real attacks, covering key areas such as chain security, stability, performance, and code quality.It is reported that the full-chain bridging protocol solution based on the BTCFi ecosystem released by Mango Network is also about to enter the review phase.

ChainCatcher news, security agency Beosin announced on platform X that it has initiated further ecological cooperation with Sei, supporting smart contract security audits for Sei ecological projects; currently, Beosin has completed the contract audit for Kryptonite, the largest liquidity staking platform in the Sei ecosystem. In the future, Beosin will provide security services for more Sei ecological projects, contributing to the secure development of the Sei ecosystem.

ChainCatcher news, Slow Mist announced the launch of HKSFC compliance security audit services. Currently, the Slow Mist security team has provided services for several cryptocurrency trading platforms in Hong Kong applying for licenses, including: HashKey Pro, which has completed its licensing, HKBGE, which is in the process of applying, and MEEX, which plans to apply.The Slow Mist security team has developed compliance security audit items for HKSFC based on the latest requirements from HKSFC and OWASP international standards. Additionally, security audit items for Web, iOS, and Android have been organized according to OWASP international standards and Slow Mist's exclusive security capabilities, ensuring that the project parties meet HKSFC requirements while also aligning with OWASP international standards.

ChainCatcher news, the "intent-centric" Web3 operating protocol dappOS V2 version has passed security audits conducted by CertiK, Secure 3, and Trail of Bits, and the dappOS V2 Beta version is about to launch.ChainCatcher previously reported that the Web3 operating protocol dappOS was selected for the Binance Labs Incubation Program Season 5 in November 2022, and in June this year, it received Pre-Seed round funding from Binance Labs, completing a seed round led by IDG Capital and Sequoia China in July.

ChainCatcher news, the blockchain security audit company SolidProof officially stated that in response to the Rug Pull incident of the DeFi project Kannagi Finance on zkSync Era, it has collaborated with Kyber Network to establish a special task force to thoroughly investigate the situation.SolidProof stated that it did not audit the Vault contract related to this incident, which was audited by SolidityFinance.ChainCatcher previously reported that according to DeFiLlama data and community feedback, the DeFi project Kannagi Finance on zkSync Era experienced a Rug Pull, and its official Twitter account has been deactivated.

ChainCatcher news, Worldcoin announced the security audit report on its official blog. Starting from April 2023, the auditing firms Nethermind and Least Authority conducted two independent security audits of the protocol. Nethermind focused on auditing the smart contracts of the protocol, identifying a total of 26 issues. Of these, 92.6% (24 issues) have been fixed after the validation phase, one has been mitigated, and the remaining one has been confirmed. Least Authority focused on auditing the protocol's use of cryptography, identifying 3 issues and making six recommendations. All issues "have been resolved or are planned to be resolved."

ChainCatcher news, according to official news from CertiK, CertiK has completed advanced formal verification of Ant Group's innovative open cross-platform Trusted Execution Environment (TEE) HyperEnclave.It is reported that Ant Group's Trusted Native Technology Team developed the open cross-platform software Trusted Execution Environment HyperEnclave, aiming to improve the efficiency and compatibility of Ant Group's privacy-preserving computing workloads.

ChainCatcher news, the Web3 security auditing company CertiK has passed the audit by the American Institute of Certified Public Accountants (AICPA) and received the SOC 2 Type I certification issued by the organization. The SOC 2 Type I certification is a standard proposed by the AICPA to ensure that service organizations meet customer data security requirements. CertiK underwent a comprehensive audit and assessment of security controls, processes, and policies through an independent third-party audit, meeting the SOC 2 standards.Previously reported, CertiK announced on July 11 that it had completed the audit of the automated market maker (AMM) on XRPLedger. CertiK examined potential vulnerabilities in its underlying smart contract framework and assessed the overall security of the AMM. In early June, CertiK was also awarded a $500,000 reward by SUI for successfully discovering and reporting a new type of security threat named "Hamster Wheel" on the SUI network.