MetaMask exits Lido validators as it investigates security incident
Related
Former Twitter CISO Michael Coates appointed Chief Information Security Officer of the Solana Foundation
According to Foresight News , security expert Michael Coates announced on the X platform that he has been appointed Chief Information Security Officer (CISO) of the Solana Foundation, marking a new chapter in his career. Coates previously served as Head of Security at Mozilla, CISO at Twitter, and founded Altitude Networks, a startup focused on enterprise SaaS data security, which was later acquired by CoinList, thus entering the crypto industry. Coates stated that he chose to join Solana because the chain currently handles tens of billions of dollars in daily stablecoin transactions, exceeding the combined daily trading volume of most cryptocurrencies. He mentioned that future work will focus on integrating security capabilities into the foundation of industry operations and application security, addressing the unique security challenges of cryptocurrencies, and collaborating with policymakers and standards bodies to promote improvements in cybersecurity regulation.
The Fabric Foundation has launched the ROBO governance system and established a Foundation Security Committee.
According to Foresight News , the Fabric Foundation announced that the ROBO governance system has been officially launched. The team has opened a dedicated governance space on the Snapshot platform and established a Foundation Security Committee to oversee overall management, thus initiating co-governance with the community. ROBO holders can vote free of charge on Snapshot, with voting weight calculated based on token holdings. All proposals, votes, and decisions are publicly recorded. Proposals undergo preliminary evaluation, community discussion, a five-day snapshot voting period, council review, and final decision announcement. The council is also responsible for preventing risks such as bribery and Sybil attacks. Founding members of the Foundation's Security Committee include Jerry Huang, founder of Silicon Valley Center of Robotics; Shivani Phull, director of HashPoint Advisory; and Clara Cheng, business head of Thrive Horizon Ltd. The first proposal is a preliminary evaluation of the first phase of the ROBO governance system, which the community can view and vote on in the official Snapshot space.
Gnosis Pay Security Incident Recap: Vulnerability stemmed from a flaw in signature verification logic; fix completed.
According to Foresight News , Gnosis Pay released a post-incident report on June 1st, disclosing that the root cause of the vulnerability was a flaw in the ERC-1271 signature verification logic within the Zodiac module: the system only reads the contract's return result and does not check whether the call was actually executed successfully. Attackers exploited this flaw to deploy a contract that intentionally failed but still returned a "valid" status, forged authorization, and then withdrew funds from accounts not owned by them. This vulnerability was introduced with Zodiac code version 3.4.0 in October 2023 and was patched on June 5th. The report shows that attackers withdrew approximately $1.5 million from 5,281 wallets, including approximately $641,000 in GNO, approximately $453,000 in EURE, and approximately $399,000 in USDC.e; another approximately $300,000 is locked in inaccessible accounts, and the team is exploring recovery methods. Gnosis Pay stated that it will expand its security team, introduce external audits, broaden the scope of smart contract audits, and has completed a complete product rebuild (v2) to improve its security response capabilities.
Ethereum Founder Vitalik Buterin Says AI Won’t Doom Crypto Security
The Ethereum co-founder said AI could help developers mathematically verify entire software systems, turning the same technology powering new attacks into a tool for defense.
Anthropic Admits Security Failures Behind Claude Hacking Incidents
After Claude models accessed real systems during cyber tests, Anthropic tightened its safeguards and warned that flawed training can encourage dangerous behavior.
Sui DeFi protocol Full Sail to wind down after Switchboard incident
Full Sail is shutting down after an attacker removed about $91,000 from three vaults during a security incident linked to oracle provider Switchboard.