Prediction market platform Polymarket is replacing single-price snapshots with time-weighted average prices (TWAP) for settling short-duration crypto markets after traders exploited brief price manipulation windows to drain funds. The platform is offering $1M in rewards as part of the upgrade.
Cybersecurity researchers have identified sophisticated evolution in ClickFix malware operations, including attackers using BNB Chain smart contracts to deliver attack instructions, browser fingerprinting to hide macOS malware lures, and a self-propagating npm worm called ChainDrop that infected over 400 packages downloaded hundreds of millions of times weekly.
Michael Coates, newly appointed Chief Information Security Officer at the Solana Foundation, warned that AI-driven social engineering attacks, deepfakes, and credential theft have become the cryptocurrency industry's primary security threats, replacing traditional smart contract vulnerabilities as the main concern.
Blockchain asset management protocol Swan Treasury suffered an estimated $625,000 loss when attackers exploited a leaked off-chain signer key to purchase STY tokens at a steep discount and sell them for profit.
Sablier Labs announced it is halting development of its Ethereum token-streaming protocol and entering maintenance mode until 2028, though smart contracts used by 345,000+ addresses will continue operating.
