Security · Lead story
The Machines Found Real Bugs: Inside Core Lightning's Embargoed Emergency
A flood of AI-generated vulnerability reports — the kind maintainers delete on sight — turned out to contain real flaws. Now Bitcoin's Lightning operators are on a 14-day patch clock, and half the headlines got the guidance backwards.
The Take
Operators: upgrade the moment a signed release lands — and if you can't, --offline, not a shutdown. Readers: the advisory and a third of the headlines about it gave incompatible instructions. The source is always upstream of the story.
More this week
AI × Crypto
"Pennies" Compared to What's Coming: Industry Leaders Warn on AI-Agent Attacks
TRM logs a 40% YoY rise in AI adoption across crypto crime. What needed a skilled attacker now runs as software against everyone at once.
Infrastructure
LayerZero Delegate Hijack Mints Unbacked SAND on Base
Compromised delegate permissions, hundreds of automated transactions — a bridge-trust failure, not a token bug.
Custody
MetaMask's Agent Wallet: Guardrails for Letting an AI Touch Your Money
Spending limits, allowed networks, allowed protocols. The design question of the decade: how much of a wallet does an agent get?
Markets Infra
Binance's Agent OS Bridges ChatGPT, Claude, and Cursor to Exchange Rails
The agent-to-exchange pipe is now a product. The security perimeter of "your account" just got a lot more interesting.
The Ledger
H1 2026 by the Numbers: 207 Hacks, $972M, and a Rising Machine Tempo
The worst half-year in TRM's dataset — before AI-scaled attacks fully arrive.
Latest
Security · Aug 28
The Machines Found Real Bugs: Inside Core Lightning's Embargoed Emergency
Policy · Aug 28
The Bank of England Gets a Second Job: Making Stablecoins Work
Security · Aug 27
The Vault Got Robbed: What the $116M Coldcard Exploit Says About Everyone's Cold Storage
Security · Aug 27
No Coins Were Touched. That's Not Good News.
AI × Crypto · Aug 27
“Pennies”: Why Security Leaders Think the Billion-Dollar Hacks Are the Warm-Up
Infrastructure · Aug 27
Minting Out of Thin Air: The LayerZero Delegate Hijack, Explained
AI × Crypto · Aug 27
Guardrails for the Robot Hand: MetaMask's Agent Wallet Goes Public
AI × Crypto · Aug 27
The Agent-to-Exchange Pipe Is Now a Product
Policy · Aug 27
The Half-Year Ledger: 207 Hacks, $972M, and a Rising Machine Tempo