Security · Lead story
The Machines Found Real Bugs: Inside Core Lightning's Embargoed Emergency
A flood of AI-generated vulnerability reports — the kind maintainers delete on sight — turned out to contain real flaws. Now Bitcoin's Lightning operators are on a 14-day patch clock, and half the headlines got the guidance backwards.
The Take
Operators: upgrade the moment a signed release lands — and if you can't, --offline, not a shutdown. Readers: the advisory and a third of the headlines about it gave incompatible instructions. The source is always upstream of the story.
This Week's Briefs
AI × Crypto
"Pennies" Compared to What's Coming: Industry Leaders Warn on AI-Agent Attacks
TRM logs a 40% YoY rise in AI adoption across crypto crime. What needed a skilled attacker now runs as software against everyone at once.
Infrastructure
LayerZero Delegate Hijack Mints Unbacked SAND on Base
Compromised delegate permissions, hundreds of automated transactions — a bridge-trust failure, not a token bug.
Custody
MetaMask's Agent Wallet: Guardrails for Letting an AI Touch Your Money
Spending limits, allowed networks, allowed protocols. The design question of the decade: how much of a wallet does an agent get?
Markets Infra
Binance's Agent OS Bridges ChatGPT, Claude, and Cursor to Exchange Rails
The agent-to-exchange pipe is now a product. The security perimeter of "your account" just got a lot more interesting.
The Ledger
H1 2026 by the Numbers: 207 Hacks, $972M, and a Rising Machine Tempo
The worst half-year in TRM's dataset — before AI-scaled attacks fully arrive.