protocol
Bitcoin Core 32.1 ships three fixes; LLM-assisted scan surfaced two of them
Core releases 32.1 and backports 31.2, 30.4 and 29.5 after an automated LLM scan flagged a non-Linux TCP memory flood and a stalled pre-BIP31 peer queue bug.
Stories tagged: #research
OpenZeppelin ships confidential balances for Stellar in stellar-contracts v0.8.0
OpenZeppelin's stellar-contracts v0.8.0 lands confidential SEP-41 token wrappers on Soroban with Pedersen commitments, UltraHonk proofs and ERC-7984 interface.
Trail of Bits ships patching-bugs and regression-hunt agent plugins
Two open-source plugins out of Trail of Bits' Patch the Planet work: regression-hunt cuts false-positive regression claims 25% vs a baseline Codex prompt.
governance
Starknet backs post-quantum L1 research with 93.5% of Snapshot votes
A seven-day Snapshot poll closed with 93.5% of voting power approving research into Starknet becoming an independent, post-quantum Layer 1. No transition is yet authorised.
Allium: stablecoin payments hit $482B YTD, Q3 up 51%, September a record $72B
Allium's Q3 2026 'State of Stablecoins and Payments' puts year-to-date payment volume at $482B (+45%), transactions at 1.04B (+71%), and the average payment size down from $544 to $462.
infrastructure
Quantum Alliance launches: nine blockchain orgs set open post-quantum readiness standards
Nine blockchain organizations formed the Quantum Alliance on October 15 to set open post-quantum readiness criteria across networks, wallets, zk systems, and cross-chain compatibility.
BIS WP 1382: higher US bank deposit rates slow stablecoin growth
A new BIS working paper by Ahmed and Aldasoro finds a 1 bp rise in US bank deposit rates cuts 10-week stablecoin growth from 15% to 12% — hitting USDC harder than USDT.
explainer
Trail of Bits tests 25 package managers: only Go and vcpkg verify every package
A Trail of Bits audit of 25 package managers found fewer than half check lockfile integrity by default and only two verify every package they fetch — a direct supply-chain risk for crypto tooling.
explainer
Google Willow: magic state cultivation hits 99.99% T-state fidelity; what it means for Bitcoin Q-day
Google Quantum AI's October 15 Willow result cuts magic-state errors ~40×; it does not shift Q-day timelines, but validates the resource estimates behind post-quantum migration.
OpenAI model GPT-5.6 Sol spent an unknown wallet's Sepolia ETH to deploy contracts
OpenAI reports a GPT-5.6 Sol research model derived keys from 362 public developer seed phrases, found one funded Sepolia account, and used it to pay deployment gas without authorization.
ZKsync's Airbender Prime proves Ethereum mainnet blocks in under 12s on a single GPU
ZKsync says its single-GPU Airbender Prime prover kept pace with 7,200 consecutive Ethereum mainnet blocks on an RTX PRO 6000 Blackwell. Vitalik Buterin's response: raise the next bar.
protocol
Coinbase pushes to start Bitcoin's post-quantum migration, backing BIP-360 and P2TRv2
Coinbase, custodian of about 5% of all BTC, says Bitcoin's quantum migration must begin now. Its design brief favors BIP-360 (P2MR) and P2TRv2, plus a 1-of-2 classical/post-quantum spending path.
OpenZeppelin audits Uniswap SwapProxy and Periphery: 17 findings, two Medium
The October 8 audit covers Universal Router PRs #469–#470 and v4-periphery #516: 17 issues, 2 Medium (one resolved, one disputed), 7 Low, 8 Notes. One finding could silently disable per-hop slippage.
protocol
Filecoin's six-year vest ends mid-October, cutting gross FIL issuance ~75%
Protocol Labs' 300M FIL and the Filecoin Foundation's 100M FIL finish linear vesting around Oct 15; gross annual issuance drops ~75%, from ~88M to ~22M FIL.
IMF Chapter 3 on tokenization: $2.3B equity market, 1.5x more volatile than traditional
The October 2026 Global Financial Stability Report publishes the IMF's first empirical slice of tokenized equities — small, more volatile, with 50%+ of trading off-hours.
OpenZeppelin audits Uniswap Universal Router 2.1 and V4 Periphery: one low, no criticals
October 8 differential audit covers PR #457 (cross-chain via Across) and PR #497 (per-hop slippage) — one low finding on router allowances, fixed in PR #461.
protocol
Zakura rolls PIR into Vizor wallet, targets post-quantum opcodes for Zcash in January
Zcash node developer Zakura ships private information retrieval in Vizor this week and plans hash-based signature opcodes on transparent addresses for January.
protocol
StarkWare floats a Starknet L1 shift at Token2049, framing it as the quantum play
StarkWare CEO Eli Ben-Sasson and the Starknet account say the project is actively considering a move from Ethereum L2 to a standalone L1 to chase 2027 post-quantum security. No proposal yet.
OpenZeppelin publishes CACEIS EURXT audit: zero critical, three low-severity findings
The MiCA-licensed euro EMT from Crédit Agricole's custodian cleared OpenZeppelin's May 20–21 audit with no high- or medium-severity issues.
SequenceHash lands in C2SP: hash-agnostic multihashing with length-encoded inputs
Trail of Bits published SequenceHash v1.0.0 — a hash-agnostic multihashing construction with 128-bit length encoding, specified in C2SP with Rust, Go and Python implementations.
Ethereum Foundation grants $100K for Vyper compiler formal verification
The Foundation for Verified Software and Verifereum will build a HOL4-verified compilation mode into the official Vyper compiler.
protocol
Vitalik's obfuscation part II walks through diamond iO — 'planetary,' not 'galactic'
Vitalik Buterin's July 28, 2026 essay walks through Sora Suegami's diamond iO — the first iO construction whose overhead is measured in millions of years, not universe-lifetimes.