protocol
Aave Labs acquires Avon team to build fixed-rate lending on Aave
Aave Labs on Nov 6 acquired the team and technology behind Avon — fixed- and floating-rate lending markets and an onchain order book. Founder Prince Sinha joins engineering.
Stories tagged: #tooling
exploit
BTCPay Server tells self-hosters to shut down after on-chain hot wallets drained
BTCPay founder Nicolas Dorier says the Nov 1 drain reports involve servers on releases older than 2.4.2 and that an attacker is logging in as administrator. Public servers on 2.4.7 were not hit.
exploit
Trezor warns Safe 5 units sold by CryptoBilis carry a cellular implant
Trezor says a Safe 5 bought on Tokopedia from reseller CryptoBilis carried an extra PCB with a cellular module that reads the screen and leaks the seed. Trezor cut ties with the reseller Oct 9.
Uniswap Labs opens TJAR fee-conversion tool to third-party apps, Robinhood first
Uniswap Labs opened TJAR, its Token Jar fee-conversion framework, to third-party apps. Robinhood is the first integration — Uniswap API fees settle in USDC and USDG on seven chains.
Avail launches ShieldTX, a wallet-per-position privacy tool for Hyperliquid perps
Avail opened ShieldTX on Oct 28: each Hyperliquid perp position runs from a fresh wallet to break the on-chain trail copy-trading bots scrape, with the vault on Arbitrum.
infrastructure
Luxor raises $16M led by CMT Digital to build a compute-derivatives OTC desk
Bitcoin-mining infra firm Luxor closed a $16M strategic round led by CMT Digital with Canaan and MicroBT, funding its AI-compute OTC desk and derivatives work.
Trail of Bits ships patching-bugs and regression-hunt agent plugins
Two open-source plugins out of Trail of Bits' Patch the Planet work: regression-hunt cuts false-positive regression claims 25% vs a baseline Codex prompt.
protocol
Bitcoin Core adds 'easy-to-find' bug track as LLMs lower the attack bar
Pull request #1281, merged October 22, splits security disclosures: bugs an attacker can easily rediscover now ship fixes to every supported release ASAP with details attached.
explainer
Trail of Bits tests 25 package managers: only Go and vcpkg verify every package
A Trail of Bits audit of 25 package managers found fewer than half check lockfile integrity by default and only two verify every package they fetch — a direct supply-chain risk for crypto tooling.
infrastructure
Binance ships Binance AI free tier to all English users after 150k-user beta
The free generative-UI layer went global on October 12 following a September 7 beta; Binance AI Pro and Agent OS remain behind separate rollouts.
infrastructure
Google Cloud sunsets Blockchain Node Engine on December 15, hands customers to Quicknode
GCP will delete all BNE nodes and RPC endpoints on Dec 15, 2026. Customers get a Quicknode migration path with marketplace incentives.
SequenceHash lands in C2SP: hash-agnostic multihashing with length-encoded inputs
Trail of Bits published SequenceHash v1.0.0 — a hash-agnostic multihashing construction with 128-bit length encoding, specified in C2SP with Rust, Go and Python implementations.
protocol
Ethereum Foundation ships zkAPI: pay-for-API ZK proofs land on mainnet
Ethereum Foundation and Open Anonymity Project launched zkAPI on Oct 1, letting users pay OpenAI/Ollama-compatible endpoints from an ETH vault without the gateway linking requests to the deposit.
Ethereum Foundation grants $100K for Vyper compiler formal verification
The Foundation for Verified Software and Verifereum will build a HOL4-verified compilation mode into the official Vyper compiler.