At 04:59 UTC on 9 October, 30 TRON wallets quietly handed control to a new key. Their owners had not touched them. Eight minutes later, the money started moving, and within an hour the attacker had emptied wallets on six blockchains. Bitquery's on-chain investigation counts $93.2 million taken from 315 wallets. The victims had one thing in common: they bought their Ledger hardware wallets from
If you are part of OpenAI's Trusted Access for Cyber (TAC) program, there is a new requirement to act on. From October 1st, 2026 (previously Sept 1st), individual TAC members must turn on Advanced Account Security (AAS) and sign in with a physical security key. A passkey synced through a password manager will not qualify. This guide covers what TAC is, what AAS changes on your account, which
This article is not meant to be an exhaustive checklist, but some of the most common mistakes we find when auditing password managers in web3 organizations, and how they can be fixed. For this example we will be fusing in 1Password, but this applies to all password managers. * Not configuring 2FA as mandatory for users to login into their 1Password accounts. The password manager is one of the most important
Subscribe to get the latest updates, straight to your inbox.