Bitstamp DeFi Contracts Rated High Risk Due to Centralized Key Controls

·3 views

A security analysis dated October 26, 2023, assessed Bitstamp's decentralized finance operations, which hold approximately $1.47 billion in total value locked on Ethereum and related Layer 2 networks. Researchers assigned an overall risk score of 7.2 out of 10, citing the protocol's heavy dependence on centralized administrative key management as the primary vulnerability. The report warns that a compromise of privileged administrative addresses — through insider threats, phishing, or server breaches — could allow attackers to mint unlimited tokens, manipulate price feeds, or freeze user withdrawals. Additional risks include reliance on external or internally sourced price oracles that could be exploited to trigger unfair liquidations or enable arbitrage attacks. The analysis notes that Bitstamp's established institutional security practices and likely multi-signature governance partially offset these risks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Data Portability Rights Exist Legally but Rarely Work in Practice

Users of AI tools often find no export option when they try to retrieve their data after a service changes or shuts down, despite legal rights existing in many jurisdictions. Under the EU's GDPR Article 20, individuals have the right to receive and transfer personal data they provided to a service, but the law draws a critical distinction between data users actively submit and data that AI systems infer or generate. Prompts and usage logs are generally considered portable, while AI-generated outputs, behavioral profiles, and embeddings fall into a legally excluded category of 'inferred data.' Even where portability rights clearly apply, the law does not typically compel companies to build working export features, making compliance largely a product decision. As a result, users face three separate hurdles — legal rights, content ownership, and technical access — and existing regulations address only the first of these meaningfully.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds epilepsy screening tool, uncovers how sampling rate distorts flash detection

A developer built a photosensitive epilepsy screening tool based on broadcast regulations introduced after a 1997 Pokémon episode triggered seizures in 685 Japanese children. The tool checks video content against Ofcom and ITU-R standards that limit flashes to no more than three per second. During testing, a clip alternating five times per second was incorrectly flagged as a violation due to aliasing — a measurement artifact caused by sampling at only 10 fps, which sits at the Nyquist boundary for that frequency. Rather than raising the baseline sampling rate across entire videos, the developer implemented adaptive resampling that re-examines only uncertain spans at higher frame rates, resolving borderline results accurately. The approach corrected both false positives and false negatives, demonstrating that sampling rate in this context affects result correctness, not just processing performance.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Senior Developers Burn Out Faster and Recover Slower Than Juniors

Senior developers tend to experience more severe burnout than junior developers despite having greater experience and stronger coping skills. The core reason, according to a DEV Community analysis, is years of compounded biological depletion — including declining vitamin D, dopamine baseline, and stress-regulation capacity — that accumulates silently over a career. A junior developer facing a high-pressure situation enters it with a largely fresh physiological baseline, while a senior may carry seven or more years of unaddressed deficit. This accumulated debt lowers the burnout threshold significantly, meaning the same workplace stressor hits much harder at year seven than it did at year one. Recovery also takes longer for seniors because rest alone does not replenish the underlying biological deficits that have built up over time.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Malicious Browser Extensions Steal Crypto Wallets and Credentials via Silent Updates

Security researchers at Socket Threat Research have identified a campaign, tracked as 'Superior', in which threat actors published or purchased legitimate Chrome and Edge browser extensions before pushing malicious updates to existing users. Once updated, the extensions connected to a command-and-control server to receive encrypted JavaScript modules capable of stealing cryptocurrency wallet recovery phrases, login credentials, session tokens, and browsing history. The malicious code also stripped Content Security Policy headers from web pages, allowing it to intercept wallet operations and hijack legitimate on-page actions such as Connect Wallet and Swap buttons. Additionally, the extensions displayed fake full-screen prompts mimicking Ledger and Trezor interfaces, as well as ClickFix-style alerts that tricked users into executing malicious commands locally on their devices. Because browser extensions update automatically and ownership transfers are not disclosed to users, the campaign was able to reach established user bases without triggering new installation warnings.

0 comments Read more at DEV Community