Security audit finds critical vulnerabilities in Binance's $9.59B staked ETH protocol

·1 views

A security audit of Binance's Staked ETH (BETH) protocol identified critical vulnerabilities during a review conducted in September 2026. The audit focused on reentrancy risks and access control mechanisms within the $9.59 billion system. It found a high-severity flaw where withdrawal processes could be re-entered via cross-chain bridge callbacks. Another major issue involves a single-key administrative wallet without multi-signature protection. The combined vulnerabilities create a potential attack vector that could drain funds from the withdrawal queue.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Backstage: CNCF open-source framework for internal developer portals explained

Backstage is an open-source framework for creating internal developer portals, originally developed by Spotify. It was open-sourced in March 2020, donated to the CNCF as a Sandbox project later that year, and promoted to Incubating status in March 2022. The project tackles the cognitive load on developers in organizations with many microservices and tools by centralizing service ownership, documentation, and tooling in one interface. Technically, it consists of a React frontend and a Node.js backend, connected through a plugin system. It allows development teams to create new projects from standardized templates and access infrastructure tools.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Local browser tools offer private alternative for image-to-PDF conversion

A new article highlights privacy concerns with standard online image-to-PDF conversion services. Most free tools require users to upload sensitive documents like receipts and IDs to company servers without verifiable deletion policies. The article promotes browser-local conversion as a private alternative, where processing occurs entirely on the user's device without file uploads. This method works on modern browsers without installation and keeps documents private. The author is the developer of FileOnTap, a tool demonstrating this local conversion approach.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Logistics Hiring AI Systems Should Use Backend Proxy for Security and Reliability

A technical article recommends logistics companies use a self-hosted Node.js backend proxy for AI-powered candidate scoring. This proxy would consolidate multiple AI provider APIs behind a single, secure internal endpoint. Its primary functions are to protect API credentials and ensure all scoring outputs strictly adhere to a predefined JSON rubric. The system should retry only transient failures, like network issues, and reject any output that does not perfectly match the required data schema.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Open-source Rust toolkit released for parsing ISO 20022 payment messages

A new open-source toolkit for the Rust programming language facilitates the processing of ISO 20022 payment messages. The 'rust_iso20022' library, version 0.1.6, provides a model collection covering over 1,100 message versions across 32 business areas. It allows developers to first detect and generically parse XML messages to extract key fields like IDs and amounts. The tool can then perform typed parsing, arithmetic on monetary values, and serialization to formats like JSON for integration into other systems.

0 comments Read more at DEV Community