SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Security Audit Flags High-Severity Vulnerabilities in HashKey Exchange Contracts

0
·1 views

A DeFi security researcher published a vulnerability surface analysis of HashKey Exchange, a cross-chain decentralized exchange with approximately $1.73 billion in total value locked across Ethereum and several Layer 2 networks. The audit, dated September 24, 2026, examined smart contracts including the router, vault, pool, bridge adapters, and governance proxy components. Researchers identified nine vulnerability categories, with three rated high severity: a single externally owned account controlling contract upgrades without a timelock or multi-signature safeguard, re-entrancy risks in withdrawal and swap functions, and price oracle manipulation exposure on low-liquidity assets. Additional medium-severity issues include flawed cross-chain bridge message verification that could enable double-spend attacks, misconfigured access controls, and front-running risks on limit-order execution. The protocol received an overall risk score of 7 out of 10, with auditors noting that concentrated privileged control and the re-entrancy and oracle weaknesses significantly elevate its risk profile.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Uses AI Assistant to Automate Multi-Generation Genealogy Research

A developer has shared an updated account of using an AI assistant to automate genealogy research, building on an earlier post that drew mixed feedback. The AI-driven workflow searches genealogy sites and official archives, transcribes records, and updates a GEDCOM family tree file, repeating the process generation by generation. To address concerns about data reliability, the developer applies the GEDCOM quality rating system, assigning lower trust scores to genealogy sites and higher scores to verified official civil or parish records. The setup uses separate skills for each genealogy and archive site, with varying technical approaches to handle bot protection, including Playwright automation and Chrome in debug mode for Cloudflare-protected sites. The developer acknowledged limitations such as AI hallucination risks and the uneven trustworthiness of genealogy platforms, but argued these are mitigated when responses are grounded in sourced data.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Apple on-device AI app lets model pick questions, not write them, for voice notes

Simple Memo, an iPhone note-taking app, uses Apple's Foundation Models framework to power a voice-driven feature called Dialogue Memo, where users speak an idea and the app asks follow-up questions to build a structured note. Early testing revealed that letting the model freely generate text produced unreliable results, including repeated commentary, unanswered questions, and mismatched language prefixes. Developers responded by restricting the model to selecting from a predefined Swift enum of question choices, with fixed, human-reviewed text mapped to each option in code. Note layout is similarly constrained: the model only returns a structural arrangement of the user's own sentences, and any invalid layout triggers a retry or falls back to a simple bullet-point format. All processing runs entirely on-device with no cloud fallback, and hard limits such as a six-question cap and a 3,600-character transcript ceiling keep the interaction concise.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer builds cross-device clipboard app, battles Android OS limits and distributed systems complexity

A developer created ClipboardX to solve a personal frustration of manually transferring text between an Android phone and a Windows PC via messaging apps. Android's background process restrictions blocked the original design, forcing a pivot to embed clipboard access inside a custom keyboard. Building the keyboard nearly derailed the project until the developer adopted an open-source keyboard foundation and focused only on clipboard-specific features. Once Android and Windows could communicate, deeper reliability challenges emerged around message delivery, retries, deduplication, and reconnection handling. What began as a simple side project ultimately evolved into a small distributed systems problem requiring robust state management and observability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Open-Source Layer to Fix Silent State Conflicts in Multi-Agent AI

A developer has released Network-AI, an open-source coordination layer designed to address a critical failure mode in multi-agent AI production systems. The core problem occurs when multiple AI agents — such as those built with LangChain, AutoGen, or CrewAI — simultaneously read and write shared context, causing one agent's work to silently overwrite another's without throwing any errors. Network-AI sits between agents and shared state, routing all updates through an atomic propose-validate-commit cycle to prevent such conflicts. The tool supports 14 AI frameworks, including MCP, AutoGen, and OpenAI Swarm, and also offers token budget controls, role-based permissions, and a full audit trail. The project is available on GitHub under an MIT license and is positioned as a complement to the Model Context Protocol, which handles agent-to-tool connections but not agent-to-agent coordination.

0 comments Read more at DEV Community