SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Two Crypto Attacks on July 31 Drain Over $46M via Firmware Flaw and Smart Contract Bug

0
·1 views

On July 29–31, 2026, two separate cryptocurrency attacks resulted in combined losses exceeding $46 million across entirely different attack surfaces. COLDCARD, a widely trusted Bitcoin hardware wallet, lost between $38 million and $70 million after a firmware bug dating back to March 2021 was actively exploited — a flawed build setting had silently disabled the hardware random number generator, reducing key entropy and making private keys brute-forceable. Separately, CryptoDAO lost $8.2 million USDT from a BNB Chain vault contract that lacked access controls, allowing any external address to call a restricted function, which the attacker amplified using flash loans. The COLDCARD vulnerability required a specialized firmware and RNG compliance audit to detect, while the CryptoDAO flaw was a well-documented smart contract issue flagged in standard security checklists and automated tools. The incidents highlight that crypto security failures span multiple distinct layers — from embedded hardware firmware to on-chain contract logic — each demanding its own auditing discipline.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Five Major Dev Tools Launch in Late July 2026, Including LangChain 0.3.0 and Claude 4 Ultra

Several significant developer tools were released in the final week of July 2026, spanning AI frameworks, cloud SDKs, and container management. LangChain 0.3.0 and Docker-AI 1.2 both launched on July 26, offering improved agent capabilities and AI-powered container optimization respectively. Hugging Face released Transformers 5.0 on July 29 with new quantization support, while Anthropic unveiled Claude 4 Ultra on July 30, featuring stronger reasoning and extended context windows. Amazon rounded out the week on July 31 with AWS AI SDK 3.0, introducing enhanced model management and deployment options for developers working on its cloud platform.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Completes Event Sourcing and Circuit Breaker Engine with SHA-256 Integrity

A developer has announced the completion of a robust event sourcing and circuit breaker engine, described as production-ready with no compromises. The system features an append-only immutable EventStore that records all state changes as timestamped events secured with SHA-256 cryptographic hashing. A circuit breaker mechanism automatically shifts from CLOSED to OPEN state when a fault threshold is reached, triggering a graceful degradation fallback to maintain system resilience. The engine also supports time-travel state replay, allowing past system states to be reconstructed from stored events. The project includes a Python engine, unit tests, a web workbench, and has been registered in a master portal index.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Rust-backed Node.js WebSocket library beats uWebSockets by 46% using native echo path

A developer built ramjet-ws-js, a WebSocket server for Node.js powered by a Rust networking core, and benchmarked it against uWebSockets.js across 584 million verified round-trips. The library introduces an opt-in native execution path called nativeEcho, which keeps message frames inside the Rust reactor and bypasses the V8 JavaScript engine entirely for eligible messages. This approach lifted throughput from roughly 400,858 to 587,912 requests per second, a 46.7% gain within the same application. A notable finding was that at exactly 64 KiB message size, Ramjet was 8.42% slower than uWebSockets — a gap traced back to a 14-byte boundary in frame handling. Both servers were tested under identical conditions on an AWS C7i.large instance running Node.js 22.16.0, with results reported as medians across three measured runs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Teen developer builds integer-only AI in Rust that solves XOR at 99.7% accuracy

A 15-year-old developer from Germany named Mojo has built an integer-only AI system using Rust, developed entirely on his phone. The project, released as version 1.0.0, achieves 99.7% accuracy on the XOR problem, with 98.7% of runs producing perfect results. Mojo created a custom learning algorithm called Adaptive Bitshift Learning, or ABSL, which powers the system without relying on floating-point arithmetic. The source code has been published on GitHub, and the developer has set solving the MNIST handwritten digit dataset as his next milestone.

0 comments Read more at DEV Community
Two Crypto Attacks on July 31 Drain Over $46M via Firmware Flaw and Smart Contract Bug · ShortSingh