#web3security
web3security
603,173 views
1,129 Discussing
Hot
Latest
#Web3 ๐จ Security Alert: Possible Breach by the Lazarus Group Raises Concerns
Reports indicate that an attacker suspected of having ties to North Korea has been infiltrating major Web3 companies by impersonating a developer, renewing attention on supply-chain security risks and protection for digital wallets. โ ๏ธ
๐ Tips to protect your assets:
โ Donโt put all your money in one place
โ Use cold wallets to store long-term assets
โ Always verify wallet and software updates before installing them
โ Avoid signing transactions or clicking untrusted links
๐ Trading Outlook: HOLD โ No need to sell out of fear
This is a security warning, not a direct bearish signal for the entire crypto market. Keep your assets safe and avoid high-risk transactions until the bigger picture becomes clearer.
โPress here ๐๐๐ to tradeโ
$ACE $BANK $EVAA
#ACE #Web3Security
EVAAUSDT
Perp
Reports indicate that an attacker suspected of having ties to North Korea has been infiltrating major Web3 companies by impersonating a developer, renewing attention on supply-chain security risks and protection for digital wallets. โ ๏ธ
๐ Tips to protect your assets:
โ Donโt put all your money in one place
โ Use cold wallets to store long-term assets
โ Always verify wallet and software updates before installing them
โ Avoid signing transactions or clicking untrusted links
๐ Trading Outlook: HOLD โ No need to sell out of fear
This is a security warning, not a direct bearish signal for the entire crypto market. Keep your assets safe and avoid high-risk transactions until the bigger picture becomes clearer.
โPress here ๐๐๐ to tradeโ
$ACE $BANK $EVAA
#ACE #Web3Security
EVAAUSDT
Perp
๐จ Allbridge Solana Exploited for $1.7 Million: Timeline & What Happened to the LP!
Another expensive lesson from the DeFi world. The Allbridge protocol was forced to pause its core functionality after detecting a $1.7 million exploit in their Solana stablecoin pool.
How could this happen? (In just 1 Transaction!)
Borrowed Capital: The attacker borrowed $1.1 million in USDC from Kamino.
Price Manipulation: This large amount of funds was used to break the price balance in the Allbridge pool.
Flash Arbitration: The attacker withdraws the funds using the broken exchange rate, pockets a huge profit, and immediately repays the initial loan.
Ripple Effects on Other Chains
The losses briefly spread to other pools and blockchain networks (chains) due to routine automatic liquidity transfers flowing into the compromised pool.
Good News & Bad News?
Good Side: Only stablecoins were drained, so thereโs no direct exposure to SOL price declines.
Bad Side: Liquidity Providers (LPs) are now bearing direct market risk. They must wait for a real-balance audit to confirm whether the remaining reserves can cover their claims.
Always diversify your DeFi assets and stay alert to smart contract risks! ๐ก๏ธ
$USDC $BNB $SOL
#CryptoNews #SolanaUSTD #DeFi: #Allbridge #Web3Security
Another expensive lesson from the DeFi world. The Allbridge protocol was forced to pause its core functionality after detecting a $1.7 million exploit in their Solana stablecoin pool.
How could this happen? (In just 1 Transaction!)
Borrowed Capital: The attacker borrowed $1.1 million in USDC from Kamino.
Price Manipulation: This large amount of funds was used to break the price balance in the Allbridge pool.
Flash Arbitration: The attacker withdraws the funds using the broken exchange rate, pockets a huge profit, and immediately repays the initial loan.
Ripple Effects on Other Chains
The losses briefly spread to other pools and blockchain networks (chains) due to routine automatic liquidity transfers flowing into the compromised pool.
Good News & Bad News?
Good Side: Only stablecoins were drained, so thereโs no direct exposure to SOL price declines.
Bad Side: Liquidity Providers (LPs) are now bearing direct market risk. They must wait for a real-balance audit to confirm whether the remaining reserves can cover their claims.
Always diversify your DeFi assets and stay alert to smart contract risks! ๐ก๏ธ
$USDC $BNB $SOL
#CryptoNews #SolanaUSTD #DeFi: #Allbridge #Web3Security
The most devastating losses in crypto rarely come from bad trades, but from the silent exploits of security vulnerabilities we take for granted.
Too many of us spend sleepless nights watching charts, only to lose our entire stack in minutes to a compromised protocol or a smart contract vulnerability. The fear of waking up to a cleared balance sheet is a ghost that haunts every active investor in this space.
Over my years in the markets, I have watched cycles rotate, but the fundamental bottleneck remains the same. Earlier this year, panic selling hit the cybersecurity sector because investors feared artificial intelligence would make traditional defenses obsolete. That was a massive miscalculation. AI does not replace the need for security; it increases the attack surface, making robust defense protocols more valuable than ever.
Just as we rely on secure networks for $BTC transactions and audited code for $ETH smart contracts, the entire global economy is realizing that digital security is not optional. It is the core infrastructure. When the market overreacts to new tech disruptions, it usually creates a massive disconnect between price and value for the systems that actually keep our assets safe.
Are you prioritizing security protocols in your portfolio, or are you still chasing raw yields?
#Cybersecurity #Web3Security #CryptoInvesting
Too many of us spend sleepless nights watching charts, only to lose our entire stack in minutes to a compromised protocol or a smart contract vulnerability. The fear of waking up to a cleared balance sheet is a ghost that haunts every active investor in this space.
Over my years in the markets, I have watched cycles rotate, but the fundamental bottleneck remains the same. Earlier this year, panic selling hit the cybersecurity sector because investors feared artificial intelligence would make traditional defenses obsolete. That was a massive miscalculation. AI does not replace the need for security; it increases the attack surface, making robust defense protocols more valuable than ever.
Just as we rely on secure networks for $BTC transactions and audited code for $ETH smart contracts, the entire global economy is realizing that digital security is not optional. It is the core infrastructure. When the market overreacts to new tech disruptions, it usually creates a massive disconnect between price and value for the systems that actually keep our assets safe.
Are you prioritizing security protocols in your portfolio, or are you still chasing raw yields?
#Cybersecurity #Web3Security #CryptoInvesting
everyone thinks ai is going to instantly solve all our security issues, but actually, we are walking straight into the biggest exploit era in history.
most devs and traders are so busy chasing shiny new narratives that they completely ignore the basic infrastructure protecting their funds. ngl it is all fun and games until you wake up to a drained wallet because the protocol you aped into skimped on basic security.
look at what happened earlier this year when the market panicked. a lot of security assets sold off hard because investors assumed ai would automate defense overnight. that was a massive miscalculation, ser. as we bridge more real-world assets into $BTC and scale decentralized networks, the attack surface is growing faster than our defense systems.
the reality is that ai makes hackers way more efficient. we are already seeing this with automated bots sniffing out smart contract bugs in minutes. if you are holding bags of infrastructure plays like $FET or relying on web3 bridges, you need to realize that security is the only thing standing between you and getting rugged.
are you guys actively hedging against security risks, or just hoping for the best?
#cybersecurity #cryptoanalysis #web3security
most devs and traders are so busy chasing shiny new narratives that they completely ignore the basic infrastructure protecting their funds. ngl it is all fun and games until you wake up to a drained wallet because the protocol you aped into skimped on basic security.
look at what happened earlier this year when the market panicked. a lot of security assets sold off hard because investors assumed ai would automate defense overnight. that was a massive miscalculation, ser. as we bridge more real-world assets into $BTC and scale decentralized networks, the attack surface is growing faster than our defense systems.
the reality is that ai makes hackers way more efficient. we are already seeing this with automated bots sniffing out smart contract bugs in minutes. if you are holding bags of infrastructure plays like $FET or relying on web3 bridges, you need to realize that security is the only thing standing between you and getting rugged.
are you guys actively hedging against security risks, or just hoping for the best?
#cybersecurity #cryptoanalysis #web3security
๐ฆ MetaMask almost โhackedโ North Korea.
A fresh piece of news that makes Web3 communities freeze right now: the Consensys company inadvertently hired a North Korean developer under a fabricated name, โTyler Knapp.โ
Whatโs worst is that this agent, for almost a month, quietly made changes directly to the core codebase of the MetaMask wallet used by millions of people worldwide. Fortunately, the internal security team identified the threat in time and immediately blocked the hackerโs access to product releases.
๐Key takeaway for investors
This incident exposes a fundamental vulnerability in todayโs tech giants. You can spend billions protecting servers, but the human factor and centralized hiring remain the main loopholes for malicious actors.
For the crypto community, this is another harsh reminder:
The security of your assets should not depend on how well a corporationโs HR department verified the passport of the next developer on duty.
The future lies in zero-trust protocols, full decentralization of infrastructure, and an open cryptographic audit of every line of code in real time.
#MetaMask #Consensys #CyberSecurity #Web3Security
A fresh piece of news that makes Web3 communities freeze right now: the Consensys company inadvertently hired a North Korean developer under a fabricated name, โTyler Knapp.โ
Whatโs worst is that this agent, for almost a month, quietly made changes directly to the core codebase of the MetaMask wallet used by millions of people worldwide. Fortunately, the internal security team identified the threat in time and immediately blocked the hackerโs access to product releases.
๐Key takeaway for investors
This incident exposes a fundamental vulnerability in todayโs tech giants. You can spend billions protecting servers, but the human factor and centralized hiring remain the main loopholes for malicious actors.
For the crypto community, this is another harsh reminder:
The security of your assets should not depend on how well a corporationโs HR department verified the passport of the next developer on duty.
The future lies in zero-trust protocols, full decentralization of infrastructure, and an open cryptographic audit of every line of code in real time.
#MetaMask #Consensys #CyberSecurity #Web3Security
Transitioning from traditional finance to Web3 requires zero compromise on user security and control. By implementing advanced smart contract wallets alongside robust self-custody frameworks, @grvt_io grvt_io is making sure that traders retain full ownership of their digital assets at all times. This decentralized setup eliminates single points of failure while still delivering the high performance and ultra-low latency required for competitive on-chain trading. Exploring how their network integrates these safety mechanisms is essential for understanding the future of decentralized exchange infrastructure. ๐ก๏ธ๐ป
โ#grvt #SelfCustody #DeFi: #Web3Security
โ#grvt #SelfCustody #DeFi: #Web3Security
Q-Day Is No Longer Science Fictionโonce quantum computing crosses the critical point, all RSA/ECC encryption used today will instantly be "in the nude".
I just saw QIZ Security complete a $1.7 million seed round, led by Evolution Equity Partners with Singtel Innov8 participating.
The teamโfounded in 2025โtakes a very pragmatic approach: no intermediaries, pure API integration. It automatically scans an enterprise for all keys, certificates, and encryption protocols, flags weak algorithms and high-risk assets, and then helps you map out a migration path to post-quantum cryptography (PQC). Itโs basically an "anti-quantum readiness checkup + moving plan" for enterprises.
Why itโs worth watching:
- NIST finalized the first batch of PQC standards in 2024, and the US, EU, and Singapore are all pushing compliance timelines
- Singtel Innov8โs involvement suggests the APAC telecom/critical infrastructure channel is largely in place
- Cryptographic asset visibility is a mustโmany organizations canโt even tell how many RSA-2048 instances they have
The seed round amount isnโt huge, but the space is "compliance-driven" security thatโs bound to surge in the next 3โ5 years. The valuation ceiling depends on whether it can land flagship financial and government/enterprise customers.
#PQC #้ๅญๅฎๅ จ #Web3Security
I just saw QIZ Security complete a $1.7 million seed round, led by Evolution Equity Partners with Singtel Innov8 participating.
The teamโfounded in 2025โtakes a very pragmatic approach: no intermediaries, pure API integration. It automatically scans an enterprise for all keys, certificates, and encryption protocols, flags weak algorithms and high-risk assets, and then helps you map out a migration path to post-quantum cryptography (PQC). Itโs basically an "anti-quantum readiness checkup + moving plan" for enterprises.
Why itโs worth watching:
- NIST finalized the first batch of PQC standards in 2024, and the US, EU, and Singapore are all pushing compliance timelines
- Singtel Innov8โs involvement suggests the APAC telecom/critical infrastructure channel is largely in place
- Cryptographic asset visibility is a mustโmany organizations canโt even tell how many RSA-2048 instances they have
The seed round amount isnโt huge, but the space is "compliance-driven" security thatโs bound to surge in the next 3โ5 years. The valuation ceiling depends on whether it can land flagship financial and government/enterprise customers.
#PQC #้ๅญๅฎๅ จ #Web3Security
Even the official site may trigger malicious authorizations: the $3 million incident made me rethink GRVT SecureKey
On June 25, Polymarketโs official team confirmed that a third-party front-end vendor was compromised, and malicious scripts were injected into the real front end accessed by some users. PeckShieldโs on-chain investigation cited that about $3 million worth of PUSD was stolen, then bridged from Polygon to Ethereum and exchanged for roughly 1,893 ETH. Polymarket said it has removed the affected dependencies, contacted the relevant users, and provided full compensation.
The most counterintuitive part is this: even if the domain is correct, HTTPS is functioning properly, and you can log into your accountโnone of that alone proves that the contents youโre about to sign match your actual intent.
Thatโs exactly why I re-examined the @grvt_io SecureKey design. According to the GRVT help center, account permissions are split into two layers: email/password or Google/Microsoft OAuth (Web2 credentials) are used to view assets, positions, and participate in non-trading features; any action that could change the ownership of assets requires a Web3 SecureKey signature.
SecureKey is essentially an Ethereum public/private key pair. Users can choose an external wallet, or use an email OTPๆนๆก supported by Privy.
The purpose of this layered approach is that even if Web2 login credentials leak, an attacker still canโtโbased solely on an authenticated login stateโcomplete the asset changes that require SecureKey authorization.
If a device is controlled by malware, an external wallet extension is replaced, or a user approves tampered content on a real website, even a cryptographically valid signature may still convey the wrong intent. What self-custody reduces is the platformโs unilateral custody risk of moving assets, but it does not automatically eliminate phishing, dependency-component risks, smart-contract risks, or personal-operation risks.
After this incident, I added five verification checks to every one of my signatures:
1. Enter via bookmarks or official entry pointsโdonโt rely on search ads or DM links;
2. Determine whether the request is actually a login proof, a place order, a token authorization, a transfer, or a withdrawal;
3. Verify the assets, amounts, destination address, contract, and the scope of the authorization;
4. If the page and the wallet display donโt match, or if it suddenly requests unlimited authorization, cancel immediately;
5. For large-amount accounts, use dedicated signing devices whenever possibleโdonโt mix the everyday download environment with high-value keys.
#grvt #SelfCustody #WalletSecurity #Web3Security
On June 25, Polymarketโs official team confirmed that a third-party front-end vendor was compromised, and malicious scripts were injected into the real front end accessed by some users. PeckShieldโs on-chain investigation cited that about $3 million worth of PUSD was stolen, then bridged from Polygon to Ethereum and exchanged for roughly 1,893 ETH. Polymarket said it has removed the affected dependencies, contacted the relevant users, and provided full compensation.
The most counterintuitive part is this: even if the domain is correct, HTTPS is functioning properly, and you can log into your accountโnone of that alone proves that the contents youโre about to sign match your actual intent.
Thatโs exactly why I re-examined the @grvt_io SecureKey design. According to the GRVT help center, account permissions are split into two layers: email/password or Google/Microsoft OAuth (Web2 credentials) are used to view assets, positions, and participate in non-trading features; any action that could change the ownership of assets requires a Web3 SecureKey signature.
SecureKey is essentially an Ethereum public/private key pair. Users can choose an external wallet, or use an email OTPๆนๆก supported by Privy.
The purpose of this layered approach is that even if Web2 login credentials leak, an attacker still canโtโbased solely on an authenticated login stateโcomplete the asset changes that require SecureKey authorization.
If a device is controlled by malware, an external wallet extension is replaced, or a user approves tampered content on a real website, even a cryptographically valid signature may still convey the wrong intent. What self-custody reduces is the platformโs unilateral custody risk of moving assets, but it does not automatically eliminate phishing, dependency-component risks, smart-contract risks, or personal-operation risks.
After this incident, I added five verification checks to every one of my signatures:
1. Enter via bookmarks or official entry pointsโdonโt rely on search ads or DM links;
2. Determine whether the request is actually a login proof, a place order, a token authorization, a transfer, or a withdrawal;
3. Verify the assets, amounts, destination address, contract, and the scope of the authorization;
4. If the page and the wallet display donโt match, or if it suddenly requests unlimited authorization, cancel immediately;
5. For large-amount accounts, use dedicated signing devices whenever possibleโdonโt mix the everyday download environment with high-value keys.
#grvt #SelfCustody #WalletSecurity #Web3Security
QIZ Security completes a $1.7 million seed round, jointly backed by Evolution Equity Partners and Singtel Innov8.
This 2025 new up-and-comer is targeting a battlefield that almost everyone hasnโt prepared for yetโthe Q-Day era of quantum decryption.
Its strategy is clear:
ยท No-agent accessโpure API-driven automated mapping of enterprise end-to-end encrypted assets
ยท One map to see all keys, protocols, and exposure to weak password risks
ยท After scanning, delivers a quantum-safe cryptography (PQC) migration roadmap, directly aligned with global compliance requirements
Traditional cryptographic asset management is still stuck in the โmanual inventory + Excelโ stage, while NISTโs PQC standards have already been in place and regulatory windows are tightening. The first to visualize encrypted assets will gain control of the migration timeline.
A seed round backed by cybersecurity old-timers like Evolution signals that PQC governance is shifting from a โtechnical topicโ to a โboardroom agenda.โ
Quantum threats arenโt something for tomorrowโtheyโre something you need to start working on today.
#PQC #้ๅญๅฎๅ จ #Web3Security
This 2025 new up-and-comer is targeting a battlefield that almost everyone hasnโt prepared for yetโthe Q-Day era of quantum decryption.
Its strategy is clear:
ยท No-agent accessโpure API-driven automated mapping of enterprise end-to-end encrypted assets
ยท One map to see all keys, protocols, and exposure to weak password risks
ยท After scanning, delivers a quantum-safe cryptography (PQC) migration roadmap, directly aligned with global compliance requirements
Traditional cryptographic asset management is still stuck in the โmanual inventory + Excelโ stage, while NISTโs PQC standards have already been in place and regulatory windows are tightening. The first to visualize encrypted assets will gain control of the migration timeline.
A seed round backed by cybersecurity old-timers like Evolution signals that PQC governance is shifting from a โtechnical topicโ to a โboardroom agenda.โ
Quantum threats arenโt something for tomorrowโtheyโre something you need to start working on today.
#PQC #้ๅญๅฎๅ จ #Web3Security
Quantum Cracking Countdown: Whoโs Fixing the โPassword Moatโ for Enterprises First?
QIZ Security has completed a $1.7 million seed round, led by Evolution Equity Partners with participation from Singtel Innov8. Founded in 2025, the team is focused on an area that most CISOs still havenโt put on the agendaโbut regulators are already paying attention to: post-quantum cryptography (PQC) governance.
What it builds isnโt just another scanner, but a password posture management platform:
ยท Agentless access, using pure API to automatically map end-to-end encrypted assets
ยท Organizes keys, protocols, weak algorithms, and expiring certificates
ยท Produces a Q-Day migration roadmap, directly aligned with NIST and regional PQC compliance frameworks
The appeal is clear: traditional cryptographic systems are being priced in early for the โfuture quantum computing power.โ For long-term data holdersโsuch as in finance, telecommunications, and governmentโthe earlier you inventory it, the cheaper it is. Singtel Innov8โs presence on the list also hints at telecom-side deployment scenarios.
The seed round amount isnโt huge, but the timing window for this track is opening. This is a business of โcompliance-driven + replacing existing infrastructureโโnot one that relies on storytelling, but on deadlines.
#PQC #้ๅญๅฎๅ จ #Web3Security
QIZ Security has completed a $1.7 million seed round, led by Evolution Equity Partners with participation from Singtel Innov8. Founded in 2025, the team is focused on an area that most CISOs still havenโt put on the agendaโbut regulators are already paying attention to: post-quantum cryptography (PQC) governance.
What it builds isnโt just another scanner, but a password posture management platform:
ยท Agentless access, using pure API to automatically map end-to-end encrypted assets
ยท Organizes keys, protocols, weak algorithms, and expiring certificates
ยท Produces a Q-Day migration roadmap, directly aligned with NIST and regional PQC compliance frameworks
The appeal is clear: traditional cryptographic systems are being priced in early for the โfuture quantum computing power.โ For long-term data holdersโsuch as in finance, telecommunications, and governmentโthe earlier you inventory it, the cheaper it is. Singtel Innov8โs presence on the list also hints at telecom-side deployment scenarios.
The seed round amount isnโt huge, but the timing window for this track is opening. This is a business of โcompliance-driven + replacing existing infrastructureโโnot one that relies on storytelling, but on deadlines.
#PQC #้ๅญๅฎๅ จ #Web3Security
โฑ๏ธ THE 12-MONTH DEADLINE: Hong Kongโs SFC is officially forcing crypto platforms and brokers to dump weak OTP logins for advanced authentication. With phishing scams rising, regulators are making a hard push to secure the digital asset trading space and protect investor funds. Security is upgrading! ๐๐
#Crypto #HongKong #SFC #trading #Web3Security
$OPN
$NVDAB
$DOT
#Crypto #HongKong #SFC #trading #Web3Security
$OPN
$NVDAB
$DOT
Hackers tried to backdoor an Injective npm package to steal wallet keys โ I saw that on Cointelegraph this morning. Honestly, it's the kind of dev-side news that sticks with me longer than any price bounce.
Supply-chain stuff is sneaky. Nobody installs a dependency thinking they're handing over keys; you just install and move on. For $INJ and anything built on Injective, the uncomfortable part isn't the chart โ it's whether teams actually stop to check what they pulled in this week.
What I'm watching: whether Injective puts out a clear list of compromised package versions, and whether other Cosmos projects run the same checks before calling it done.
#Injective #INJ #Web3Security
Supply-chain stuff is sneaky. Nobody installs a dependency thinking they're handing over keys; you just install and move on. For $INJ and anything built on Injective, the uncomfortable part isn't the chart โ it's whether teams actually stop to check what they pulled in this week.
What I'm watching: whether Injective puts out a clear list of compromised package versions, and whether other Cosmos projects run the same checks before calling it done.
#Injective #INJ #Web3Security
Q-Day is no longer a sci-fi topicโitโs a migration blueprint on the CISOโs desk.
QIZ Security has just completed a $1.7 million seed round, co-led by Evolution Equity Partners and Singtel Innov8. Their entry point targets the most underestimated piece of the puzzleโCrypto Password Posture Management (CSPM for Crypto).
Their approach is pragmatic: no agent deployment required. Using APIs, it automatically maps all keys, certificates, encryption protocols, and weak-algorithm exposure across the enterprise, then consolidates the โencryption shadow assetsโ scattered across cloud, SaaS, and code repositories into a governable inventory. It also aligns with NIST to generate a quantum-ready migration roadmap.
Why this round is worth watching:
ยท The global PQC compliance window is shifting from โrecommendationโ to โmandate,โ with finance, telecom, and government verticals facing pressure first
ยท Singtel Innov8โs involvement indicates that telecom-grade encryption migration scenarios have already been validated
ยท Compared with traditional PKI vendors, QIZโs differentiator is visibility and governanceโnot certificate issuance itself. Itโs a classic โshovel sellerโ position
The anti-quantum narrative is often treated as a meme on-chain, but for enterprises itโs a certain infrastructure rewrite for the next five years. Locking in top-tier security funding at the seed stage suggests institutions are getting in line early.
#PostQuantum #Cybersecurity #Web3Security
QIZ Security has just completed a $1.7 million seed round, co-led by Evolution Equity Partners and Singtel Innov8. Their entry point targets the most underestimated piece of the puzzleโCrypto Password Posture Management (CSPM for Crypto).
Their approach is pragmatic: no agent deployment required. Using APIs, it automatically maps all keys, certificates, encryption protocols, and weak-algorithm exposure across the enterprise, then consolidates the โencryption shadow assetsโ scattered across cloud, SaaS, and code repositories into a governable inventory. It also aligns with NIST to generate a quantum-ready migration roadmap.
Why this round is worth watching:
ยท The global PQC compliance window is shifting from โrecommendationโ to โmandate,โ with finance, telecom, and government verticals facing pressure first
ยท Singtel Innov8โs involvement indicates that telecom-grade encryption migration scenarios have already been validated
ยท Compared with traditional PKI vendors, QIZโs differentiator is visibility and governanceโnot certificate issuance itself. Itโs a classic โshovel sellerโ position
The anti-quantum narrative is often treated as a meme on-chain, but for enterprises itโs a certain infrastructure rewrite for the next five years. Locking in top-tier security funding at the seed stage suggests institutions are getting in line early.
#PostQuantum #Cybersecurity #Web3Security
A new player has joined the security race in the post-quantum era. QIZ Security has just completed a $17 million seed round, led by Bessemer Venture Partners and Merlin Ventures, with participation from Evolution Equity, Singtel Innov8, and others.
What I care about more is the team backgroundโco-founders Itan Barmes previously led Deloitteโs global quantum network security readiness business, and Ben Volkow and Lenny Ridel are also seasoned enterprise security veterans. What theyโre doing isnโt flashy, but itโs hardcore: helping enterprises inventory their cryptographic assets, assessing the risk of being broken by quantum computing, and driving migration and remediation. The platform is already deployed in finance, telecom, healthcare, and critical infrastructure. Partners include Cisco, AWS, Google, CrowdStrike, Deloitte, EY, and IBM.
The takeaway for the crypto industry is quite straightforward. The elliptic curve algorithms that Bitcoin, Ethereum, and most on-chain signatures rely on are vulnerable in the presence of sufficiently powerful quantum computers. While โQ-dayโ hasnโt arrived yet, regulators are already pushing PQC migration timelines. Institutional wallets and custodians will inevitably face the same issue. When traditional finance and cloud providers start budgeting for post-quantum, crypto project teams should put this into their multi-year roadmapโnot wait until the critical point and then scramble.
A $17 million seed round is an unusually aggressive valuation signal for a PQC management platform, suggesting VCs believe the window of opportunity is opening.
#PostQuantum #Cybersecurity #Web3Security
What I care about more is the team backgroundโco-founders Itan Barmes previously led Deloitteโs global quantum network security readiness business, and Ben Volkow and Lenny Ridel are also seasoned enterprise security veterans. What theyโre doing isnโt flashy, but itโs hardcore: helping enterprises inventory their cryptographic assets, assessing the risk of being broken by quantum computing, and driving migration and remediation. The platform is already deployed in finance, telecom, healthcare, and critical infrastructure. Partners include Cisco, AWS, Google, CrowdStrike, Deloitte, EY, and IBM.
The takeaway for the crypto industry is quite straightforward. The elliptic curve algorithms that Bitcoin, Ethereum, and most on-chain signatures rely on are vulnerable in the presence of sufficiently powerful quantum computers. While โQ-dayโ hasnโt arrived yet, regulators are already pushing PQC migration timelines. Institutional wallets and custodians will inevitably face the same issue. When traditional finance and cloud providers start budgeting for post-quantum, crypto project teams should put this into their multi-year roadmapโnot wait until the critical point and then scramble.
A $17 million seed round is an unusually aggressive valuation signal for a PQC management platform, suggesting VCs believe the window of opportunity is opening.
#PostQuantum #Cybersecurity #Web3Security
The Hong Kong Securities and Futures Commission has acted, directly drawing red lines for internet brokerage firms and virtual asset trading platforms: customer logins and device binding are no longer allowed to be used with one-time passwords (OTPs).
The reason is straightforwardโthere have been too many cases where OTPs were phished or broken through via SIM card hijacking, making it impossible to effectively defend against impersonation scams. Regulators require the use of passkeys or stronger authentication methods such as device binding. Large brokerages have already moved to implement this, while other institutions must roll it out within 12 months.
In addition to prevention, platforms also must:
ยท Detect suspicious logins, trading, and withdrawals
ยท Notify users in real time of critical account actions
ยท Respond quickly to hacker incidents
ยท Regularly remind customers to guard against phishing
The message to the industry is very clear: compliance costs will rise to a new level, but it is also a necessary step for virtual asset platforms to move toward traditional finance-grade security standards. If usersโ assets are stolen, the platform wonโt be able to easily shift the blame anymore.
One more tipโno matter how strong the platformโs security is, your own private keys, seed phrases, and login devices are always the first line of defense.
#้ฆๆธฏ็็ฎก #ไบคๆๆๅฎๅ จ #Web3Security
The reason is straightforwardโthere have been too many cases where OTPs were phished or broken through via SIM card hijacking, making it impossible to effectively defend against impersonation scams. Regulators require the use of passkeys or stronger authentication methods such as device binding. Large brokerages have already moved to implement this, while other institutions must roll it out within 12 months.
In addition to prevention, platforms also must:
ยท Detect suspicious logins, trading, and withdrawals
ยท Notify users in real time of critical account actions
ยท Respond quickly to hacker incidents
ยท Regularly remind customers to guard against phishing
The message to the industry is very clear: compliance costs will rise to a new level, but it is also a necessary step for virtual asset platforms to move toward traditional finance-grade security standards. If usersโ assets are stolen, the platform wonโt be able to easily shift the blame anymore.
One more tipโno matter how strong the platformโs security is, your own private keys, seed phrases, and login devices are always the first line of defense.
#้ฆๆธฏ็็ฎก #ไบคๆๆๅฎๅ จ #Web3Security
Log in to explore more content