Introducing OPSeC: a new industry-wide initiative we're convening in partnership with @_SEAL_Org & @asymmetric_re to improve cybersecurity resilience across blockchain ecosystems & onchain software. Join us to ensure security is at the heart of onchain technology development.

5 ways to improve your OPSEC in a couple hours this weekend: - buy @Yubico’s Yubikeys to replace insecure 2FA - sign up for @optery to have your personal info removed from data broker sites (I also have a discount code for anyone who wants it) - set up a new Gmail that isn’t tied to your name or shared with anyone. Use this email for your banking, CEX accounts, password manager etc - get a virtual mailbox set up to receive packages and mail somewhere other than at home - set up a 2nd phone number just to have on accounts where you can’t get rid of SMS 2FA (like your Apple ID) Any one of these things will measurably improve your personal security and they all can get knocked out in a couple hours You could bookmark this and do one task each weekend through November and be in great shape. Don’t be overwhelmed, just get started!

Ralf Taner (@MontBlancDeFi) of @NexusMutual notes that admin key compromise and OpSec incidents sit outside Protocol Cover today. His route to covering them: higher operational security standards that protocols attest to and underwriters monitor. Watch our panel with Andrew O'Neill of @SPGlobalRatings, Sébastien Derivaux (@SebVentures) on Steakhouse Financial (@SteakhouseFi), and Anastasiia Zbandut (@mathy_research) of Blockworks Advisory (@BlockworksAdv).

if you’re like me thinking why retail still trades so much memecoins or perps but not doing much holy DeFi here’s why: 1) DeFi in ‘26 is a minefield: you’ve protocols blowing up left & right: - some due to opsec (eg. drift, kelp) - economic risks (eg. neutrl) we're seeing 2-3 small protocols blow up ~every week now 2) assume you take the risks: but then also you’ve p low yields blue-chip assets at top protocols like aave, morpho hardly give you 5-6% apy at max eg. there's $250m at kamino just yielding 2.6% apy??! ofc, whales or foundation treasuries can’t off-ramp and have no choice but to do TVL deals & put in this DeFi protocols imagine this: if you’re a retail user who has $5k left will you put in a random protocol for 15% apr knowing your money can blow-up anytime or simply buy memecoins or even gamble in prediction markets in hope to 10x or go 0 casino math makes latter far more lucrative 3) old nyc uncs already knows this trend: hence they declared crypto ‘institutional’ - slapping the clarity act and made the narrative that crypto is just a backend for wall street to push their ‘governance tokens’ it’s good to see crypto’s institutional growth but trying to kill what makes crypto exciting is as sinful as ‘memecoin pump & dump’ both can def. co-exist 4) don’t get me wrong: i love DeFi and love nerdy financial engineering a ton but even as a pro DeFi user of ‘23 (when i’d have used 100+ protocols) putting a huge chunk of my portfolio isn’t good from a r/r perspective now ofc in ‘23 era, you’d farm airdrops, get a $1b+ tge and that’d make it worth it but now most vc-backed token launches are awful to make it farm-worthy and it's same for all my crypto friends i still get nerdsnipped by good DeFi mechanics & exotic assets or interesting sources of yields and still put couple of Ks in them (imo: if you still find an underrated DeFi protocol which can have a good narrative later - you should still deposit who knows it gives you unexpected airdrops like uni/jto) 5) crypto or even stocks is now fast finance: active investing is roaring back exponentially people wanna trade and rotate fast (either memes and stocks) they don’t have to worry much about blowups or their capital getting stuck anywhere (they've stablecoins or bank accounts to park money) as a builder: stop optimising for TVL, DeFi is not just TVL - you can optimise for just volumes or ‘fast finance’ and make tons of money and still perform finest financial engineering 6) tokens are beautiful: do any financial engineering around tokens (eg. memecoins paired with stocks and using creator fees mechanics) and you'll see the true power of crypto composability eg. a token on solana is instantly available at launch to 100s of terminals, wallets, apps etc i.e so you get instant distribution and leverage network effects tldr: long financial engineering, long fast finance!

Many are so caught-up in the fear surrounding so many security incidents in such a short time that they've completely missed the silver lining: DeFi is winning. Despite Railway, PHP, Node.js, and even Binance getting hacked in the span of a week, no major DeFi losses have occurred. No keystone protocol has become insolvent. No rolling contagion has upended our industry the way that exploits earlier this year rocked our world OpSec and Due Diligence processes have genuinely improved. Anti-contagion procedures have become second nature and standardized. Those who did not adapt are gone and those who remain know how to really ride the waves of this world. DeFi will win.

just spent $1 to get 100 reputation score on @primus_labs 1. jump over to 2. hook up your wallet and add their browser extension 3. head to the attestation tab and pick some tasks (cex account, github, x profile, etc.) 4. run the proof while logged in to mint your attestation 5. claim the xp to your profile txn runs on base (per txn is around $0.1) so just have a $1-ish of eth for gas I am at rank 746 by just having 100 score - as usual putting money and time where my mouth is - skip if it costs too much for you as I have no idea if this would be = airdrops in the future or not > some information on primus: backed by around $7M from vaneck and samsung next, with their tech already securing tens of millions in live proof of reserves. nobody wants to dox their entire financial footprint just to interact on-chain. financial privacy isn't about hiding things - it’s just basic opsec. you keep your sensitive balances private, while proving the underlying claim (solvency, cex activity, reputation) is 100% legit this is what they are building with zktls and fhe

A one man AI powered bank hacking campaign. Exposed by an open directory and a CLAUDE.md The stack? Open-source pentest agent ARTEX, DeepSeek V4.1-Flash via an API reseller (not even running locally), plus GLM-5.3 and Grok 4.6 in Claude Code. Open and closed models working side by side. The models weren’t the weak link. The opsec was. Blaming open weights completely misses the point. These same tools are on GitHub for defenders too. Good read