Lido: Potential Vulnerability in ZKsync wstETH Bridge Endpoint Contract

Cloudflare: Before 2029, migrate to post-quantum encryption in both directions; Bitcoin vulnerability risk increases

Cloudflare announced that it will complete the migration to post-quantum cryptography by 2029. Currently, two-thirds of its traffic already uses this technology. With the rapid development of quantum computing, traditional encryption methods face threats, especially Bitcoin’s security. About 1.7 million Bitcoin public keys have been exposed and could face large-scale cracking risks, with a value as high as $680B.

Luxury crypto resort left overrun with weeds? Taizi Group is suspected of infiltrating the East Timor program

An investigation by The Guardian and OCCRP reveals that AB Digital Technology Resort in Timor-Leste is allegedly linked to the “Taizi Group,” a group subject to U.S. sanctions, and there is a huge gap between the resort’s promotional claims and the reality. The Taizi Group is known for online scams, and the geopolitical and governance issues it faces could make Timor-Leste a potential hotspot for transnational crime. The investigation shows that the plan will still be pushed forward, and the Timor-Leste government’s stance on the situation remains unclear.

Drift Protocol: begins developing a recovery plan, participates in the STRIDE security program

Drift Protocol is developing a recovery plan to stabilize the situation and protect affected users, and to participate in the STRIDE security program by the Solana Foundation. This attack was orchestrated by a North Korean intelligence organization named AppleJeus, involving social engineering and technical infiltration, resulting in an estimated loss of about $285 million in funds, highlighting that the DeFi ecosystem faces major security challenges.

Drift Protocol announced a hacker incident recovery plan and will participate in the Solana Foundation STRIDE security mechanisms

Gate News update: On April 8, Drift Protocol posted an update on the incident response process for the hack. Drift said that it is currently actively working with asymmetric research and OtterSec to develop a coordinated and aligned recovery plan. At this stage, the primary focus is to stabilize the situation and provide protocol-level assurances for all affected users and partners. In addition, Drift will participate in a security mechanism under the Solana Foundation.

DoorDash accounts became a vulnerability in an encryption wrench attack; three suspects have been charged

Three men were indicted for participating in a crypto wrench attack. The method used in the crime involved using stolen delivery-app account credentials to get close to the victims, and then threatening them with violence to force them to transfer their crypto assets. This type of attack is not limited to San Francisco and has become a global problem, threatening the safety of cryptocurrency holders. Prevention recommendations include not disclosing holdings information, using different receiving addresses, and enabling two-factor authentication.

Posting about crypto for the first time requires verification! X rolls out new anti-scam rules to prevent hackers from stealing accounts and promoting scam tokens

Community platform X is rolling out a mandatory verification mechanism for cryptocurrency content to address increasingly severe scam problems. The mechanism will lock an account when it is first mentioned for cryptocurrency, requiring users to complete identity verification. According to data, crypto scams in 2025 are expected to reach $17 billion, and social platforms have become an important source of scams. The new measure is intended to reduce the success rate of scams carried out by hackers using high-trust accounts; however, scam activity is still rapidly expanding, and prevention efforts face challenges.