Crypto Tech News

A gray-market relay economy has emerged to provide mainland China with cheap, large-scale access to major AI models from OpenAI, Anthropic, and Google. This structured network of token resellers relies on fraudulent practices to supply discounted business-to-business API access.

Codeberg has updated its official platform documentation to explicitly ban all cryptocurrency projects. The revised policies formalize the organization's new stance, effectively prohibiting developers from hosting crypto-related repositories on the service.

The rapid expansion of AI infrastructure has driven massive investments in GPU clusters, but the lack of a mature secondary market leaves their used value highly uncertain. This valuation risk is highlighted by xAI's recent debt agreement, which could force lender Apollo Global Management to assume ownership of the hardware if the company defaults. Consequently, financial backers face the unpredictable prospect of inadvertently entering the GPU rental business.

Jack Dorsey has launched Buzz through Block, a new self-hostable workspace that integrates team chat, AI agents, workflows, and Git hosting. The platform leverages signed Nostr events to provide a decentralized infrastructure for streamlined developer collaboration.

Researchers used an AI auditor to uncover a critical soundness vulnerability in the OpenVM zero-knowledge virtual machine that allowed malicious provers to forge pairing equalities. The flaw stemmed from missing subfield checking and has been patched in the OpenVM 1.6.0 release under CVE-2026-46669. This discovery marks the second installment in an ongoing series detailing AI-driven bug hunting in open-source cryptography.

This retrospective revisits iconic music piracy platforms like Napster and Limewire to explore the unique culture and thrill of early file-sharing. The piece argues that modern streaming services fail to capture the same sense of discovery and community that made these early networks so deeply engaging.

Scammers are increasingly exploiting AI voice cloning technology to execute convincing frauds that bypass traditional security defenses in as little as three seconds. By simulating the distressed voices of loved ones, criminals can easily manipulate victims into acting impulsively, highlighting a severe and growing threat to consumer protection.

A complete 15 TB torrent of the infamous 2B2T Minecraft anarchy server has been released, providing an unprecedented look into one of the internet's largest virtual world experiments. The lawless server, where players traveled vast distances to escape the heavily griefed spawn, recently adopted basic content moderation rules after Microsoft threatened to blacklist it, making this massive data dump a fascinating digital archive of early unregulated online communities.

An AI audit pipeline successfully identified seven vulnerabilities in Cloudflare's experimental CIRCL cryptography library. The discovered bugs ranged from critical precision loss to complete access-control failures, all of which have now been patched upstream. This marks the first installment in an ongoing series highlighting AI agents finding and improving security in open-source cryptography.

A prolific new marketing scam originating in Nigeria is targeting authors with highly personalized, AI-generated email solicitations. Posing as legitimate public relations experts or book club reviewers, the scammers use these deceptive messages to trick creators into paying for fake promotional services.

A silent bug introduced in Linux 6.9 caused LUKS disk encryption to fail to wipe encryption keys from memory during system suspend, leaving data vulnerable on locked devices for over two years. The issue stemmed from an unexpected interaction caused by a kernel refactoring, which has now been resolved with a one-line patch. Developers have also implemented automated tests and warning logs to prevent similar silent failures in the future.

Zero-Knowledge Proof libraries have been open-sourced to enhance privacy in digital age verification systems. This technology release builds upon a partnership with Sparkasse to support age assurance compliance across the European Union. Making these cryptographic tools publicly available will empower developers to build more secure age verification solutions.

Cloudflare has opened the waitlist for its Monetization Gateway, allowing developers to charge for web pages, datasets, APIs, and MCP tools hosted on its network. Transactions will be settled in stablecoins via the open x402 protocol, eliminating the need for users to build custom payment infrastructure.

Prediction market platform Polymarket is reportedly saturating social media feeds with deceptive promotional videos produced by paid content creators. This aggressive marketing strategy has sparked concerns regarding the manipulation of online discourse and the exploitation of influencer networks to artificially inflate the platform's visibility.

Software engineer Stephen Diehl warns that the cryptocurrency industry is on a trajectory to reach a bleak and unfavorable state by 2026. In his latest personal blog post, he draws on his technical background to critique the fundamental flaws and negative future outcomes of digital assets.

The Arch User Repository recently endured a sustained cyberattack that disrupted services across the Linux ecosystem. This incident, dubbed the AURpocalypse, has prompted maintainers to investigate the attacker. The community is now actively working to restore full platform stability and prevent future disruptions.

A security researcher discovered approximately 10,000 unique GitHub repositories distributing Trojan malware by identifying a shared underlying pattern among them. Despite having different names and contributors, an automated script was used to successfully flag the malicious repositories across the platform.

Hackers posed as LinkedIn recruiters to infiltrate a cryptocurrency repository through a sophisticated social engineering campaign. During the fake interview process, the attackers delivered a remote code execution payload concealed within a standard test file. This incident underscores the ongoing threat of targeted malware disguised as routine developer tasks.

Arch Linux believes it has contained a significant malware incident that compromised more than 1,500 packages within its user-contributed AUR repository. The attack initially affected over 400 packages earlier in the day before the scope of the breach expanded.

A malicious actor impersonated a trusted maintainer to adopt and compromise over 408 AUR packages. The attacker injected infostealers and rootkits into the modified software in a widespread supply chain attack. The breach was recently reported, prompting the community to begin mitigating the compromise.

FablePool is a new platform that enables communities to crowdfund AI-built software projects by pooling funds behind specific prompts. Users can transparently track the development process as AI agents build the software in public, displaying visible milestones, spending logs, and final outputs.

Microsoft has shut down dozens of GitHub repositories hosting open-source Azure and AI coding tools following a targeted security breach. The hack was specifically designed to steal passwords and credentials belonging to AI developers.

The Cypherpunk Library is a curated personal collection of public-domain literature that is completely free to read and download. This project provides an accessible digital archive for users interested in tech culture and open knowledge to explore and permanently keep these texts.

An article detailing a 19-year analysis of GPS cryptographic signals has sparked discussions regarding the aging US navigation infrastructure compared to newer global systems. Readers highlighted the delayed modernization of GPS signals, the surprising operational longevity of older satellites, and the constellation's lesser-known role in the US nuclear monitoring network.

Let's Encrypt plans to implement Merkle Tree Certificates to add post-quantum authentication to the web without sacrificing the speed and reliability of TLS. This proactive shift addresses the growing urgency of securing web traffic against future quantum computers capable of forging digital signatures in real time.

Global money laundering has reached an unprecedented scale, operating as an illicit enterprise whose estimated value would make it the third-largest industry in the world behind commercial property. This staggering financial footprint underscores the critical need for advanced technological and regulatory solutions to combat sophisticated economic crimes and track illicit digital flows.

A recently published PDF offers an accessible guide to lattice-based cryptography, a key mathematical framework proposed for securing data against future quantum computing threats. The document breaks down the complex fundamentals of lattice structures, providing tech professionals with a clear and approachable foundation in next-generation post-quantum encryption.

A Google employee has been charged with insider trading after allegedly using confidential information to place a $1 million bet on the prediction market Polymarket regarding a specific search term. The complaint from the Southern District of New York marks the second recent insider trading case involving the platform in just over a month.

A recent post criticizing Stripe for failing to prevent friendly fraud has sparked significant discussion on Hacker News. The author argues that despite possessing a massive amount of user data and sophisticated signals, the payment processor is not doing enough to stop these fraudulent disputes.

Spain blocked prediction markets Polymarket and Kalshi for operating without a required gambling license. This regulatory action highlights growing concerns regarding the real-world risks of such platforms, which critics argue incentivize dangerous behaviors ranging from insider leaks to the tampering of critical infrastructure sensors.