Hey everyone, I wanted to share a project I've been engineering called VAULT. The goal was to build a messaging hub that leaves absolutely zero footprint—no servers storing data, no emails, no phone numbers, and local identity generation. How the stack works: Messaging: Uses the Double Ratchet protocol for end-to-end encryption. Message routing and voice/video calls are handled entirely peer-to-peer (DTLS-SRTP) via WebRTC. Data Storage: Ephemeral by design. Messages have a 24-hour auto-decay window and live only in local storage. Integrations: I also integrated a non-custodial wallet infrastructure supporting Solana and EVM chains directly into the chat interface, using zk-SNARKs for private transaction rails and ERC-4337 for gasless payments so users don't need native tokens to transact. Because it's fully serverless, signaling is the trickiest part. I'm currently looking for feedback on handling WebRTC STUN/TURN fallbacks more efficiently when both peers are behind symmetric NATs. I'll drop the project link/repo in the comments if anyone wants to check out the pre-release or look at the architecture! submitted by /u/mylifeasdisha [link] [Kommentare]
Someone got the private key that signs Ostium's price oracle reports. with that key they pushed fake, future dated price data through ostium's automation system (a contract called PriceUpKeep, triggered by gelato) that made their trades look profitable when they weren't. they ran about 20 open/close trade loops in a few hours and drained somewhere between $11.86M and $18M USDC, roughly 28% of the vault's $63M TVL. Blockaid caught it and flagged it publicly. Ostium paused trading right after, all positions and user funds are frozen as is while they investigate. Ostium had raised $27.8M from general catalyst, Jump crypto, Coinbase ventures, Wintermute and GSR, and processed over $50B in cumulative volume. multiple audits too. none of that stopped a compromised signer key from draining the vault, because the exploit lived in oracle infra, not the contract code. summer.fi also got hit for $6M in a similar oracle/keeper exploit last week. feels like this is becoming the go to attack vector now that contract code itself is actually well audited. anyone else think oracle key management needs the same scrutiny as multisig treasury keys at this point? submitted by /u/Bluejumprabbit [link] [Kommentare]
I built a free Bitcoin dashboard,,live price, halving countdown, fees, hashrate, Fear & Greed. No login, no ads, no noise. I got tired of checking five different sites (and closing five cookie banners) to see the state of Bitcoin, so I built one clean page that shows everything: btcdash.org Live price with moving averages, Mayer Multiple, rainbow chart, Pi Cycle Halving countdown, hashrate & difficulty, fee market, mempool Fear & Greed, dominance, Lightning network stats A TV mode if you want it running on a wall screen Optional stack tracker that stores everything in your browser only ,, nothing is uploaded anywhere It's completely free, no account, no ads. Data comes straight from public APIs (mempool.space, exchanges, CoinMetrics) into your browser. Honest disclosure: I made this. Happy to answer anything, and genuinely looking for suggestions on what to add. submitted by /u/No_Significance8319 [link] [Kommentare]
So it's been almost 2 years since the hack, there was a whole Singapore court scheme, "phased withdrawals," re-KYC drives, trading resumed like it's business as usual now... and I still can't withdraw a single rupee of my lacs sitting on the platform. Genuinely lost track of what stage we're even at. Last I checked: Hack happened July 2024, ~$230M gone INR withdrawals opened in phases, then a chunk stayed frozen "due to investigations" Singapore court approved some restructuring scheme in Oct 2025 Trading resumed, some crypto withdrawals unlocked in stages Recovery tokens were supposed to cover 75-80% of balances But my account just sits there. No withdrawal option that actually works, no clear status update, re-KYC done and still nothing moving. Anyone actually gotten their money out recently? Is there a real timeline anywhere or are we all just supposed to keep waiting indefinitely? Would love to know if this is a "me" issue or if everyone's still stuck like this. submitted by /u/_meetmshah [link] [Kommentare]
Why is this openly allowed. How is this even legal? They're making thousands rugging people on memecoins. submitted by /u/mannythomson [link] [Kommentare]
We are now 252 days into the Bear Market. I will cut to the chase and let you guys know how this conclusion was drawn. For this, I analyzed the past 7 bear markets in the last 10 years (including this one), and studied how long it takes for the current price of BTC to exceed the 200D moving average during bear markets (this is the signal for the end of the bear market). From each bear market’s market bottom, it historically takes 65 to 166 days for BTC to recover. Our last bottom was $58K back on June 30, 2026. Assuming BTC doesn't crash any lower than $58K in this bear cycle, at an average between 65 and 166 days, the end of the bear market would be November 5, 2026. At the longest recorded recovery time of 166 days, the end would be December 26, 2026. While past performance is not indicative of future performance, current data also shows that this bear market is not that bad relatively speaking, as compared to previous bears such as the most recent 2022 FTX crash where BTC declined 76.7% from its highs compared to our current bear market where BTC only declined 51.2% from its highs. If you guys would like to know more about how I defined bear markets and how BTC declined in each bear market you may read my full analysis on Coingecko at: https://www.coingecko.com/research/publications/how-long-do-bitcoin-bear-markets-last submitted by /u/khai0001 [link] [Kommentare]
