Software – Earlybirds Invest https://earlybirdsinvest.com Latest Crypto News Tue, 09 Sep 2025 03:23:27 +0000 en-US hourly 1 https://wordpress.org/?v=6.9.7 https://i0.wp.com/earlybirdsinvest.com/wp-content/uploads/2024/12/cropped-New-Project-2024-12-17T235703.455.png?fit=32%2C32&ssl=1 Software – Earlybirds Invest https://earlybirdsinvest.com 32 32 240146708 Google Pixel Watch 4 software updates: How many will it get? https://earlybirdsinvest.com/google-pixel-watch-4-software-updates-how-many-will-it-get/ https://earlybirdsinvest.com/google-pixel-watch-4-software-updates-how-many-will-it-get/#respond Tue, 09 Sep 2025 03:23:26 +0000 https://earlybirdsinvest.com/google-pixel-watch-4-software-updates-how-many-will-it-get/

How many software updates will the Google Pixel Watch 4 receive?

Best answer: The Google Pixel Watch 4 is confirmed to receive at least three years of software updates. This can include security enhancements, new features via Pixel Drops, OS upgrades, bug fixes, and more. The Watch 4 will officially be supported till at least October 2028.

The Pixel Watch 4 is smarter, slicker, and more powerful

It’s clear that Google wasn’t aiming for any major redesign of any of its new launches since the Pixel Watch 4 looks nearly identical to the Watch 3. The bezels around the display are slimmer, which makes the screen look larger, and the slightly domed display pushes even closer against the outer glass, making the UI feel better to interact with. Wear OS 6 looks vibrant and fresh, and the new Material 3 Expressive design makes interactions fun.

The power bump is welcomed on the Pixel Watch 4 thanks to the Snapdragon W5 Gen 2 SoC. You get on-device Gemini Nano capabilities like smart replies to messages and a Raise-to-Talk feature. The Watch 4 is also the first commercially available smartwatch to have satellite SOS connectivity. The faster charging and significant battery boost are also big reasons to upgrade to the Pixel Watch 4.


Pixel Watch on the side mounted charger

(Image credit: Nandika Ravi/Android Central)

The Google Pixel Watch 4 is available in 41mm and 45mm sizes, in Matte Black or Polished Silver. You can also get the 41mm variant in Champagne Gold and the 45mm in Satin Moonstone. Prices start at $349 or $449 for the Wi-Fi and LTE versions, respectively. The 45mm variant gets a $50 bump in price for the individual variants. If you’ve been holding off on upgrading your Pixel Watch 2, now would be a good time to trade it in for the Watch 4. It’s easily one of the best Android smartwatches to buy in 2025, and a great companion for your new Pixel 10.

]]> https://earlybirdsinvest.com/google-pixel-watch-4-software-updates-how-many-will-it-get/feed/ 0 57487 Software Engineer Arrested After Hackers Loot $44 Million From CoinDCX https://earlybirdsinvest.com/software-engineer-arrested-after-hackers-loot-44-million-from-coindcx/ https://earlybirdsinvest.com/software-engineer-arrested-after-hackers-loot-44-million-from-coindcx/#respond Sun, 03 Aug 2025 09:52:39 +0000 https://earlybirdsinvest.com/software-engineer-arrested-after-hackers-loot-44-million-from-coindcx/

Police in Bengaluru, India, have taken a CoinDCX



$10.8M

employee into custody following a crypto theft that hit the exchange in mid-July.

The suspect, software engineer Rahul Agarwal, is believed to have had his login details stolen, which allowed hackers to break into the platform and move $44 million worth of digital assets.

According to a July 31 report by The Times of India, the arrest came after CoinDCX’s parent company, Neblio Technologies, carried out an internal investigation.

What is a Liquidity Pool in Crypto? (Animated)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe – We publish new crypto explainer videos every week!

What is a Liquidity Pool in Crypto? (Animated)

What is a Liquidity Pool in Crypto? (Animated)
What is a Liquidity Pool in Crypto? (Animated)

They found that someone had used Agarwal’s work laptop to gain access to company systems. When questioned, Agarwal denied being involved in the theft.

However, he admitted to doing freelance work for several clients while still employed at CoinDCX. Authorities have seized his laptop as part of the investigation.

Neblio’s vice president, Hardeep Singh, confirmed that Agarwal was a full-time employee and had been given a company device meant only for work use. Police noted that the hackers got him to install harmful software, which gave them a way into the system without needing to steal anything directly.

CoinDCX CEO Sumit Gupta stated in a post on X that the company could not speak with reporters while the case was still active. He explained that this appeared to be a case of social engineering and that staff are often the main targets in such attacks.

On July 16, BigONE, a crypto exchange, confirmed it had been targeted in an external attack that resulted in $27 million being taken from one of its hot wallets. How did it happen? Read the full story.

Aaron S. Editor-In-Chief

Having completed a Master’s degree in Economics, Politics, and Cultures of the East Asia region, Aaron has written scientific papers analyzing the differences between Western and Collective forms of capitalism in the post-World War II era.
With close to a decade of experience in the FinTech industry, Aaron understands all of the biggest issues and struggles that crypto enthusiasts face. He’s a passionate analyst who is concerned with data-driven and fact-based content, as well as that which speaks to both Web3 natives and industry newcomers.
Aaron is the go-to person for everything and anything related to digital currencies. With a huge passion for blockchain & Web3 education, Aaron strives to transform the space as we know it, and make it more approachable to complete beginners.
Aaron has been quoted by multiple established outlets, and is a published author himself. Even during his free time, he enjoys researching the market trends, and looking for the next supernova.

]]> https://earlybirdsinvest.com/software-engineer-arrested-after-hackers-loot-44-million-from-coindcx/feed/ 0 51205 CoinDCX Software Engineer Arrested in Connection to $44 Million Hack (Report) https://earlybirdsinvest.com/coindcx-software-engineer-arrested-in-connection-to-44-million-hack-report/ https://earlybirdsinvest.com/coindcx-software-engineer-arrested-in-connection-to-44-million-hack-report/#respond Thu, 31 Jul 2025 21:00:38 +0000 https://earlybirdsinvest.com/coindcx-software-engineer-arrested-in-connection-to-44-million-hack-report/

The Indian exchange is the latest victim of bad actors exploiting vulnerabilities and taking control of internal systems, resulting in millions of dollars being lost.

The losses this year, overall, are already in the billions, and, regrettably, continue to increase at an alarming pace.

Details on What Happened

A local Indian news outlet, The Times of India, shared the story about Rahul Agarwal, a staff member of the CoinDCX exchange, whose login information was compromised. He has been taken into custody by Bengaluru authorities, reportedly linked to a ₹379-crore ($44 million) exploit of funds.

The alarm was raised following a complaint by Nebilo Technologies, the company that runs the exchange. Their Vice President for public policy, Hardeep Singh, stated the following:

“Rahul had a permanent role within the company, and he was provided with a laptop strictly for work. Our investigation began after we discovered that an unknown person had gained unauthorized access to our systems on July 19th, around 2:30 am, by transferring 1 USDT to an external wallet. Several hours later, around 9:30 a.m., the $44 million was siphoned off and distributed among six wallets.

During his questioning by the police, Agarwal maintained his innocent stance, claiming he knew nothing about the hack. However, he did admit to “moonlighting” (working a second job outside regular business hours) with three to four private parties, without thoroughly vetting them. 

It’s further noted that the accused received ₹15 lakh (~$17,000) in his personal bank account from an unknown source. The Bengaluru police also point out that Agarwal claimed to have received a phone call from a German phone number, stating he “had a few files to complete.” 

He believes one of those files was fitted with malware, which granted the attackers access to CoinDCX’s internal systems, and he remained adamant that he was unaware of what was happening until the company summoned him.

The exchange’s founder and CEO, Sumit Gupta, shared the bitter news of the attack on X, calling it a “sophisticated social engineering attack,” but without being able to disclose any further information on what had transpired.

Hefty Losses

Unfortunately, the attacks on crypto exchanges are on the rise, increasing in complexity, and the damage to their coffers is significant.

The most notable example is the hack on Bybit in February, which resulted in a $1.5 billion loss, linked to the North Korean Lazarus Group.

Overall, 2025 has seen enormous amounts of funds stolen, topping records from previous years only during the first half of the year.

These incidents serve as an example of how geopolitical tensions, cybersecurity vulnerabilities, and sophisticated adversaries continue to pose a significant risk to even well-established cryptocurrency platforms.

SPECIAL OFFER (Sponsored)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

]]> https://earlybirdsinvest.com/coindcx-software-engineer-arrested-in-connection-to-44-million-hack-report/feed/ 0 50755 Phone 3 will get Nothing’s best software update promise to date https://earlybirdsinvest.com/phone-3-will-get-nothings-best-software-update-promise-to-date/ https://earlybirdsinvest.com/phone-3-will-get-nothings-best-software-update-promise-to-date/#respond Wed, 18 Jun 2025 04:57:19 +0000 https://earlybirdsinvest.com/phone-3-will-get-nothings-best-software-update-promise-to-date/
Nothing Phone 3 leaked render

TL;DR

  • Nothing has confirmed that the Phone 3 will get a 5+7 update policy, which most likely means five years of Android OS updates and seven years of security patches.
  • This is the longest software support for any Nothing phone to date.
  • The device will be powered by the Snapdragon 8s Gen 4, which the company claims outperforms the Snapdragon 8 Gen 3 in several areas.

In a big leap forward for longevity, Nothing’s Co-Founder and Head of Marketing, Akis Evangelidis, has confirmed that the upcoming Nothing Phone 3 will ship with a “5+7” software update promise. While Evangelidis didn’t specify the breakdown, he most likely means the phone will get five years of Android version updates and seven years of security patches, a significant step up over the previous Nothing flagship.

For context, the Nothing Phone 2 offered three years of Android updates and four years of security patches, while the more recent Phone 3a Pro raised the bar to three years of Android updates and six years of security updates. With the Phone 3, Nothing is clearly aiming to provide the best software support in its portfolio to date.

Nothing Phone 3 software updates

Alongside the extended update commitment, the company also recently confirmed that the Nothing Phone 3 will be powered by the new Snapdragon 8s Gen 4 chipset. Evangelidis claimed on X that this processor outperforms Qualcomm’s previous flagship Snapdragon 8 Gen 3 in several areas, including GPU, NPU, connectivity, and ISP capabilities. He added that the default software support for the Gen 3 is typically four years of Android and four years of security updates, whereas the Phone 3 will surpass this with its 5 & 7 offering.

However, not everyone is convinced. Despite the performance claims, many in the tech community expected Nothing to adopt the Snapdragon 8 Elite, which powers leading flagship devices like the Samsung Galaxy S25 series. Fans argue that by choosing the 8s Gen 4, a slightly toned-down sibling in the Snapdragon family, the company is not fulfilling its promise of delivering a “true flagship” this time around. Still, with longer software updates, strong performance claims, and Nothing’s robust design capabilities, the Nothing Phone 3 could prove to be an impressive device.

]]> https://earlybirdsinvest.com/phone-3-will-get-nothings-best-software-update-promise-to-date/feed/ 0 42658 Hackers are exploiting critical flaw in vBulletin forum software https://earlybirdsinvest.com/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/ https://earlybirdsinvest.com/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/#respond Sat, 31 May 2025 07:56:22 +0000 https://earlybirdsinvest.com/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/

Box

Two critical vulnerabilities affecting the open-source forum software vBulletin have been discovered, with one confirmed to be actively exploited in the wild.

The flaws, tracked under CVE-2025-48827 and CVE-2025-48828, and rated critical (CVSS v3 score: 10.0 and 9.0 respectively), are an API method invocation and a remote code execution (RCE) via template engine abuse flaws.

They impact vBulletin versions 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 when the platform runs on PHP 8.1 or later.

The vulnerabilities were likely patched quietly last year with the release of Patch Level 1 for all versions of the 6.* release branch, and version 5.7.5 Patch Level 3, but many sites remained exposed due to not upgrading.

Public PoC and active exploitation

The two issues were discovered on May 23, 2025, by security researcher Egidio Romano (EgiX), who explained how to exploit it via a detailed technical post on his blog.

The researcher showed that the flaw lies in vBulletin’s misuse of PHP’s Reflection API, which, due to behavioral changes introduced in PHP 8.1, allows protected methods to be invoked without explicit accessibility adjustments.

The vulnerability chain lies in the ability to invoke protected methods via crafted URLs and the misuse of template conditionals inside vBulletin’s template engine.

By injecting crafted template code using the vulnerable ‘replaceAdTemplate’ method, attackers bypass “unsafe function” filters using tricks like PHP variable function calls.

This results in fully remote, unauthenticated code execution on the underlying server — effectively granting attackers shell access as the web server user (www-data on Linux, for example).

On May 26, security researcher Ryan Dewhurst reported seeing exploitation attempts on honeypot logs showing requests to the vulnerable ‘ajax/api/ad/replaceAdTemplate’ endpoint.

Logs showing exploitation attempts
Logs showing exploitation attempts
Source: blog.kevintel.com

Dewhurst traced one of the attackers to Poland, seeing attempts to deploy PHP backdoors to execute system commands.

The researcher noted that the attacks appear to be leveraging the exploit published earlier by Romano, though there have been Nuclei templates available for the flaw since May 24, 2025.

It is important to clarify that Dewhurst only observed exploitation attempts for CVE-2025-48827, but no evidence exists yet that attackers have successfully chained it to the full RCE, although this is highly likely.

vBulletin troubles

vBulletin is one of the most widely used commercial PHP/MySQL-based forum platforms, powering thousands of online communities globally.

Its modular design, including mobile APIs and AJAX interfaces, makes it a complex and flexible platform. However, it also exposes a broad attack surface.

In the past, hackers have leveraged severe flaws in the platform to breach popular forums and steal the sensitive data of large numbers of users.

Forum administrators are recommended to apply the security updates for their vBulletin installation or move to the latest release, version 6.1.1, which is not affected by the said flaws.

Red Report 2025

Based on an analysis of 14M malicious actions, discover the top 10 MITRE ATT&CK techniques behind 93% of attacks and how to defend against them.

]]> https://earlybirdsinvest.com/hackers-are-exploiting-critical-flaw-in-vbulletin-forum-software/feed/ 0 39303 Corsair’s new firmware update tool works from the browser, doesn’t require any additional software https://earlybirdsinvest.com/corsairs-new-firmware-update-tool-works-from-the-browser-doesnt-require-any-additional-software/ https://earlybirdsinvest.com/corsairs-new-firmware-update-tool-works-from-the-browser-doesnt-require-any-additional-software/#respond Thu, 10 Apr 2025 01:38:31 +0000 https://earlybirdsinvest.com/corsairs-new-firmware-update-tool-works-from-the-browser-doesnt-require-any-additional-software/

Editor’s take: Modern PC peripherals are jam-packed with features and customization options, so they usually require bloated software tools to express their full potential. Corsair, one of the worst offenders in the bulky software business, is now offering an alternative – at least when it comes to updating a device’s firmware.

Corsair recently introduced a web-based utility for installing newer firmware versions for PC peripherals. The Firmware Update Utility allows users to “effortlessly” update a device’s microcode using a browser, eliminating the need to install complex companion software.

Corsair Vice President Tobias Brinkmann said they developed the new tool in response to customer feedback. The web-based installer is lightweight and flexible – though accessing a device’s low-level hardware over the internet might sound counterintuitive to many.

Corsair already offers its iCUE software suite for customizing keyboards, mice, and other compatible gear, including RGB lighting effects. The last time I updated iCUE to tweak the lighting on my Corsair K70 Lux mechanical keyboard (Cherry MX Brown switches), the installer was a hefty 430MB – so it’s safe to assume the software has only gotten more bloated since.

Those looking to keep their device’s firmware up-to-date will likely never force themselves to suffer the iCUE ordeal. The new web-based tool lets customers access the latest firmware directly from Corsair servers. It even has an option to register via email and get notifications when a new firmware version is available.

Corsair describes the firmware update tool as convenient, accessible, and portable – so feel free to give it a shot if you’re comfortable letting a web browser mess with your hardware. The company shared a list of currently supported devices and promised to add new and existing peripherals over time. Eventually, the web tool might get additional features, too, meaning the bloat will remain on your browser instead of your computer.

The Firmware Update Utility currently works with select Chromium-based browsers – Chrome, Edge, and Opera – but doesn’t support Firefox or Safari yet. PC World notes that it can detect connected devices and check for available firmware updates. Still, installing firmware directly from a web app feels strange, no matter how convenient it sounds.

]]> https://earlybirdsinvest.com/corsairs-new-firmware-update-tool-works-from-the-browser-doesnt-require-any-additional-software/feed/ 0 29980 Raiffeisen Bank International Invests Millions in Austrian Crypto Tax Software https://earlybirdsinvest.com/raiffeisen-bank-international-invests-millions-in-austrian-crypto-tax-software/ https://earlybirdsinvest.com/raiffeisen-bank-international-invests-millions-in-austrian-crypto-tax-software/#respond Wed, 19 Mar 2025 02:51:20 +0000 https://earlybirdsinvest.com/raiffeisen-bank-international-invests-millions-in-austrian-crypto-tax-software/ Raiffeisen Bank International (RBI), through its venture capital arm Elevator Ventures, invested millions of euros in Blockpit, an Austrian startup specializing in crypto asset taxation.

Blockpit, headquartered in Linz and led by CEO Florian Wimmer, recently announced it had achieved profitability in 2024, making it an attractive target for investors seeking to capitalize on the growing demand for compliant crypto services.

The exact amount of RBI’s investment, as well as Blockpit’s valuation, remain undisclosed.

Simplifying Crypto Tax Compliance

The deal marks Elevator Ventures’ first foray into the crypto startup space.

Blockpit represents a “bridge between the traditional financial system and the crypto sector,” said Maximilian Schausberger, managing director at Elevator Ventures, in an interview with brutkasten, adding:

“If we succeed in enabling users and crypto traders to be compliant with tax issues and tax payments, then the topic will also become interesting for the masses. Financial institutions want to simplify the topic of taxes for their customers, among other things.”

With the investment, Elevator Ventures wants to support Blockpit in further expanding the services that have already been successfully rolled out in ten countries.

For Blockpit, the partnership bridges the crypto industry and traditional finance, an important aspect of its strategy.

Wimmer called the investment a “next step,” citing the EU’s Markets in Crypto Assets (MiCA) regulation as a catalyst for growing institutional investment.

Wimmer added that he sees RBI-backed Elevator Ventures, which manages €100 million (around $110 million) and has invested in 17 startups, as a valuable partner with experience in the TradiFi space.

Schausberger also believes that regulation is crucial for the crypto sector to reach the mass market.

However, he agreed that it’s still very difficult for crypto investors to file their taxes correctly when they have different assets across multiple wallets and perhaps even multiple countries.

That’s where Blockpit can provide a solution and make that step easier, according to Schausberger.

Blockpit’s Expansion Plans: Eastern Europe and Beyond

Blockpit will use the investment to expand into new European markets, specifically in Eastern Europe.

The company will also develop tools for proving the origin of funds for bank withdrawals and crypto exchange transfers.

Blockpit was founded in 2017 and currently employs 30 people. In 2021, the company raised $10 million in a Series A round led by MiddleGame Ventures.

In November 2023, following its 2020 merger with German competitor CryptoTax, Blockpit also acquired Swiss rival Accointing in a multi-million euro deal.

This latest acquisition, from Accointing.com’s former parent company Glassnode, a Swiss blockchain data specialist, solidified Blockpit’s dominance in the DACH region (Germany, Austria, Switzerland).

The acquisition was financed through Blockpit’s existing shareholder base.

The post Raiffeisen Bank International Invests Millions in Austrian Crypto Tax Software appeared first on Cryptonews.

]]> https://earlybirdsinvest.com/raiffeisen-bank-international-invests-millions-in-austrian-crypto-tax-software/feed/ 0 25947 Apple next big software move could make Android’s fragmentation even more visible https://earlybirdsinvest.com/apple-next-big-software-move-could-make-androids-fragmentation-even-more-visible/ https://earlybirdsinvest.com/apple-next-big-software-move-could-make-androids-fragmentation-even-more-visible/#respond Tue, 11 Mar 2025 05:38:43 +0000 https://earlybirdsinvest.com/apple-next-big-software-move-could-make-androids-fragmentation-even-more-visible/
Pixel 9 Pro vs iPhone 16 Pro 3

Dhruv Bhutani / Android Authority

TL;DR

  • Apple is reportedly planning a major software overhaul later this year.
  • The changes are believed to bring a more uniform software experience across Apple’s devices.
  • Android should rightfully be concerned because the changes could further solidify Apple’s dominance in user experience and ecosystem integration.

One of the biggest reasons Apple users remain loyal to the brand is its software experience. Over the years, Apple has maintained a consistent and reliable interface on all its devices — be it iOS on iPhones, iPadOS on tablets, watchOS on Apple Watches, or macOS on computers. Another key advantage Apple has is its seamless ecosystem functionality, something Android has long struggled with and is only now beginning to improve. Now, Apple appears to be getting ready to further challenge Android with a major software overhaul.

According to Bloomberg’s Mark Gurman, Apple is planning a fundamental redesign of its operating systems later this year, aiming to “transform the interface of the iPhone, iPad, and Mac for a new generation of users.”

Sources familiar with the project suggest this will be Apple’s most significant software overhaul in years, introducing updated icons, menus, apps, windows, and system controls. The company also aims to simplify navigation and enhance usability across devices. However, specific details on how the company will do this remain unclear.

Android should rightfully be concerned.

The revamp is expected to debut on iOS 19 and iPadOS 19 (codenamed “Luck”) and macOS 16 (codenamed “Cheer”). Bloomberg’s report indicates that these updates will go far beyond aesthetic changes, marking the most substantial iPhone software evolution since iOS 7 in 2013 and the biggest macOS update since Big Sur in 2020.

Apple is reportedly betting that this “breakthrough interface” will help boost demand for its devices, including iPhones, which saw an unexpected sales decline during the recent holiday season.

Should Android be worried?

A core focus of Apple’s overhaul is to create a more unified software experience across all of its platforms, making transitioning between devices smoother than ever. Android should rightfully be concerned because the changes could further solidify Apple’s dominance in user experience and ecosystem integration, areas where Android has traditionally lagged behind.

Apple’s focus on a seamless, more unified interface across iPhones, iPads, Macs, and other devices is something Android manufacturers have struggled to replicate due to the fragmented software experiences across various brands. If Apple successfully simplifies navigation, refines system controls, and enhances usability, it could make switching between Apple devices even more effortless, thereby attracting more users and tempting them to switch from Android.

That said, we’ll have to wait and see how effectively Apple executes these plans. If its recent AI integration is any indication, the revamped software experience may not pose as big a threat to Android as expected. Apple will reportedly share more details in June at its annual Worldwide Developers Conference (WWDC).

]]> https://earlybirdsinvest.com/apple-next-big-software-move-could-make-androids-fragmentation-even-more-visible/feed/ 0 24448 Lightning Labs CTO: Security Scare Is User Error, Not a Software Flaw https://earlybirdsinvest.com/lightning-labs-cto-security-scare-is-user-error-not-a-software-flaw/ https://earlybirdsinvest.com/lightning-labs-cto-security-scare-is-user-error-not-a-software-flaw/#respond Sun, 23 Feb 2025 04:49:10 +0000 https://earlybirdsinvest.com/lightning-labs-cto-security-scare-is-user-error-not-a-software-flaw/

A recent security issue in the Lightning Network has raised concerns, but Lightning Labs’ Chief Technology Officer (CTO) Olaoluwa Osuntokun has suggested the problem is not with the software itself.

Instead, according to Osuntokum’s post on X, he pointed to a compromised user device as the likely cause.

The Lightning Network, a layer-2 solution designed to make Bitcoin
BTC


$96,420.21

transactions faster and cheaper, currently holds about 5,145 BTC, valued at approximately $500 million.

What is Defi 2.0? (Explained with Animations)

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe – We publish new crypto explainer videos every week!

What is Defi 2.0? (Explained with Animations)

What is Defi 2.0? (Explained with Animations)
What is Defi 2.0? (Explained with Animations)

In a February 19 post on X, Satoshi Labs co-founder Pavol Rusnak issued a warning about vulnerabilities in older versions of Lightning Network Daemon (LND) and Lightning Terminal.

He urged users to update immediately, stating that attackers exploited flaws patched in newer releases. His message specifically mentioned LND versions older than 0.18.5 and Lightning Terminal versions before 0.14.1.

Osuntokun responded, stating that the issue did not appear to be a direct flaw in LND. He explained that the affected user’s machine had been compromised, which may have allowed attackers to gain access to their funds.

This warning comes after another security issue was flagged on GitHub on February 13. A report highlighted a weakness in the ECDSA (Elliptic Curve Digital Signature Algorithm) used for Bitcoin transactions. The concern was that a flaw in the elliptic library, a JavaScript package used in cryptography, could expose private keys if numbers used once or “nonces” were reused.

Meanwhile, Microsoft recently issued a warning about an updated XCSSET malware. What kind of damage could it cause? Read the full story.

Aaron S. Editor-In-Chief

Having completed a Master’s degree in Economics, Politics, and Cultures of the East Asia region, Aaron has written scientific papers analyzing the differences between Western and Collective forms of capitalism in the post-World War II era.
With close to a decade of experience in the FinTech industry, Aaron understands all of the biggest issues and struggles that crypto enthusiasts face. He’s a passionate analyst who is concerned with data-driven and fact-based content, as well as that which speaks to both Web3 natives and industry newcomers.
Aaron is the go-to person for everything and anything related to digital currencies. With a huge passion for blockchain & Web3 education, Aaron strives to transform the space as we know it, and make it more approachable to complete beginners.
Aaron has been quoted by multiple established outlets, and is a published author himself. Even during his free time, he enjoys researching the market trends, and looking for the next supernova.

]]> https://earlybirdsinvest.com/lightning-labs-cto-security-scare-is-user-error-not-a-software-flaw/feed/ 0 21292