Security· ★★★· bearish·

CZ says no wallet is 100% safe after PHP and Railway security incidents

  • —CZ: "No tech is 100% secure", and doing nothing carries its own risks
  • —PHP2Shell flaws with a CVSS score of 9.2 affect roughly 70% of websites
  • —Railway said environment variables with API keys and wallet secrets may have leaked
  • —Fearless Wallet extension leaked private keys from February 2025, versions 3.0.1–3.0.5
Why it matters: Attacks are hitting cloud platforms and browser extensions rather than wallets themselves, exposing broad crypto infrastructure risk.
Source: 動區 BlockTempo
More on this
Security · Oct 3
Lubin says MetaMask wallets unaffected by incident, validator keys rotated
 DeFi · yesterday
0G Labs CEO says AI security incidents are limited for now, but warns more risks are coming
 DeFi · Oct 1
ether.fi says Ethereum node operator security incident did not affect weETH