Security

Unlike Aptos, Sui, and Linera, which are all L1 public chains based on the Move language, the new generation Movement is focusing on L2. It has launched the first Ethereum L2 based on the Move language, aiming to leverage the underlying execution performance and security advantages of Move and further integrate the ecological advantages of EVM. This allows developers to launch Solidity projects on M2 without writing Move code.

Fully Homomorphic Encryption (FHE) represents the cutting edge of privacy protection technology. It offers exceptional privacy safeguards and can be utilized in Web3 for securing transaction privacy, protecting AI data, and enhancing privacy in co-processing units.

In this in-depth research, we will examine recent high-profile events, get to the bottom of this sneaky attack, and provide you with the knowledge you need to protect your digital assets.

Recently, several Web3 participants have lost funds from their accounts due to downloading a fake Chrome extension that reads browser cookies. The SlowMist team has conducted a detailed analysis of this scam tactic.

The essence of this attack lies in the creation of the market (soToken), where the attacker performed the first collateral minting operation with a small amount of the underlying token, resulting in a very small "totalSupply" value for the soToken.

A crypto card is a debit- or credit-style payment card linked to a cryptocurrency wallet or exchange balance. At checkout, the issuer typically converts supported crypto into fiat and settles the purchase over Visa or Mastercard. Products differ mainly by fees, rewards, KYC, regional availability, and whether they offer virtual and physical cards.

Tornado Cash is a non-custodial privacy mixer on Ethereum that pools fixed-size deposits and lets users withdraw to a new address with a zero-knowledge proof. OFAC sanctioned it in August 2022 and delisted it in March 2025, after a federal appeals court ruled that its immutable smart contracts were not sanctionable property. The code kept running; criminal cases against its developers continue.

The key differentiator between Hyperlane, LayerZero, and Wormhole is their security verification approach. Hyperlane enables per-message customizable security through its modular Interchain Security Module (ISM), LayerZero uses a dual-path verification system with Oracle and Relayer, and Wormhole relies on the Guardian network to multi-sign Verified Action Approval (VAA) messages. Hyperlane (HYPER) articulates the complete architecture of its interoperability layer across four dimensions: Mailbox, ISM, Warp Route, and HYPER economic security.