This Week in Custody #29
This Week in Custody is a newsletter covering technical and narrative developments in digital asset custody written for wallet engineers, digital asset operators, and security engineers.
News
MailChimp has an insider attack targeting crypto companies. Last week, it was HubSpot. What cloud service is next? [Link]
Galaxy Digital tweaks BitGo purchase terms. [Link]
BNY Mellon to custody assets backing Circle's USDC stablecoin. [Link]
Coinbase requires KYC information on recipient addresses in some jurisdictions. [Link]
Bitcoin
FROST: The Future of Schnorr Multisignatures on Bitcoin. [Link]
MuSig2 now has a draft BIP. [Link]
Announcing Taro: A New Protocol for Multi-Asset Bitcoin and Lightning. [Link]
Mailing List announcement. [Link]
Official announcement from Kraken on Lightning Network support. [Link]
BIP-341 has an informational page. [Link]
Ethereum
Announcing Foundry v0.2.0. [Link]
Solving ParadigmCTF's JOP. [Link]
Introducing CFMMRouter.jl. [Link]
Analyzing Tornado Cash transactions. [Link]
Anatomy of an NFT Phishing Scam. [Link]
MetaMask’s Snaps tutorial. [Link]
Other Chains
Borsch Decoder - decode arbitrary data associated with Solana accounts. [Link]
Mezcal, A New Vision For Celo. [Link]
GitHub Action for Soteria (Solana). [Link]
Ronin network suffers from massive hack. [Link]
Crypto
Changes to Go’s crypto stdlib: “Are you using crypto/elliptic.Curve methods directly?” [Link]
Essential Cryptography for JavaScript Developers. [Link]
Efficient, Actively Secure MPC with a Dishonest Majority: a Survey. [Link]
Security
Potential Go Ethereum release on the horizon following a security fix for Go. [Link]
Building secure smart contracts guide. [Link]
FORCEDENTRY: Sandbox Escape. [Link]
How Monzo secures it’s banking platform. [Link]
Guide to smart contract incident war rooms. [Link]
Releases
[Flow] v0.25.7 [Link]
[Bitcoin] v23.0rc3: Bitcoin Core 23.0 release candidate 3 [Link]
[Cosmos Gaia] v7.0.0 [Link]
[Cosmos SDK] v0.45.2 [Link]
[Zcash] v4.6.0-2 [Link]
Thanks for reading!