🏆 And the award for Biggest Breach of Q3 goes to...
🥇 Bitget, $387.5M
🥈 Liquid Network, $319M
🥉 Tectonic, $120M
🏅 Coldcard, $112.7M
According to CertiK, Q3 saw $1.26 billion in crypto security losses, with the Bitget incident alone accounting for around 31%.
No speech.
No trophy.
Just billions lost.
But the detail worth remembering is how Bitget was breached.
Attackers exploited a vulnerability in a third party security product, obtained high level internal credentials, and used them to forge withdrawal commands. Bitget said its private keys and cold wallets were not compromised.
The cryptography wasn't broken. The credential was trusted.
And that is the problem with credentials.
They can be stolen, copied, and used by someone else.
That is a strong reminder that credentials can be stolen.
A fingerprint on sAxess PRO can't be forwarded.
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
🥇 Bitget, $387.5M
🥈 Liquid Network, $319M
🥉 Tectonic, $120M
🏅 Coldcard, $112.7M
According to CertiK, Q3 saw $1.26 billion in crypto security losses, with the Bitget incident alone accounting for around 31%.
No speech.
No trophy.
Just billions lost.
But the detail worth remembering is how Bitget was breached.
Attackers exploited a vulnerability in a third party security product, obtained high level internal credentials, and used them to forge withdrawal commands. Bitget said its private keys and cold wallets were not compromised.
The cryptography wasn't broken. The credential was trusted.
And that is the problem with credentials.
They can be stolen, copied, and used by someone else.
That is a strong reminder that credentials can be stolen.
A fingerprint on sAxess PRO can't be forwarded.
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👍2
🔐 Your multisig is secure. What about everything plugged into it?
Source: https://crypto.news/flashloopadapter-exploit-drains-305k-from-aave-linked-safe-wallets/
Two Safe wallets lost around $305,000 on October 1. Their signers weren't tricked, and the core protocol wasn't broken.
The weak point was FlashLoopAdapter, a third party module with permission to act on their behalf. Its access check could be fooled by a fake Safe.
Worth checking tonight:
🔹 Every module enabled on your treasury
🔹 What permissions each module has
🔹 What it trusts when deciding who's calling
If the answer is “a contract says so,” you've found a door.
sAxess PRO adds a human authorization layer: critical actions require an authorised person's fingerprint, verified on a secure element.
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Source: https://crypto.news/flashloopadapter-exploit-drains-305k-from-aave-linked-safe-wallets/
Two Safe wallets lost around $305,000 on October 1. Their signers weren't tricked, and the core protocol wasn't broken.
The weak point was FlashLoopAdapter, a third party module with permission to act on their behalf. Its access check could be fooled by a fake Safe.
Worth checking tonight:
🔹 Every module enabled on your treasury
🔹 What permissions each module has
🔹 What it trusts when deciding who's calling
If the answer is “a contract says so,” you've found a door.
sAxess PRO adds a human authorization layer: critical actions require an authorised person's fingerprint, verified on a secure element.
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏1
🌐 Wall Street is moving on-chain. Ownership has to move with it.
Source: theblock.co/news/defi/2026-10-09-tokenization-supercycle-base-jesse-pollak-418144
At Token2049 Singapore, Base creator Jesse Pollak pointed to tokenized equities and non-dollar stablecoins as the next major drivers of tokenization.
📈 The numbers already show momentum:
🔹 $70M to $100M in daily tokenized stock trading volume
🔹 50 stocks listed on Base, with 250 expected by month end
🔹 32 stablecoins across 21 currencies
But putting assets on-chain is only half the story.
The real challenge is securing ownership, access, and custody as digital assets scale.
That's where Serenity comes in. sGold connects physical gold with digital financial infrastructure, while sAxess puts biometric security at the heart of digital asset access.
Tokenize the asset. Secure the ownership. Build for what comes next.
🌐 Explore Serenity: s.technology
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Source: theblock.co/news/defi/2026-10-09-tokenization-supercycle-base-jesse-pollak-418144
At Token2049 Singapore, Base creator Jesse Pollak pointed to tokenized equities and non-dollar stablecoins as the next major drivers of tokenization.
📈 The numbers already show momentum:
🔹 $70M to $100M in daily tokenized stock trading volume
🔹 50 stocks listed on Base, with 250 expected by month end
🔹 32 stablecoins across 21 currencies
But putting assets on-chain is only half the story.
The real challenge is securing ownership, access, and custody as digital assets scale.
That's where Serenity comes in. sGold connects physical gold with digital financial infrastructure, while sAxess puts biometric security at the heart of digital asset access.
Tokenize the asset. Secure the ownership. Build for what comes next.
🌐 Explore Serenity: s.technology
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏6
🔐 Cold storage keeps your keys offline. But is that enough?
Supply-chain attacks. Hardware tampering. Seed phrase exposure.
Offline doesn't automatically mean secure.
Discover the hidden risks of traditional hardware wallets and how sAxess combines cold storage with biometric authentication for a different approach to digital asset security.
📖 Read the full article:
https://s.technology/blog/hardware-wallet-security-risks/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Supply-chain attacks. Hardware tampering. Seed phrase exposure.
Offline doesn't automatically mean secure.
Discover the hidden risks of traditional hardware wallets and how sAxess combines cold storage with biometric authentication for a different approach to digital asset security.
📖 Read the full article:
https://s.technology/blog/hardware-wallet-security-risks/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏2
🔐 Sealed box. Authorized seller. Compromised device.
“Only buy from an authorized reseller.”
They did.
Source: coindesk.com/tech/2026/10/12/ledger-claims-cryptobilis-cases-are-limited-as-up-to-usd93m-is-traced-usd10m-frozen
CryptoBilis was listed as an authorized Ledger reseller. Ledger has confirmed an unauthorized hardware implant in at least one device sold through the reseller.
Investigators traced up to $93.2 million in stolen crypto across 315 wallets. Tether froze $10 million, while roughly $81 million remained visible on-chain as of October 11.
The implant reportedly captured the recovery phrase displayed during setup and transmitted it to attackers.
It didn't need to break the cryptography. It just needed to read the words.
That's the problem with a security model built around a phrase that must be displayed, written down, and kept secret forever.
sAxess takes a different approach. No recovery phrase to write down during setup. The key stays on the card's secure element, with access authorized by your fingerprint.
Your security shouldn't depend on keeping a secret that can be copied. 👇
s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
“Only buy from an authorized reseller.”
They did.
Source: coindesk.com/tech/2026/10/12/ledger-claims-cryptobilis-cases-are-limited-as-up-to-usd93m-is-traced-usd10m-frozen
CryptoBilis was listed as an authorized Ledger reseller. Ledger has confirmed an unauthorized hardware implant in at least one device sold through the reseller.
Investigators traced up to $93.2 million in stolen crypto across 315 wallets. Tether froze $10 million, while roughly $81 million remained visible on-chain as of October 11.
The implant reportedly captured the recovery phrase displayed during setup and transmitted it to attackers.
It didn't need to break the cryptography. It just needed to read the words.
That's the problem with a security model built around a phrase that must be displayed, written down, and kept secret forever.
sAxess takes a different approach. No recovery phrase to write down during setup. The key stays on the card's secure element, with access authorized by your fingerprint.
Your security shouldn't depend on keeping a secret that can be copied. 👇
s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏3
📸 A picture is worth a thousand words. Someone just read them.
Screenshot app Gyazo was hit by a databreach on September 11, The Hacker News reports.
The attacker never needed the images. Gyazo had already turned them into searchable text.
What got out with 490 million image records:
🔹 Text extracted from images
🔹 Location data and upload IPs
🔹 Which images were private
Plus 23.62 million user records, including login session IDs and integration tokens.
Teams screenshot internal tools every day, and every login typed into a terminal becomes text on a screen.
sAxess PRO makes that login passwordless: one fingerprint, verified offline on the card.
No username or password appears on the display.
With air gapped biometric verification, sensitive credentials do not need to reach the screen in the first place.
Not for one employee. For the whole company.
That is the kind of access control sAxess PRO is built to provide. 👇
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Screenshot app Gyazo was hit by a databreach on September 11, The Hacker News reports.
The attacker never needed the images. Gyazo had already turned them into searchable text.
What got out with 490 million image records:
🔹 Text extracted from images
🔹 Location data and upload IPs
🔹 Which images were private
Plus 23.62 million user records, including login session IDs and integration tokens.
Teams screenshot internal tools every day, and every login typed into a terminal becomes text on a screen.
sAxess PRO makes that login passwordless: one fingerprint, verified offline on the card.
No username or password appears on the display.
With air gapped biometric verification, sensitive credentials do not need to reach the screen in the first place.
Not for one employee. For the whole company.
That is the kind of access control sAxess PRO is built to provide. 👇
https://s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
🔴 A chip nobody ordered. A device people trusted.
Ledger has confirmed an unauthorized hardware implant in a device sold through CryptoBilis. The full investigation is still ongoing.
Meanwhile, Trezor hardware wallets are being offered for free through CoinGecko Candy.
Why now?
But here's the question that matters:
How do you know the device you're trusting is really secure?
🎙 Serenity CPO Boris Mofrad on what you should ask before trusting any device with your seed phrase.
Watch, then verify for yourself. 👇
https://www.youtube.com/shorts/elYH7Kar3os
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Ledger has confirmed an unauthorized hardware implant in a device sold through CryptoBilis. The full investigation is still ongoing.
Meanwhile, Trezor hardware wallets are being offered for free through CoinGecko Candy.
Why now?
But here's the question that matters:
How do you know the device you're trusting is really secure?
🎙 Serenity CPO Boris Mofrad on what you should ask before trusting any device with your seed phrase.
Watch, then verify for yourself. 👇
https://www.youtube.com/shorts/elYH7Kar3os
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
YouTube
Is Ledger Safe? Spy Chips Found Inside Sold Devices #Shorts
Is Ledger safe? On October 9, Ledger confirmed an unauthorized har...
❤9👍1
🏦 Imagine a bank that checks your name on the last line of your own letter.
Source: mezo.org/blog/incident-report-october-5-2026/
That's essentially what happened to Mezo on October 5.
Its contract relied on a trusted relayer to append the sender's address to a message. But when that message passed through an external library, the verified address was lost.
The contract then trusted whatever address remained at the end.
Thirty-seven positions. Approximately 5.52 BTC gone.
The attacker didn't need to forge a signature. The contract simply trusted the wrong identity.
sAxess PRO takes a different approach. Critical actions require an authorised person's fingerprint, verified on a secure element, connecting authorization to the human behind the action.
Don't just trust what the system says. Verify who is acting. 👇
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Source: mezo.org/blog/incident-report-october-5-2026/
That's essentially what happened to Mezo on October 5.
Its contract relied on a trusted relayer to append the sender's address to a message. But when that message passed through an external library, the verified address was lost.
The contract then trusted whatever address remained at the end.
Thirty-seven positions. Approximately 5.52 BTC gone.
The attacker didn't need to forge a signature. The contract simply trusted the wrong identity.
sAxess PRO takes a different approach. Critical actions require an authorised person's fingerprint, verified on a secure element, connecting authorization to the human behind the action.
Don't just trust what the system says. Verify who is acting. 👇
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏1
🤖 Your AI agent follows instructions. That's exactly the risk.
Before your AI agent touches anything that matters, ask three questions:
• What can it access? Only the tools it needs. Nothing “just in case.”
• What can it do alone? Read and draft, yes. Payments, deletions, and permission changes, not without approval.
• Who signs off? A named, verified person, every time it counts.
These align with OWASP's three root causes of Excessive Agency in AI applications: too much functionality, too many permissions, and too much autonomy.
The final question is where sAxess PRO comes in, linking critical approvals to an authorised person's fingerprint, verified on a secure element.
Let AI do the work. Keep humans in control of the decisions.
📖 OWASP guidance:
genai.owasp.org/llmrisk/llm062025-excessive-agency/
🔐 sAxess PRO:
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Before your AI agent touches anything that matters, ask three questions:
• What can it access? Only the tools it needs. Nothing “just in case.”
• What can it do alone? Read and draft, yes. Payments, deletions, and permission changes, not without approval.
• Who signs off? A named, verified person, every time it counts.
These align with OWASP's three root causes of Excessive Agency in AI applications: too much functionality, too many permissions, and too much autonomy.
The final question is where sAxess PRO comes in, linking critical approvals to an authorised person's fingerprint, verified on a secure element.
Let AI do the work. Keep humans in control of the decisions.
📖 OWASP guidance:
genai.owasp.org/llmrisk/llm062025-excessive-agency/
🔐 sAxess PRO:
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
📢 Serenity – Official Community Update
On September 4 , Serenity announced its decision to move away from Secret Network to improve our infrastructure and enhance security through greater self-reliance and reduced dependency on third parties.
During this migration, it appears that a handful of wallets' sensitive data stored in sBox was neither deleted from third-party nodes nor remained encrypted.
This is precisely why, a month ago, Serenity decided to strengthen its self-reliance by launching sBox Pro.
Following this limited incident, Serenity will adjust the PCS liquidity to protect RWS Holder’s and Project’s interests in full compliance with applicable regulations, while preventing bad actors from accessing , misplacing or diverting public funds
For any further inquiries, please contact us at serenity@s.technology.
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
On September 4 , Serenity announced its decision to move away from Secret Network to improve our infrastructure and enhance security through greater self-reliance and reduced dependency on third parties.
During this migration, it appears that a handful of wallets' sensitive data stored in sBox was neither deleted from third-party nodes nor remained encrypted.
This is precisely why, a month ago, Serenity decided to strengthen its self-reliance by launching sBox Pro.
Following this limited incident, Serenity will adjust the PCS liquidity to protect RWS Holder’s and Project’s interests in full compliance with applicable regulations, while preventing bad actors from accessing , misplacing or diverting public funds
For any further inquiries, please contact us at serenity@s.technology.
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👏5❤2👍2
🔐 Putting assets on-chain is easy. Protecting the value behind them is the real challenge.
Tokenization is changing ownership, but without secure custody, verified ownership, and trusted authorization, what protects the value behind the token?
Serenity is bridging that gap through sGold, connecting physical gold with digital financial infrastructure.
📖 Discover why security is the missing piece in RWA tokenization. 👇
s.technology/blog/real-world-asset-tokenization-security-trust/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Tokenization is changing ownership, but without secure custody, verified ownership, and trusted authorization, what protects the value behind the token?
Serenity is bridging that gap through sGold, connecting physical gold with digital financial infrastructure.
📖 Discover why security is the missing piece in RWA tokenization. 👇
s.technology/blog/real-world-asset-tokenization-security-trust/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
❤1
🟢 Stablecoins are coming. Where will they live?
This year alone: a Coldcard seed flaw (~$116M drained), hidden implants in resold Ledger units, 13,689 Trezor customer addresses exposed.
Boris Mofrad on the questions every issuer has to answer before deployment, the standards that sit under the hood (FAPI 2.0, OpenID Connect) and why a biometric card changes the answer.
Watch, then verify for yourself 👇
https://youtube.com/shorts/4NUnol7PzCc
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
This year alone: a Coldcard seed flaw (~$116M drained), hidden implants in resold Ledger units, 13,689 Trezor customer addresses exposed.
Boris Mofrad on the questions every issuer has to answer before deployment, the standards that sit under the hood (FAPI 2.0, OpenID Connect) and why a biometric card changes the answer.
Watch, then verify for yourself 👇
https://youtube.com/shorts/4NUnol7PzCc
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
👍3
Your wallet’s first vulnerability might be a number.
The real question is simple: can someone calculate it before you do?
On October 18, Qubic halted its chain after an attacker drained more than 1,400 wallets linked to weak seeds generated using
If a number is truly random, predicting it should be practically impossible. If it isn’t, it may only be a matter of time before someone finds the pattern.
Code generates numbers. Weak randomness makes them predictable.
Serenity takes a different approach to wallet access. With sAxess, control is tied to your fingerprint, verified by the card’s secure element, not to a number a program might reproduce.
🔒 Your identity shouldn’t be another number someone can guess.
s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
The real question is simple: can someone calculate it before you do?
On October 18, Qubic halted its chain after an attacker drained more than 1,400 wallets linked to weak seeds generated using
Math.random(), a browser function never designed for cryptographic secrets. Most of the funds are now frozen.If a number is truly random, predicting it should be practically impossible. If it isn’t, it may only be a matter of time before someone finds the pattern.
Code generates numbers. Weak randomness makes them predictable.
Serenity takes a different approach to wallet access. With sAxess, control is tied to your fingerprint, verified by the card’s secure element, not to a number a program might reproduce.
🔒 Your identity shouldn’t be another number someone can guess.
s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
🏆 Two continents. Three awards. One card.
From 181 entries in Orlando to eight finalists in Dubai!
sAxess took the spotlight twice.
What made it stand out? Biometric security built directly into the card. No password to leak. No separate app. Your fingerprint, your access.
🎬 Three wins. One innovation. See how it happened. 👇
https://www.youtube.com/shorts/xiGEAAdqsNE
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
From 181 entries in Orlando to eight finalists in Dubai!
sAxess took the spotlight twice.
What made it stand out? Biometric security built directly into the card. No password to leak. No separate app. Your fingerprint, your access.
🎬 Three wins. One innovation. See how it happened. 👇
https://www.youtube.com/shorts/xiGEAAdqsNE
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
YouTube
Biometric Payment Card Wins Two International Awards. EP11🏆 #Shorts
Biometric payment card wins two international awards: the sAxess fi...
🔥2❤1
Passkeys “work better for users and worse for cyberattackers.”
Microsoft’s words, not ours.
And the timing is no coincidence.
Source: https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/
Microsoft Threat Intelligence found that AI-generated phishing lures achieved click rates of up to 54%, compared with roughly 12% for traditional campaigns. As attackers get better at deceiving people, authentication methods built around codes that can be intercepted become a growing liability.
Microsoft is responding by making passkeys the default in Entra ID and phasing out its own SMS and voice verification codes.
🔹 September 1, 2026: Passkeys become the default in Entra ID
🔹 February 1, 2027: Microsoft-delivered SMS and voice codes end for most users
🔹 July 1, 2027: Global Administrators and external users follow
🔹 Users relying only on SMS will be prompted to register a passkey
🔹 Organizations that want to retain SMS verification must arrange and pay for carrier services themselves
The direction is clear: less reliance on codes, stronger identity verification.
sAxess PRO follows the same principle, bringing employee identity verification to a physical card, with access confirmed by the employee’s fingerprint.
No code to type. No SMS to intercept. Identity verified at the point of authorization.
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Microsoft’s words, not ours.
And the timing is no coincidence.
Source: https://www.microsoft.com/en-us/security/blog/2026/07/13/microsoft-entra-id-security-updates-passkeys-are-the-default-authentication-method-in-entra-id/
Microsoft Threat Intelligence found that AI-generated phishing lures achieved click rates of up to 54%, compared with roughly 12% for traditional campaigns. As attackers get better at deceiving people, authentication methods built around codes that can be intercepted become a growing liability.
Microsoft is responding by making passkeys the default in Entra ID and phasing out its own SMS and voice verification codes.
🔹 September 1, 2026: Passkeys become the default in Entra ID
🔹 February 1, 2027: Microsoft-delivered SMS and voice codes end for most users
🔹 July 1, 2027: Global Administrators and external users follow
🔹 Users relying only on SMS will be prompted to register a passkey
🔹 Organizations that want to retain SMS verification must arrange and pay for carrier services themselves
The direction is clear: less reliance on codes, stronger identity verification.
sAxess PRO follows the same principle, bringing employee identity verification to a physical card, with access confirmed by the employee’s fingerprint.
No code to type. No SMS to intercept. Identity verified at the point of authorization.
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
🎙 A new Serenity podcast is on its way, and your voice counts.
We're preparing our next episode, and this time it starts with you.
Ask your questions in the comments below and Serenity Technology's founders will answer them on air.
The episode will cover two things: the road we've already travelled, what we've built and the path that will lead Serenity into the future.
If you've wanted to ask the people behind Serenity something directly,
this is the moment.
Drop your question below. 👇
We're preparing our next episode, and this time it starts with you.
Ask your questions in the comments below and Serenity Technology's founders will answer them on air.
The episode will cover two things: the road we've already travelled, what we've built and the path that will lead Serenity into the future.
If you've wanted to ask the people behind Serenity something directly,
this is the moment.
Drop your question below. 👇
❤1
8:31 a.m. ET. Saturday. Ten million tokens appear out of nowhere.
No legitimate mint. No real authorization. Just a message the system processed.
Source: x.com/cysic_fdn/status/2111761749116637687
Here’s how quickly it unfolded:
🔹 08:31: A fraudulent mint message is processed, creating 10M CYS on BNB Smart Chain
🔹 08:36: The first sales begin
🔹 08:59: 7.2M CYS sold in total
🔹 09:47: Cysic blacklists the attacker, freezing the remaining 2.8M CYS
But the blacklist came too late to recover the roughly 306.6 ETH, worth approximately $727,000, already bridged to Ethereum.
According to Cysic, the entry point was a database used by services around the bridge. Its mainnet and user wallets were not affected.
The deeper problem? A system can process a message correctly and still make the wrong decision.
That’s the gap Serenity Technology is working to close.
With sAxess PRO, sensitive approvals are tied to a named individual and confirmed by their fingerprint on a physical card.
Because when an action carries real consequences, a valid message shouldn’t be the final word.
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
No legitimate mint. No real authorization. Just a message the system processed.
Source: x.com/cysic_fdn/status/2111761749116637687
Here’s how quickly it unfolded:
🔹 08:31: A fraudulent mint message is processed, creating 10M CYS on BNB Smart Chain
🔹 08:36: The first sales begin
🔹 08:59: 7.2M CYS sold in total
🔹 09:47: Cysic blacklists the attacker, freezing the remaining 2.8M CYS
But the blacklist came too late to recover the roughly 306.6 ETH, worth approximately $727,000, already bridged to Ethereum.
According to Cysic, the entry point was a database used by services around the bridge. Its mainnet and user wallets were not affected.
The deeper problem? A system can process a message correctly and still make the wrong decision.
That’s the gap Serenity Technology is working to close.
With sAxess PRO, sensitive approvals are tied to a named individual and confirmed by their fingerprint on a physical card.
Because when an action carries real consequences, a valid message shouldn’t be the final word.
s.technology/product/saxess-pro/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
YOU OWN THE ASSET. WHO CONTROLS THE ACCESS?
Owning crypto and controlling it are two different things. Most people find out which one they have on the day a password is lost or a seed phrase turns up in the wrong hands.
Exchanges vs. Self-Custody
Exchanges hold the keys for you. Self-custody hands them back, along with a new job: protecting a private key and a recovery phrase on your own, often on a sheet of paper.
Biometric Security with sAxess
sAxess is a biometric crypto wallet card made by Serenity Technology. The private key is held in a certified secure element on the card, and every transaction is approved with a fingerprint read by the card's own sensor.
No seed phrase to write down.
Owning is the easy part. Staying in control is the part worth protecting.
Learn more: s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Owning crypto and controlling it are two different things. Most people find out which one they have on the day a password is lost or a seed phrase turns up in the wrong hands.
Exchanges vs. Self-Custody
Exchanges hold the keys for you. Self-custody hands them back, along with a new job: protecting a private key and a recovery phrase on your own, often on a sheet of paper.
Biometric Security with sAxess
sAxess is a biometric crypto wallet card made by Serenity Technology. The private key is held in a certified secure element on the card, and every transaction is approved with a fingerprint read by the card's own sensor.
No seed phrase to write down.
Owning is the easy part. Staying in control is the part worth protecting.
Learn more: s.technology/product/saxess/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
🟢 CRYPTO HYPE IS LOUD. REAL TECH IS QUIET.
Boris Mofrad on the twisted paradigm: loud projects with nothing to offer pull the crowd, while tiny teams with real technology never get a chance.
Amazon, Apple and Oracle all started small and quiet.
Look in depth, then decide for yourself.
👇 Watch the full Short:
https://www.youtube.com/shorts/A2OJYbezNR8
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
Boris Mofrad on the twisted paradigm: loud projects with nothing to offer pull the crowd, while tiny teams with real technology never get a chance.
Amazon, Apple and Oracle all started small and quiet.
Look in depth, then decide for yourself.
👇 Watch the full Short:
https://www.youtube.com/shorts/A2OJYbezNR8
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
❤9
What if the next cybersecurity crisis comes from AI that already has permission to act?
As AI agents gain access to data, financial systems, and critical operations, one question becomes impossible to ignore: Who has the authority to decide what they can do?
At Serenity Technology, we believe critical actions must remain under human authority.
Read our latest blog to discover why access is no longer enough.
s.technology/blog/ai-cybersecurity-risks-autonomous-agents/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD
As AI agents gain access to data, financial systems, and critical operations, one question becomes impossible to ignore: Who has the authority to decide what they can do?
At Serenity Technology, we believe critical actions must remain under human authority.
Read our latest blog to discover why access is no longer enough.
s.technology/blog/ai-cybersecurity-risks-autonomous-agents/
Visit Us!
X | MEDIUM | INSTAGRAM | LINKEDIN | YOUTUBE | CMC | CG | sGOLD