Cardano (ADA)

Big news: the RealFi Phase 1 Testnet goes live on 6 July. 🚀

This is our first public step toward next-generation stablecoin infrastructure on Cardano – and a direct response to a problem we've been vocal about:

Crypto's clearest success story has scaled as money. But not as capital.

Hundreds of billions of dollars sit idle in stablecoins: No utility. No impact on the real economy.

We think that's a problem worth solving – and the Testnet is where we start.

During Phase 1, participants can explore the platform, use its core features, and share feedback that will directly shape the protocol. This is collaborative infrastructure-building in public, and we want you involved.

Read all about it, here 👇
https://t.co/XLEk9Ckdwc

JUST IN: Charles Hoskinson says "let me be clear, there is no problem with the Cardano protocol, core nodes, core cryptography, or any open-source wallets. This is a specific app problem. There's no cryptographic issue, no contagion spreading—this is not a protocol level issue."

🚨SecondFi: more than $20M stolen, or taken hostage - When the nonce is predictable, the key is public.

Last Tuesday, SecondFi wallets were drained at scale. Users were doing nothing exotic, just signing transactions like any other day. Then the funds were gone.

▶️What happened. Two waves. First, external attackers drained wallets: ~16M ADA plus NFTs, around $2.5M. Then a much larger move: ~129M ADA, around $20M, swept by SecondFi itself to a third party custodian, "to keep it safe."
Users were robbed by attackers, and users were swept by the platform!!

▶️The bug. Every signature scheme in this family uses a per signature secret number, the nonce. The one rule: it must be secret and unpredictable. EdDSA (Ed25519, what Cardano uses) makes it deterministic on purpose, derived from the private key and the message together. Deterministic, but secret. The secret input is the whole point. SecondFi's implementation derived it from public data alone. The nonce stopped being secret. Public in, public out.

▶️Why it