Security Alliance
Non-profit Web3 security research organization
News Heat Trend
Project Overview
The Security Alliance, a nonprofit research organization focused on Web3 security, has launched several initiatives aimed at enhancing industry security, including Wargames, SEAL 911, SEAL Intel, and Safe Harbor.
Gate CEO Calls for Crypto Industry Security Alliance, Proposes 48-Hour Withdrawal Delay
Odaily reports: Lin Han, founder and CEO of cryptocurrency trading platform Gate, has called on the crypto industry to immediately establish a security alliance to unify security standards, intrusion detection protocols, and emergency response mechanisms in order to address security incidents like the one suffered by Binance. The Binance incident involved approximately $6.3 billion in losses.Gate also proposed promoting a vault solution with split keys, distributing private keys among users, Gate, and recovery partners, so that funds can only be transferred after at least two parties are compromised; vault withdrawals would be subject to a 48-hour delay to allow users to freeze their funds.Gate stated that it has flagged the relevant hacker addresses and will freeze any illicit funds transferred to its platform. (Bitcoin.com News)
Phishing Attack via Fake Uniswap Google Ads Has Stolen at Least $400,000
According to Cointelegraph, phishing ads impersonating the decentralized exchange protocol Uniswap have appeared in Google search results, enabling attackers to steal at least $400,000. On-chain analyst b-block stated that the associated counterfeit websites are draining funds from multiple wallets; the implicated addresses currently hold a combined total of 146 ETH—worth approximately $306,000 at press time. Security Alliance (SEAL) noted that such fraudulent Google ads are a common source of phishing attacks, with attackers either purchasing ad placements or compromising legitimate advertising accounts to impersonate popular crypto protocols in sponsored search results. SEAL also reported that between March 13 and March 30, these attacks resulted in total losses amounting to $1.27 million.
Gate CEO Calls for Crypto Industry Security Alliance, Proposes 48-Hour Withdrawal Delay
Odaily reports: Lin Han, founder and CEO of cryptocurrency trading platform Gate, has called on the crypto industry to immediately establish a security alliance to unify security standards, intrusion detection protocols, and emergency response mechanisms in order to address security incidents like the one suffered by Binance. The Binance incident involved approximately $6.3 billion in losses.Gate also proposed promoting a vault solution with split keys, distributing private keys among users, Gate, and recovery partners, so that funds can only be transferred after at least two parties are compromised; vault withdrawals would be subject to a 48-hour delay to allow users to freeze their funds.Gate stated that it has flagged the relevant hacker addresses and will freeze any illicit funds transferred to its platform. (Bitcoin.com News)
Phishing Attack via Fake Uniswap Google Ads Has Stolen at Least $400,000
According to Cointelegraph, phishing ads impersonating the decentralized exchange protocol Uniswap have appeared in Google search results, enabling attackers to steal at least $400,000. On-chain analyst b-block stated that the associated counterfeit websites are draining funds from multiple wallets; the implicated addresses currently hold a combined total of 146 ETH—worth approximately $306,000 at press time. Security Alliance (SEAL) noted that such fraudulent Google ads are a common source of phishing attacks, with attackers either purchasing ad placements or compromising legitimate advertising accounts to impersonate popular crypto protocols in sponsored search results. SEAL also reported that between March 13 and March 30, these attacks resulted in total losses amounting to $1.27 million.
North Korean hackers use AI technology to conduct social engineering attacks against Zerion hot wallets
Zerion disclosed that some of its corporate hot wallets were recently targeted by an AI-driven social engineering attack linked to North Korean hackers, resulting in losses of approximately $100,000. Zerion stated that user funds, applications, and infrastructure remain unaffected and proactively disabled its web application to mitigate risk. This incident marks the second such attack this month, following the $280 million breach of Drift Protocol, underscoring how North Korean hackers are leveraging AI to refine social engineering tactics—primarily targeting employees and developers at crypto firms. The Security Alliance (SEAL) tracked the hacker group UNC1069, which conducts low-pressure, multi-week social engineering campaigns across platforms including Telegram, LinkedIn, and Slack, using AI tools to edit images and videos to enhance attack efficiency.
Coinbase Publishes Article Exploring Bitcoin's Post-Quantum Security Migration Path
In an official blog post, Coinbase shares technical considerations regarding its transition strategy for Bitcoin to address quantum computing threats. The article points out that quantum computers pose a potential threat to Bitcoin's existing cryptographic system, and migration efforts require years of advance planning. As one of the world's largest cryptocurrency custody institutions, Coinbase holds approximately 5% of the global BTC supply and has already joined the Bitcoin Security Alliance while investing in open-source research support. Key recommendations include adopting flexible output architectures such as P2MR (BIP-360) or P2TRv2 to support the introduction and replacement of post-quantum signature schemes; implementing a 1-of-2 hybrid transition construct that allows funds to retain both classical and post-quantum signature paths simultaneously; prioritizing stateless signature schemes to mitigate state management risks; and requiring candidate schemes to be compatible with Multi-Party Computation (MPC) to meet institutional-grade custody requirements. Coinbase emphasizes that the handling of legacy funds can be discussed in parallel with technical upgrade work and should not hinder the advancement of post-quantum signature support.
Bitcoin Security Alliance Officially Established, Nine Major Institutions Pledge $15 Million Over Three Years
According to the official press release, Anchorage Digital, ARK Invest, BlackRock, Block, Blockstream, Coinbase, Fidelity Digital Assets, Galaxy, and Strategy, nine leading financial institutions and Bitcoin companies, jointly announced the establishment of the Bitcoin Security Consortium on July 23, 2026. The members independently committed to contributing a total of $15 million over the next three years to support long-term security research for the Bitcoin network, with a focus on development work in the field of post-quantum cryptography. The consortium's daily affairs are coordinated on a voluntary basis by Brink Executive Director Mike Schmidt; it will not intervene in protocol development or specific change decisions and will regularly release Bitcoin security status reports to investors and the public.
Related news
Gate CEO Calls for Crypto Industry Security Alliance, Proposes 48-Hour Withdrawal Delay
Odaily reports: Lin Han, founder and CEO of cryptocurrency trading platform Gate, has called on the crypto industry to immediately establish a security alliance to unify security standards, intrusion detection protocols, and emergency response mechanisms in order to address security incidents like the one suffered by Binance. The Binance incident involved approximately $6.3 billion in losses.Gate also proposed promoting a vault solution with split keys, distributing private keys among users, Gate, and recovery partners, so that funds can only be transferred after at least two parties are compromised; vault withdrawals would be subject to a 48-hour delay to allow users to freeze their funds.Gate stated that it has flagged the relevant hacker addresses and will freeze any illicit funds transferred to its platform. (Bitcoin.com News)
Coinbase Says It Custodies About 5% of Bitcoin, Urges Immediate Quantum-Resistant Migration
Odaily News: Cryptocurrency exchange Coinbase stated that the Bitcoin it custodies accounts for approximately 5% of the total existing Bitcoin supply, and urged Bitcoin developers to immediately begin addressing the quantum computing threat. Coinbase pointed out that Bitcoin consensus changes and ecosystem migration could take years, and action cannot wait until quantum computers with the capability to break signature schemes emerge.Coinbase recommends adopting a flexible "container" design similar to BIP-360 to enable the gradual replacement of quantum-resistant signature systems; it also proposed a phased "1-of-2" approach that would allow the same funds to be spent via either traditional keys or quantum-resistant keys during the transition period. The proposal would also need to be compatible with multi-party computation (MPC) key-splitting mechanisms.Coinbase stated that dormant, lost, and Satoshi-era Bitcoin holdings constitute a separate governance issue, and that any rescue mechanism itself must also be quantum-resistant. In January of this year, Coinbase established a Quantum Advisory Board; in July, it joined the Bitcoin Security Alliance alongside BlackRock and Strategy, with a combined commitment of $15 million for Bitcoin's quantum-resistant overhaul. (Decrypt)
Coinbase Publishes Article Exploring Bitcoin's Post-Quantum Security Migration Path
In an official blog post, Coinbase shares technical considerations regarding its transition strategy for Bitcoin to address quantum computing threats. The article points out that quantum computers pose a potential threat to Bitcoin's existing cryptographic system, and migration efforts require years of advance planning. As one of the world's largest cryptocurrency custody institutions, Coinbase holds approximately 5% of the global BTC supply and has already joined the Bitcoin Security Alliance while investing in open-source research support. Key recommendations include adopting flexible output architectures such as P2MR (BIP-360) or P2TRv2 to support the introduction and replacement of post-quantum signature schemes; implementing a 1-of-2 hybrid transition construct that allows funds to retain both classical and post-quantum signature paths simultaneously; prioritizing stateless signature schemes to mitigate state management risks; and requiring candidate schemes to be compatible with Multi-Party Computation (MPC) to meet institutional-grade custody requirements. Coinbase emphasizes that the handling of legacy funds can be discussed in parallel with technical upgrade work and should not hinder the advancement of post-quantum signature support.
Bitcoin Security Alliance Officially Established, Nine Major Institutions Pledge $15 Million Over Three Years
According to the official press release, Anchorage Digital, ARK Invest, BlackRock, Block, Blockstream, Coinbase, Fidelity Digital Assets, Galaxy, and Strategy, nine leading financial institutions and Bitcoin companies, jointly announced the establishment of the Bitcoin Security Consortium on July 23, 2026. The members independently committed to contributing a total of $15 million over the next three years to support long-term security research for the Bitcoin network, with a focus on development work in the field of post-quantum cryptography. The consortium's daily affairs are coordinated on a voluntary basis by Brink Executive Director Mike Schmidt; it will not intervene in protocol development or specific change decisions and will regularly release Bitcoin security status reports to investors and the public.
Phishing Attack via Fake Uniswap Google Ads Has Stolen at Least $400,000
According to Cointelegraph, phishing ads impersonating the decentralized exchange protocol Uniswap have appeared in Google search results, enabling attackers to steal at least $400,000. On-chain analyst b-block stated that the associated counterfeit websites are draining funds from multiple wallets; the implicated addresses currently hold a combined total of 146 ETH—worth approximately $306,000 at press time. Security Alliance (SEAL) noted that such fraudulent Google ads are a common source of phishing attacks, with attackers either purchasing ad placements or compromising legitimate advertising accounts to impersonate popular crypto protocols in sponsored search results. SEAL also reported that between March 13 and March 30, these attacks resulted in total losses amounting to $1.27 million.
Ethereum Foundation-funded project Ketman identifies 100 North Korean IT personnel
According to Cointelegraph, the Ethereum Foundation stated that its funded Ketman project identified 100 North Korean IT personnel operating covertly within Web3 organizations over a six-month period and issued warnings to approximately 53 projects indicating they may have hired such individuals. The project focuses on the issue of “fraudulent developers” in the crypto industry and is part of the ETH Rangers Public Safety Grant Program. Ketman has also developed an open-source detection tool for identifying suspicious GitHub activity and collaborated with the Security Alliance to co-develop an industry-wide identification framework for detecting North Korean IT personnel.