# 0x7 Web3 Security Bulletin 

> Crypto and web3 security insights, including tools, hacks, and regulations. 

**Published by:** [W3SB](https://paragraph.com/@w3sb/)
**Published on:** 2025-11-14
**Categories:** web3, cybersecurity, security, crypto, exploits
**URL:** https://paragraph.com/@w3sb/0x7-web3-security-bulletin

## Content

Insightful Everyone is covering the Balance Hack now that the official post-mortem is out. Links to those below, but for now let's start with building before looting. The Trustless Manifesto: Preserving Ethereum’s Core What's a week with out a manifesto? Yoav Weiss, Vitalik Buterin, Marissa Posner emphasizes that true decentralization depends on trustless design—systems relying solely on math and consensus, not intermediaries. It warns that convenience-driven shortcuts erode decentralization daily, turning protocols into platforms with gatekeepers. The manifesto calls on builders to prioritize openness, resistance, and verifiability, maintaining Ethereum’s promise of permissionless, censorship-resistant participation even as it scales. (Trustlessness) DeFi Security Summit Kicking Off Nov. 20 The full schedule for this year's DeFi Security Summit has been posted. It's a broad array of talks covering the landscape of security challenges, from protocol design and auditing to operational and governance risks. Schedule | DeFi Security Summit Explore the full program of Defi Security Summit 2025 - 100+ talks, panels, and workshops on blockchain security, formal verification, and DeFi research. Discover who's speaking and plan your agenda. https://defisecuritysummit.org Blockchain Malware: The Never-Ending Novelty MetaMask's @tayvano_ highlights the persistent evolution of blockchain malware, emphasizing how attackers continually develop new techniques to exploit users and wallets. The article details recent trends, including phishing, supply chain attacks, and social engineering, stressing the importance of vigilance and security best practices for both developers and users in the blockchain ecosystem. (MetaMask) On-chain Yield and Lending Markets Structure Issues Forta explores potential and overlooked risks in onchain finance following Steam Finance's loss of $93M which triggered a suspension of withdrawals and deposits and the de-pegging of its stablecoin. (Forta) NFT Security Guide: Essential Steps for Builders Cantina provides a practical checklist for NFT project operators, covering mint safety, metadata integrity, role design, upgrade controls, and other crucial points to minimize NFT ecosystem risk. (Cantina) Data Rich, but Insight Poor: Gov Agencies & Crypto Elliptic discusses new strategies for government agencies overwhelmed with crypto data, focusing on tools and approaches that transform raw blockchain information into actionable intelligence without losing critical insights. (Elliptic) Companies in the news Wintermute Scales DeFi Farming with Real-Time Risk Monitoring Wintermute enhanced its DeFi farming operations by adopting Hypernative’s real-time monitoring platform, enabling rapid detection and response to risks across multiple chains. This layered approach uses watchlists, custom agents, and SDK-based financial metrics to track security, protocol events, and position performance. (Hypernative) Certora, Cork, and Hypernative Collaborate on Web3 Security Standards Certora has partnered with Cork and Hypernative to develop a unified framework for Web3 security audits. This initiative aims to establish industry-wide benchmarks, improve protocol safety, and foster trust in DeFi and blockchain ecosystems. The alliance highlights ongoing efforts to strengthen security practices amid rapid sector growth. (Financial News UK) Gimme the loot A few notable hacks from Rekt and other sources… Balance coverage... Certora - Breaking Down the Balancer Hack Trail of Bits - Balancer Hack Retrospective: Avoiding Future Losses Quill Audits - The Balance Hack 2025 (Explained) Hyperliquid Price Manipulation Look on Chain Arkham and Others Noted POPCAT Activity that Lead to a $5M Loss for HLP (Look on Chain on X) (Arkham on X) Yes, No or Go Phish on Polymarket @25usdc has raised concerns over phishing scammers on Polymarket that are luring users to trade on private markets via a scam link. 25usdc @25usdc People have lost more than $500,000 by being scammed through Polymarket comments. I am posting this to raise awareness of the growing issue. They say: "Why are you not trading on Polymarket private markets? The odds are always much better on there!" Here is how they try to 509 7:21 PM • Nov 10, 2025 SlowMist stats this week Total 2025 hack events: 176 The total amount of money lost by blockchain hackers is about $2,865,102,055 We must have regulations Because £20,000 is Enough for Anyone Right... The UK’s Bank of England proposes a temporary £20,000 limit per coin on individual stablecoin holdings, with a £10 million limit for businesses and exemptions for large firms like exchanges and retailers. These caps aim to manage risks during the financial system’s transition to digital money and may be lifted later. (Bank of England) EU's Current Crypto Rules Tackle Stablecoin Risks Effectively The European banking regulator stated that existing EU regulations sufficiently address stablecoin-related risks, easing concerns about new rules. Officials emphasized that stablecoins remain under close banking and financial supervision frameworks, ensuring investor protection and systemic stability without immediate additional regulation. This stance highlights the EU's confidence in its regulatory approach amidst rapid crypto sector growth. (Reuters)

## Publication Information

- [W3SB](https://paragraph.com/@w3sb/): Publication homepage
- [All Posts](https://paragraph.com/@w3sb/): More posts from this publication
- [RSS Feed](https://api.paragraph.com/blogs/rss/@w3sb): Subscribe to updates