buildOne report1 publisher 52 addresses sending 0.0000001 ETH produced half the failed transactions in a 40-block Ethereum sample
Fixed 21,000-gas ETH sends to EIP-7702 accounts made up 201 of 401 failed transactions in a dev.to block sample. Delegated code runs on receipt, so those sends could not succeed at that limit. The author's breakdown puts all 201 on one cluster of senders, so the half says little about the network at large.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+8
- Incentives35
- Confidence55
Consensys is splitting by the end of 2026. The faster-growing wallet business keeps the existing legal entity that lined up JPMorgan and Goldman. Linea, Besu and Teku move to a newly formed company under a new chief executive.
Perspective Coverage
5 publishers
- Builder
- Builder 23%
- Operator
- Operator 35%
- Investor
- Investor 42%
Reality
- Evidence70
- Adoption55
- Hype gap+20
- Incentives60
- Confidence68
MetaMask's precautionary validator exits would add about 10 days to Ethereum's staking entry queue
MetaMask sent an estimated 565,056 ETH of validators toward exit after about $923 in block tips was diverted, Bitquery data cited by CryptoSlate shows. Re-staking all of it would use 9.8 days of Ethereum's entry capacity, inside a round trip Lido puts at up to 45 days.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence50
THORChain liquidity providers took three-quarters of the fees from laundering Bitget's stolen funds
Swap protocols and wallets collected $761,725 in fees moving funds from the $387.5 million Bitget hack, researcher Andrey Sergeenkov found. Part of $259,718 in linked THORChain affiliate fees reached an OKX-labeled wallet, where deposit records could identify a holder.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence50
Virtuals puts a wallet-holding trading agent inside an invite-only iOS app
Virtuals Protocol opened a closed iOS beta whose personal AI holds a wallet and runs standing trade rules, such as a $1,000 leveraged Ether position. The agent acts without asking before each trade, so the beta tests whether retail users will hand standing orders to a chat app.
Reality
- Evidence35
- Adoption8
- Hype gap+25
- Incentives
- Not scored
- Confidence40
MetaMask's validator key rotation after its Sept. 30 breach sends clients' staked ETH through exit and re-entry queues of about 45 days each. Joseph Lubin says self-custodied wallets were never within the attackers' reach, so the cost of the incident lands on staking clients.
Perspective Coverage
4 publishers
- Builder
- Builder 28%
- Operator
- Operator 40%
- Investor
- Investor 32%
Reality
- Evidence62
- Adoption40
- Hype gap+35
- Incentives55
- Confidence58
Core Lightning says attackers are targeting nodes on its August patch or older
Core Lightning told operators on October 2 to upgrade from version 26.06.7 or older after reports that attackers are targeting unpatched nodes. MetaMask's precautionary exit from Lido that week lost no reported funds but will likely forgo rewards on ETH that can take up to 45 days to return.
Reality
- Evidence42
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence48
MetaMask is pulling its Ethereum validators out of Lido after an infrastructure compromise, putting the stake on a round trip Lido says can take up to 45 days. The stake earns no rewards on the way, and stETH holders share that cost, for an attack whose only documented theft so far is diverted block rewards.
Perspective Coverage
4 publishers
- Builder
- Builder 26%
- Operator
- Operator 41%
- Investor
- Investor 33%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives65
- Confidence58
Seventy cloned crypto sites use a fake rewards vote to get wallets connected
Malwarebytes found 70 sites cloning Kraken's xStocks, Pendle and other crypto projects to push a fake rewards vote that opens a wallet prompt. The targets, it says, are projects whose users are used to hearing about rewards and allocations.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap0
- Incentives
- Not scored
- Confidence55
MetaMask is exiting its Ethereum validators in the Lido protocol by October 7, 2026, as a precaution during an infrastructure incident it has not explained. Lido expects lost rewards and possible downtime penalties, a cost incurred before MetaMask has said what was affected.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence55
SlowMist puts 14 iOS versions inside one Safari key-theft chain
Blockchain security firm SlowMist says an active exploit chain walks from a Safari page to kernel access and the iOS Keychain on everything from iOS 13 to 26.5, while Apple's patches, by the same account, reach 26.3.
Reality
- Evidence30
- Adoption22
- Hype gap+38
- Incentives66
- Confidence34
buildOne report1 publisher Shipping a one-cent x402 API moved the failure from the protocol to the wallet balance
GLP1LAUNCH sells a research brief for a cent of USDC on Base, with no account and no API key. The first end-to-end attempt still failed, because the signing wallet held none of that asset on that network.
Reality
- Evidence45
- Adoption8
- Hype gap−10
- Incentives55
- Confidence40
buildOne report1 publisher A wallet that trusts Arc's declared 18 decimals renders one dollar as 0.000000000001
Four days after Circle opened Arc's public mainnet, a developer queried the chain's own RPC and found the node scaling native USDC a trillion times larger than the ERC-20 contract that reports the same balance.
Reality
- Evidence72
- Adoption30
- Hype gap−12
- Incentives32
- Confidence66
Needle Stealer clears SmartScreen by shipping a Microsoft-signed OLEView copy in the ZIP
HP tracked the campaign from April to June 2026, in which a fake AI crypto trading agent shipped a genuine Microsoft utility to satisfy Windows reputation checks before the DLL loaded beside it stole browser wallet passwords.
Reality
- Evidence60
- Adoption40
- Hype gap+15
- Incentives70
- Confidence55
buildOne report1 publisher Flipping the default to 402 got this Korean tax-data MCP server into the x402 Bazaar
Korea's business registry sits behind a Korean-language portal and SMS verification, so an agent cannot reach it. One developer put it behind an HTTP 402 and $0.02 in USDC, then found his free tier had disqualified him from the marketplace.
Reality
- Evidence42
- Adoption5
- Hype gap+5
- Incentives75
- Confidence45
Google's AP2 replaces the buy click with a cryptographically signed mandate
Google's Agent Payments Protocol makes an agent's authority to pay a cryptographically signed mandate holding price limits, timing and other conditions. Whoever drafts those conditions is setting spend policy.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+30
- Incentives80
- Confidence60
Consensys moves Linea and Besu into a new company led by Mike Kriak
The existing entity keeps operating as MetaMask with Joe Lubin as chief executive, while the protocols business goes out as a newly formed company aimed at a tokenized market Citi sizes at 5.5 to 8.2 trillion dollars by 2030.
Reality
- Evidence42
- Adoption30
- Hype gap+35
- Incentives75
- Confidence45
Consensys sets a year-end 2026 deadline for splitting MetaMask off from its protocol business
The plan names five leadership positions, two of them Joe Lubin's, and leaves revenue, valuation, ownership percentages and listing intent for later, which is the part anyone pricing either half would need.
Reality
- Evidence45
- Adoption30
- Hype gap+20
- Incentives75
- Confidence55
Attackers bought five working browser extensions and shipped malware through auto-update
Socket says the operators bought their way onto tens of thousands of machines and delivered the payload in a routine update. Cleanup means rotating passwords and moving crypto to fresh wallets, user by user.
Reality
- Evidence52
- Adoption34
- Hype gap+12
- Incentives62
- Confidence50
buildOne report1 publisher Superior ships its wallet drainer as a routine auto-update to extensions users already trusted
An extension allowlist pins an ID, and the ID survives a sale. The operators behind Superior bought or seeded trust that users had already granted, then spent it in an automatic update that stripped page CSP on the way through.
Reality
- Evidence55
- Adoption40
- Hype gap+12
- Incentives55
- Confidence50