How a trusted signer paid out a corrupt ledger, which controls were missing, and what every financial institution running a ledger next to a pool of wallets should take away from this incident.
Thibault de Lachèze-Murel
Security3 min read
ISO 27001, ISO 27017 and ISO 27018 Maintained
DFNS passes its first ISO/IEC 27001, 27017 and 27018 surveillance audit with a positive recommendation from MSECB on all three standards and the certifications are maintained.
Elis Veysalova
Security21 min read
The Bitget Hack
How forged instructions got valid signatures, which controls bound each step, and what no provider, DFNS included, prevents.
Thibault de Lachèze-Murel
Security29 min read
The Coldcard Hack
How a five-year-old build error turned a trusted hardware wallet into predictable keys, and what it really teaches about generating, operating, and governing secrets.
Thibault de Lachèze-Murel
Security9 min read
CGGMP21 Vulnerabilities Patched and Explained
CGGMP21 vulnerabilities have been disclosed and fixed. DFNS clients remain fully secure.
Denis Varlakov
Security4 min read
A Month of Pentesting Completed
DFNS completes a month-long pentest with Borg Security, finding zero vulnerabilities.
Thibault de Lacheze-Murel
Security8 min read
Certified ISO 27001, ISO 27017 and ISO 27018
DFNS achieves ISO 27001, 27017 and 27018 certifications, raising the bar on security, cloud assurance, and data privacy.
Thibault de Lacheze-Murel
Security23 min read
The Bybit / Safe Hack
How one compromised laptop led to the largest crypto heist in history. This deep dive breaks down the attack, the systemic weaknesses it revealed, and why crypto must embrace real security beyond best practices.
Thibault de Lacheze-Murel, Christopher Grilhault des Fontaines
Security7 min read
SOC 2 Renewed by KPMG
DFNS has successfully renewed its SOC 2 Type II certification for 2024 after a rigorous nine-month audit by KPMG, one of the Big Four firms.
Thibault de Lacheze-Murel
Security7 min read
Cracks in Wallet Iframe Security
DFNS' security team has identified security risks in wallet iframes, based on vulnerabilities discovered in a major derivatives exchange. In this post, we'll explain how we uncovered and demonstrated the issue. We'll also explore how advanced methods like MPC and WebAuthn provide safer, non-custodial options to better protect user funds.
Thibault de Lacheze-Murel
Security7 min read
The Magic Link Vulnerability
A year ago, our security team discovered a vulnerability in magic links that changed our industry's approach to wallet authentication.
We use cookies to keep the site secure and, with your consent, to measure
usage and improve your experience. You can accept, reject, or choose which
categories to allow. Read our Cookie Policy.
Cookie preferences
Manage your consent by category. Strictly necessary cookies are always
active. See our Cookie Policy for details.
Strictly necessaryAlways on
Required for core features and security. These cannot be switched off.
Remember choices such as language or region to enhance the site.
Help us understand how the site is used so we can improve it.
Measure campaigns and deliver content relevant to you.
