We analyzed the 100 largest digital asset security incidents from 2014 to H1 2026. 🔐 The attack surface moved. 96% of H1 2026 losses now come from compromised keys, signing workflows, and vendor infrastructure. 🔗 Get your copy: halborn.com/reports/top-100-…

The industry hardened smart contracts for years. Attackers adapted. 🚨 Compromised keys, signing infrastructure, social engineering, and supply chain failures drove 96% of H1 2026 hack losses, up from 36% in 2021. 📰 Get our Top 100 Hacks report: halborn.com/reports/top-100-…

Custodian, self-custody, in-house build, or acquisition: which fits you? 🏦 Each trades cost, control and compliance differently. Halborn CEO Jacques Boschung joins a panel of experts at Digital Assets Week London to help institutions decide.

Nostra Finance, a Starknet-based lending protocol, was the victim of a price manipulation attack. 💸 The attacker built a fake NSTR pool, wash traded for 20 minutes, and pumped the token 8,000x. Full breakdown: halborn.com/blog/post/explai…

First audit just PASSED We have successfully passed its security audit by @HalbornSecurity Summary: 100% of all REPORTED Findings have been addressed Details → halborn.com/audits/1win/smar…

$12 billion in digital asset hacks. And counting. 💸 At @CV_Labs Summit, our CEO Jacques Boschung unpacks what the industry has learned from the largest hacks, and what institutions still need to fix before the next one. 🔗 Save your spot: cvsummit.ch/

Security check: passed. 🔒 AstralBeam’s security audit by @HalbornSecurity is complete. 0 critical findings 100% of reported findings addressed The beam is clear. ✨ Read the full audit report: halborn.com/audits/casper-as…

𝗧𝗵𝗲 𝗩𝗮𝘂𝗹𝘁 𝗹𝗮𝘂𝗻𝗰𝗵𝗲𝘀 𝗶𝘁𝘀 𝗼𝘄𝗻 𝗠𝗣𝗖 𝗹𝗶𝗯𝗿𝗮𝗿𝘆 𝗳𝗼𝗿 𝗶𝗻𝘀𝘁𝗶𝘁𝘂𝘁𝗶𝗼𝗻𝗮𝗹 𝗰𝘂𝘀𝘁𝗼𝗱𝘆 We have launched our own multi-party computation (MPC) library for institutional custody, following an independent security audit by @HalbornSecurity. The library is built in-house and supports our co-signing model, where no single party, including The Vault itself, can authorise a transfer on its own. Building the cryptographic layer in-house gives us direct control over the code, signing protocols and release schedule. It also means auditors can examine the complete implementation without an external vendor boundary. Halborn reviewed 91 files across the cryptographic core, test suite, and iOS and Android signer applications. All findings raised during the engagement were remediated and verified. 🔗 Read more about this update and the work behind our MPC library in the full article: thevault.inc/company/newsroo…

Most security budgets still go straight to smart contract audits. 🔍 A backend that skips one validation check can drain funds just as fast. No exploit, no stolen key. In this article we break down the 3 most common offchain attack vectors. 📰 Read: halborn.com/blog/post/top-3-…

🛡️ @HalbornSecurity joins #CVSummit 2026 as a partner Halborn is the security partner trusted by the world's largest banks and financial institutions to protect enterprise-grade digital assets. Their services span blockchain architecture assessment, custody and key management assessment, compliance readiness, as well as assurance work, giving institutions the coverage they need to innovate securely. With 4,000+ engagements completed and multiple zero-day discoveries, Halborn has protected over $1 trillion in value. Meet Halborn at CV Summit 2026 to see how your organization can adopt digital assets while staying ahead of security, risk, and compliance requirements. 🎟️ Join the room on 29-30 September at Kongresshaus Zürich: cvsummit.ch/tickets

Together with @fuzefinance we built a blueprint for banks and custodians launching digital asset services. 🏦 Custody architecture, regulatory mapping, and the exact controls the biggest exploits needed but didn't have. 🔗 Get your copy: fuze.finance/report/security…

As a founding member of the @CantonFdn running validator infrastructure for regulated institutions, @IntellectEU needed proof its Azure KMS driver could hold up under scrutiny. 🔍 Our work together provided that assurance. 📰 Full case study: halborn.com/case-studies/pos…

.@HalbornSecurity has completed a security assessment of @AlpendHQ, a privacy-aware institutional money market built on the Canton Network. The assessment covered Alpend's multi-party authorization, accounting, risk recomputation, and onchain verification. ↓ Read the study.

Liquid Network, Blockstream's Bitcoin sidechain, was drained for an estimated $320M earlier this month. 🚨 The attacker exploited a flaw in the proof validation code of Elements, the open-source Bitcoin Core fork it runs on. 📰 Full breakdown: halborn.com/blog/post/explai…

An institutional money market is not made secure at deployment. It is secured in every rule that determines who can create a position, how collateral is valued, how risk is recalculated across a portfolio, and whether the price data informing those decisions is authentic. That is where Alpend’s safety model lives: in the authorization and accounting rules behind each agreement on @CantonNetwork. A deposit cannot be forged. A debt cannot be hidden. A collateral position cannot be altered by a party without the right to do so. @HalbornSecurity assessed that model across Alpend’s full Daml workspace, including multi-party authorization, the underlying accounting model, full-basket risk recomputation, and on-chain verification of signed oracle reports. Every reported finding was remediated and converted into executable Daml Script scenarios. This is the standard Alpend is setting as it builds the money market layer for institutional assets on Canton: every agreement secure by design.

We are pleased to release our case study with @AlpendHQ, a privacy-aware institutional money market built on the @CantonNetwork. 💸 No audit corpus meant no shortcuts. Together, we built proof Alpend brings into institutional talks. 📰 Read: halborn.com/case-studies/pos…

Tectonic, a large decentralized lending protocol on the Cronos blockchain, was the victim of a $75 million hack. 🚨 An illiquid TONIC token was pumped 100x, then used as collateral to drain nine lending markets. 📰 Full breakdown: halborn.com/blog/post/explai…

We’re going live later today with Gabi Urrutia (@urruts) and Inder Singh (@InderpreetSingh) 🎙️ We’ll talk security in the age of agents, what it means for the agentic internet, and the buzz around ICANN’s next TLD round. Tune in on YouTube or right here on X · 5 PM UTC 👇 piped.video/@DomaProtocol/st…