Common Defense

Common Defense is going to TOKEN2049 Singapore. We're co-hosting an event with our friends at Quantstamp, Inc., Hypernative, Lukka, and Cloudflare. Meet the team by registering for our event below!

Thank you to everyone who joined our KBW2026 events! We had a amazing time co-hosting with Quantstamp, Inc. and Zircuit. See you at TOKEN2049 in Singapore! Common Defense protects teams from social engineering, scams, and phishing attacks. Get protected today.

🇰🇷 The Common Defense team will be at Korea Blockchain Week, check out our events! Sep 28 Tech Side Event: https://lnkd.in/eGmYxUNY Sep 30 VIP Networking: https://luma.com/wslf2frf

Revolut customers’ data were given to criminals after a fake government request. How to check if you were impacted: 1. Open Revolut app → Profile (top left) → Chats → Support. Ask if you were affected. 2. Affected customers were also emailed by Revolut.

Our own Alex Murashkin is speaking at ETHTaipei 2026 on September 13 about scam detection and defense in the age of AI. As attackers use AI to produce more convincing scams at scale, defense needs to cover both the message and what happens if it gets through. In “Trust No Message: Scam Detection and Defense in the Age of AI,” Alex will cover two lines of defense: detecting malicious messages at the communication layer and hardening the host to limit the damage. He’ll discuss where rules, safe-sender lists, and lightweight ML fit, and how AI can help with harder cases. The talk draws on his work across operational and smart contract security, including bridges, L2 systems, and their surrounding infrastructure. Sep 13 · 11:00–11:30 · Genesis Stage Explore ETHTaipei 2026: https:// ethtaipei.org Join us in Taipei: https:// luma.com/8z5ys4rl

Trezor's email provider was breached. Watch out for phishing emails and don't click on any links. https://lnkd.in/gHPgX9UV

NEW MILESTONE: Common Defense has now screened 2.1M+ messages and protected customers from 46,000+ threats across Telegram, Email, WhatsApp, Slack, and SMS. That's 34,000+ messages screened and 800+ threats caught every day. Protect your team today: https://commondefense.ai/

Huntress investigators found 5 suspected North Korean operatives on company payrolls. They didn’t hack in. They got hired. https://lnkd.in/eX8-a74y

$75m was drained from Tectonic on Cronos through a pump and dump attack. Here’s a breakdown of how it happened. In April–June 2026 Tectonic phased DAI and USC collateral factors to 0% to “safeguard protocol integrity.” TONIC stayed at 20% CF, with a 50 trillion supply cap, and an internal oracle that updates twice an hour or on a 1% move. A thin governance token was left as collateral after two more liquid assets were retired. TONIC was listed as collateral on Tectonic and priced off VVS + http:// Crypto.com. Attackers used that listing to pump TONIC, feed the oracle a fake price, and borrow real assets out of the pools. The attack sequence: - Buy TONIC in shallow VVS pools - Oracle follows the print (a 1% move is enough to update) - Inflated TONIC gets marked around $375m of collateral - 20% CF turns that into ~$75m of borrow power against USDC, CRO, and other deposits - $6.3m of the borrowed assets was bridged to Ethereum and swapped for ~2,592 ETH Cronos validators halted the network and rolled the chain back to before the attack. Blocks resumed from 90,896,189 at 23:49:01 UTC on Aug 30. Most of the on-chain drain was unwound, but the $6.3m already on Ethereum is lost. The same pattern hit Moonwell four days earlier. Its MAMO market was drained ~$9m on Aug 27. What’s next: - Tectonic has to take TONIC collateral to 0% or isolate it. A 20% CF on a thin governance token is a protocol design failure. - Other lending markets should check for the same gap: illiquid tokens as collateral, with an oracle that tracks spot. Cap them, isolate them, or don’t list them.

PRODUCT UPDATE: Common Defense now scans every link inline, checking for lookalike domains, age, certificate issues, and redirect chains. Scammers register new domains to stay off blocklists. Common Defense catches them immediately. Get protected: commondefense.ai