Miniscript and descriptor wallets that require several keys to spend.

An attacker who exploits for profit or disruption without disclosure.

Approving a hardware-wallet payload you cannot human-read. Prefer clear-signing when available.

Exploiting validators, contracts, or message verification on a cross-chain bridge. Historically the largest loss class.

The chance a cross-chain lock-and-mint system is hacked or halted, stranding or forging assets.

Paid responsible disclosure for vulnerabilities, often via Immunefi in crypto.