Protocol News & Updates
Deep dives into trustless liquidity, protocol upgrades, and Web3 security.
Time is the only admin.
Recent Articles
Can a Liquidity Locker Be Hacked? What the DxSale Incident Shows
Yes, if the locker has an owner key. How the May 2026 DxSale drain worked, and a short checklist to test any locker for the same weakness.
How to Lock Liquidity on Optimism: Step-by-Step Guide
Lock Velodrome basic-pool or Uniswap v2 LP tokens on Optimism with 0xKeep: two transactions, a flat 0.03 ETH fee, and a public lock certificate.
How to Lock Liquidity on Arbitrum: Step-by-Step Guide
Lock Uniswap v2 or Camelot v2 LP tokens on Arbitrum with 0xKeep. Two transactions, a flat 0.03 ETH fee, and a public certificate holders can check.
How to Lock Liquidity on Base: Step-by-Step Guide
Lock Uniswap v2 or Aerodrome classic LP tokens on Base with 0xKeep. Two transactions, no protocol fee, and a public certificate you can share with holders.
News
The Drift Exploit: When the Admin Key Is the Vulnerability
$280 million was drained from Drift Protocol on April 1 — not through a smart contract bug, not through a compromised seed phrase, but through a weeks-long operation that obtained two signatures from a five-member admin council and used them to seize complete protocol control. This is the admin key problem, executed at its logical extreme.
Q1 2026: $501 Million Lost. $21,912 Recovered. What the Data Says About Where the Risk Lives.
CertiK's Q1 2026 report closes the quarter at $501 million in confirmed losses across 145 incidents, with a recovery rate of 0.04%. The numbers are lower than Q1 2025 — but only because last year included a $1.4 billion outlier. Strip that out and the picture is considerably less reassuring.
When the Corporate Entity Becomes the Liability: The Balancer Labs Shutdown
On March 24, Balancer co-founder Fernando Martinelli announced that Balancer Labs — the corporate entity that built and funded one of DeFi's foundational DEX protocols — will shut down. The direct cause was a $110 million exploit in November 2025. The actual cause was the legal architecture that made the company inseparable from the damage.