The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.

Claude Dashboards and Claude Motion are in beta today. Ask Claude to turn your data into live dashboards and your ideas into animated explainers.

The cat is out of the bag!

The Asset Recovery Tool Is Now Live The official asset recovery tool is now available for users whose wallets were affected by the June 2026 security incident. It allows you to verify control of an affected wallet, review any assets eligible for recovery, and submit a recovery request to a new Cardano wallet that you control. The recovery tool is available only at secondfi.io in a web browser. It is not completed through the SecondFi app. You do not need to have submitted a claims ticket before you start. Submitting a recovery request through the official tool begins the claims process for the affected wallet. Recovery is separate from wallet migration. Migration moves supported assets that remain in a wallet to a new wallet. Recovery concerns eligible assets affected by the security incident. How long recovery takes There are two separate stages, each with its own timeframe: -Proof generation, while you use the tool: up to approximately 15 minutes. This takes place on your own device, in your browser, and the browser window must stay open until it is complete. -Claim processing, after you submit: up to five working days. To maintain security measures, submitted claims are processed in batches. No action is needed from you during this stage. Before you start Have the following ready: The recovery phrase for the affected wallet. The tool supports 12, 15, and 24-word recovery phrases. A newly created Cardano wallet that you control, and its receiving address. A hardware wallet can provide an additional layer of security because it keeps private keys offline. A private, trusted computer with a current web browser. Do not use a public or shared computer. A device and internet connection that meet our recommended specifications: at least 2 GB of available memory, a processor no more than five years old, and an internet connection of at least 50 Mbps. Recovery runs entirely in your browser, is demanding on both processing power and memory, and requires you to download a file of about 2 GB. Do not use the affected wallet, an exchange deposit address, or any address you do not control as your destination. How recovery works Recovery is one continuous process. Begin by reading and accepting the Recovery Terms. The tool then takes you through four steps, set out below. If you have more than one affected wallet, repeat the process for each wallet. Step 1: Verify your affected wallet Enter the recovery phrase for one affected wallet. Before you type it, confirm that you are on your own private, trusted computer, that nobody can see your screen, that no screen sharing or recording is running, and that the address bar shows secondfi.io. Step 2: Review what is eligible The tool checks the wallet's addresses against the incident records and shows an estimated breakdown of any assets eligible for recovery. Each affected address is treated as its own request, and only addresses with recoverable assets are submitted. Step 3: Enter your destination address Provide the receiving address of your new Cardano wallet and complete the required confirmations. The destination address is bound into the proof and cannot be changed after you submit. Check every character carefully before you continue. Step 4: Generate the proof and submit The tool generates a zero-knowledge proof on your device for each eligible affected address, binding it to your destination address, and then submits your recovery request. Proof generation can take up to approximately 15 minutes. How long it takes depends on your device's processing power and your internet connection, which is why we recommend the device specifications listed above. It may take longer on older or less powerful computers and for wallets with more affected addresses. Keep the browser window open and do not leave or refresh the page until proof generation is complete. If it is interrupted, the tool will show a retry option. After you submit Once your request has been validated and submitted, it enters claim processing. Claims are processed in batches, so allow up to five working days for your request to be processed and for recovered assets to arrive in your destination wallet. No further action is required unless the tool or our official channels tell you otherwise. Please remember: This is not instant, it will take up to five working days for your request to be processed. You can check your status at any time using the status checker at secondfi.io by entering your new destination address, not the affected wallet address. Why the tool asks for your recovery phrase Your recovery phrase is used locally in your browser to generate the zero-knowledge proof. It is not stored or transmitted. Only the proof is submitted with your recovery request. Browser and security tool warnings Because the recovery tool uses your existing recovery phrase to prove ownership of your wallet, some anti-phishing tools, anti-scam tools and browser extensions may show a warning, or display a blank screen, when you open the tool or enter your recovery phrase. This alone does not mean the official tool is malicious. Before you continue, always check that you are on the exact official domain, secondfi.io, with HTTPS and no extra words, characters or lookalike spellings. Always type the address yourself rather than following a link sent by direct message, email, advertisement or any other third party. What can be recovered Amounts are assessed against the incident snapshot and shown as an estimate. The final amount may differ. For each eligible NFT that cannot be returned directly, a fixed amount of 30 ADA will be included in the ADA shown for the relevant affected address. Rules that protect you Type secondfi.io directly into your browser or from the official X account mentioned below. Never follow a link from an email, advertisement, direct message, or search result. Enter your recovery phrase only yourself, and only in the official recovery flow after confirming that the address bar shows exactly secondfi.io. Make sure nobody can see your screen and that no screen sharing or recording is running. Do not install any browser extension or application claiming to be required for recovery. No fee is required. Anyone who asks you to pay a fee, send ADA or another asset, sign a transaction, or transfer assets to an address they provide is attempting to defraud you. We will never contact you first to ask you to begin recovery. Do not use the affected wallet again. Recovery does not make it safe to use. Our official channels X accounts: @secondfiapp and @secondfi_jp Support portal: support.secondfi.io

Dots will be available in ChatGPT on web, mobile, and desktop across Pro, Business Premium, and Enterprise users in eligible markets. To get started, create your first dot in the ChatGPT desktop app or your desktop browser, connect your apps, and let it introduce itself.

Introducing Claude Opus 5.5, the first model in our new Claude 5.5 family. It performs at the level of Claude Fable 5.1 for most tasks, and costs 40% less to run than Opus 5.

Security Audit Update: Asset Recovery Tool As we prepare to launch the Asset Recovery Tool for users affected by the security incident, we are providing an update on our technical progress and security review. On 3 August 2026, we engaged @zksecurityXYZ to conduct an independent security audit of our proof-tool repository. Developed for SecondFi, the tool allows users to verify control of a Cardano wallet credential through zero-knowledge proofs, without disclosing private keys or derivation paths. The system is designed to optimize computing and memory requirements so that users can generate proofs directly in their browsers. The project includes custom circuits and prover patches to the consensys/gnark and consensys/gnark-crypto repositories. Audit Results - High-severity issues: zkSecurity identified two high-severity issues in the upstream code. We implemented fixes for both issues, and zkSecurity reviewed, tested, and confirmed that the issues were resolved. - Low-severity issues: Two low-severity issues in the target repository remain open. zkSecurity assessed both issues as not practically exploitable. The complete audit report, including the detailed technical findings, is available here: reports.zksecurity.xyz/repor… About the Asset Recovery Tool - User-initiated: Affected users control when to begin their Recovery Request. - Cardano-first: The tool uses zero-knowledge proof technology to verify wallet control and facilitate the safe recovery of assets without requiring users to provide seed phrases or private keys. Next Steps and Launch Timeline - Smart contract audit: The next testing phase will include a dedicated audit of the recovery smart contract. We will provide a further update when that review is complete. - Production launch: Subject to completion of the remaining audit and final production checks, the Asset Recovery Tool is expected to launch in the coming weeks. - User guidance: We will publish step-by-step instructions and user guides before launch. - Security reminder: Please rely only on information published through SecondFi’s official channels. SecondFi will never ask you to provide your seed phrase or private keys. Our official channels are @secondfiapp and @secondfi_jp on X, and support.secondfi.io

We’re back. taptools.io

🛡 The Wallet Migration Tool is Now Live. The wallet migration tool is available in the SecondFi app. This tool is for users who still hold Cardano assets in SecondFi. It moves what you currently hold out to your newly created Cardano wallet destination address. We encourage everyone with a remaining Cardano balance to migrate, whether or not you were affected by the incident, because SecondFi is winding down. If your wallet was emptied in the incident, the tool you are waiting for is the asset recovery tool, and we expect it to be available in September. Migrating does not affect your claim. About the migration tool: - It moves your entire Cardano balance (including all ADA, native tokens, and NFTs) from your current wallet to the destination address of a newly created Cardano wallet from a provider of your choice. The tool has been audited by @Bitdefender. Before you start: - Create a new Cardano wallet with a provider of your choice and have the destination address ready. We recommend using a hardware wallet. How it works: - The tool handles the technical steps automatically. - If your ADA is currently staked, the tool will unstake it so the full amount can be included in the transfer. - This also means your DRep delegation will no longer be active, so you will need to delegate to a DRep again from your new wallet to continue participating in Cardano governance. - You will need to migrate one wallet at a time. Important reminders: - Blockchain transfers cannot be reversed once signed and submitted. - Check your destination address carefully. Only send to a Cardano wallet you control, never to an exchange deposit address. - The migration tool moves Cardano assets only. Non-Cardano assets will need to be moved separately. - Please do not delete your original wallet from SecondFi or the application itself, as it may be needed for the asset recovery process. The video below walks through the full process. Read the full FAQ: kb.secondfi.io/en/article/se…

Cardano's biggest presence yet at @TOKEN2049 Singapore, this 7-8 October. A dedicated Cardano booth will feature 20 projects selected from across the ecosystem. Building on Cardano and want a spot on the stage? Applications close 25 August: token2049.cardano.org/

COLDCARD Mk3 Security Advisory If you generated a seed on a Mk3 after firmware 4.0.1, your funds may be at risk. Mk4, Q and Mk5 are not affected based on our early analysis. Read the advisory and migrate carefully: blog.coinkite.com/coldcard-m…