Across Prime introduces a trustless “bonded” relay model that replaces traditional escrow, enabling bridge operators to receive payments instantly using reusable collateral. By decoupling relay collateral from slow-settlement oracles, it reduces bridging to just two transactions while supporting high-throughput transfers. The system remains compatible with ERC-7683 intents and allows for extensions like arbitrary bond collateral and multi-destination routes, defaulting to escrow only when bonds are insufficient.
Pump.fun now shares 50% of PumpSwap trading revenue with coin creators, granting them 5 basis points (0.05%) in SOL per trade on their tokens. Eligible creators – including those with newly launched coins, coins still on the bonding curve, or those graduated to PumpSwap – can now claim on-chain rewards directly through their profile.
Coinbase anticipates decentralized exchanges will eventually surpass centralized ones in volume. To capture this shift, it is integrating on-chain settlement through the Coinbase Wallet frontend. Executives view TradFi players like Stripe and Robinhood as market-expanding tailwinds rather than threats. Strategic efforts include acquiring Deribit and Spindl, pursuing approval for U.S. perpetual futures, and securing licenses in Argentina and India. Venture holdings, carried at cost, offer asymmetric upside potential if crypto adoption outpaces expectations.
Fortnite's 650 million users and $400 million creator economy appear ideal for NFTs, but Epic CEO Tim Sweeney prioritizes interoperability via APIs and open standards over blockchain-based ownership. While Epic is opening Fortnite assets to external games, challenges like royalties, IP rights, and platform moderation hinder cross-platform compatibility. Without NFTs that provide neutral ownership and programmable royalties, users remain under centralized control.
2025.05.13·links.tldrnewsletter.com·4 min read·TLDR Crypto Ethereum developers are investigating an exploit vector introduced by the Pectra upgrade that allows wallets to be drained via malicious off-chain signatures. Users can unknowingly sign payloads later executed via permissive approvals. Core teams are now focused on improving signature UX and educating users on the risks of off-chain signing.
2025.05.13·links.tldrnewsletter.com·4 min read·TLDR Crypto Mountain Protocol, issuer of the USDM stablecoin, has signed an agreement to be acquired by Anchorage Digital, the only federally chartered crypto bank in the U.S. As part of the transition, the minting of USDM was halted yesterday. Existing users will continue to be supported. The acquisition aims to strengthen institutional stablecoin infrastructure.
This dashboard tracks adoption of EIP-7702 smart accounts across EVM-based chains.
Lido DAO has launched a governance vote to replace a validator operator after its oracle node was compromised in a targeted attack.
Strategy has acquired another 13,390 BTC for $1.34 billion at an average price of $99,856, bringing its total holdings to 568,840 BTC (over 2.7% of Bitcoin's total supply).
2025.05.13·links.tldrnewsletter.com·3 min read·TLDR Crypto Through its integration with Morpho, Coinbase has facilitated $168 million in USDC loans backed by $385 million in BTC collateral as of May 5.
VSCO launched Canvas, an AI collaborative moodboard for photographers to import, edit photos, and generate images via text and region editing. Launching days after Adobe's similar product, it uses tech from Facet, which was acquired last year. Canvas improves on tools like Slides and Pinterest. It is open to all with extra AI credits for subscribers.
2025.05.13·developers.googleblog.com·2 min read·TLDR Design The Byble project reimagines the ancient book with separate volumes as a luxury design object. Despite lacking formal design credentials, the Sydney-based property developer created a purely typographic edition emphasizing readability through careful text layout, debossed typography, and special "yield" moments highlighting key passages.
2025.05.13·links.tldrnewsletter.com·4 min read·TLDR Design As AI and no-code tools advance fast, the real challenge is shifting our mindset to curiosity over fear and exploring with openness, not resistance. The edge lies not in technical skills alone but in human traits like judgment, empathy, connection, communication, experience, creativity, and curiosity. We must build these strengths to complement machines, not compete with them to stay relevant.
A poorly designed button that forced registration before purchase cost an e-commerce company $300 million, showing how minor UX flaws can cause significant losses. Unlike technical debt, UX debt often goes unseen but harms trust, raises support costs, and lowers loyalty. The fix is to spot, track, and resolve UX issues with audits, focused sprints, and a culture that treats user experience as a business priority.
UX workshops boost careers by helping designers align stakeholders and solve problems faster. Key types include Problem Framing, Prioritization, Empathy Mapping, Rapid Ideation, and Future Visioning. Success needs clear expectations, strict timeboxing, smart participant choices, and flexibility.
2025.05.13·uxsurvivalguide.substack.com·8 min read·TLDR Design Miniflow lets you use multiple AI tools for writing, data analysis, or art in one place. No coding needed - point, click, and go.
Keep up with the very best of iOS design. From indie developers to big tech.
Cêpa Studio designed the vibrant branding for JayBe MilkShakes. Centered around JayBe, a playful character that encourages consumers to pause and enjoy, the identity uses bold colors, simple shapes, and fun animations to connect emotionally across packaging and social media. The project shows how thoughtful, expressive design can create strong consumer bonds.
Digital Product Passports in the EU push sustainable transparency by adding traceability, repairability, and resale to products. They offer designers chances to boost brand loyalty and support circular economies while creating smarter, sustainable experiences.
The AI Intention Matrix guides teams in building clearer AI features. It maps Augmentation vs Automation and Optimizing vs Satisficing to define human input and output quality. This helps reduce costs, avoid over-engineering, and ensure useful AI.
Elevating game concept art means balancing looks and technical needs, meeting briefs, working with designers for emotion and consistency, adding storytelling, knowing when to stop, trying new angles, giving clear notes, and sketching complex forms.
Designers can get ideas from gaming, interior design, music, food, film, design platforms, events, new tools, swipe files, and mood boards while keeping inspiration aligned with the audience, brand, and project goals.
AI boosts graphic design productivity, creativity, and precision.
Sponsored
Based on 8,306 interviews with security professionals, the new 2025 Cost of Insider Risks [5] report highlights the scope of the insider threat problem, and the cost vs opportunity of insider risk management.
Berkeley Research Group (BRG), a financial advisory firm working on multiple church bankruptcy cases, has disclosed a data breach. BRG was involved in at least ten bankruptcy cases involving dioceses and archdioceses nationwide.
Pearson has reported that an attacker breached its systems and stole “legacy” data. Other sources revealed that the stolen data was obtained via an exposed .git/config file containing a GitLab Personal Access Token (PAT), which was used to obtain hardcoded secrets for cloud platforms and data stores from source code. The stolen data allegedly contains customer information, financials, support tickets, and source code.
Cisco has released fixes for a maximum severity (10.0 CVSS score) vulnerability affecting IOS XE Software for Wireless LAN Controllers. The devices utilize a hardcoded JWT that could allow unauthenticated attackers to exploit the AP image download interface to upload files, perform path traversal, or execute arbitrary code. Only devices with the “Out-of-Band AP Image Download” feature, which allows APs to download AP's OS images via HTTPS, are vulnerable.
In this blog post, the author recounts creating defendnot, a Windows Defender disabling tool, after his previous project faced a DMCA takedown. The twist in the story is that he built it while traveling and got inspired while in Seoul, which made him seek to develop a "clean" implementation using Windows Security Center API.
This post explores SCIM (System for Cross-domain Identity Management), detailing its core components, potential security vulnerabilities, and common implementation issues. It provides insights into authentication bypasses, token management risks, user re-provisioning flaws, and potential account takeover scenarios in identity management systems.
Enforcing FIDO as the sole MFA is often seen as phishing resistant. However, this post shows a new attack that utilizes the OAuth 2.0 Device Code Flow to downgrade MFA. The Device Code Flow enables a user to authenticate devices. In this method, an attacker uses a headless browser to automate the Device Code Flow, allowing the user to be phished through an attacker-controlled link without entering the code.
Sponsored
Qwiet AI has been named BEST APPLICATION SECURITY SOLUTION [14] by the SC Awards [15]. Our Agentic AI AutoFix accelerates vulnerability detection, prioritizes by exploitability, and remediates code directly. We're reshaping AppSec for faster, more secure development. Schedule a personalized demo [16]to see why industry leaders trust Qwiet AI.
VanishID offers online executive (and families) protection, including continuous dark web monitoring for compromised passwords, detection of fake social media accounts, identification of misconfigured websites, and data and fake profile takedown capabilities.
The Agentic Radar analyzes and assesses agentic systems for security and operational insights. It helps developers, researchers, and security professionals understand how agentic systems function and identify potential vulnerabilities.
KoviD is a Linux kernel rootkit that hides itself and files, grants root privileges, and evades firewalls. It can easily manipulate network logs, gain root access, and persist through reboots.
German authorities seized €34 million from the eXch crypto exchange, alleging unlicensed operations and money laundering by North Korean hackers, including proceeds from the Bybit hack through illicit cryptocurrency transactions.
Micah Lee searched for DOGE employee Kyle Schutt's personal Gmail address on Have I Been Pwned and found that he appeared in 51 breaches and five pastes. Notably, Schutt's credentials appeared in info-stealer logs, meaning that a device belonging to him was infected with info-stealer malware at some point. Schutt has access to FEMA's core financial systems. DOGE has not confirmed if employees are using work or personal devices.
Zakhar Fedotkin found that ASCII control characters such as SOH (\x01) and ETX (\x03) can be exploited in Visual Studio Code to run arbitrary commands via node-pty, which sends raw bytes to the shell. The vulnerability exploits two vectors: injecting control characters into run configuration files and creating maliciously named files that execute commands when dragged into VS Code's terminal. This issue impacts macOS and Ubuntu systems, where control characters are permitted in filenames, although Microsoft does not view it as a security vulnerability due to measures like workspace trust warnings.
Florida's proposed social media encryption backdoor bill fails, and it was rejected after concerns about user privacy and potential security vulnerabilities from law enforcement access.
Roblox is being sued for allegedly tracking children's data without proper consent and sharing it with advertisers through hidden tools.
Hackers are now exploiting ClickFix attacks on both Linux and Windows systems by deceiving users into executing commands that install malware via fraudulent website error messages.
Klarna and Duolingo's AI-first strategies are drawing criticism, with Klarna backpedaling to rehire support staff after admitting quality suffered from excessive automation. Duolingo has faced public outrage on TikTok, where users are accusing it of prioritizing efficiency over human-led education. While both companies defend their use of AI as a tool, user sentiment reveals discomfort with automation replacing people.
Marketing budgets are expected to stay flat at 7.7% of company revenue in 2025. This is well below the 11.3% average from 2015 to 2019. Only 30% of chief marketing officers believe they have enough funding to carry out their strategies, and 79% report pressure to achieve more with fewer resources. Paid media now takes up 31% of marketing budgets, but rising ad costs mean returns often fall short, with 55% of leaders saying their campaigns fail to drive enough sales. To cope, 39% plan to cut spending on staff and agencies.
Structured designs with clean lines led to 39% more clicks for “effective” product messaging. Playful, unstructured visuals performed better for “fun” positioning. The findings suggest consumers subconsciously look for design cues that validate brand claims. Visual-message alignment matters most before brand familiarity sets in, shaping how new customers interpret value.
To build deeper brand connections, companies should blend EQ with data-driven insights. Start by uncovering emotional needs through qualitative methods, then validate those insights with data. Craft campaigns that reflect empathy and authenticity, while using data to fine-tune messaging and delivery across channels. Backed by research on experiential trends, Airbnb spotlighted belonging and inclusivity using guest data on travel preferences, while Café Bustelo engaged culturally Hispanic millennials through pop-ups rooted in community and heritage.
This year's Google I/O will focus heavily on AI, with major updates expected across Google's products. The Gemini model family and DeepMind's Project Astra will likely take center stage. Keynotes will highlight how AI is reshaping Search, Android, Cloud, and even Waymo's self-driving tech. CEO Sundar Pichai, DeepMind's Demis Hassabis, and other execs will lead sessions, including a talk on AI's role in revolutionizing Search. Android updates will debut separately during "The Android Show" a week earlier.
This LinkedIn tech stack includes 10 tools used across the entire content workflow. For ideation, Taplio surfaces viral posts, Kleo analyzes top-performing content from specific creators, and Claude helps break down why certain posts take off while generating new angles. For writing and editing, Grammarly polishes content and Notion serves as a content hub. Canva, Figma, and Ezgif handle visuals, from beginner-friendly carousels to high-reach GIFs. OpusClip and Screen Studio are used for creating polished video content, while Taplio and Notion also help with scheduling and keeping publishing consistent. This system helped generate over 1.2K inbound meetings and scaled a business to more than $4.5M in annual revenue.
The US television industry's annual upfront ad-selling season is underway amid economic uncertainty tied to potential tariffs. Analysts warn it could trigger a recession and depress ad spending. While NBCUniversal and Fox report stable demand, firms like eMarketer forecast a $4B drop in traditional TV ad revenue. Brands are cautious but wary of cutting budgets too sharply, recalling losses from past downturns. Digital ad spend may stay flat unless tariffs ease, in which case it could grow.