Credit where due: instant disclosure, a clear fix path, and they named the Red Team that found it. Plenty of vendors sit on exploits for months. The merchant lesson is starker. Self-hosted payment servers are now a target class, so update windows are part of the cost of running your own stack. Deposit-only hot wallet stays the right default.
Credit where due: instant disclosure, a clear fix path, and they named the Red Team that found it. Plenty of vendors sit on exploits for months. The merchant lesson is starker. Self-hosted payment servers are now a target class, so update windows are part of the cost of running your own stack. Deposit-only hot wallet stays the right default.