Urgent.News

What's breaking now, across thousands of outlets.

Wednesday, 14 October 2026 Reading Room

Tech

Oracle Manipulation Risk Report: Gemini

Oracle Manipulation Risk Report: Gemini Target Protocol : Gemini (TVL: $5527.7M) Oracle Manipulation Risk Report – Gemini Protocol: Gemini (Ethereum & L2) – TVL: $5.527 B (≈ $5.5 B) Prepared by: [Your Firm] – Senior DeFi Security Research & Auditing Team Date: 14 Oct 2026 1. Executive Summary Gemini is a high‑value, permissioned lending/borrowing platform that relies heavily on on‑chain price…

dev.to ·

Oracle Manipulation Risk Report: Gemini Target Protocol - Gemini (TVL: $5.527 B) is a high-value, permissioned lending/borrowing platform relying on on-chain price feeds for collateralisation ratios, liquidation thresholds, and interest rates. With $5.5 B locked across Ethereum and L2s, a distorted price oracle can lead to undercollateralised positions, unfair liquidations, and systemic cascade.

Four primary attack vectors identified include single-source dependency on centralised feeds, insufficient TWAP window & update frequency, lack of cross-chain redundancy, governance-controlled oracle parameters, and oracle feed staleness & DoS. The overall Oracle Manipulation Risk Score is 7/10 (High), recommending immediate remediation of highest-priority findings.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Postgres Retrieval Architecture: Multi-Tenant SaaS Help Center Schema Design

Short answer: use a staged retrieval design with explicit collections, bounded queries, and traceable source context, then make index cost a schema input rather than a vendor-selection afterthought.

  • Retrieval unit should be smallest citable, refreshable, deletable source section
  • Schema records tenantid, sourceid, canonicalref, updatedat for independent updates
  • U L V E formula helps plan retrieval architecture budgeting

·dev.to

Lovable Cloud: What You Actually Get

Lovable Cloud is the backend Lovable switches on for you the first time your app needs to save something. Ask for a login page or a table of orders and it appears: a database, auth, file storage, edge…

·dev.to

After the Rust cutover: offline-first invoicing, a real tax engine, and one loud week of shipping

The build-in-public series covered the rewrite — fifteen chapters of porting a .NET invoicing SaaS to Rust. The cutover happened on a Tuesday.

  • FoxyInvoice introduces offline-first invoicing with draft saving and browser crash resilience
  • Tax engine enables state-specific tax declaration and zero-tax invoices for no nexus
  • Multi-company functionality allows managing up to five companies with isolated data

·dev.to

The x402 bottleneck isn't buyers. It's the second call.

@lowkeybuilds crawled all 31,620 x402 Bazaar listings this week and found 77% had two payers or fewer in 30 days, most likely the seller's own test call. Conclusion: supply is not the bottleneck.

  • 77% of x402 listings feature two or fewer buyers within 30 days
  • Trader Alex tested theory by offering $0.01 per call to 85 sellers
  • Buyers who engage in second call crucial for successful transactions

·dev.to

Vaultledger: a Freelance essential

What I Built As a computer science student juggling freelance development, keeping track of messy PDF invoices, parsing tax rates, and formatting general ledger journal entries is a major distraction.

  • VaultLedger is a desktop utility for freelancers and independent contractors
  • Offline, air-gapped tool processes PDF invoices and receipt images
  • Uses Google Gemma 2B model for deterministic schema extraction

·dev.to

More from Wednesday 14 October →