Opentensor patched a critical vulnerability that could have let a single valueless EVM interaction drain both EVM and staked TAO balances -- but the researcher who found it says the team called it a duplicate and went quiet on requests for recognition. Elsewhere, Oro Subnet (SN15) landed a Y Combinator slot with its token already live, subnet emissions reopened ecosystem-wide, and Yuma Group flagged a widening gap between its composite index and raw subnet performance.
Full coverage
4 reports
01 / QUICK HIT
A community security researcher privately reported a critical vulnerability to Opentensor on Aug 27; the team merged a fix, PR #3130, two days later on Aug 29. The bug, as described by the researcher, could let a single valueless interaction with a malicious EVM contract take over a linked native/substrate account and drain both EVM and staked TAO balances, with no explicit approval required. The researcher compared it to the 2022 Moonbeam precompile bug, which drew a $1M Immunefi bounty on another chain, and said Opentensor dismissed the report as a duplicate of another submission before going quiet on requests for recognition -- prompting plans to publish full technical details on X.
Another community member disputed the scope of the claim, arguing only accounts that had actually interacted with a malicious EVM contract were at risk, not every TAO holder.
02 / DAILY
SN15 heads to Y Combinator
Oro Subnet (SN15) was accepted into Y Combinator. Opentensor Foundation noted it's the only YC startup in the past eight years to join the program with its own token already live.
03 / DAILY
Emissions reopen, shorting debate resumes
Subnet emissions rules reopened for all subnets this week, restarting debate over how to keep low-value subnets in check. Community members floated a future long/short market mechanism that would let traders bet against weak subnets -- supporters framed it as market discipline, skeptics warned it could destabilize emissions. One proposal called for subnets to demonstrate real, verifiable economic commitment before qualifying for significant emissions, layered on top of the existing Emission Gate and Conviction mechanisms. SN29 picked up a new name during the discussion: Tardigrade.
04 / DAILY
Yuma flags index divergence
Yuma Group reported a notable divergence this month between its Yuma Composite Index (YCX) and the Sum of Subnets metric. Yuma's COO published an explanation of what's driving the gap, arguing YCX is becoming an increasingly relevant institutional reference rate for Bittensor subnets.
