BREAKING
KELP DAO $292M drained via forged LayerZero DVN messages — Lazarus Group 19 APR 2026

1. Who we are

QuiverCrypto is an independent security research publication. References to "we", "us", and "our" refer to QuiverCrypto.

2. Data we collect

Analytics

We use Google Analytics (GA4) and Matomo to understand how visitors use the site. These tools collect anonymised usage data including pages visited, session duration, and referring source. Matomo is self-hosted on our infrastructure and data does not leave our control.

Newsletter subscriptions

If you subscribe to the weekly digest, we collect your email address solely to send the newsletter. We do not share, sell, or rent subscriber email addresses to any third party.

Contact form

Messages sent via the contact form are stored securely and used only to respond to your inquiry. You may submit anonymously — name and email are optional.

3. Cookies

We use first-party cookies for analytics (Matomo) and third-party cookies from Google Analytics. You may opt out of Google Analytics using the Google Analytics opt-out browser add-on. Matomo respects the Do Not Track header.

4. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us via the contact page.

5. Data retention

Analytics data is retained for 26 months. Newsletter subscriber data is retained until you unsubscribe. Contact form submissions are retained for 12 months.

6. Third-party services

We use Google Analytics (Google LLC, USA) and Matomo (self-hosted). No other third-party data processors handle personal data.

7. Changes to this policy

We may update this policy. The "last updated" date at the top reflects the most recent revision. Continued use of the site after changes constitutes acceptance.

8. Contact

Questions about this policy? Contact us.

Weekly digest · Free

Get the post-mortem
before the protocol does.

Confirmed exploits, attack vector breakdowns, and recovered-funds updates delivered every week. Independent — no protocol sponsorships, no advertising.

No ads · No spam · Unsubscribe anytime