Total Security and Compliance for RWA

~$11.3M Lost: Multicall Router, Nostra | BlockSec Weekly

This report, covering 2026/09/14 - 2026/09/20, examines two security incidents with approximately $11.3M in combined losses, on Ethereum and Starknet. In the larger one, a multicall router accepted its own address as a dispatch target, so the nested call reached the Gateway module of a Safe wallet carrying the router's own already-authorized identity instead of the external caller's, and roughly 2,900 `aEthrsETH` was routed out of that wallet into an attacker-created Uniswap v4 pool. On Starknet, Nostra's oracle integration required a minimum of only one aggregated source, so when only two of the three configured price sources reached the aggregation, a manipulated thin-pool quote averaged with a normal quote to value `NSTR` at roughly $49.52, supporting approximately $3.5M of borrowing against overvalued collateral.

AML Banking: A Compliance Checklist for Banks

AML banking checklist: onboarding KYC, transaction monitoring, suspicious activity reports, and a risk-based approach banks must operate at exam speed.

AML in Finance: How Traditional Institutions Fight Money Laundering

AML in finance spans customer due diligence, transaction monitoring, and suspicious reporting for banks, brokerages, and asset managers in every regime.