--- title: "Dishita Malvania (@dishitamalvania) | Hashnode" description: "Crypto journalist covering blockchain, Web3, AI & fintech. Read the latest articles by Dishita Malvania on Hashnode." url: "https://hashnode.com/@dishitamalvania" --- @dishitamalvania # Dishita Malvania @dishitamalvania · Joined April 2026 Crypto journalist covering blockchain, Web3, AI & fintech [Website](https://www.cryptotimes.io/author/dishita/) ### [The Bug That Compiles Clean: What Coldcard's Entropy Failure Teaches About Build Config](https://dishitamalvania.hashnode.dev/the-bug-that-compiles-clean-what-coldcard-s-entropy-failure-teaches-about-build-config?utm_source=hashnode&utm_medium=feed) A macro set to zero, an #ifdef that never read it, and five years of predictable keys. The C build-config bug class behind Coldcard's entropy failure. 9 min read · [dishitamalvania.hashnode.dev](https://dishitamalvania.hashnode.dev/the-bug-that-compiles-clean-what-coldcard-s-entropy-failure-teaches-about-build-config?utm_source=hashnode&utm_medium=feed) [Aug 6](https://hashnode.com/posts/the-bug-that-compiles-clean-what-coldcard-s-entropy-failure-teaches-about-build-config/6a748b835f31d30ac4093b77) ### [The $20M BonkDAO Hack Wasn't a Hack: Anatomy of a Governance Attack](https://dishitamalvania.hashnode.dev/bonkdao-governance-attack-explained?utm_source=hashnode&utm_medium=feed) No code was exploited. The attacker bought 1% of BONK's supply, met quorum with 7 wallets voting, and drained the treasury legally. 10 min read · [dishitamalvania.hashnode.dev](https://dishitamalvania.hashnode.dev/bonkdao-governance-attack-explained?utm_source=hashnode&utm_medium=feed) [Jul 10](https://hashnode.com/posts/bonkdao-governance-attack-explained/6a50da114c2d9a954e755c1d) ### [From "Code Is Law" to "Spec Is Law": The Security Shift That Could Save DeFi From Itself](https://dishitamalvania.hashnode.dev/from-code-is-law-to-spec-is-law-the-security-shift-that-could-save-defi-from-itself?utm_source=hashnode&utm_medium=feed) DeFi lost $770M to hacks in early 2026. "Spec is law" enforces safety rules at runtime, reverting exploits before they execute. Here is how it works. 10 min read · [dishitamalvania.hashnode.dev](https://dishitamalvania.hashnode.dev/from-code-is-law-to-spec-is-law-the-security-shift-that-could-save-defi-from-itself?utm_source=hashnode&utm_medium=feed) [May 21](https://hashnode.com/posts/from-code-is-law-to-spec-is-law-the-security-shift-that-could-save-defi-from-itself/6a0f4b17d8e265f60d43fb3f) ### [If an AI Controls Your Wallet, Do You Still Own Your Crypto?](https://dishitamalvania.hashnode.dev/if-an-ai-controls-your-wallet-do-you-still-own-your-crypto?utm_source=hashnode&utm_medium=feed) Coinbase, Trust Wallet, Ledger, and Cobo are handing AI agents the keys to your money. $45M in breaches already happened. The legal system has no answer. 17 min read · [dishitamalvania.hashnode.dev](https://dishitamalvania.hashnode.dev/if-an-ai-controls-your-wallet-do-you-still-own-your-crypto?utm_source=hashnode&utm_medium=feed) [Apr 23](https://hashnode.com/posts/if-an-ai-controls-your-wallet-do-you-still-own-your-crypto/69e9f7b316b084c068023bc7) ### [AI Is Helping Hackers Steal Crypto Faster Than Ever — What Devs Can Do About It](https://dishitamalvania.hashnode.dev/ai-is-helping-hackers-steal-crypto-faster-than-ever-what-devs-can-do-about-it?utm_source=hashnode&utm_medium=feed) $400M+ drained in Q1 2026. AI phishing up 1,400%. Ledger's CTO says the economics of crypto security are broken. Here are 5 real attack vectors hitting wallets right now — with code-level defenses you can ship today. 12 min read · [dishitamalvania.hashnode.dev](https://dishitamalvania.hashnode.dev/ai-is-helping-hackers-steal-crypto-faster-than-ever-what-devs-can-do-about-it?utm_source=hashnode&utm_medium=feed) [Apr 8](https://hashnode.com/posts/ai-is-helping-hackers-steal-crypto-faster-than-ever-what-devs-can-do-about-it/69d64349707c1ce76826aa57)