Attackers are exploiting an Alpine SSH password-bypass flaw; operators should patch and restart SSH or disable password authentication.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
Binance halts MEXC withdrawals after FinCEN cut MEXC off from the US financial system over $16 billion in suspicious flows.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
Anza's draft to remove Solana durable nonces would bar activation before May 5, 2027, putting custodians on a six-month clock after Drift's $295.7M exploit.
Elliptic traced North Korean hackers laundering about 117,000 NEAR (~$430,000) from the $6.3B Binance hack through six homemade memecoins.
LNbits is urging all server operators to shut down after attacks, with patches expected in 24 to 48 hours; a security-critical event for Lightning operators.
A clear layman explainer of how weak randomness in the Coldcard seed generation enabled a roughly $130m Bitcoin theft, with lessons for self-custody.
MARA sold 13,597 BTC for $1.1B to repay loans and fund AI infrastructure, and says more sales are coming.
The CFTC told US regulated derivatives exchanges to drop state-based access restrictions within 30 days or explain why they cannot.