Across Protocol is investigating a possible domain-level security incident, with users reporting drained wallets; avoid the app until resolved.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
LNbits shipped urgent 1.7.0 after attacks on November 8 drained funds; operators must upgrade before restarting servers, since older versions risk theft.
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
Binance halts MEXC withdrawals after FinCEN cut MEXC off from the US financial system over $16 billion in suspicious flows.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
Anza's draft to remove Solana durable nonces would bar activation before May 5, 2027, putting custodians on a six-month clock after Drift's $295.7M exploit.
Elliptic traced North Korean hackers laundering about 117,000 NEAR (~$430,000) from the $6.3B Binance hack through six homemade memecoins.
LNbits issued an emergency shutdown warning after a Paywall extension exploit drained at least one operator's Lightning funds.
A clear layman explainer of how weak randomness in the Coldcard seed generation enabled a roughly $130m Bitcoin theft, with lessons for self-custody.
LlamaRisk proposes freezing and exiting $1.33B of collateral from Aave Core, with borrowers asked to migrate to V4.