LNbits shipped urgent 1.7.0 after attacks on November 8 drained funds; operators must upgrade before restarting servers, since older versions risk theft.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
Binance halts MEXC withdrawals after FinCEN cut MEXC off from the US financial system over $16 billion in suspicious flows.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
Anza's draft to remove Solana durable nonces would bar activation before May 5, 2027, putting custodians on a six-month clock after Drift's $295.7M exploit.
Elliptic traced North Korean hackers laundering about 117,000 NEAR (~$430,000) from the $6.3B Binance hack through six homemade memecoins.
LNbits issued an emergency shutdown warning after a Paywall extension exploit drained at least one operator's Lightning funds.
A clear layman explainer of how weak randomness in the Coldcard seed generation enabled a roughly $130m Bitcoin theft, with lessons for self-custody.
Across Protocol is investigating a possible domain-level security incident, with users reporting drained wallets; avoid the app until resolved.
LlamaRisk proposes freezing and exiting $1.33B of collateral from Aave Core, with borrowers asked to migrate to V4.