Across Protocol's website was hijacked via a social engineering attack on its domain registrar Namecheap, redirecting users to a phishing site; the site has been restored.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Ledger's developer kit reports every signature to Ledger unless wallets opt out, a privacy issue wallet users should know about.
Ajna's founders argue that a fully backed stablecoin gives no protection against governance votes or faulty price feeds in DeFi lending.
LNbits shipped urgent 1.7.0 after attacks on November 8 drained funds; operators must upgrade before restarting servers, since older versions risk theft.
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
Binance halts MEXC withdrawals after FinCEN cut MEXC off from the US financial system over $16 billion in suspicious flows.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
Judge McMahon finds CFTC swap rules 'inherently contradictory' and lets New York require a state license for Novig's sports contracts.
Arkham traced $63 million of Bitget hack funds into CoinJoin mixing, with another 959 BTC in labelled wallets.
Bitcoin Core disclosed bugs that could freeze mining nodes; fixes shipped in October 2025 and details were held until the vulnerable 29.x line reached end of life on Oct. 27.