Across's domain was handed to an attacker through Namecheap social engineering; the site is back under the protocol's control, though the loss estimate is unconfirmed.
Summary written by AI. Read the source before acting on anything.
The top five, plus AI agents doing real things on-chain, at 6:30 a.m. Central. Free.
Ledger's developer kit reports every signature to Ledger unless wallets opt out, a privacy issue wallet users should know about.
Ajna's founders argue that a fully backed stablecoin gives no protection against governance votes or faulty price feeds in DeFi lending.
LNbits shipped urgent 1.7.0 after attacks on November 8 drained funds; operators must upgrade before restarting servers, since older versions risk theft.
Initia halted its L1 after a $605,000 USDC outflow, which the team traces to compromised rollup infrastructure keys.
Binance halts MEXC withdrawals after FinCEN cut MEXC off from the US financial system over $16 billion in suspicious flows.
An iOS vulnerability lets malicious apps read other apps' local files, exposing seed phrases and private keys; users should audit sideloaded apps and move funds if exposed.
Bots flagged an 11-year-old Ethereum wallet from the 2015 launch within minutes of it moving and planted lookalike addresses, but the owner sent $4.6M to the correct address.
Judge McMahon finds CFTC swap rules 'inherently contradictory' and lets New York require a state license for Novig's sports contracts.
Arkham traced $63 million of Bitget hack funds into CoinJoin mixing, with another 959 BTC in labelled wallets.
Bitcoin Core disclosed bugs that could freeze mining nodes; fixes shipped in October 2025 and details were held until the vulnerable 29.x line reached end of life on Oct. 27.