Exploits, malicious approvals, drains and scam-prevention guidance.
Rujira lost about $200,000 on November 10, 2026 when an attacker abused a skew-math flaw in its concentrated liquidity positions. The app layer is halted and full reimbursement is pledged.
A supply-chain attack on Ethersphere shipped malicious bee-js 13.3.0 and Swarm Desktop 0.56.2 builds that stole Swarm node keys and installed a backdoor. Here is how to check and recover.
The across.to domain was hijacked on November 10 and used to phish token approvals. Here is who is at risk and how to check and revoke approvals safely.
NEAR Intents halted services after an exploit reportedly caused about $3.8M in losses and disrupted deposits and withdrawals across multiple networks.
New reporting details how the Symbiosis exploit used privileged access and negative-fee logic to mint unbacked syBTC. Here is what LPs and bridge users should verify.
The SingularityNET-related exploit has widened to unauthorized token mints across AGIX, WMTX, NTX and linked FET infrastructure. Verify contracts and avoid unofficial recovery links.
D’CENT has issued updated guidance for App Wallet users after abnormal transfers. Affected users should update the app, check whether action is required, and move assets to a wallet created with a fresh recovery phrase when instructed.
Liquid Network reported roughly 4,000 BTC withdrawn from its federation wallet and halted new transactions. Here is a safety and transaction-status checklist for users.
Trezor users face targeted phishing after a third-party email breach. Learn how to verify messages and what to do if a seed phrase was exposed.
