Security

NEAR AI reported a remote-code-execution vulnerability in its legacy SGLang deployment, revoking two exposed Cloud API keys and confirming no evidence of private chat data compromise.

The XRP Ledger Foundation’s roadmap signals a study of post‑quantum signature schemes, including ML‑DSA‑44, with a potential migration path slated for 2027‑2028, but no network‑wide upgrade is imminent.

Federal prosecutors in Massachusetts filed a civil forfeiture action targeting over $456,000 in USDT tied to romance scams that used dating sites and Facebook to solicit cryptocurrency investments.

LNbits released a critical update to address vulnerabilities after a wave of attacks that led to thefts from Lightning wallet instances.

The Philippine SEC says personal data tied to individual accounts may have been exposed in a November 6 incident, while the Bureau of Internal Revenue separately investigates claims that about 340,000 lines of taxpayer i...

The hack highlights vulnerabilities in crypto exchanges, potentially escalating geopolitical tensions and prompting stricter regulatory measures. The post Binance $6B hack sends North Korea’s funds across 11 chains appea...

Near AI disclosed a security breach that exposed account information for about 100 users and compromised data from 18 legacy AI agents after an SGLang vulnerability allowed code execution on an inference server.

Initia paused its layer 1 network after unauthorized transfers from bridged asset escrow accounts totaled about $615,000, marking the second exploit in less than a month.

LNbits released version 1.7.0 on November 10 as an urgent security update following attacks that began on November 8, instructing all operators to upgrade before restarting servers.

Crosschain bridging protocol Across has advised users not to access its app or connect wallets while it investigates a potential security incident, following user reports of losses.

Near AI says an attacker exploited a flaw in SGLang to access internal systems, downloading account details for about 100 users and data from 18 older AI agents.

The XRP Ledger Foundation outlined a roadmap to introduce post‑quantum signatures, estimating a 213% increase in transaction size and costs up to $255,000, with a target of readiness by 2028.

Binance has issued a security warning about an iOS vulnerability called worse_query that could allow malicious apps to access seed phrases, private keys, and login credentials stored by other apps.

Binance says a publicly released iOS sandbox escape could let malicious apps read other apps' files, including wallet seed phrases and private keys, while Apple's latest security notes do not mention the flaw.

Initia L1 was halted Tuesday after compromised infrastructure keys allowed unauthorized transfers, adding $615K to October's $2.7M loss. Combined losses exceed the chain's remaining TVL.

OpenAI has introduced Control Room, a central system that can stop AI research jobs within 35 seconds of a decision to halt them, following incidents where models acted outside their instructions.

An early Ethereum wallet that received its first ETH in the 2015 genesis block transferred about $4.6 million worth of ETH after more than a decade of inactivity, while avoiding an attempted address-poisoning attack.

Binance has issued a security advisory about an iOS vulnerability dubbed worse_query that could let malicious apps read other apps' files, potentially exposing seed phrases and login credentials.

Anthony Pompliano argues that a spot bitcoin ETF is the most secure option for holding $10,000 to $10 million in BTC, a stance that clashes with the self-custody ethos and follows a rough month for hardware wallet makers...

The XRP Ledger has introduced a quantum-resistant account upgrade that lets users replace signing keys without higher fees, as Ripple targets full protection by 2028.