⚠️ JUST IN: Metamask security incident forces validator exits
A security incident involving MetaMask prompted the forced exit of 17,000 ETH validators holding approximately 523,000 ETH.
While several validators remain active following the event, reports indicate that a small number of block rewards were diverted.
A security incident involving MetaMask prompted the forced exit of 17,000 ETH validators holding approximately 523,000 ETH.
While several validators remain active following the event, reports indicate that a small number of block rewards were diverted.
⚠️ JUST IN: Streamer loses funds in social engineering scheme
Three individuals, allegedly including @twink, reportedly tricked Kick streamer PapaGambles into transferring approximately $70,000 to an Exodus wallet which was subsequently drained. The suspects are now publicly claiming responsibility for the incident.
Three individuals, allegedly including @twink, reportedly tricked Kick streamer PapaGambles into transferring approximately $70,000 to an Exodus wallet which was subsequently drained. The suspects are now publicly claiming responsibility for the incident.
⚠️ JUST IN: NEW ANTI-FRAUD REGULATIONS PLANNED FOR 2027
New anti-fraud proposals for 2027 plan to ban reselling phone numbers registered under another name and outlaw grey-market SIM cards carrying preloaded credit. Online services would also need to store account data for three years.
Additionally, virtual PBX systems require listing in a dedicated registry, while sharing subscriber data for texts without legal grounds is prohibited ahead of the expected 2027 rollout.
New anti-fraud proposals for 2027 plan to ban reselling phone numbers registered under another name and outlaw grey-market SIM cards carrying preloaded credit. Online services would also need to store account data for three years.
Additionally, virtual PBX systems require listing in a dedicated registry, while sharing subscriber data for texts without legal grounds is prohibited ahead of the expected 2027 rollout.
⚠️ JUST IN: Near Intents exploited for $3.8M in BSC incident
Near Intents was exploited for $3.8M+ after its BSC hot wallet experienced multiple irregular outflows a few hours ago. The affected hot wallet has since stopped processing transactions while an ongoing incident impacts multiple EVM chains.
Stolen funds were immediately transferred to Kucoin and bridged to Bitcoin. The associated BSC theft address is 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37.
Near Intents was exploited for $3.8M+ after its BSC hot wallet experienced multiple irregular outflows a few hours ago. The affected hot wallet has since stopped processing transactions while an ongoing incident impacts multiple EVM chains.
Stolen funds were immediately transferred to Kucoin and bridged to Bitcoin. The associated BSC theft address is 0x09fd1f5d9f185067a92493e43aa259ea4ab3ad37.
⚠️ JUST IN: Major outage disrupts Fragment platform
Fragment users are reportedly experiencing a major platform outage on Fragment.com, with paid star orders failing to deliver and NFT auction details failing to update.
Fragment users are reportedly experiencing a major platform outage on Fragment.com, with paid star orders failing to deliver and NFT auction details failing to update.
⚠️ JUST IN: White House Misspells United States in Super Intelligence Accord
A typo has been discovered beneath Donald Trump's signature on the Accord on Super Intelligence, which was executed alongside six major AI executives. The document features the spelling President of the Unites States.
Fact-checkers and multiple outlets confirmed the error after the document was shared by Trump. The agreement was finalized on September 29 during a push by the administration to substitute Artificial Intelligence with Super Intelligence in federal communications.
A typo has been discovered beneath Donald Trump's signature on the Accord on Super Intelligence, which was executed alongside six major AI executives. The document features the spelling President of the Unites States.
Fact-checkers and multiple outlets confirmed the error after the document was shared by Trump. The agreement was finalized on September 29 during a push by the administration to substitute Artificial Intelligence with Super Intelligence in federal communications.
⚠️ JUST IN: Uranium Finance hack trial opens in Manhattan
A federal trial has commenced in Manhattan concerning the 2021 Uranium Finance breach. The source reports that Jonathan S. faces allegations of exploiting smart contracts to misappropriate over $53,000,000 across 26 liquidity pools.
The source adds that the funds were subsequently laundered through TC and Pokemon Cards. Proceedings are now underway regarding the incident.
A federal trial has commenced in Manhattan concerning the 2021 Uranium Finance breach. The source reports that Jonathan S. faces allegations of exploiting smart contracts to misappropriate over $53,000,000 across 26 liquidity pools.
The source adds that the funds were subsequently laundered through TC and Pokemon Cards. Proceedings are now underway regarding the incident.
⚠️ JUST IN: CRYPTO HACKS CAUSE MASSIVE LOSSES IN SEPTEMBER
Crypto hacks and exploits caused $768M in losses during SEPTEMBER, marking the costliest month of 2026 so far according to the post. The Bitget breach of $387.5M and the Liquid Network exploit of $320M accounted for the majority of the reported losses.
Following the incidents, the source reports that some of the stolen funds were subsequently recovered.
Crypto hacks and exploits caused $768M in losses during SEPTEMBER, marking the costliest month of 2026 so far according to the post. The Bitget breach of $387.5M and the Liquid Network exploit of $320M accounted for the majority of the reported losses.
Following the incidents, the source reports that some of the stolen funds were subsequently recovered.
⚠️ JUST IN: FAKE SAFE CONTRACT EXPLOIT DRAINS TWO WALLETS
An attacker stole approximately 114 ETH valued at $305K from two crypto wallets through a vulnerability in a tool linked to Aave positions.
The exploit involved creating a fraudulent Safe to bypass permission checks, unlocking collateral to drain the funds while Aave remained secure.
An attacker stole approximately 114 ETH valued at $305K from two crypto wallets through a vulnerability in a tool linked to Aave positions.
The exploit involved creating a fraudulent Safe to bypass permission checks, unlocking collateral to drain the funds while Aave remained secure.
⚠️ JUST IN: SCHOOLKID HACKED MICROSOFT AT AGE 16
A schoolboy known as Faav discovered a security flaw in Microsoft's internal Titan platform at 16. By swapping a token and typing admin, he gained administrator rights and accessed 17 databases containing 17.3 trillion rows of data via the API.
Although the system checked the JWT, it failed to verify its cryptographic signature. He reported the vulnerability to Microsoft without leaking the database, prompting the company to patch the hole and pay $5000.
A schoolboy known as Faav discovered a security flaw in Microsoft's internal Titan platform at 16. By swapping a token and typing admin, he gained administrator rights and accessed 17 databases containing 17.3 trillion rows of data via the API.
Although the system checked the JWT, it failed to verify its cryptographic signature. He reported the vulnerability to Microsoft without leaking the database, prompting the company to patch the hole and pay $5000.
❤2
⚠️ JUST IN: ShinyHunters member detained in Jordan
A primary ShinyHunters member identified by sources as Saif al-Din Khader, known by the alleged alias Rey and the handle @medusa, was taken into custody in Jordan on Tuesday and is assisting the FBI in identifying remaining members.
The suspect previously stated to KrebsOnSecurity in 2025 that he was already cooperating with law enforcement, though that assertion could not be verified at the time.
A primary ShinyHunters member identified by sources as Saif al-Din Khader, known by the alleged alias Rey and the handle @medusa, was taken into custody in Jordan on Tuesday and is assisting the FBI in identifying remaining members.
The suspect previously stated to KrebsOnSecurity in 2025 that he was already cooperating with law enforcement, though that assertion could not be verified at the time.
❤1
⚠️ JUST IN: Crypto.com allegedly locks user accounts without explanation
Crypto.com is reportedly freezing user accounts without providing clear explanations. According to the post, one user alleges that $500K has been locked for 6 months.
The source states that the platform is now moving to terminate the affected account.
Crypto.com is reportedly freezing user accounts without providing clear explanations. According to the post, one user alleges that $500K has been locked for 6 months.
The source states that the platform is now moving to terminate the affected account.
⚠️ JUST IN: Greek Police Arrest 17 Over Crypto Scam
Greek police arrested 17 individuals allegedly tied to an investment scam that reportedly drew over 10,000 participants. Authorities state that the operation used an online platform to promise doubled returns within 50 days, amassing roughly $8M.
Investigators have verified 18 victims who suffered total losses of €55,970, and inquiries remain active.
Greek police arrested 17 individuals allegedly tied to an investment scam that reportedly drew over 10,000 participants. Authorities state that the operation used an online platform to promise doubled returns within 50 days, amassing roughly $8M.
Investigators have verified 18 victims who suffered total losses of €55,970, and inquiries remain active.
⚠️ JUST IN: Roblox GDPR system abused for restricted usernames
Individuals reportedly exploited the Roblox GDPR system to secure rare account usernames featuring restricted characters. This vulnerability allowed the creation of handles that typically violate standard platform naming policies.
The loophole now appears to be resolved. Consequently, the affected accounts have had their usernames reset to roblox_user_ followed by numbers.
Individuals reportedly exploited the Roblox GDPR system to secure rare account usernames featuring restricted characters. This vulnerability allowed the creation of handles that typically violate standard platform naming policies.
The loophole now appears to be resolved. Consequently, the affected accounts have had their usernames reset to roblox_user_ followed by numbers.