THORChain trading resumes after a $10.7M exploit, with RUNE near $0.419 as vault checks, upgrades and XMR plans shape its recovery path now.

Aztec Labs investigates a $2m transfer from a deprecated payments product, saying network contracts and AZTEC token are unaffected for now.

Humanity Protocol’s H airdrop reaches six exchanges as Binance Alpha, Bybit, MEXC, Bitget, KuCoin and Gate support the 1:1 swap for users.

Humanity Protocol will replace old H tokens with a new Ethereum token and 1:1 airdrop after a $36M exploit tied to stolen keys.

Enterprises using the open-source AI orchestration platform Langflow are being urged to patch a high-severity path traversal flaw amid active exploitation, despite a fix having been available for more than two months.

The bug, which stems from improper handling of filenames in Langflow’s file upload functionality, can allow attackers to write files to arbitrary locations within the affected…

Aztec Connect lost $2.1m after an old immutable smart contract was exploited, while Aztec Labs said the current network stayed safe from it.

Humanity Protocol's H token fell 83% after a private key breach drained over $30M, prompting warnings around its bridge and liquidity pools.

Syscoin paused its bridge after a validation flaw created about 5B unauthorized SYS outputs now being traced across UTXO addresses.

Yuga Labs rescued 68 NFTs from a Flooring Protocol exploit after a bug put BAYC, CryptoPunks and other collections at risk.

ZachXBT flagged JuCoin over withdrawal delays and reserve concerns as users questioned JuChain stablecoins and past JuDAO incidents.

Zcash faces fresh pressure after Orchard bug disclosure as Arthur Hayes exits ZEC, citing doubts over counterfeit supply and future checks.

An exploit described as “remarkably simple” allows anyone to add a new email address to any Instagram account using Meta’s AI chat bot, allowing full account takeover.

This is a companion discussion topic for the original entry at https://www.privacyguides.org/news/2026/06/04/metas-ai-support-agent-used-by-hackers-to-take-over-instagram-accounts/

An exploit described as “remarkably simple” allows anyone to add a new email address to any Instagram account using Meta’s AI chat bot, allowing full account takeover.

EDGE token fell over 40% as edgeX blamed external manipulation while ZachXBT questioned insider control and low circulating float.

Kelp DAO hacker laundered about $220M in unfrozen funds through privacy channels, leaving roughly $1.7M in original wallets.

Gnosis Pay users were urged to withdraw EURe and GNO after a Zodiac delay module bug let an attacker initiate Safe transactions.

Inside the six-month North Korean operation that drained Drift Protocol for $285M and KelpDAO for $292M, and what it means for the future of DeFi security.

Stake DAO says it contained the vsdCRV exploit to Arbitrum, secured mainnet backing, closed the bridge and began sunsetting a market.

THORChain prepares restart after a $10.7M exploit, with ADR028 approved, a hacker bounty active, and v3.19.0 testing before mainnet release.

Blockaid says a SquidRouterModule exploit drained 86 Gnosis Safes for about $3M, with stolen tokens swapped into DAI on Ethereum and Base.

StablR USDR and EURR depeg after a suspected key compromise lets an attacker mint tokens and extract 1,115 ETH worth $2.8M in DEX swaps now.

Polymarket’s UMA CTF Adapter on Polygon was reportedly exploited for over $520K, with stolen funds partly sent to ChangeNOW, analysts say.

Verus bridge exploiter returned 4,052 ETH worth $8.5M, keeping 1,350 ETH as bounty after the $11.5M forged-transfer attack.

THORChain opened ADR028 voting after a $10.7M exploit, proposing POL losses, synth sharing, no new RUNE, and a hacker bounty plan.

Gezine氏がHackeroneからまた2500ドルの報奨金獲得の連絡が来たと報告していました。→→→この記事の続きを読む

The post Gezine氏 Hackeroneでまた2500ドルのカーネルexploit? すでに対策済み first appeared on 大人のためのゲーム講座.

Aave has restored borrowing against wrapped Ether across affected markets as the decentralized lending protocol continues recovering from the fallout tied to Kelp DAO’s April exploit. In a post published Sunday, Stani Kulechov said Aave had reinstated loan-to-value ratios for…

TheFloW氏がPS5のHypervisor(ハイパーバイザー)の脆弱性を利用しPS5でLinuxを起動させることができるps5-linux-loader v2.1をリリースしていました。→→→この記事の続きを読む

The post TheFloW氏 ハイパーバイザーexploitを6.02までに移植 PS5の22.02-06.02.00でLinux起動 first appeared on 大人のためのゲーム講座.

For the few people who have spent the past weeks living under a security rock, the Linux kernel has found itself the subject of multiple severe bugs in the form …read more

Hyperbridge launched a HackenProof bug bounty with rewards up to $50K after its April exploit exposed cross-chain proof risks in DeFi

ZachXBT says THORChain may have lost over $10M in a multi-chain exploit as the network halts trading and RUNE drops after alert.