security
Every story this desk has filed under security, most recent first.
A Flaw in Old Magic Eden Listings Sent 23,155 NFTs Into Whitehat Custody
A vulnerability in Limit Break's Payment Processor V2 left dormant Magic Eden listings on Ethereum exposed. White hats moved more than $5.7m of NFTs out of reach before attackers could, and holders still need to revoke the approvals.
An Aggregator Says Half the Uniswap v4 Hooks It Checked Were Malicious
0x analysed 84,163 hooks on Uniswap v4 and found 54.2 percent of them malicious, calling the design a mistake. Uniswap's founder and a Paradigm partner said the failure is in how 0x routes orders.
An Aeon Agent Found the Credential Leak in Google's Agents CLI, Fixed in 1.4.1
A malicious project template could have copied a developer's SSH key or cloud credentials into a new repository. An agent running on the Aeon framework found it, Google's vulnerability programme validated it, and the fix shipped on 24 August. It is one of 86 the same scanner has filed across 77 repositories.
Scammers Are Now Impersonating Compliance Tools to Get You to Sign the Drain
Fake crypto AML checking services are luring users into approving transactions that hand over their assets. The pitch works because it borrows the language of safety.