Security

SpaceX and Starlink’s official X accounts were hijacked and used to promote a memecoin called SCATMAN. The token briefly reached a $32 million market cap on Robinhood Chain. The attacker then cashed out roughly $135,000 worth of ETH, according to on-chain analytics platform Lookonchain.

GOAT Network says it is the only Bitcoin zkRollup that does not outsource its proof system. The project argues that keeping proving guarantees in-house reduces operational risk and helps protect the foundation of the network’s security model. The statement focuses on the independence of proof generation within a zkRollup architecture, positioning its security assumptions as different from other Bitcoin L2 approaches. The post provides no details on mainnet status, TVL, transaction volume, partnerships, third-party audits, or any disclosed vulnerabilities.

A Gate exchange user account was reportedly accessed from the owner’s old Mac web device using a legacy passkey, with the platform said to have retained complete records of the login. The incident is described as involving the theft of about 100,000–1,700,000 USDT (U) and 746,475 HSK, with HSK presented as the primary stolen asset. The key dispute centers on how liveness facial verification was passed, prompting calls for Gate to release the verification video for independent review amid speculation about possible AI spoofing. There is said to be no evidence the case was staged, but the failure of security controls is treated as a confirmed outcome in the discussion.

Two Solana validator operators were identified as running private inclusion lanes for a major on-chain MEV bot, MRiYA4oN3158fCV8evhuCofrDzbHyYvYnGZUDJvoCsa. The bot paid zero priority fee yet achieved an 84% success rate on Helius leaders and 80% on Kiln. With the same bot and the same transactions, success across every other validator was 25%. The behavior was described as not attributable to SWQoS or luck.

Security research firm Coinspect has identified a cross-chain randomness-generation flaw dubbed “Ill Bloom” that affects thousands of wallets on networks including Bitcoin, Ethereum and Solana. The weakness stems from poor randomness, allowing attackers to derive private keys and steal funds, according to Coinspect. Losses have exceeded $5 million since May 27. The incident has undermined confidence in on-chain asset custody and impacts public blockchains and ecosystem tokens that rely on ECDSA or similar signature mechanisms.

The article says the Base token $JESSE was deployed and fully controlled by the same developer wallet linked to a Polymarket account and the $BRIAN project. It alleges the wallet repeatedly claimed creator fees and sold each claim within a minute. About ~9.7 ETH (about $12,000) was routed through a fresh burner wallet into Bybit within two hours. The author adds they joined without auditing the contract mechanics and later concluded the project carried a centralized single-point risk with no multisig or governance constraints.

TRM Labs reported 207 crypto hacks in the first half of 2026, the highest half-year total it has recorded, while total losses fell to $972 million from $2.3 billion a year earlier. Smart-contract exploits drove 125 incidents, but operational weaknesses such as key theft, compromised signing systems and failed bridge validation accounted for about 76% of stolen value, or roughly $740 million. North Korea-linked activity made up about 66% of the losses, largely tied to two April infrastructure-level intrusions at Drift Protocol ($285 million) and KelpDAO ($292 million). The report said audits alone are no longer enough, with controls over how funds are moved becoming the largest risk exposure.

The Independent reported a Bitcoin cyberattack that it said was carried out autonomously by artificial intelligence. The report said the incident did not rely on human intervention and described it as the first publicly confirmed fully AI-driven on-chain attack, according to The Independent. It did not disclose the technical method, any loss amount, affected addresses or a specific time. The coverage framed the episode as a security warning focused on the evolving risks of AI in offensive and defensive security.

The article argues that newly launched meme coins on Solana exhibit a typical “rug pull” profile, focusing on risk patterns in the Solana ecosystem in 2026. It does not name specific projects or provide amounts, on-chain evidence, regulatory actions, audit reports, or trading data to support the claim. The piece is framed as a market observation and classification rather than documentation of confirmed rug pulls or systemic vulnerabilities.

TokenWorks said a vulnerability allowed an attacker to frontrun a Chainlink callback and change which NFT was selected, resulting in the unfair purchase of CryptoPunk 5450, the highest-priced listing in the pool. The team said it has contacted the Punk 5450 owner and will cover the ETH worth about $66,000. The protocol was switched to withdraw-only mode as of block 25452023 and a snapshot of $FWA holders was taken. Purchases are currently disabled while the team evaluates whether to restart or rebuild the project.