Odaily reported that Cos, also known as Yu Xian from SlowMist, said in a post on X that there is no need to keep reminding users about replay attacks tied to the failed BIP-110 fork. The brief update did not include additional technical explanation, background on the fork, or any follow-up details beyond that statement. Based on the source material provided, the remark was limited to that point and did not expand on risk scope, timing, or related mitigation steps.

Bankr disabled transactions after attackers accessed 14 wallets, promising full reimbursement. Users urged to stop signing, create new wallets, and revoke approvals. SlowMist founder suggests social engineering and prompt injection.

SecondFi said a flaw in its Cardano web wallet generation software led to a major breach. The team estimated losses near 16 million ADA, while outside analysis suggested the total could be far higher, with recovery and compensation plans still being developed.

OpenClaw is facing two security incidents at once: a poisoned axios dependency tied to version 3.28 and a confirmed high-risk MEDIA protocol flaw affecting more than 170,000 publicly accessible instances worldwide.

Odaily reported that SlowMist founder Yu Xian reposted a warning on X about a potential poisoning attack against Claude Code and published his own analysis covering poisoning risks tied to both Grok Build CLI and Claude Code CLI. According to the analysis, Grok Build CLI lacks a unified security model, with different code paths relying on different trust assumptions. That gap could let attackers use a malicious project configuration file to run arbitrary commands without the user’s knowledge. Researchers also built a test environment and found that on macOS, if Claude Code is affected, running a specific test command could launch the local Calculator app, which they said demonstrates a potential command execution risk. If such an attack succeeds, it could lead to the theft of API keys for AI services such as Claude and OpenAI, cloud credentials for AWS, Alibaba Cloud and Tencent Cloud, unauthorized access to servers and data, code repository tampering, backdoor insertion, and the use of a local machine as a pivot point into an enterprise internal network. The report added that the related vulnerability has existed for one year.

SlowMist founder Yu Xian reposted a thread on X about potential poisoning attack risks tied to Claude Code and published his own analysis covering Grok Build CLI and Claude Code CLI. According to the analysis, Grok Build CLI does not apply a single, consistent security model across its code paths. Different trust assumptions in different paths may open gaps that attackers can exploit. A malicious project configuration file could let an attacker run arbitrary commands without the user realizing it, then steal API keys, cloud credentials, or take control of a local device. Researchers also built a test environment and found that on macOS, if Claude Code is affected, running a specific test command can trigger the local Calculator app to open. That result was presented as evidence of a potential command execution risk. If such an attack succeeds, the fallout could extend beyond local execution. The analysis says attackers may steal API keys for AI services including Claude and OpenAI, causing billing losses, obtain credentials for AWS, Alibaba Cloud, and Tencent Cloud to access servers and data, tamper with code repositories to implant backdoors, or use the compromised local machine as a pivot into an enterprise internal network. The related vulnerability is said to have existed for one year.

According to monitoring by SlowMist’s Yu Xian, Aztec is suspected of being stolen from again, with three suspicious exploits involving about $2.15 million on its Private Rollup Bridge address.