DeFi frontend exploit hits 12 sites, ~$138k stolen so far
banteg · x · 2026-10-31
A fresh DeFi frontend exploit hijacked 12 sites over the weekend, including Pickle, Origami and Kintsu. Registry records show all targeted domains were registered via Name[.]com, and ten were suspended on Saturday.
Community researchers (flagged by @zackabrams and @banteg) have traced about $138,000 in successfully stolen funds so far.
More from Safety
- Researcher claims new 'Carbon' model shows fewer flags on held-out misalignment monitor — ancadianadragan · 2026-11-01
- Google Antigravity adds stark security notice warning of data exfiltration and code execution risks — testingcatalog · 2026-11-01
- Anthropic's usage restrictions spark backlash over paid-model rights and open-weight futures — QuixiAI · 2026-10-31
- AI can now track exactly what you look at in a store — CodeByPoonam · 2026-10-31
- AI regulation debate: 'regulation is the enemy of innovation' vs social media cautionary tale — johnennis · 2026-10-31
- Gary Marcus meets Pope Leo XIV: five AI principles and a critique of LLMs — Gary Marcus · 2026-10-31