Across Domain Hijack: How to Check and Revoke Token Approvals
The across.to domain was hijacked on November 10 and used to phish token approvals. Here is who is at risk and how to check and revoke approvals safely.
Exploits, malicious approvals, drains and scam-prevention guidance.
The across.to domain was hijacked on November 10 and used to phish token approvals. Here is who is at risk and how to check and revoke approvals safely.
NEAR Intents halted services after an exploit reportedly caused about $3.8M in losses and disrupted deposits and withdrawals across multiple networks.
New reporting details how the Symbiosis exploit used privileged access and negative-fee logic to mint unbacked syBTC. Here is what LPs and bridge users should verify.
The SingularityNET-related exploit has widened to unauthorized token mints across AGIX, WMTX, NTX and linked FET infrastructure. Verify contracts and avoid unofficial recovery links.
D’CENT has issued updated guidance for App Wallet users after abnormal transfers. Affected users should update the app, check whether action is required, and move assets to a wallet created with a fresh recovery phrase when instructed.
Liquid Network reported roughly 4,000 BTC withdrawn from its federation wallet and halted new transactions. Here is a safety and transaction-status checklist for users.

Trezor users face targeted phishing after a third-party email breach. Learn how to verify messages and what to do if a seed phrase was exposed.

SlowMist and OKX warned that FomoPeek iOS versions 1.1–1.2 contained malicious components that may expose private keys, seed phrases and other Keychain data.

A custom Safe module was involved in the September 15 rsETH incident. Safe users should understand and review enabled modules and delegated permissions.