Security

A post alleged that a Base-chain project executed another rug pull in under 24 hours, wiping users’ assets. It also said traders are rotating into a Solana-based token themed on an animal that went viral on TikTok. The post framed the episode as a repeat security failure that undermines trust in Base as Ethereum’s Layer 2 infrastructure. It added that the shift toward high-risk meme tokens on Solana could amplify short-term volatility and liquidation risk, with knock-on effects for Base-native assets and Solana on-chain liquidity.

Hackers issued an ultimatum to Kenya’s State House, demanding a Ksh41 Million ransom paid in Bitcoin (BTC) by 18:00 on 2026-07-19. They threatened to leak a large cache of classified state secrets if the payment is not made. The incident is in Kenya and targets the country’s top executive office. The ransom is denominated in fiat but must be settled in BTC.

Security firm SlowMist said it has identified a new macOS malware targeting Apple Mac users that can steal Telegram login sessions, encrypted local wallet databases, and passwords stored in Apple Keychain, browsers and Notes. The attackers can use the stolen data to access chats and unlock wallets offline. The malware can also display fake hardware wallet apps, including Ledger and Trezor, to trick users into entering recovery phrases.

GoPlusSecurity’s DeepScan AI auditing service has gone live on TermiX as a Verified Provider and is now available on BNB Chain. The tool scans any token contract to flag vulnerabilities, scam patterns, and hidden risks, returning a report within minutes. Payments settle via an on-chain USDC escrow release mechanism, with funds paid out immediately once the audit result is verified. The rollout is positioned as trust infrastructure for smart-contract deployment on BNB Chain, targeting DeFi and agent-economy use cases that rely on fast, credible token launches.

SpaceX and Starlink’s official X accounts were hijacked and used to promote a memecoin called SCATMAN. The token briefly reached a $32 million market cap on Robinhood Chain. The attacker then cashed out roughly $135,000 worth of ETH, according to on-chain analytics platform Lookonchain.

GOAT Network says it is the only Bitcoin zkRollup that does not outsource its proof system. The project argues that keeping proving guarantees in-house reduces operational risk and helps protect the foundation of the network’s security model. The statement focuses on the independence of proof generation within a zkRollup architecture, positioning its security assumptions as different from other Bitcoin L2 approaches. The post provides no details on mainnet status, TVL, transaction volume, partnerships, third-party audits, or any disclosed vulnerabilities.

A Gate exchange user account was reportedly accessed from the owner’s old Mac web device using a legacy passkey, with the platform said to have retained complete records of the login. The incident is described as involving the theft of about 100,000–1,700,000 USDT (U) and 746,475 HSK, with HSK presented as the primary stolen asset. The key dispute centers on how liveness facial verification was passed, prompting calls for Gate to release the verification video for independent review amid speculation about possible AI spoofing. There is said to be no evidence the case was staged, but the failure of security controls is treated as a confirmed outcome in the discussion.

Two Solana validator operators were identified as running private inclusion lanes for a major on-chain MEV bot, MRiYA4oN3158fCV8evhuCofrDzbHyYvYnGZUDJvoCsa. The bot paid zero priority fee yet achieved an 84% success rate on Helius leaders and 80% on Kiln. With the same bot and the same transactions, success across every other validator was 25%. The behavior was described as not attributable to SWQoS or luck.

Security research firm Coinspect has identified a cross-chain randomness-generation flaw dubbed “Ill Bloom” that affects thousands of wallets on networks including Bitcoin, Ethereum and Solana. The weakness stems from poor randomness, allowing attackers to derive private keys and steal funds, according to Coinspect. Losses have exceeded $5 million since May 27. The incident has undermined confidence in on-chain asset custody and impacts public blockchains and ecosystem tokens that rely on ECDSA or similar signature mechanisms.

The article says the Base token $JESSE was deployed and fully controlled by the same developer wallet linked to a Polymarket account and the $BRIAN project. It alleges the wallet repeatedly claimed creator fees and sold each claim within a minute. About ~9.7 ETH (about $12,000) was routed through a fresh burner wallet into Bybit within two hours. The author adds they joined without auditing the contract mechanics and later concluded the project carried a centralized single-point risk with no multisig or governance constraints.