5 posts
On September 19, 2026, SlowMist together with OKX's security team disclosed that iOS app FomoPeek versions 1.1 and 1.2 shipped with an iOS kernel exploit framework, able to break out of the sandbox and read and decrypt the system Keychain — exposing private keys, seed phrases and login credentials. Affected iOS versions: 12.0–18.7 and 26.0–26.1.
Swiss-based crypto asset management platform SwissBorg has confirmed a major security incident: roughly 192,600 SOL were lost, worth over $41 million. The breach occurred on August 9, 2025, tied to a compromised API provided by its third-party staking infrastructure partner Kiln, which let an attacker access the staking wallet and move the assets without authorization.
Starting at 13:16 UTC on September 8, a series of packages pushed to npm appeared to contain malicious code. The attack is highly targeted — a large-scale campaign aimed primarily at Web3 users.
This afternoon my Ethereum address monitoring suddenly fired off alerts: two outgoing transactions I never made. I was stunned — I hadn't done anything, it wasn't me. Was my wallet stolen? I rushed to check what those transactions actually did. After asking for help on V2EX I learned this is an 'address poisoning' attack, and I'm sharing what I learned so everyone can stay alert.
Can you still mine with a GPU in 2025? What are the returns? I recently tried mining with an NVIDIA RTX 2080 Ti, and after a few days of mining I'm here to break down whether it's still viable.
