Security

Onchain records confirm the staked assets moved to an address outside the Nov. 8 recovery list. That does not establish who controls it.

The worse_query escape could expose wallet data stored in plaintext, SlowMist warned. Trust Wallet and Zerion said their iOS users are not affected.

The bridge's alert does not establish whether its smart contracts or bridging operations are affected.

The reporting code includes destination addresses and device details; Ambire says it kept the affected versions out of production.

None of the six requests was merged; the campaign paired credential-stealing code with instructions telling AI reviewers not to flag secret uploads.

Four reports flag deployed contracts that could break, while possible specification changes are being prototyped, the Ethereum Foundation says.

The worse_query repository lists iOS 26.0–26.7.2 and 27.2 as targets; the wallet warning centers on secrets stored locally in plaintext.

Vulnerability details will follow once operators have had time to upgrade. The release introduces no breaking changes.

GreyNoise reports successful exploitation, while Previdian logged 20 attempts. Alpine operators need to patch and restart SSH, or disable password authentication.

Reactor is also back online, while some investigation and account-management services remain unavailable.