The exchange says its own systems and customer accounts were not compromised and that it is working with law enforcement on recovery.

Core services are back online, but uploaded-data access remains disabled and gaps in some data feeds are still being filled.

X-Bridge is closed in both directions, and PlunderSwap has reported losses in four token pools.

The exchange says customer funds were unaffected and it is notifying impacted users and regulators.

Researchers gave frontier models a capped Circle agent wallet and access to the inbox that receives its one-time codes. Most of them approved their own spending increase

The payload can alter both displayed and copied crypto deposit addresses, while its data collection extends beyond three site-specific targeting rules.

Owners of old-key devices received after Oct. 20 need additional authenticity checks, even if the wallet passes Keystone's online verification.

The teams identify vulnerable Java trust stores and configuration-dependent exposure. Default setups are unaffected, while some Web3Signer deployments need immediate access-control changes.

Scheduled replacement can let two keys overlap. Suspected exposure makes that overlap a security decision, not just a way to avoid downtime.

The exchange says affected deposits were credited, but has not disclosed the size of its losses.