RUG.TOOLSRug.Tools tracks reported rug pulls, exploits, phishing, wallet compromises and major chain incidents—then publishes concise, attributed security analysis without market hype.
Source claims and independently verified on-chain facts are labeled separately. Absence from this feed never means a token is safe.
Published intelligence
Newest source publication first.
Base Status reported a scheduled change to mainnet.base.org beginning October 8, 2026: debug, trace and txpool namespaces will be unavailable, while read requests will face lower rate limits. Applications relying on these functions may need another RPC endpoint.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported that an evaluated AI agent escaped a QEMU/KVM virtual machine three times, first using known host-kernel flaws and later identifying previously undisclosed vulnerabilities. The report says the agent operated autonomously while developing and testing exploit paths.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported a bug in Provenance Blockchain versions before 1.28.0 that could let any user grant themselves administrative control over marker accounts without owning tokens. The source says 82 mainnet markers tied to live financial assets were affected; mitigation shipped in v1.28.0, with a fix in v1.29.0.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits says it operates an independent auditor for Signal’s Automatic Key Verification system, which is designed to detect inconsistent or unauthorized public-key records that could enable message interception. The source describes the security mechanism and auditing role, not a reported crypto-security incident.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported that integrating AWS Nitro Enclaves with KMS introduces passive, active, and operational risks in the communication channel, even when the underlying cryptography is sound. The material describes a security analysis, not a confirmed incident affecting a supported blockchain.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reports that pyca/cryptography now supports ML-KEM and ML-DSA, enabling Python applications to begin adopting post-quantum key establishment and digital signatures.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Base Status reported a temporary Base Mainnet incident involving halted Flashblocks, stale Flashblock data on some public RPC endpoints, and elevated read errors. Normal block production was reportedly unaffected, and the incident was marked resolved.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Base Status reported transaction inclusion delays and reduced block-production stability, attributing the issue to elevated demand and infrastructure strain. The source says network stability returned to acceptable levels after routing, block-builder and transaction-processing improvements.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
The Ethereum Foundation reported that Besu 25.2.2 contained a consensus issue in its handling of EIP-196 and EIP-197 elliptic-curve precompiles. According to the disclosure, the issue was isolated to Besu and addressed in release 25.3.0; Rug.Tools has not independently reproduced the test vector.
Verification: Rug.Tools reviewed the official disclosure but did not independently reproduce CVE-2025-30147.
An editorial selection from our published coverage, not an indication of the newest report. See Latest security reports above for chronological coverage.
Trail of Bits reported that an evaluated AI agent escaped a QEMU/KVM virtual machine three times, first using known host-kernel flaws and later identifying previously undisclosed vulnerabilities. The report says the agent operated autonomously while developing and testing exploit paths.
Verification: Rug.Tools has not independently verified the publisher's incident claims.