RUG.TOOLSRug.Tools tracks reported rug pulls, exploits, phishing, wallet compromises and major chain incidents—then publishes concise, attributed security analysis without market hype.
Source claims and independently verified on-chain facts are labeled separately. Absence from this feed never means a token is safe.
Published intelligence
Newest source publication first.
SlowMist reports that zkLink was attacked on October 29, 2026, causing approximately $783,000 in losses. The analysis describes forged batch-root verification and lists affected Ethereum and Linea bridge infrastructure.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Chainalysis reports that unauthorized funds began leaving Binance hot wallets across multiple blockchains around October 29, 2026. The source describes the incident as a hack and examines a possible North Korea link.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
According to Trail of Bits, a review of more than 130 merged patches authored by its engineers found 21 regressions, including functional, performance, and build/test defects. The source says none weakened a security protection.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
According to SlowMist, the DarkSword exploit chain targets iOS 18.4–18.6.2 and can be triggered through Safari, enabling theft of device files, Keychain data and keyboard input. The source says the toolkit has been publicly reconstructed and deployed online, with cryptocurrency wallet applications among its primary targets.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reports that an untrusted host could roll back TEE filesystem state after a threshold signer deletes a used pre-signature, potentially causing nonce-share reuse and disclosure of a private-key share. The post presents this as a deployment risk and recommends treating TEEs as defense in depth alongside sound MPC protocols.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported that a 1Password benchmark may understate AI-assisted vulnerability patching quality because it included intentionally incorrect repair instructions, untestable trials and a small sample of difficult fixes. The source presents this as a methodology critique, not a newly reported exploitation or compromise incident.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported a discrepancy in Lean’s `String.Pos.Raw.extract`, where logical and compiled evaluations could diverge for extremely large positions. According to the source, the issue affected stable Lean versions through 4.33.1, with a patch in v4.34.0-rc1.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
According to Trail of Bits, its Patch the Planet work used Codex’s goal-based analysis to identify bugs in Rust and other open-source projects, including a Rust soundness issue and miscompilation that were patched, plus two potential high-severity privilege-escalation issues in Keycloak’s SAML component.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
The Ethereum Foundation's Protocol Security team reported that coordinated AI-assisted review identified a remotely triggerable panic in libp2p gossipsub. The Foundation says the issue was fixed and disclosed as CVE-2026-34219; Rug.Tools has not independently reproduced the flaw.
Verification: Rug.Tools reviewed the official disclosure but did not independently reproduce the vulnerability.
Trail of Bits reports that GPT-5.5-Cyber built a fuzzing setup for zlib and identified multiple security findings. The findings remain under coordinated disclosure, and the source provides no confirmed exploit, affected crypto chain, or public vulnerability details.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reported discovering security bugs across 19 open-source projects and submitting fixes and issues during the first week of its Patch the Planet initiative. The source describes coordinated disclosure and ongoing remediation, not a confirmed crypto incident affecting a supported chain.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
Trail of Bits reports that a CompleteFTP big-integer type mismatch produced vulnerable RSA and DSA host keys between December 2016 and December 2023. The researchers recovered 603 unique RSA private keys and 74 DSA keys from internet scans and say affected users should check and regenerate keys.
Verification: Rug.Tools has not independently verified the publisher's incident claims.
An editorial selection from our published coverage, not an indication of the newest report. See Latest security reports above for chronological coverage.
SlowMist reports that zkLink was attacked on October 29, 2026, causing approximately $783,000 in losses. The analysis describes forged batch-root verification and lists affected Ethereum and Linea bridge infrastructure.
Verification: Rug.Tools has not independently verified the publisher's incident claims.