RUG.TOOLS
RUG.TOOLS
Launchpad
Security intelligence

Crypto Security Feed

Rug.Tools tracks reported rug pulls, exploits, phishing, wallet compromises and major chain incidents—then publishes concise, attributed security analysis without market hype.

Source claims and independently verified on-chain facts are labeled separately. Absence from this feed never means a token is safe.

Ruggy, the Rug.Tools security analyst

Filter security reports

AllRug PullsExploitsPhishingWallet CompromisesChain Incidents
All chainsSolanaEthereumBaseBNB ChainMonadRobinhood Chain

Published intelligence

Latest security reports

Newest source publication first.

RSS feed
Phishinghigh
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

SlowMist reports malicious Udesk scripts targeting Web3 users

SlowMist reports that malicious JavaScript injected through Udesk customer-service scripts collected session and submitted user data, while altering deposit addresses and copied transfer content on affected webpages. The source says the activity could enable session impersonation or redirect deposits to substituted recipients.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation SlowMist
Phishinghigh
Solana · Ethereum · Base · BNB Chain · Monad · Robinhood ChainSource published

Malicious bookmark phishing campaign reportedly drains Fomo user assets

SlowMist reported that a phishing page reached through a MOONLET token listing on Fomo instructed a user to add a malicious browser bookmark. Embedded JavaScript allegedly extracted Fomo login tokens from browser storage, enabling the reported transfer of about $48,000 in assets without wallet connection or seed-phrase entry.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation SlowMist

Featured coverage

An editorial selection from our published coverage, not an indication of the newest report. See Latest security reports above for chronological coverage.

Phishinghigh
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

SlowMist reports malicious Udesk scripts targeting Web3 users

SlowMist reports that malicious JavaScript injected through Udesk customer-service scripts collected session and submitted user data, while altering deposit addresses and copied transfer content on affected webpages. The source says the activity could enable session impersonation or redirect deposits to substituted recipients.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation SlowMist