RUG.TOOLS
RUG.TOOLS
Launchpad
Security intelligence

Crypto Security Feed

Rug.Tools tracks reported rug pulls, exploits, phishing, wallet compromises and major chain incidents—then publishes concise, attributed security analysis without market hype.

Source claims and independently verified on-chain facts are labeled separately. Absence from this feed never means a token is safe.

Ruggy, the Rug.Tools security analyst

Filter security reports

Published intelligence

Latest security reports

Newest source publication first.

RSS feed
Wallet Compromisecritical
MonadSource published

SlowMist reports Qubic wallet key-generation vulnerability

According to SlowMist, Qubic disclosed that attackers accessed and transferred approximately 2.94 trillion QU from 1,404 wallets after exploiting insufficient randomness. SlowMist says Qubic Wallet generated account seeds with the non-cryptographic Math.random() and exposed related pseudorandom outputs in plaintext, potentially allowing private-key recovery from network observations.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

Wallet Compromisehigh
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

Ledger investigates reported losses linked to CryptoBilis reseller; sales paused

Ledger Support says it is investigating reported fund losses among Southeast Asian customers who bought devices through CryptoBilis. It asked the reseller to pause Ledger sales and shipments while the investigation continues. Recent buyers who have not initialized their devices are advised to delay setup.

Verification: Attributed to Ledger Support's warning; Rug.Tools has not independently verified the reported losses, affected devices or root cause.

An editorial selection from our published coverage, not an indication of the newest report. See Latest security reports above for chronological coverage.

Wallet Compromisecritical
MonadSource published

SlowMist reports Qubic wallet key-generation vulnerability

According to SlowMist, Qubic disclosed that attackers accessed and transferred approximately 2.94 trillion QU from 1,404 wallets after exploiting insufficient randomness. SlowMist says Qubic Wallet generated account seeds with the non-cryptographic Math.random() and exposed related pseudorandom outputs in plaintext, potentially allowing private-key recovery from network observations.

Verification: Rug.Tools has not independently verified the publisher's incident claims.