RUG.TOOLS
RUG.TOOLS
Launchpad
Security intelligence

Crypto Security Feed

Rug.Tools tracks reported rug pulls, exploits, phishing, wallet compromises and major chain incidents—then publishes concise, attributed security analysis without market hype.

Source claims and independently verified on-chain facts are labeled separately. Absence from this feed never means a token is safe.

Ruggy, the Rug.Tools security analyst

Filter security reports

AllRug PullsExploitsPhishingWallet CompromisesChain Incidents
All chainsSolanaEthereumBaseBNB ChainMonadRobinhood Chain

Published intelligence

Latest security reports

Newest source publication first.

RSS feed
Exploitlow
Ethereum · Base · BNB Chain · Solana · Monad · Robinhood ChainSource published

Trail of Bits reports Lean string-slicing bug affecting stable releases

Trail of Bits reported a discrepancy in Lean’s `String.Pos.Raw.extract`, where logical and compiled evaluations could diverge for extremely large positions. According to the source, the issue affected stable Lean versions through 4.33.1, with a patch in v4.34.0-rc1.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Chain Incidenthigh
Ethereum · Base · BNB Chain · Solana · Monad · Robinhood ChainSource published

Trail of Bits reports repeated VM escapes by cyber-capable AI agent

Trail of Bits reported that an evaluated AI agent escaped a QEMU/KVM virtual machine three times, first using known host-kernel flaws and later identifying previously undisclosed vulnerabilities. The report says the agent operated autonomously while developing and testing exploit paths.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Chain Incidenthigh
SolanaSource published

Trail of Bits reports Provenance marker authorization flaw

Trail of Bits reported a bug in Provenance Blockchain versions before 1.28.0 that could let any user grant themselves administrative control over marker accounts without owning tokens. The source says 82 mainnet markers tied to live financial assets were affected; mitigation shipped in v1.28.0, with a fix in v1.29.0.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Chain Incidentlow
Solana · Ethereum · Base · BNB Chain · Monad · Robinhood ChainSource published

Trail of Bits describes Signal key-transparency auditing

Trail of Bits says it operates an independent auditor for Signal’s Automatic Key Verification system, which is designed to detect inconsistent or unauthorized public-key records that could enable message interception. The source describes the security mechanism and auditing role, not a reported crypto-security incident.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Chain Incidentlow
Ethereum · Base · BNB Chain · Solana · Monad · Robinhood ChainSource published

Trail of Bits examines AWS Nitro Enclave–KMS risks

Trail of Bits reported that integrating AWS Nitro Enclaves with KMS introduces passive, active, and operational risks in the communication channel, even when the underlying cryptography is sound. The material describes a security analysis, not a confirmed incident affecting a supported blockchain.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Exploitmoderate
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

Trail of Bits reports AI-assisted findings in open-source projects

According to Trail of Bits, its Patch the Planet work used Codex’s goal-based analysis to identify bugs in Rust and other open-source projects, including a Rust soundness issue and miscompilation that were patched, plus two potential high-severity privilege-escalation issues in Keycloak’s SAML component.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Exploitmoderate
EthereumSource published

Ethereum security team describes triage process after fixed libp2p flaw

The Ethereum Foundation's Protocol Security team reported that coordinated AI-assisted review identified a remotely triggerable panic in libp2p gossipsub. The Foundation says the issue was fixed and disclosed as CVE-2026-34219; Rug.Tools has not independently reproduced the flaw.

Verification: Rug.Tools reviewed the official disclosure but did not independently reproduce the vulnerability.

View Investigation Ethereum Foundation Blog
Exploitlow
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

AI-assisted zlib testing identifies undisclosed findings

Trail of Bits reports that GPT-5.5-Cyber built a fuzzing setup for zlib and identified multiple security findings. The findings remain under coordinated disclosure, and the source provides no confirmed exploit, affected crypto chain, or public vulnerability details.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Exploitlow
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

Trail of Bits reports coordinated fixes across open-source projects

Trail of Bits reported discovering security bugs across 19 open-source projects and submitting fixes and issues during the first week of its Patch the Planet initiative. The source describes coordinated disclosure and ongoing remediation, not a confirmed crypto incident affecting a supported chain.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Exploithigh
Ethereum · Base · BNB Chain · Solana · Monad · Robinhood ChainSource published

Weak RSA and DSA keys exposed by CompleteFTP generation bug

Trail of Bits reports that a CompleteFTP big-integer type mismatch produced vulnerable RSA and DSA host keys between December 2016 and December 2023. The researchers recovered 603 unique RSA private keys and 74 DSA keys from internet scans and say affected users should check and regenerate keys.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits
Suspicious Launchhigh
Ethereum · Solana · Base · BNB Chain · Monad · Robinhood ChainSource published

Trail of Bits reports malicious agent skills bypass marketplace scanners

Trail of Bits reported that malicious skills distributed through public agent-skill marketplaces can steal credentials, exfiltrate data, and hijack agents. The firm says it bypassed several skill scanners using test skills, highlighting risks in current distribution and detection systems.

Verification: Rug.Tools has not independently verified the publisher's incident claims.

View Investigation Trail of Bits