#blockchain
-
Flaw in x402 SDKs Let Malicious APIs Drain AI Agents’ Wallets
Security firm V12 says that before August's updates the x402 default client set no payment limit — so an agent could sign away its entire token balance if a hostile service asked.
-
5,400 hacked sites serve up ClickFix payloads from the BNB blockchain
A large cybercriminal campaign is using thousands of compromised small-business sites to deliver malicious code hidden inside smart contracts on the BNB Smart Chain test network.
-
Seven Malicious npm Packages for Vite Used the Blockchain as a C2 Server
Researchers have uncovered the ViteVenom campaign — seven malicious npm packages targeting the Vite ecosystem and using blockchain infrastructure to control infected systems.