Exploited vulnerabilities could become “more of the norm than the exception” in 2027, @AWNetworks CEO Nick Schneider tells @KyleAlspach in the latest episode of Security or Else! However, he also sees growing opportunities for defenders to help businesses meet the challenge. You can watch or listen to the entire episode here:

Exploit Summit opens Monday in Montreal. We'll be talking about training on compute that was never set aside for the job, and what it takes to keep a run alive when the hardware underneath it keeps changing. Find us there.

Exploit doesn’t start with the first keynote - and it doesn’t end when the stages close. We’ve got a full run of side events across Montréal: community drinks + quiz night, beginner sessions, the Exploit party and a handful of intimate private dinners. Some are limited capacity, so register early. Free to all Exploit ticket-holders ->

"Exploitation Industry" Translation: Anyone who asks questions outside the government narrative is a grifter. 6-7 "govern-me-harder daddy" administration shills and 1 based good-faith actor asking real questions. This isn't a debate, it's a hit-piece on dissent, imo. 🤷🏻‍♂️🇺🇸

Binance exploiters are moving stablecoins into DeFi protocols to dodge freezes, @chainalysis says. The method has been used on the Tron blockchain since the early hours of the $6.4 billion attack. Hackers swap TRX for stablecoins, then swap those stablecoins for depository receipt tokens. Unlike the stablecoins they represent, the receipt tokens cannot be frozen. Whoever holds them can redeem them for the underlying stablecoins on new, clean addresses. The stablecoin issuer can freeze the original funds. It cannot freeze the receipt.

Binance Exploiter Dumps Altcoins, and PEPE, LINK and ONDO Take the Hit Blockchain analytics from @lookonchain show that the @Binance hacker dumped $158.25M in stolen altcoins, equivalent to 70,480 $ETH. Some tokens saw intraday losses of up to 15%. The largest dumps include: - $UNI: $39.63M - $ENA: $33.93M - $PEPE: $31.66M - $LINK: $26.05M - $AAVE: $14.27M - $ONDO: $6.62M - $WLD: $6.09M Stablecoin providers acted swiftly and froze 1.77B $USDT, 823M $USDC, and 74.56M $ARB. The hacker is left with about $23M in altcoins, including $FUN, $ZAMA, $ZRO, and $RSR. For now, the hack is regarded as the biggest in the crypto space. Is this another FTX saga?

⚠️ Exploit Breakdown: Polymarket User Asset Theft On October 29 (UTC), user assets were stolen on Polymarket’s international site, Polymarket[.]com. A supply-chain compromise of third-party performance monitoring provider DebugBear’s RUM script delivered malicious code to user pages. The code abused users’ trading and signing permissions. Onchain analysis shows that the primary attack path involved 710 DepositWallets and 731 addresses, with approximately $2.71 million in losses. Address counts do not represent unique users. Polymarket subsequently stated that it had fixed the issue and restored service, pledging full reimbursement for affected traders. Refer to subsequent official announcements for actual reimbursement progress. 🔍 Attack flow: 1. The malicious script was delivered through: cdn.debugbear[.]com/C7xcKKrjUnXK.js 2. It read Polymarket session and account context, traversing React state to locate the existing trading client and signer. 3. It constructed malicious orders, ERC-1155 batch transfers, or EIP-712 DepositWallet batch messages, requested signatures through the existing signer, and submitted the operations to the Polymarket relayer. 4. USDC.e was swapped into POL through Relay Router and sent to the primary consolidation address hardcoded in the malicious script. 5. Funds were then distributed across multiple addresses. Some were bridged to Ethereum, swapped, and consolidated into ETH. How DebugBear was initially compromised—and exactly which publishing permissions were abused—has yet to be disclosed in an official postmortem. Attacker’s primary consolidation address: 0x3F99139F1C5854bb628c2e576Aaf638e99dFfc18 🛡️ Security recommendations: 1️⃣ If you used Polymarket[.]com during the affected window, close old tabs and access the site again on a trusted device through official channels. Do not continue using the trading client from a potentially compromised page. 2️⃣ Preserve evidence and check all assets, including stablecoins, POL, and ERC-1155 positions. Save transaction hashes, signature prompts, and browser records to support subsequent reimbursement and investigation. 3️⃣ Revoke session keys and onchain approvals you no longer need. Check for anomalous ERC-20/ERC-1155 approvals. Revoking approvals cannot recover assets already transferred out. 4️⃣ Watch for phishing scams exploiting the incident. Trust only information published through official channels. Never give passwords, verification codes, private keys, or seed phrases to supposed “reimbursement support,” and never pay “unfreeze” or “verification” fees.