GCSA Insight: 9 Vulnerabilities and Security Risks Identified in Cross-Chain Smart Contracts In early November 2026, Web3Labs Agent, a security research system operated by the Global Cybersecurity Alliance (GCSA), conducted routine automated security scans of smart contracts across multiple blockchains, including Ethereum, Asset Chain, PEPU L2, QIE, and Lens Chain. Combined with manual read-only reviews and local Anvil fork testing, the investigation identified 9 notable vulnerabilities and security risks. This edition of GCSA Insight examines a range of security issues, including callback authentication, ERC-4337 signature binding, duplicate reward claims, contract initialization, weak randomness, EIP-7702 delegated execution, and account permission controls. Some findings were reproduced in local fork environments, demonstrating potential asset transfers or unintended contract behavior. Others are subject to specific privilege requirements, legacy protocol conditions, or third-party component configurations. Importantly, no exploit transactions were broadcast to production blockchains during this research. The findings reflect conditions observed at the time of testing and do not imply that the vulnerabilities have been exploited in the wild or remain active at the time of publication. 🔗 Read the full report: #GCSAInsight# #GCSACybersecurity# #GCSASecVibe# · Stay Connected with GCSA Follow GCSA's official social media channels for the latest news, product launches, research developments, and ecosystem updates. GCSA Official WeChat Account: GCSA Official Telegram Channel:

GCSA: AI cybersecurity incidents often don't start with an external breach. They start when users hand over sensitive data themselves. AI-powered scams and cyberattacks happen every day, and everyone's watching for threats from the outside. But internal documents, customer lists, and other sensitive information are being copied straight into AI chatbots. Once uploaded, the data has already left your control. Many users don't realize that this simple action can be the starting point of a data leak. It was previously reported that more than 900,000 AI skills had been analyzed, with over 3,000 identified as malicious. Supply chain attacks in the AI ecosystem are no longer a hypothetical threat. They're already happening. The faster AI evolves, the more important it becomes for humans to slow down. Use AI, by all means. Just pause before you upload. Three questions to ask yourself: · Is this information safe to share publicly? · Could the AI provider use your conversations to train its models? · Is an enterprise-grade data protection agreement in place? If you're unsure, redact or anonymize sensitive information before uploading it. GCSA (Global Cybersecurity Alliance) will continue to share vulnerability intelligence and practical cybersecurity alerts. Stay Connected with GCSA ✈️ Telegram Channel: 🫧 Official WeChat Account: #GCSAInsights# #GCSAcybersecurity# #GCSASecVibe#