Issue #012 · Week of September 20, 2026

This Week’s Verdict

The exploits worth reading about this week did not touch a smart contract; they touched your laptop, your phone, and your npm lockfile. North Korea ran a device-level franchise, Iran ran a toll booth in the Strait of Hormuz, and Bitcoin ripped 24.6% on short liquidations while everyone congratulated themselves for calling it. As always, the money moved before the headline did.

The Breaches

The number of the week comes from a joint law enforcement advisory on WaterPlum, the North Korean crew that compromised at least 30,000 devices worldwide between December 2025 and July 2026 and moved more than $10.7 million in stolen crypto back to Pyongyang. This is not a clever oracle manipulation. It is patient, industrial endpoint compromise at scale, and it worked.

Infrastructure took the second hit. Crypto tech provider Haruko disclosed a cyberattack affecting 15 clients, with some funds lost. When the vendor holding the keys gets breached, the tenant’s audit history is irrelevant.

On the state-financing side, OFAC sanctioned the Iranian exchange BitBank, which Treasury says processed “Hormuz Safe” toll payments and helped route hundreds of millions in Bitcoin to the IRGC over roughly two months. Separately, TRM traced 274.60 ETH to six operator addresses in a campaign where fake AI trading-bot tutorials tricked 224 victims into deploying and funding their own drainer contracts. The best social engineering makes the mark do the signing.

Elsewhere, image host Gyazo confirmed 23.6 million user records stolen via a server flaw, and a Hong Kong banker drew four years for a $1.6B false-credit scheme that included $470,000 in crypto bribes. Old crimes, new rails.

Vulnerabilities Worth Your Attention

  • The full-chain iOS exploit. SlowMist’s 23pds warned of an operationalized attack chain spanning iOS 13 through 26.5: a malicious Safari page triggers WebKit/JSC memory corruption, bypasses PAC, escapes the WebContent sandbox, escalates to root, and drains Keychains and wallet app data. Update your phone; a seed phrase on a stale iOS build is a bearer bond left on a park bench.
  • npm keeps rotting from the inside. The indexed-btree package hides malicious code in normal runtime behavior to evade install-script defenses, while WeaselBiscuit shipped across 13 npm packages with functional overlap to DPRK’s Contagious Interview tooling (BeaverTail, and kin). Install-time scanning was always going to lose to run-time payloads.
  • AI coding agents are the new soft underbelly. Plugin4Shell lets a repo owner swap pinned plugin code across four AI agents (patched in Claude Code 2.1.179 and Codex 0.146.0); BragJack hijacks AI browser assistants in Chrome, Edge, Comet, and Claude in Chrome via one malicious extension, earning two CVEs and over $20,000 in bounties.
  • Maximum severity, minimum drama. Microsoft patched a CVSS 10.0 auth-bypass in Azure AI Foundry (CVE-2026-85889). Orkes Conductor is under active exploitation via an unauthenticated RCE (CVE-2026-58138, CVSS 9.8), and CISA added three actively exploited Linux kernel flaws to its KEV catalog. Patch the boring things first.
  • The CrowdSec tail. May’s TanStack npm compromise let an attacker copy roughly 170 private CrowdSec GitHub repos through a departed employee’s still-open access. Offboarding is a security control.

Threat Actors & Campaigns

DPRK remains the main character. Beyond WaterPlum’s $10.7M, Chainalysis reports blockchain dead-drop attacks up 420%, with North Korean operators using Tron, Aptos, and BNB Smart Chain as redundant C2 paths, and suspected Iranian actors encoding routing data in Bitcoin transactions. WeaselBiscuit’s Contagious Interview lineage rounds out the picture: they are recruiting developers, poisoning packages, and owning devices in parallel.

Others filled the margins. PhantomRaven, an npm infostealer, was likely LLM-authored per token-analysis patterns, evidence that the drainer economy now ships with a code assistant. Transparent Tribe (APT36) deployed new Rust backdoors against India and Afghanistan using private GitHub repos for C2, and China-linked RatHat abuses ADB to keep shell access after uninstall. Meanwhile IOG warned users off its own hijacked YouTube channel running an AI-manipulated Hoskinson doubling scam. The giveaway grift never dies; it just deepfakes better.

The Bigger Picture

Washington chose the side door. After the CLARITY Act died in the Senate, the CFTC filed “Regulation Crypto Asset Transactions and Regulation Crypto Asset Markets” (RIN 3038-AF80) with the White House at prerule stage, and the SEC issued a five-year conditional “innovation exemption” letting tokenized NMS stocks trade on permissioned AMMs. Crypto stocks that sold off on the CLARITY collapse rallied within a day. The rules are coming from the agencies, not Congress, and the market already repriced that reality.

The tokenized-stock and perps land grab is on in earnest. Coinbase, Kalshi, and Bitnomial all filed for US single-stock perpetual futures; Morpho opened USDC borrowing against Coinbase’s tokenized stock tokens on Base; and S&P Global is acquiring OpenZeppelin, which tells you where the audit money thinks the next decade lives. Bastion won conditional OCC trust-bank approval for stablecoin custody, and in the EU, banks now make up 23% of the MiCA register even as reports claim Lagarde personally intervened against Binance’s license.

Markets, as ever, were context. Bitcoin reclaimed $80,000 and touched $81,000, with Glassnode and Bybit noting short positions supplied 89% of every liquidated dollar in August’s 24.6% run. Corporate treasuries bought just 5,900 BTC in three months, so this rally is squeeze mechanics, not fresh conviction. Grayscale’s Zcash ETF filed a 3-for-1 split after $233M of inflows, the privacy trade being the one genuinely new thing on the board. Enjoy it responsibly; the leverage that lifted this tape cuts

Resources

More: Issues · Field Notes · RTFM

New Issue every week. Follow @ItsAlreadyPrice or subscribe via RSS so the next exploit does not surprise you.