Issue #017 · Week of October 25, 2026

This Week’s Verdict

The week’s connective tissue is not a drainer crew or a bridge hack, it is the quiet realization that the tooling meant to automate trust is where trust goes to die. x402 will happily let an AI agent sign away its full token balance, AI coding agents will install whatever an AGENTS.md file in your Downloads tells them to, and Bitcoin Core has rewritten its disclosure policy because a one-line prompt now finds bugs that used to take a researcher a month. The exploits, meanwhile, were the usual: governance takeovers and unauthorized mints, draining real money while everyone watched the mempool in real time.

The Breaches

The headline drain belongs to X100, where a governance takeover on Ethereum turned treasury tokens and liquidity positions into roughly 4.85 million USDT across two transactions, with Blockaid flagging the attack as ongoing. Proceeds were promptly laundered through the standard playbook: the first exploiter swapped about 4.75 million USDT into ETH, and funds were fanned out into four separate 400-ETH wallets, with a third transaction pulling 549,916 X and some USDT from a Uniswap pool that was left holding under 200 USDT.

Initia halted its entire L1 and rollups after an attacker minted tokens and moved assets to Ethereum, with analyst Spreek estimating about $2.6 million cashed out. The blast radius caught Agora, which froze an AUSD account after roughly 1.4 million AUSD left a bridge adapter and was swapped for ETH, while insisting it has no contracts deployed on Initia.

Elsewhere, Cysic’s bridge was exploited to mint 10 million tokens on BNB Smart Chain; the attacker routed $744,000 in ETH and BNB into Tornado Cash and ignored the dangling 10% bounty. CoinDCX quietly acknowledged wallet-sweeping losses after first denying a new breach, with Tether blacklisting USDT wallets holding about $2.2 million per AMLBot. And India’s largest exchange denied a hack after sleuths traced $16 million in suspicious outflows, which is the kind of denial that ages in public.

Vulnerabilities Worth Your Attention

  • The x402 machine-payment flaw is the one to internalize. Per V12, AI agents paying for API calls through the x402 SDKs could sign a payment for their entire balance of a supported token if a malicious API simply asked, because the default client set no spending limit until August 18. Autonomous signing plus no cap equals a blank check.
  • AGENTS.md as an attack vector. Researchers found a malicious AGENTS.md instruction file sitting in a Downloads folder that tricked an AI coding agent into installing a rogue npm package. The agent did exactly what it was told, which is the problem.
  • Electrum patched a flaw where a malicious server substitutes a fake payment and tricks the user into signing it while raising the fee; developers confirmed at least one user lost money.
  • Succinct patched an SP1 bug (native Rust verification, versions 6.0.0 through 6.8.0) that could let invalid proofs pass. Onchain Groth16 and Plonk verification were unaffected, which is the only reason this is a footnote and not a headline.
  • Swell paused swETH and rswETH deposits and withdrawals to correct NAV, blocking withdrawal requests and ETH claims onchain while it sorts the accounting.
  • Ethereum delayed the Glamsterdam Hoodi testnet fork after ChainSecurity found gas changes that could lock contracts into failure states, citing 13 real-world cases. Better caught on Hoodi than mainnet.

Threat Actors & Campaigns

No single marquee crew this week, but the drainer and phishing machinery kept grinding. A Trust Wallet impersonation email campaign is pushing fake “update” downloads to a malicious site, the perennial reminder that wallet updates come through app stores, not inboxes. Socket found 16 fake Rabby and OKX Wallet extensions on Firefox, unpublished by Mozilla around Oct. 5, though anyone whose recovery phrase was already slurped is not saved by a takedown.

On the hardware side, Keystone suffered a website breach exposing customer addresses and order details; the company says payment info, recovery phrases, and private keys were not exposed, while customers point out the data was supposedly deleted 180 days after orders. Physical-address leaks are a wrench-attack shopping list, delete-policy or not. In the broader threat landscape, researchers documented ransomware affiliates of INC and The Gentlemen running an AI-driven intrusion framework dubbed Phantom, and Interpol’s Operation Serengeti III recovered $105 million and made 1,462 arrests across 21 countries, shutting illegal crypto mines along the way.

The Bigger Picture

The institutional plumbing kept advancing regardless of price. HSBC switched on its Hong Kong dollar stablecoin inside PayMe, dropping a bank-issued token into over 3 million wallets, while Singapore, Malaysia, and Thailand expanded the BLOOM cross-border stablecoin initiative with Ripple, Visa, and Mastercard in the mix. Franklin Templeton added $150 million in fund shares to the XRP Ledger, all in one wallet.

Regulators are redrawing the map. The SEC named tokenization and AI “super intelligence” as systemic risks in its 2027 examination priorities, while cryptocurrencies as a standalone category remain conspicuously absent. South Korea moved to regulate stablecoins as payment instruments under its forthcoming Digital Asset Basic Act, and China set a 2030 target for a national blockchain network while keeping its crypto restrictions intact. In a sign of the times, a16z dropped “crypto” from its fund name, rebranding to a16z Frontier to chase AI and robotics, which tells you where the narrative capital is flowing.

Markets, as context: spot Bitcoin ETFs bled $635.6 million on Thursday before clawing back to about $301 million in net inflows for the week, as BTC briefly slipped below $80,000 and crypto longs lost $404 million in four hours. Ether fell under $2,300, down 14.7% over 28 days. By the time it is news, it is already priced in, and this week the market had long since decided to wait and see.

Resources

  • https://thedefiant.io/news/hacks/x100-exploit-nets-4-85-million-usdt-after-governance-takeover
  • https://thedefiant.io/news/hacks/x100-exploit-proceeds-split-into-four-400-eth-wallets
  • Incident trackers (reference standard): Rekt leaderboard · SlowMist Hacked

More: Issues · Field Notes · RTFM

New Issue every week. Follow @ItsAlreadyPrice or subscribe via RSS so the next exploit does not surprise you.