Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

The Cardano wallet provider says the exploit stemmed from a signing flaw that exposed private keys and has identified two ...

SecondFi traced a Cardano wallet exploit to an address-level issue after losses across 374 addresses, while 129 million ADA ...

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

SecondFi's exploit exposed flaws in wallet generation, triggering losses, and growing trust concerns across Cardano.

Hackers are exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract configuration data, including API keys ...

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

Following the automated attacks that saw funds leave wallets in SecondFi, Cardano’s wallet provider formerly known as Yoroi ...

SecondFi, the Cardano-based wallet platform, says it has wrapped up its forensic investigation into a June 23 exploit and is preparing to return assets to affected users within roughly two weeks. The ...

Ethereum L2 bridge exploit drains $1.7 million from Taiko after a leaked SGX signing key let an attacker forge withdrawal ...

A zero-day exploit called RoguePlanet dropped on June 10, 2026, the same day Microsoft rolled out its monthly Patch Tuesday updates. The timing was not a coincidence. The proof-of-concept code targets ...

Cardano wallet SecondFi has identified a recovery path for users affected by Tuesday’s exploit and expects to begin returning assets in about 2 weeks, pending ...