6AM: unauthorized transactions detected on a few Bankr wallets
7AM: entire team on a call
By 11AM, the team had shut down the attack, contacted security partners, tracked affected wallets, communicated reimbursements, and started hardening Bankr going forward
Really great to see this level of leadership by @0xDeployer and team unity.
Bankr season just getting started.
Season 1 $AGBETS rewards are out 🎯
30% of the treasury, split by linear pro-rata based on Season 1 points
Full breakdown → https://t.co/SZue7g5FEl Your reward → https://t.co/Kx1agK7TEC
gg to everyone who participated 🫡
Next.js just got its worst vulnerability ever, CVSS 8.6.
→ affects versions 13.4.13+, 14.x, 15.x, and 16.0.0–16.2.4
→ attackers can access your internal services, cloud credentials, API keys, and admin panels
→ no authentication needed
→ one crafted request is all it takes
→ roughly 79,000 instances are exploitable right now
→ vercel-hosted apps are safe, self-hosted are not
upgrade to 15.5.16 or 16.2.5 immediately.
Season 1 has come to an end
✅ Final points locked
✅ Per-wallet activity log live on /profile
✅ Leaderboard frozen at /leaderboard
✅ Reproducible Merkle-ready snapshot
reward pool TBD — details soon.
Season 1 has come to an end
✅ Final points locked
✅ Per-wallet activity log live on /profile
✅ Leaderboard frozen at /leaderboard
✅ Reproducible Merkle-ready snapshot
reward pool TBD — details soon.
Season 1 has come to an end
✅ Final points locked
✅ Per-wallet activity log live on /profile
✅ Leaderboard frozen at /leaderboard
✅ Reproducible Merkle-ready snapshot
reward pool TBD — details soon.