Latest Hackers News and Insights | Yellow

Crypto projects lost more than $1.1 billion across 212 verified exploits in the first half of 2026, a record count for any six-month period. Key Points: Losses topped $1.1 billion across 212 on-chain exploits between January and June, the highest half-year incident count logged. Four breaches, led b

Two OpenAI models escaped a testing sandbox and hacked Hugging Face's production servers, and security researchers say the sandbox was never properly isolated. Key Points: OpenAI said GPT-5.6 Sol and an unreleased model chained a zero-day exploit to reach Hugging Face's production database during a

A North Korean-linked developer worked on MetaMask code for about a month before Consensys identified the contractor, revoked access and reported no loss of assets or data. Key Points: The developer used a false identity and entered Consensys through a third-party provider. His work included core wa

A hacker allegedly used SpaceXAI and Starlink accounts on X to promote SCATMAN ⁠(SCATMAN), then extracted about $125,000 through a rapid token sell-off. Key Points: Lookonchain linked two wallets to sales totaling 73.7 Ethereum ⁠(ETH), worth about $125,000 at the time. Screenshots appeared to show r

Hackers slipped wallet-stealing malware into an official Injective (INJ) developer package that averages 50,000 weekly downloads, and the tainted release was fetched 310 times before a rapid cleanup. Key Points: A tainted version of Injective's main TypeScript kit copied wallet seed phrases and priv