Source publication time: November 10, 2026, at 08:29:56 UTC+8.
Ankr: small Optimism deposits reportedly trigger bridge withdrawals
Onchain Lens reported that an attacker allegedly used small deposits on Optimism to trigger five withdrawals from Ankr’s Ethereum cross-chain bridge, transferring approximately $292,000 in assets out of the bridge.
The reported sequence connects deposits on Optimism with withdrawals from the Ethereum bridge. The source does not identify the affected assets or explain how the withdrawals were authorized, leaving the underlying verification failure unspecified.
Swarm: compromised software targets node-wallet credentials
According to Socket, Swarm development team Ethersphere suffered a supply-chain attack involving both its JavaScript package and desktop application.
The attacker published malicious bee-js version 13.3.0 to npm on November 9 and distributed a trojanized Swarm Desktop version 0.56.2 through automatic updates. The malicious code read Bee node configuration files and encrypted wallet keystores, then sent them to the attacker.
Because the configuration files stored keystore passwords in plaintext, node wallets could have been exposed. The code also installed a remote-control backdoor on affected devices.
The compromised npm release and desktop version had been withdrawn by the time of the report. No fund losses had been confirmed. This incident concerns the software and credentials used to operate nodes, rather than a reported failure of cross-chain verification.
Injective: block-production halt interrupts exchange transfers
Injective’s official node monitor showed that the mainnet had stopped producing blocks. Its latest block was 191,016,661, generated at 21:04 Beijing time, according to the source.
Upbit suspended INJ deposits and withdrawals, while leaving spot trading available. It said it would announce a resumption after confirming transfer stability. Coinone also suspended INJ deposits and withdrawals from 22:25 Beijing time, citing a network fault; trading and other services were unaffected.
The source does not specify the calendar date associated with those two times or report a subsequent network restart.
Elliptic: self-created tokens used to move stolen funds
Elliptic reported that hackers linked to a Binance theft were using self-created meme tokens and decentralized-exchange liquidity pools to move stolen funds. It said the technique had appeared on Tron, NEAR and Solana.
The reported process involved creating tokens, pairing them with assets such as NEAR or stablecoins, and buying and selling through different wallets so that fund movements resembled ordinary token trades.
Between November 5 and 7, the attackers created at least six meme tokens on NEAR, at a cost of about 25 NEAR each, and moved approximately 117,000 NEAR, worth about $430,000, through them. Trading in those tokens had stopped from November 8. About 11.8 million NEAR, valued at approximately $43.7 million, remained unmoved, Elliptic said.
Elliptic emphasized that the method delays investigations rather than truly concealing on-chain fund flows. The source describes activity across several networks but does not identify a bridge route connecting those movements.
