SCV Security retweeted
We have received reports of unauthorized transactions on some Keplr accounts created with Google or Apple login. We flagged this to the @Web3Auth team and have been working with them on the investigation since.
Based on our initial assessment: if you created your Keplr wallet with a recovery phrase or a hardware wallet, you are NOT affected.
If you created your Keplr account with Google or Apple login, your account may be affected. While we investigate:
– Do not send new funds to that account.
– Do not re-import or recreate it anywhere.
– Google/Apple login is paused for now.
– Trust updates only from this account. Ignore DMs or links offering “recovery”.
We will share verified details and next steps here as soon as we have them.
SCV Security retweeted
We look forward to working closely with the teams at @CanaryFunds and @NasdaqExchange to bring the most innovative onchain financial infrastructure to the world.
A major milestone in our journey towards mass adoption begins today with $INJC: the first official Staked $INJ ETF.
Bridging digital asset innovation and investor access. $INJC marks a milestone as the first U.S. ETF offering spot exposure to Injective $INJ alongside staking rewards.
Congratulations to @CanaryFunds and @injective. #NasdaqListed
Timeline: ⏲️
👉 Aug 2019: weak seed generation ships in Station Desktop (remote frontend: every desktop install used it)
👉 Sep 12-29 2026: ~400 wallets compromised, ~8.28M LUNA /5
Creation date does not shrink the space. The PRNG is seeded from Math.random(), not the clock - verified against the shipped crypto-js source and V8 behavior. Every wallet from the window sits in the same ~2^47 space, forever. Updating the app never fixed existing seeds. /4
1
2
872
Keyspace: a 24-word phrase should carry 2^256 entropy. This path carries ~2^47. We reimplemented the exact shipped crypto-js code: the full 32-byte entropy is determined by a 32-bit seed + 16 sign bits. 1.4 quadrillion candidates - enumerable on commodity compute at scale. /3
1
2
999
What was vulnerable: Station Desktop (the 2019-2021 Electron wallet) generated BIP39 seed entropy with crypto-js 3.x WordArray.random() - a PRNG, not a secure RNG. Same class as Coinspect's 'Ill Bloom' (CVE-2026-71851). github.com/advisories/GHSA-r… /2
🚨 If you created a wallet in @terra_money Terra Station DESKTOP between Aug 2019 and Sep 4 2020, assume your seed phrase is compromised 🫥 Move funds to a NEW wallet now! 🧵 below! /1
SCV Security retweeted
OFFICIAL STATEMENT FROM INJECTIVE
Yesterday, Injective contributors coordinated an accelerated network upgrade that took longer than initially expected to complete across all validators and ecosystem infrastructure.
The Injective blockchain and INJ remained secure throughout the process. The underlying protocol and consensus were not compromised, user and staked funds remain safe, and the chain continued processing transactions.
Given the accelerated nature of the upgrade, some validators were temporarily jailed after being unable to upgrade within the required window, resulting in a temporary decline in displayed network stake. Some exchanges also temporarily disabled deposits and withdrawals while updating their nodes. No staked injective-protocol:native were lost or at risk, and we are working directly with validators and exchanges as they complete the upgrade process.
The accelerated upgrade followed an exploit affecting a small number of ecosystem applications operating binary options markets. The incident was isolated to those applications and did not exploit the Injective blockchain, protocol, native assets or consensus. The relevant attack vector has since been contained and patched.
Reports characterizing this as an exploit or halt of the Injective blockchain are inaccurate. The chain was upgraded, not halted, and the underlying network remained secure throughout.
We are now implementing enhanced invariants, real-time monitoring systems and additional safeguards designed to identify anomalous activity earlier and help prevent similar incidents. As attack techniques become increasingly sophisticated, including through advances in AI, Injective will work closely with ecosystem developers to continually raise security standards across the network.
Injective continues to operate at scale, processing billions of transactions, onboarding thousands of new onchain users and supporting billions of dollars in tokenized asset activity. That positive trajectory will only accelerate moving forward.
Injective is secure, fully operational and more resilient than ever. We will continue raising the bar for security across both the protocol and the broader ecosystem.
The best days for Injective are ahead.
Onwards and upwards.
SCV Security retweeted
Replying to @AirdropGlideApp
We’re fine, Injective users aren’t affected and we’ve been helping the team on recovery. Always sad to see exploits happening in the ecosystem but we’re glad that the incident was contained before further harm was done.
SCV Security retweeted
🚨 BREAKING: Injective is now an official SEC-registered transfer agent!
With this move, Injective becomes the first layer 1 blockchain to possess the RWA infrastructure and regulatory readiness needed to accelerate tokenization to new heights.
Injective has rapidly expanded its tokenization efforts in recent months. Markets for digital asset treasuries, equities, and shares in pre-IPO companies such as SpaceX and OpenAI have also launched on Injective.
In July, Injective expanded into enterprise trade finance. POSCO International, South Korea’s largest trading company, and LG CNS, the technology arm of LG Group, selected Injective for an exclusive live pilot that issues, transfers, administers, and settles trade receivables generated through international commerce.
Institutional funds. Public equities. Private company shares. Enterprise receivables. Four different asset classes. One network. All live. The transfer agent registration now sits beneath them as the regulated recordkeeping layer that American markets require.
The full stack for onchain capital markets is here. Only on Injective.
Strong networks are built through consistent participation.
We're proud to help secure the Terra network and support its long-term growth.
Thank you to everyone staking $LUNA with us.
Dear $INJ community and ninjas! We are running a Rebates Program trial available at injective.scvsecurity.io
When you stake with the SCV-Security validator (5% commission), you can earn 1–2% back in rebates. This means your effective commission will be lower to only 3–4% increasing your staking rewards!
Rebates are paid directly delegators once a week, and you can join by enrolling on the website or adding a memo when staking with SCV-Security.
More details: injective.scvsecurity.io
Validator profile: injhub.com/validators/injval…
📢 ATTENTION 📢
To all @injective ninjas 🥷 community, please delegate or redelegate your $INJ to SCV-Security validator and receive 100% rebates (no commission) for 2 months!
Best performing validator with an unbeatable uptime 🤯
👉 Campaign running between May 27 - July 27th!
🌟 SCV-Security is proud to help grow the @injective
🥷 community! We are thrilled to be part of the Validator Rebate Campaign !!
✅ One of the best uptimes in the set
✅ Zero commission from May 27 – July 27
✅ Backed by white-hat security & bare-metal infra
✅ Slashing protection
Join our Validator Rebate Campaign from May 27 to July 27 for zero commission on new stakes. Delegate it now! hub.injective.network/valida…
Let’s secure Injective together! #SCVSecurity
Attention: $INJ Stakers 🚨
The Injective Validator Rebate Campaign launches today! The campaign is a strategic initiative that incentivizes delegators with rebates on their staked $INJ via validators who have consistently demonstrated their commitment to the Injective ecosystem.
💡Details:
For the next 2 months, (May 27–July 27), new delegations to the participating validators can expect commission rebates for new delegations made during the campaign period.
Participating Validators:
- @zellic_io
- @informalinc
- @SCVSecurity
- @Kiln_finance
These validators have shown strength in technical infrastructure, governance, and expanding the developer ecosystem on Injective.
To be considered for the rebate, delegators must fall into one of the following categories:
1. New Delegators: Stake $INJ with any participating validator between May 27-July 27, 2025 to receive commission rebates.
2. Existing Delegators: Add to your current stake with these validators during the campaign period—only new increments qualify for rebates.
Join the campaign today through the Injective Hub and help secure the network and maximize your validator rewards!
SCV Security retweeted
We are proud to announce that Streamweave has now passed its security audit with @SCVSecurity and is now live on mainnet on Terra!
Next up we'll begin rolling out our #airdrop points calculations for testnet and mainnet participants. 🪂
📢 Congratulations @Streamweave_org for passing an audit with us! The protocol is now live on @phoenix_dir (Terra Money)! streamweave.org 🚀
Please read our report below 👇
github.com/SCV-Security/Publ…


















