https://tradingagentstack.com/incidents/Security incidents that matter for AI agents and bots that touch money, each from an official source.enhttps://tradingagentstack.com/incidents/#d-2026-10-24https://tradingagentstack.com/incidents/2026-10-24/9b51e965Sat, 24 Oct 2026 12:00:00 +0000IncidentInitia said a bug in MoveVM script caching let an attacker credit themselves unbacked WETH, iUSD and USDC and bridge about $2.7M out (via LayerZero and CCTP, swapped to 1,135.52 ETH) before it halted the L1 and its rollups; it said no native INIT was minted and that a fix was being written and audited. Source: https://x.com/initia/status/2113915002008612945https://tradingagentstack.com/incidents/#d-2026-10-24https://tradingagentstack.com/incidents/2026-10-24/c2ac4994Sat, 24 Oct 2026 12:00:00 +0000IncidentKeystone said a third party pulled customer shipping data (names, contact details, shipping addresses, items bought and prices) from its website store via the Shopify API, detected October 20 and confirmed October 23; it said payment details, recovery phrases, private keys and wallet passwords were not exposed, and warned of scammers posing as Keystone with refunds or replacement devices. Source: https://x.com/KeystoneWallet/status/2114054080754770137https://tradingagentstack.com/incidents/#d-2026-10-23https://tradingagentstack.com/incidents/2026-10-23/14df9f15Fri, 23 Oct 2026 12:00:00 +0000IncidentElectrum released 4.8.3 as a security update; press reports of its advisory say earlier versions let a malicious Electrum server plant a fake pending payment so that a later fee bump (RBF) paid the attacker, and that users of trusted servers were not exposed. Update to 4.8.3 or later. Source: https://github.com/spesmilo/electrum/blob/4.8.3/RELEASE-NOTEShttps://tradingagentstack.com/incidents/#d-2026-10-21https://tradingagentstack.com/incidents/2026-10-21/aadc9f9eWed, 21 Oct 2026 12:00:00 +0000IncidentRailway disclosed that an unauthorized third party may have accessed encrypted environment variables and obtained the decrypted contents of some of them; it told users to immediately roll all environment variables and API keys stored in Railway and paused all deployments while it investigates. Source: https://blog.railway.com/p/security-disclosure-wednesday-october-21sthttps://tradingagentstack.com/incidents/#d-2026-10-21https://tradingagentstack.com/incidents/2026-10-21/dde3deb5Wed, 21 Oct 2026 12:00:00 +0000IncidentMicrosoft reported that the China-state aligned actor Storm-0940 used ARTEX, an open-source multi-agent LLM penetration-testing framework, to automate scanning, password spraying and OAuth app abuse in a ConnectWise cloud backup supply-chain compromise aimed at hundreds of organizations. Source: https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/https://tradingagentstack.com/incidents/#d-2026-10-21https://tradingagentstack.com/incidents/2026-10-21/ffe05f34Wed, 21 Oct 2026 12:00:00 +0000IncidentNode.js security releases v22.23.4, v24.22.1 and v26.12.1 fix ten vulnerabilities, including a high-severity Brotli decoder out-of-bounds write that permits remote code execution (CVE-2026-111497) in the 22.x, 24.x and 26.x lines. Source: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases