Security notice

Published October 27, 2026

Between July 13 and October 27, 2026 a third-party script was injected into this website through a vulnerability in the web framework it runs on. The vulnerability is now fixed.

What happened

An attacker exploited a known remote-code-execution vulnerability in React Server Components / Next.js (CVE-2025-55182) on our web server and modified this site's JavaScript files, so that visitors' browsers also loaded a script from a domain we do not control.

What you should do

If, while visiting this site during that period, you saw a “verify you are human” or CAPTCHA screen that asked you to paste or run a command (for example in the Windows Run box, PowerShell or Terminal), treat that device as compromised: run a malware scan and change your passwords from a different, clean device.
If this site showed you any wallet-connect or signature prompt, treat that wallet as compromised and revoke its token approvals.

What we have done

On October 27, 2026 we took the site offline, rebuilt it from verified clean source code on a patched framework version, and added a Content Security Policy that stops browsers from running scripts from, or connecting to, any other domain.

This site never asks you to connect a wallet, sign a message, or paste or run commands on your computer.

← Back to the home page