NEAR AI breach and Initia exploit highlight security risks
The Block reports NEAR AI contained unauthorized access via an SGLang RCE flaw, and Initia halted its L1 after about $605K was drained. A public iOS sandbox-escape PoC was also disclosed.
What we know
The Block reports NEAR AI contained unauthorized access after an attacker exploited a remote code execution vulnerability in the SGLang inference engine; NEAR Protocol is not affected. The Block also reports Initia halted its L1 after compromised keys were used to fabricate IBC transfers, draining about $605,000 in USDC. SlowMist warned of a public PoC for an iOS sandbox escape 0day, "worse_query", targeting iOS 26.0–26.7.2 and 27.2.
How the story developed
The Block reports NEAR AI contained unauthorized access via an SGLang RCE flaw, and Initia halted its L1 after about $605K was drained. A public iOS sandbox-escape PoC was also disclosed.
A security firm alert says a public proof-of-concept for an iOS sandbox escape, 'worse_query', targets iOS 26.0–26.7.2 and 27.2.
Sources
“NEAR AI ... contained unauthorized access ... SGLang inference engine”
View post →“Initia halted its L1 blockchain after unauthorized transfers drained approximately $605,000 in USDC”
View post →What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.