Klaviyo fixed a sign-up bug that may have exposed passwords and account data to third-party trackers, but the full number of affected users is unknown.
CryptoJS's weak RNG made recovery phrases guessable across five wallet apps, enabling Ill Bloom thefts totaling at least $5.69 million in two sweeps.