MultiversX Network Halted After Exploit Attempt, Upbit Issues Warning

Crypto.News

MultiversX Network Halted After Exploit Attempt, Upbit Issues Warning

First seen 21 Sep 2026, 10:29 UTC • •62.3

Article Content

1 / 4

Browse articles

ThreatCluster •September 21, 2026 at 11:24 UTC

•MultiversX halted network operations after an exploit attempt on September 20, 2026.
•Upbit issued a trading caution for EGLD, suspending deposits and withdrawals on September 21.
•No confirmed financial losses have been reported, and a fix is being prepared for testing.

MultiversX (EGLD) halted its network operations on September 20, 2026, after detecting an exploit attempt targeting a virtual-machine-level atomicity vulnerability. The incident resulted in invalid state changes, prompting the team to stop network progression to prevent further damage. Upbit, a South Korean exchange, flagged EGLD for trading caution on September 21, suspending deposits and withdrawals. Other exchanges, including Kraken and Bithumb, also restricted EGLD transactions. MultiversX is currently preparing a fix for testing via a shadow fork, with no confirmed financial losses reported. The trading caution review by Upbit will take place from October 19-23, 2026. Users are advised to refrain from initiating transactions until the network is stabilized.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-09-19

Potential mainnet issue detected

MultiversX announced it was investigating a potential issue on its mainnet, prioritizing user safety.

2026-09-20

Network operations halted

MultiversX halted its network after detecting an exploit attempt that caused invalid state changes.

2026-09-21

Upbit issues trading caution

Upbit flagged EGLD for trading caution, suspending deposits and withdrawals due to unresolved security incidents.

More articles in this cluster (3)

Following this threat?

Track MultiversX in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…