NOFX AI Vulnerability Exposes API Keys and Private Wallets

SlowMist identified a critical vulnerability in the NOFX AI trading system, which shipped with an 'admin mode' enabled by default and lacked proper authentication. This flaw allows unauthorized access to sensitive API keys and private wallet information, affecting users on platforms like Binance, Hyperliquid, and Aster DEX. Despite a developer patch attempt, the core issue remains unresolved due to a publicly known default JWT secret.