Cardano Warns of Critical Linux Flaw: Is Your ADA at Risk?

On Oct. 30, Intersect, a Cardano coordinating group, warned stake pool operators to patch a Linux vulnerability, CVE-2026-98432, rated 9.8 out of 10 for severity. Linux runs many servers that produce Cardano blocks, and the flaw can let crafted internet requests corrupt memory, crash a server or, in some setups, permit passwordless takeover. No Cardano pool attack has been reported; about 21.5 billion ADA, 58% of circulating supply, is staked, though coins stay in holders’ wallets and hijacking a pool would not transfer ownership. Anthropic said on Oct. 27 that its Claude AI produced an attack against multipath TCP servers in 53 minutes; public test code later appeared but no complete takeover was demonstrated. Intersect urged operators to update.