diff --git a/apps/cli/package.json b/apps/cli/package.json
index 956e905..1cdad12 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -27,7 +27,7 @@
     "pino-pretty": "^11.3.0",
     "prompts": "^2.4.2",
     "viem": "^2.49.0",
-    "ws": "^8.18.0"
+    "ws": "^8.21.0"
   },
   "devDependencies": {
     "@inferenceroom/pico-dvm-adapter": "workspace:*",
diff --git a/apps/hub/package.json b/apps/hub/package.json
index 55b3299..0c59f11 100644
--- a/apps/hub/package.json
+++ b/apps/hub/package.json
@@ -43,6 +43,6 @@
     "tsx": "^4.19.2",
     "typescript": "^5.5.4",
     "vitest": "^2.1.8",
-    "ws": "^8.18.0"
+    "ws": "^8.21.0"
   }
 }
diff --git a/packages/sdk/package.json b/packages/sdk/package.json
index a9a2830..709f1d0 100644
--- a/packages/sdk/package.json
+++ b/packages/sdk/package.json
@@ -26,7 +26,7 @@
     "@types/ws": "^8.5.13",
     "tweetnacl": "^1.0.3",
     "viem": "^2.49.0",
-    "ws": "^8.18.0"
+    "ws": "^8.21.0"
   },
   "devDependencies": {
     "@inferenceroom/pico-state-machine": "workspace:*",
diff --git a/packages/test-utils/package.json b/packages/test-utils/package.json
index e80fcab..bc473a1 100644
--- a/packages/test-utils/package.json
+++ b/packages/test-utils/package.json
@@ -25,7 +25,7 @@
     "@inferenceroom/pico-sdk": "workspace:*",
     "@inferenceroom/pico-state-machine": "workspace:*",
     "viem": "^2.49.0",
-    "ws": "^8.18.0"
+    "ws": "^8.21.0"
   },
   "devDependencies": {
     "@types/ws": "^8.5.13",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 14c1ec7..5f70768 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -45,8 +45,8 @@ importers:
         specifier: ^2.49.0
         version: 2.49.0(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)(zod@4.3.6)
       ws:
-        specifier: ^8.18.0
-        version: 8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+        specifier: ^8.21.0
+        version: 8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
     devDependencies:
       '@inferenceroom/pico-dvm-adapter':
         specifier: workspace:*
@@ -146,8 +146,8 @@ importers:
         specifier: ^2.1.8
         version: 2.1.9(@types/node@22.19.17)(happy-dom@15.11.7)
       ws:
-        specifier: ^8.18.0
-        version: 8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+        specifier: ^8.21.0
+        version: 8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
 
   apps/landing: {}
 
@@ -314,8 +314,8 @@ importers:
         specifier: ^2.49.0
         version: 2.49.0(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)(zod@4.3.6)
       ws:
-        specifier: ^8.18.0
-        version: 8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+        specifier: ^8.21.0
+        version: 8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
     devDependencies:
       '@inferenceroom/pico-state-machine':
         specifier: workspace:*
@@ -385,8 +385,8 @@ importers:
         specifier: ^2.49.0
         version: 2.49.0(bufferutil@4.1.0)(typescript@5.9.3)(utf-8-validate@5.0.10)(zod@4.3.6)
       ws:
-        specifier: ^8.18.0
-        version: 8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+        specifier: ^8.21.0
+        version: 8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
     devDependencies:
       '@types/ws':
         specifier: ^8.5.13
@@ -2498,8 +2498,8 @@ packages:
       utf-8-validate:
         optional: true
 
-  ws@8.20.0:
-    resolution: {integrity: sha512-sAt8BhgNbzCtgGbt2OxmpuryO63ZoDk/sqaB/znQm94T4fCEsy/yV+7CdC1kJhOU9lboAEU7R3kquuycDoibVA==}
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
     engines: {node: '>=10.0.0'}
     peerDependencies:
       bufferutil: ^4.0.1
@@ -2895,7 +2895,7 @@ snapshots:
     dependencies:
       duplexify: 4.1.3
       fastify-plugin: 5.1.0
-      ws: 8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
+      ws: 8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10)
     transitivePeerDependencies:
       - bufferutil
       - utf-8-validate
@@ -4508,7 +4508,7 @@ snapshots:
       bufferutil: 4.1.0
       utf-8-validate: 5.0.10
 
-  ws@8.20.0(bufferutil@4.1.0)(utf-8-validate@5.0.10):
+  ws@8.21.0(bufferutil@4.1.0)(utf-8-validate@5.0.10):
     optionalDependencies:
       bufferutil: 4.1.0
       utf-8-validate: 5.0.10