Exploit

Highlights: THORChain node operators are voting on ADR028 after the May 15 vault exploit. ADR028 uses protocol-owned liquidity first before sharing losses with synth holders. The plan avoids new RUNE minting, forced sales, and holder dilution. THORChain node operators have […]

Highlights: THORChain opened a recovery portal after a $10 million exploit hit 12,847 wallets. Affected users have until June 4 to submit compensation claims. Investigators linked the attack to vault key exposure and cross-chain laundering activity. Decentralized cross-chain liquidity protocol […]

Highlights: Wasabi protocol lost over $5 million after the attacker gained deployer admin access. Blockaid linked the drain to malicious contract upgrades and missing admin safeguards. Security firms traced the exploit across Ethereum, Base, Berachain, and Blast. DeFi derivatives platform […]

Highlights: Aethir has contained a bridge exploit and capped reported user losses below $90,000. The main ATH supply on Ethereum stayed intact, while the ETH-ARB bridge on Squid remained unaffected. A compensation plan, attacker wallet list, and post-mortem are planned […]

Highlights: Drift Protocol has opened on-chain talks with wallets tied to the stolen funds. The exploit has expanded, affecting at least 20 Solana protocols. Cyvers said the attacker likely prepared the operation days earlier. The Solana-based decentralized exchange (DEX) Drift […]

Highlights: Truebit Protocol lost $26.6M after attackers exploited an outdated smart contract flaw. The TRU token collapsed from $0.16 to near zero within hours. Legacy DeFi contracts continue attracting attackers seeking mispriced minting functions. Truebit Protocol suffered a major security […]

Highlights: Upbit has uncovered a critical wallet flaw enabling private key exposure during an emergency investigation. The exchange confirmed $30 million in total losses, with $26 million affecting customer holdings. Security overhaul and law enforcement cooperation continue as Upbit pledges […]

Highlights: Balancer proposes an $8M reimbursement plan for affected liquidity providers. The $8M will be repaid in kind to users from recovered assets. White-hat hackers get 10% bounties for successful rescue operations. Decentralized finance (DeFi) protocol Balancer has proposed a […]

Highlights: The GANA Payment exploit has drained over $3 million in assets. Funds were laundered across both BNB Smart Chain and Ethereum. The attacker used Tornado Cash for mixing funds and making recovery difficult. Decentralized payment token project GANA Payment […]

Highlights: Hackers drained $17,000 in USDC through 402Bridge’s leaked private key. Over 200 users lost funds after granting contract approvals. 402Bridge halted operations and reported the breach to authorities. The 402Bridge site has suffered a serious breach, leading to the […]

Highlights: Bunni cites a rounding flaw in withdrawals as the cause of the $8.4M flash loan exploit. The attacker drained funds using 44 small withdrawals and price manipulation. Bunni offers a 10% bounty to recover the remaining stolen assets. Decentralized […]

Highlights: BTCTurk hacked with losses reaching $48M in multi-chain transfers. The hacker moved assets to two addresses and began swaps. Deposits and withdrawals remain suspended during the investigation. BTCTurk, a Turkish cryptocurrency exchange, has paused crypto deposits and withdrawals after […]