News
Coverage of crypto exploits, drains and scams, alongside reports filed by people who lost funds. Every item names the addresses involved and what PublicAML sees on them.
Items marked Report are filings from readers, published as they were filed. Most have not been checked by anyone, and an unchecked report puts no risk label on any address. File a report.
- News
Rujira AMM Strategies Suffers $200,000 Loss Due to Swap Logic Flaw
Rujira AMM Strategies experienced a significant loss due to a flaw in their swap logic. The incident resulted in a financial impact of $200,000.
- Investigation
Arcus exploit: the $2.23M left Robinhood Chain before the block, and almost all of it is still with the attacker
2,234,418 USDG left through Relay.link as 1,052 ETH 44 minutes before Arcus blocked the address; since then the attacker only reshuffled: 475 ETH unmoved, 1,008,945 DAI on a fresh wallet, 2.83 BTC via THORChain. No exchange, no mixer.
- News
DNS Hijack Incident Affecting Across
A DNS hijack incident has been reported involving Across. The specific details regarding the chain and financial losses are not provided.
- News
Social Engineering Attack Targets Across Protocol's Domain
Across Protocol's domain registrar was compromised in a social engineering attack, leading to a phishing site. The team responded quickly to mitigate the threat and protect users.
- News
Arcus Perps Suffers $2.23 Million Loss Due to Withdrawal Logic Flaw
Arcus Perps experienced a significant financial loss due to a flaw in their withdrawal logic. The incident resulted in a loss of $2,234,391.
- News
Initia L1 Halted Due to Unauthorized Transfers
The Initia L1 blockchain was halted after unauthorized transfers were detected. Approximately $615,000 was lost due to compromised rollup infrastructure keys.
- News
Mercado Bitcoin Suffers $48.6M Loss After Security Incident
Mercado Bitcoin experienced a significant security incident resulting in a loss of $48.6 million. An Ethereum deposit sweep occurred shortly after the platform claimed the situation was 'contained.'
- News
Rujira AMM Strategies Suffers $200,000 Loss from Exploit
An attacker exploited a flaw in Rujira's trading strategy, leading to significant losses. The incident involved manipulation of the BTC/USDC orderbook and resulted in a halt of operations.
- Investigation
zkLink Nova bridge hack: 705,309 DAI of the stolen money sits on three wallets, untouched since 9 November
One transaction drained the Nova escrow on 28 Oct; the attacker sold everything for ~306 ETH, then DAI, and on 9 Nov parked 705,309 DAI on three fresh wallets. Gas from FixedFloat; about a tenth left via FixedFloat and ChangeNOW.
- News
Ankr Ethereum Cross-chain Bridge Exploited for $304,500
Ankr's Ethereum cross-chain bridge was exploited through forged receipts. The attacker manipulated transaction details to withdraw assets without proper verification.
- News
Arcus Exchange Exploit Results in $2.2 Million Loss
An accounting bug on the Arcus decentralized exchange led to a loss of $2,234,391 USDG. The exchange paused withdrawals, fixed the issue, and covered the loss from its treasury.
- News
Ethersphere's Swarm Targeted by Supply Chain Attack
The development team Ethersphere experienced a supply chain attack on November 9, 2026. Attackers published a malicious version of bee-js and pushed a trojanized Swarm Desktop update, but no funds were lost.
- Investigation
The Tornado-funded BTC-long, ETH-short trade on Hyperliquid: 3,100 ETH out of the mixer, and one thief with enough notes to have put it in
31 × 100 ETH out of Tornado on 7 Nov, sold for 6.92M USDC, sent to Hyperliquid via CCTP; since 1 Oct the Drift exploiter put in 505 of the pool's 1,576 hundred-ether notes. Consistent with Drift, not proven.
- Investigation
The "UXLINK-linked" $45M ETH long on Hyperliquid: the money predates the hack, the owner does not look like a stranger
The trader's 11.55M USDC came from two wallets that held the money months before UXLINK was drained; but they move in lockstep, minutes apart, and one of them paid the same three-hour burner as the UXLINK exploiter on 28 Aug 2026.
- News
ACryptoS Vault Exploit Results in $665,429 Loss
ACryptoS experienced a vault exploit affecting 77 vaults across five chains, resulting in a loss of approximately $665,000. The exploit was due to a missing input validation check in the depositMulti function.
- News
LNbits Experiences Unauthorized Withdrawals in Security Incident
LNbits suffered a series of attacks resulting in unauthorized fund withdrawals. Users were advised to shut down their servers as the team prepared security patches.
- Investigation
The iPhone wallet drain network did not stop: 734,424 USDT from 21 more TRON wallets after Bitquery’s report
The fee wallet behind $4.06M of iPhone seed-phrase thefts on TRON kept working after the report: three new collectors emptied 21 wallets by 7 Nov, one for 601,751.60 USDT in a single payment, cashed out as USDD 120,000 at a time through two pass-through wallets.
- Investigation
Premia exploit: 191.8 ETH turned into 5.27 BTC within an hour, and 4 BTC of it was deposited to HitBTC the same morning
Six Premia v3 vaults on Arbitrum were drained for 191.78 ETH; within 30 minutes it left through Chainflip, NEAR Intents and a CCTP leg to Solana, the swaps paid 5.27 BTC to eight addresses, and the attacker cut it into round pieces — 4.0 BTC went to six HitBTC deposit addresses swept at 09:29 UTC.
- Report · Scamethereum1 addressUnverified
Pig butchering report VR-1CBABBFE
A fraudster pretending to be a woman , dake photos
- Report · Othersolana2 addressesUnverified
Other report VR-AF7D0CD9
A fake SafePal Support agent on Telegram impersonated the real support team and instructed the victim to buy 5,939 SOL (about 719.87 USDT) on MEXC, withdraw it, and transfer it as a settlement payment. The funds were moved through CsRmsQfXL1mpyygmsj6Mya7awXHfpN9FBmS9gpmfksPT and 3JPpFD5XdKCe1XBM3kktxv3y68EDhU8VijuKwGb4f73i, and finally to the KuCoin hot wallet BmFdpraQhkiDQE6SnfG5omcA1VwzqfXrwtNYBwWTymy6. A fake token with symbol 'USDT' using a cyrillic T (mint 8Fnm6XUnY9DGQLh7tFM4SjQRbjfspfhTMyVSx7nXQNYB, Token-2022, honeypot, mintAuthority and freezeAuthority null) was credited to the victim in the same minute to simulate a successful payout.
- Report · Hackoptimism1 addressUnverified
Contract exploit report VR-EE5D7E02
https://optimistic.etherscan.io/tx/0x25ed533ae78084e5b0aede8e4f83c39a7bd253447eb93e08fffbae49a0e6010b
- News
Binance Loses $6.43 Billion Due to Fake Job Interview Scheme
A fake job interview resulted in Binance's signing service being compromised, leading to a loss of $6.43 billion across 11 chains. Approximately $2.85 billion was frozen or intercepted during the incident.
- News
Degen Coin Flip Exploit Affects Degen Spin Game
Degen Coin Flip experienced an exploit in its Degen Spin game, impacting over 30,000 wallets. The incident resulted in a loss of approximately $10,000 from the house, with user funds remaining secure.
- News
Keplr Wallet Suffers Private Key Breach Affecting 44,000 Accounts
Keplr Wallet experienced a private key breach affecting accounts created via social login. The incident resulted in unauthorized transactions totaling approximately $6.01 million.
- News
Supply Chain Attack Targets Keplr Wallet via Web3Auth
Keplr Wallet experienced a supply chain attack affecting its Web3Auth integration. The specifics of the attack mechanism and any financial losses remain unspecified.
- Report · Scambitcoin1 addressUnverified
Romance scam report VR-2FB5D3F3
Been talking online and via google chat for several months. She had me convinced that her family needed funds to release her late fathers property in Poland because the government seized his assets after his passing. The money was to be used to pay lawyers to recover the assets and repay me with interest. She said she was in love with me, and was living in Australia. Her real name is not Jane Kimson like she told me, her real name is Kyla Goldbach and she now resides in Houston.
- Report · Othertron3 addressesUnverified
Other report VR-B12CB5EA
I searched for WhatsApp business apk file on google and eventually downloaded a zip file on computer system in which I have trust wallet chrome extension installed. When I opened zip file and double clicked on .exe file in it, something start running in background and I see nothing on screen suspicious. After an hour I copied and address from my WhatsApp and transferred 100k USDT TRC by pasting the same. After some time, I got complaint from recipient that funds have not arrived. After investigating I come to know that THERE IS A SILENT MALWARE (CLIPBOARD HIJACKER) RUNNING IN BACKGROUD WHICH REPLACES THE CORRECT ADDRESS COPIED TO CLIPBOARD WITH ATTACKER'S ADDRESS. Clipboard Hijackers: Silent malware that infects your computer or phone. When you copy a crypto address, the malware instantly replaces it in your clipboard with the attacker's address.
- News
FLOKI Trading Bot Exploit Announced
An exploit was identified in the FLOKI Trading Bot, leading to its shutdown. The team is working to secure funds and assist affected users.
- News
Security Incident at Loopscale Lending
Loopscale Lending experienced a security incident. Details regarding the mechanism and loss are unknown.
- News
$TENDRIL Sell Hook Exploit Leads to Significant Loss
An exploit in the $TENDRIL token's sell hook resulted in a loss of approximately $555,000. The mechanism allowed for a delayed withdrawal of USDT from the liquidity pool.
- News
InsurancePool and CoreVault Attacked on BSC
The InsurancePool and CoreVault contracts on BSC were exploited, leading to a loss of approximately $112,300. The attacker utilized a flash loan to manipulate liquidity pool prices and inflate a redemption value.
- News
BitMart Exchange Hacked, $391,000 Drained from Hot Wallets
BitMart exchange experienced a hack on November 2, 2026, resulting in a loss of approximately $391,000. The attack affected hot wallets on Base, Arbitrum, and Optimism.
- News
Mercado Bitcoin Reports $40 Million Loss
Mercado Bitcoin experienced a significant financial loss of $40 million. The details surrounding the incident remain unclear.
- News
Solana MEV Bot King Loses $786,000 in Assets
The Solana MEV bot King was drained of approximately $786,000 in assets. This incident involved the transfer of funds through drainer addresses and cross-chain bridging.
- News
BTCPay Server Reports Unauthorized Access to Hot Wallets
BTCPay Server has reported unauthorized attacks on hot wallets across multiple instances. Operators are advised to shut down their instances immediately.
- News
Crédit Mutuel Arkéa Suffers $133 Million Loss from Exchange Compromise
Crédit Mutuel Arkéa experienced a significant security breach in early November 2026, resulting in losses exceeding $133 million. The incident involved the compromise of centralized exchange accounts and subsequent laundering of funds.
- News
Loopscale Faces API Exploit Attempt with No User Losses
Loopscale, a Solana lending protocol, experienced a campaign of malicious API requests. The protocol was paused, and no user deposits were lost during the incident.
- News
Withdrawal Logic Flaw Affects Premia V3 with $437,000 Loss
Premia V3 experienced a significant security incident due to a withdrawal logic flaw. This flaw resulted in a loss of $437,000.
- News
Sovryn Dex Suffers Exploit Resulting in $538,749 Loss
An exploit in Sovryn Dex's fee processing led to a significant loss. The protocol has since taken measures to address the incident.
- News
DNS Hijacking Affects 12 DeFi Frontends on BSC
On October 31, 2026, at least 12 DeFi websites experienced DNS hijacking, resulting in a loss of $138,000. Users who interacted with the malicious frontends had their assets drained by a wallet-drainer kit.
- News
Security Incident Involving b14g
A security incident has been confirmed involving b14g. Details about the mechanism and impact remain unknown.
- News
Flap's Website Hit by DNS Hijacking Attack
Flap's official website was compromised in a DNS hijacking attack, redirecting users to a malicious site. Users were tricked into signing transactions that could drain their assets.
- News
Premia V3 Vaults Drained in Flash Loan Attack
Six underwriter vaults on Premia V3 were drained, resulting in significant losses. The attacker exploited empty option pools and flash loans to withdraw collateral.
- News
Sovryn Lend Suffers $914,000 Security Incident
Sovryn Lend experienced a security incident resulting in a loss of $914,000. The specific mechanism of the incident remains unknown.
- News
Improper Access Control Incident at Troves
Troves experienced a security incident due to improper access control. The incident resulted in a loss of $666,935.
- News
VergeX AI Trading Platform Suffers Unauthorized Withdrawal Attack
VergeX experienced an attack where users received unauthorized withdrawal verification emails. The incident affected individual users, with a maximum loss of approximately 850 USDT per user, and the team promised compensation within 72 hours.
- Investigation
Binance hack: a Tornado-funded operator, three test runs the same afternoon, and about 430,737 stolen ETH parked on four wallets
The operator was funded by three Tornado Cash withdrawals, rehearsed EIP-7702 on its own wallets, then hijacked Binance 14 with 50 pre-signed authorizations: 197,540 ETH and 1.87B USDT to one collector in 24 seconds; 1.175B USDT frozen; 700M turned into ETH via UniswapX, Aave and Uniswap; about 430,737 ETH on four wallets that have never sent a transaction.
- Investigation
Binance Hot Wallet Exploit
The drain of Binance hot wallets on 29 October 2026: where the money went, which addresses hold it, and what is still open.
- News
Binance suffers $6.3 billion loss in hot wallet attack
On October 29, 2026, Binance experienced a significant security incident involving the draining of multiple hot wallets. The attacker utilized EIP-7702 delegation to control and transfer funds across various chains.
- News
Binance CEX Suffers $5.78 Billion Loss from Hot Wallet Key Compromise
A hot wallet key compromise led to a significant loss for Binance CEX. The incident resulted in a loss of $5.78 billion.
Archive
- Polymarket International Suffers $2.7 Million Supply Chain Attack
- zkLink Nova bridge exploited for $783,100
- Hifi Finance Targeted by Malicious Proposal
- Initia suffers $2.73 million loss due to stale script cache
- Tranche Vault Exploit Results in $1.01 Million Loss
- TranchePool Exploit Results in $1.01 Million Loss
- Cross-Chain Message Spoofing Incident at zkLink Nova
- Diamante Ecosystem Suffers Security Breach
- Diamante ($DIAM) Contract Compromised on BSC
- Fence Finance Suffers $1.01 Million Loss Due to Accounting Error
- Predict.fun Loses $397,708 in User Wallets Due to Compromised API
- Private Key Compromised at Zilliqa X-Bridge
- Bloom Trading suffers $947,000 loss due to RCE vulnerability
- Chainstack Breached via Exposed Grafana Instance
- Key Leak Incident at Myriad Markets
- $7.45M Taken from Unnamed Safe Multisig on Avalanche
- Wallet sweeper 0x4e59e80D…: 59 Ethereum wallets emptied, 26 Oct 2026
- Wallet sweeper 0xc3D93182…: 38 Ethereum wallets emptied, 26 Oct 2026
- Wallet sweeper 0x8871ca9c…: 53 Ethereum wallets emptied, 25 Oct 2026
- Yapeswap Suffers Governance Attack Resulting in $21,900 Loss
- Initia exploit: the attacker bought its Initia gas with Tornado Cash ETH through Osmosis, tested the bridge it drained, and all 1,135.52 ETH still sit on one address
- X100 exploit: the attacker’s gas came from FixedFloat, the second raid was run by a Limit Break attacker wallet, and on 26 October 821 ETH went into Tornado Cash
- Polkadot Asset Hub Bug Exploited, Leading to $1.38M Loss
- Wallet sweeper 0x133ca966…: 1211 Ethereum wallets emptied, 24 Oct 2026
- Wallet sweeper 0x1c3A69b4…: 8 Ethereum wallets emptied, 24 Oct 2026
- Wallet sweeper 0xd4Cbe37E…: 193 Ethereum wallets emptied, 24 Oct 2026
- Flashloan Governance Attack on X100 Results in $4.75 Million Loss
- Initia Suffers $2.6 Million Loss from Infinite Mint Incident
- $kimchi Token Experiences Major Price Crash After KOL Promotion
- Wallet sweeper 0x0103c1d2…: 72 Ethereum wallets emptied, 23 Oct 2026 – 24 Oct 2026
- NEM Token Contract Exploited on BSC via PancakeSwap Liquidity Pool
- WAX Multi-Chain Bridge Suffers $90,500 Loss Due to Input Validation Flaw
- Tornado Cash in 2026: at least 18% of the ETH that went in was stolen, over 40% of that by one attacker — and almost none of it can be traced out
- USDD on TRON: $8.4 billion went USDT → USDD → USDT within two days in 2026, and $621 million of it came from wallets Tether froze, darknet guarantors or hacks
- CoinDCX Suffers $16 Million Loss from Hot Wallet Key Compromise
- Fearless Wallet Compromised, Users Urged to Act
- Slice Exploit Leads to $41,000 Loss
- Swell Hot Wallet Key Compromised
- GarudaDefi Suffers Private Key Compromise
- Drift Protocol hack: a second 25,710 ETH went into Tornado Cash on 20 October, and 56,568 ETH still sit on one wallet
- AlpsCon AI Trade Hub Suffers Loss Due to Incorrect Share Accounting
- Exploitation of Argent-style Smart Wallet Leads to $59,800 Loss
- Vara Bridge Suffers Loss Due to Proof Verifier Bug
- Cysic bridge exploit: the attacker’s gas came from Cysic’s own staking-operator wallet, and all 306.5 ETH still sit on one address
- AlpsCon AI Trade Hub Exploited for $152,809 on BSC
- Coffer Experiences Loss Due to Rounding Error
- Qubic Wallet Exploit Leads to $1.3 Million Loss
- The Houthis’ eight sanctioned Tron wallets: $915M passed through — and the freeze that mattered came four months before the sanctions
- Affluent suffers $1,053,000 loss from Unbacked Mint incident
- Unbacked Mint Incident on Pirate Chain
- Gamdom hack: $2.2M still parked in DAI, $363k turned into Monero on Hyperliquid, the Bitcoin into a coinjoin
- The EIP-7702 sweeper behind the sven.eth theft: 120 wallets, not one, and the 9 ETH went back nine minutes later
- Moonwell MAMO exploit: 800 ETH from Tornado Cash in, 8.73 million DAI out, and the DAI has not moved for seven weeks
- Pirate Chain Suffers $10.7 Million Loss from Transaction Validation Vulnerability
- UNCX Network V2 Suffers $86,000 Loss Due to Accounting Error
- Aave Loop Safe Module exploit: 114 ETH into Railgun in 98 minutes, and a bounty offer that came four hours late
- Autheo THEO exploit: two unbacked mints, 119 million tokens, and about 292 ETH taken — not 700
- UNCX vesting exploit: $1.08 million from BNB Chain still sits untouched, and the Ethereum attacker came back for its ZC
- Gamdom Suffers $4.2 Million Theft Due to Server Attack
- 79th Vault hack: 15,000 BNB went back, and the 1,249 BNB the attacker kept went into Tornado Cash
- Sinaloa Cartel sanctions: $4.4 million of the listed wallets’ money went into Binance, and three of the six are Binance deposit addresses
- Spot Price Manipulation Incident at Papertrade
- A fake “Bitget AML check” drained 101 wallets of $233,000 — the site is still online
- Ledger / CryptoBilis drain: two more Tornado Cash waves on 10 October, and what still sits on the thief’s wallets
- Where the stolen crypto still sits: 17,500+ BTC and 3,190 ETH on wallets we watch
- Triple-A hack: the stolen ether went into DAI, back into ether, and through Tornado Cash twice
- BitBay StableVault Exploited for $14,000
- EtherVista liquidity pool exploited for $18,600
- Ledger Suffers $93 Million Loss from Supply Chain Attack
- Iranian oil money on Tron: $2.7 billion through seven wallets, $61 million frozen, and the 14 months in between
- NEAR Intents Vault Drained of $3.87M via Valid Authorizations
- X7 Finance Suffers Exploit Due to Accounting Bug
- Google’s AI lists a wallet drainer as the top free AML checker. We read its code and followed the money
- Iran’s sanctioned crypto exchangers: $483M in stablecoins, and every dollar of it went into Binance and OKX
- North Korea’s IT-worker money on chain: a wallet changed every fortnight, ether staked with a mainstream provider, and 96 ETH nobody can freeze
- 79th Vault Hot-Wallet Compromised, $12.5 Million Lost
- Locus Finance Suffers $20,000 Security Incident
- Iran’s central bank on Tron: $474M frozen in two steps, and $12.6M that left in the 82 days between them
- Two terror-finance freezes on Tron: one caught $538,000, the other caught $28
- MakerDAO keeper drain: 200 ETH out of Tornado Cash’s shadow and back into it in 31 minutes
- Tren de Aragua on Tron: $6.08M passed through seven sanctioned wallets — every dollar went on to Binance
- Duelbits Suffers $6.07 Million Loss from Hot Wallet Compromise
- MakerDAO ETH-A Liquidation Keeper Bot Suffers Security Incident
- Set Protocol Suffers Loss Due to Rounding Error
- Unauthorized Access to Based Visa Card Internal Dashboard
- A7A5 after the US designation: 89% of the volume is the same tokens going out and coming back
- Aztec exploits: the 909 ETH sat untouched for four months — on 19 October it all went into Tornado Cash
- Bonzo Lend exploit: all 4,571 ETH went into Tornado Cash — most of it within a day
- September 2026 crypto hacks: $766 million taken — where the money is one week later
- Summer.fi exploit: 6 million DAI became 3,294 ETH in Tornado Cash — through the attacker’s own router, over 16 days
- Tornado Cash, July–September 2026: nine thefts we traced put 18,391 ETH into the mixer
- Base vault drain: $6M in wstETH, gas from Tornado Cash — and 1,000 wstETH stuck in a seven-day bridge window
- Kelp DAO hack, six months on: 75,700 ETH became 2,105 BTC in two days — and two thirds of it went into coinjoins
- Xinbi Guarantee: $52.8M was frozen — and $146M had left the same wallets in the week before
- Logic Flaw Exploited in MALT's Swap Function Leads to $72,000 Loss
- Nostra exploit: the $2M that reached Ethereum is still on one wallet — after a Railgun deposit came straight back
- GoldPesa Exploited for $114,900 via GPXHooks
- Unauthorized Access to Microsoft’s Official X Account
- Chen Zhi’s other bitcoin: the four sanctioned addresses are empty, and 15,957 BTC sits next door
- Coldcard hack: where the bitcoin is now — 1,038.85 BTC still on four addresses, 649 ETH into Tornado Cash
- NEAR Intents exploit: 3.87M USDT taken in seven withdrawals — and returned two days later
- FlashLoopAdapter Suffers $305,000 Loss Due to Improper Access Control
- Access-Control Vulnerability Exploited in FlashLoopAdapter
- NEAR Intents Experiences $3.8 Million Security Incident on BSC
- Pig butchering on Tron: we followed the money from 9,993 victim reports
- Bitget Suffers $387.5 Million Loss from Wallet Breach
- MCN Labs LPBonus contract exploited for $92,600 loss
- MUSystem ETH Contract Exploit Results in $36,900 Loss
- SKYDAO Suffers Loss Due to Swap Logic Flaw
- Meter Passport exploit: the “$2.3 million” was printed, not taken
- Payy hack: the 682 ETH went into Tornado Cash, but 90,202 USDC is still on the exploiter’s wallet
- Duelbits hack: five chains drained into one wallet, and about 2,745 ETH now in Tornado Cash
- Fake GIWA bridge: 1,331 wallets paid in, and all 766 ETH went to Tornado Cash
- Limit Break exploit: where the 542 WETH went, and the attacker still draining wallets
- Fake GIWA Mainnet Scam Drains $2 Million from DYORSWAP Users
- DYORSWAP Loses $2.08 Million in Impersonation Scam
- Impersonation Scam Targets Fake GIWA Bridge, Results in $2.08 Million Loss
- Fake GIWA Chain Scam Results in $2 Million Loss
- Fake GIWA Bridge Scam Results in $2M Loss
- Demex Perp Suffers $191,929 Loss from Cross-Chain Message Spoofing
- Limit Break Suffers $1.7 Million NFT Drain via Payment Processor Exploit
- SingularityNET Cloud Infrastructure Breach Results in $2.29M Loss
- Bitget hack: the last 40,000 ETH has moved — about 35,000 ETH sent toward THORChain
- Bitget Suffers $351.6 Million Loss from Hot Wallet Key Compromise
- Duelbits Suffers $4.9 Million Loss from Hot Wallet Compromise
- Limit Break Suffers $2.8M Loss from Exploit of Payment Processor V2
- Ongoing exploit of Meter Passport bridge results in $2.3 million loss
- Payy Network Suffers $1.8 Million Loss Due to Bridge Logic Flaw
- Fetch.ai, NuNet, World Mobile: what the attacker sold, and the 433 ETH and 200 million WMTX he still holds
- Neutron: two wallets cast 98% of the votes that handed Astroport and Drop to their attacker
- The $7.8 million the Yoink bot took from a hacker went back to the Safe’s owner
- Nostra Faces $3.5 Million Loss from Rigged Oracle Pool
- Compromise of Nano Labs Founder Jack Kong's X Account
- FomoPeek: the App Store app that read wallet keys off the phone
- Nesa: the "$50 million" exploit that cashed out at about 109 ETH, into KuCoin
- Nomic and Osmosis allBTC: the 40.65 BTC nobody noticed for 74 days
- Tectonic: the branch that skipped Tornado — 232 XMR1 still sitting on Hyperliquid
- Term Labs: all of the stolen ETH went to Tornado Cash, and the DAI went to Robinhood Chain
- Astroport Suffers $4.9 Million Loss from Malicious Proposal
- Drop suffers $4.4 million loss from malicious proposal
- Finiko’s FNK token: the $14 million taken from its pool two years after the collapse
- Finiko: what the chain says, and why the published totals conflict
- Other blackmail report VR-0E90FB07
- DoinGud NFT Platform Exploited for $35,486 via Bug
- Authorization Flaw in GaslessReservoirEnabler Leads to $23,000 Loss
- Internet Token DAO Exploited for $265,000 in LiquidityUnifier Incident
- RWC Token Exploited on BSC via Flash Loan Attack
- The Internet Token suffers loss due to arbitrary external call
- Liquid Network hack: the 598.5 BTC has not moved
- Where Amir Capital's money went: a three-chain trace
- Blink Wallet Pauses Services After Security Incident
- Fetch.ai Suffers $1.53 Million Loss Due to Private Key Compromise
- MultiversX Network Paused Due to Exploit Attempt
- NuNet Suffers Loss Due to Private Key Compromise
- Where Amir Capital’s money went: a four-chain trace
- Likwid Exploited for $55,721 Due to Contract Bug
- Nomic Flaw Leads to $3.15 Million Loss for Osmosis
- Nostra DeFi Protocol Exploit Results in $3.5 Million Loss
- Nostra Money Market Suffers $3.5 Million Loss from Price Manipulation
- Bonfiretoken Incident Involves $50,000 Loss Due to Access Control Flaw
- Flamincome Exploited for $345,900 Due to Unsafe Asset Accounting
- Liquid Network Exploit Results in $320 Million Loss
- Nimiq Targeted by Meta-Transaction Auth Flaw Exploit
- Startale Suffers Loss Due to Improper Access Control
- Bonfire Suffers $47,400 Loss Due to Improper Access Control
- DCENT Wallet Issues Urgent Security Alert Over Abnormal Transfers
- Gnosis Safe Wallet Drained of $7.73 Million
- Exploitation of Liquid Network Results in $320 Million Loss
- Long Bridge Incident Involves Fabricated Withdrawals
- Spiral Suffers Loss from Uniswap V4 Pool Manipulation
- Tectonic Suffers $120.4 Million Loss from Token Manipulation
- Chainflip Exploited on TRON USDT Integration, Leading to Significant Loss
- Dominion Market's $SILV Treasury Compromised, $238K Lost
- Ether.fi Liquid Users Lose Funds Due to Access Control Exploit
- $50 million bridged from Nesa to Ethereum in security incident
- OMNI404 Token Exploit Results in Loss of $5,923
- ORBToken Exploited for $32,610.72 on BSC
- Symbiosis Bitcoin Bridge Exploit Results in $336,000 Loss
- Private Key Compromise at Dominion
- Symbiosis Suffers $336,000 Loss from Unbacked Cross-Chain Mint
- Tech support phishing report VR-F1AD2F0C
- Contract exploit report VR-4690757D
- Contract exploit report VR-56B95658
- Contract exploit report VR-99A3B8E7
- Tech support phishing report VR-B373F58A
- Tech support phishing report VR-9FD8D72C
- Other blackmail report VR-5B01D18E
- Amnext Exploited for $116,100 via Mass Minting
- BeatSwap Exploit Results in $77,512 Loss on BSC
- BeatXswap Suffers Loss from Spot Price Manipulation
- Nomic nBTC Bridge Exploit Results in $3.15 Million Loss
- Zentra Finance Exploited for $140,030 via Flash Loan Attack
- Website phishing report VR-B11FE031
- Website phishing report VR-F1D5B63D
- Protocol attack report VR-717BCCC5
- $50 million bridged from Nesa to Ethereum in security incident
- $50 million NES bridged from Nesa to Ethereum in security incident
- WealthManagementV2 Contract Exploited for 26,414 USDT Loss
- Cozy Finance Exploit Results in $170,000 Loss
- DEX Router Exploit on BSC Results in Loss of $46,070
- Liquid Network Exploit Results in $320 Million Loss
- Dream Health Chain Suffers $71,800 Loss Due to Reward Logic Flaw
- Reddio's RedSonic Vault Exploited for $22,940 on Ethereum
- Reddio RedSonic Suffers Loss Due to Incorrect Share Accounting
- Rocket Suffers $287K Loss from Exploit of Dormant Market
- Secured Finance Ethereum Lending Market Drained
- Notional Finance Exploited for $1.73M in Legacy Contract Attack
- Arithmetic Error Leads to Loss for Notional V2
- Unauthorized Transactions Affect XRPH Wallet Users
- GebProxyActions Contract Exploited for $14,000
- KiiChain Loses $9.7 Million in Cosmos EVM Exploit
- TAC Loses $7.5M Due to Cosmos EVM Underflow Bug
- Ankr Suffers $410,000 Loss from Unbacked Mint Incident
- Aquifer Exploited for $2.5 Million in Funds
- Balancer V1 Exploit Results in $234,000 Loss
- Float Protocol Suffers $28,000 Loss from Spot Price Manipulation
- Mantra suffers $3.6 million loss from Cosmos EVM underflow bug
- MORE Markets Suffers $9.3 Million Loss Due to Borrow Logic Flaw
- Radix Suffers $1.25 Million Loss Due to Improper Access Control
- Rounding Error Leads to $234,000 Loss on Balancer V1
- Tectonic Suffers $75 Million Loss from Spot Price Manipulation
- Spot Price Manipulation Incident at Weft V2
- Fogo Foundation Compromised, 400 Million Tokens Sent to Bad Actor
- Oracle Misconfiguration Affects Full Sail
- Security Incident Involving Permapod
- Other report VR-1AC08533
- Ajna V2 Suffers $775,400 Loss Due to Liquidation Logic Flaw
- Withdrawal Logic Flaw Leads to Significant Loss for Avici
- Fogo Foundation Suffers $3 Million Loss from Private Key Compromise
- Mantra Suffers $3.6 Million Loss Due to Cosmos EVM Underflow Bug
- Oracle Misconfiguration Leads to Significant Loss for Virtue
- CashCowCoin suffers $117,400 loss due to flawed trading router
- CCC Suffers $117,000 Loss Due to Swap Logic Flaw
- Moonwell DeFi Protocol Suffers $8.79 Million Attack
- FH Token Exploit on BSC Results in $20,000 Loss
- Term Labs Vaults Drained Due to Governance Exploit
- CometDEX Suffers $717,000 Loss Due to Incorrect Share Accounting
- Enjin Suffers Ownership Takeover Incident
- FH Token Suffers $20,000 Loss Due to Swap Logic Flaw
- Steakhouse Financial Suffers $920,000 Loss Due to Risk Parameter Abuse
- Arithmetic Error Leads to $50 Million Loss for Nesa
- Arithmetic Error Leads to $90,750 Loss at PacaSwap DEX
- Spot Price Manipulation Incident on Arrakis V1
- Surf Lending Suffers Private Key Compromise
- Malicious Proposal Targets TermFinance Vaults, Causing $8.5M Loss
- Warp.green ERC-20 Bridge Exploit Results in $93,000 Loss
- KiiChain Suffers $9.7 Million Loss Due to Arithmetic Error
- Withdrawal Logic Flaw Leads to $7.5M Loss for TAC
- Improper Access Control Incident at The Sandbox
- Improper Access Control Incident on MANTRA Chain
- The Sandbox SAND Bridge Exploited for $675,000
- MANTRA Chain exploited for 720.9 million tokens due to vulnerability
- Allbridge Suffers $191,000 Loss Due to Logic Flaw
- BounceBit Suffers $3 Million Loss Due to Improper Access Control
- Harmony Suffers $3.2 Million Loss Due to Replay Attack
- Maya Protocol Suffers $1.7 Million Loss Due to Withdrawal Logic Flaw
- FoxMarket Exploit Results in $118,700 Loss
- Bodega Market Suffers Security Incident
- $8.07 Million Lost from Coinsbuy in Under an Hour
- Cold Card Firmware Vulnerability Leads to $130 Million Theft
- Infinite Mint Incident on Harmony Bridge
- Harmony Protocol Exploited, 4 Billion ONE Tokens Minted Unauthorized
- USM Protocol Exploit Results in $136,000 Loss
- Coinsbuy Loses Over $7.9 Million in Crypto Drain
- Coreum Bridge Suffers $200,000 Loss Due to Logic Flaw
- Unbacked Cross-Chain Mint Incident at Oraichain
- Atomic Green Suffers $29,984 Loss from Signature Replay Exploit
- Unbacked Cross-Chain Mint Incident Affects Oraichain
- Security incident involving Ravencoin confirmed
- Private Key Compromise at Hyperliquid Malaysia
- KITE Foundation Pauses Transfers After Token Compromise
- Malicious Proposal Targets Panther Protocol
- RRWallet Suffers $2 Million Loss Due to Weak Key Generation
- Unistreets LaunchpadFactoryAuto Contract Exploited
- Unistreets Suffers $17,750 Loss Due to Arbitrary External Call
- ZEUS Infrastructure Experiences Cybersecurity Incident
- Access Control Exploit on RISEx Results in $673,000 Loss
- LOOPSDAO Exploited for $690,000 on BSC
- MOKE Token Exploit on BNB Chain Results in Significant Loss
- Critical Entropy Vulnerability in Coldcard Wallet Leads to $70.2 Million Loss
- Set Protocol Exploited Due to Smart Contract Vulnerability
- Private Key Compromise at Swan Treasury Results in Significant Loss
- VerusCoin Ethereum Bridge Exploit Results in $7.54 Million Loss
- Crypto DAO Exploit Results in $52,000 Loss
- LULA Token Exploited on BSC Leading to Significant Loss
- AFX Trade Loses $24.15 Million Due to Compromised Validator Signatures
- ChainConnect EVM Integration Compromised, $650,000 Lost
- Garden Finance Exploit Results in $450,000 Loss
- WEMIX Smart Contract Compromised, $6.25 Million Lost
- Social Account Takeover Incident at Bankr
- Bankrbot X Account Compromised, Wallet Drained
- Projekt reward vault exploited on Ethereum
- DeBond Suffers $542,000 Loss Due to Accounting Error
- Lien Finance Exploited for $542K in USDC
- Triple-A Suffers Unauthorized Access to Hot Wallets
- Solido Cash Exploited Due to Oracle Misassignment
- Verus Ethereum Bridge Exploited for $7.54 Million
- 42DAO Exploit Leads to Significant Losses
- AFX Bridge Exploited for $24.15 Million USDC
- Zilliqa Suffers Hidden Number Problem Exploit
- Unauthorized Withdrawal Detected at FlashTrade
- Ostium Loses $23.75 Million Due to Price Manipulation
- Wanchain Cardano-BNB Chain Bridge Exploited for $10 Million
- Allbridge Core Exploited for $1.65 Million
- Zilliqa Cold Wallet Theft Linked to Ledger App Vulnerability
- Attack on Across Cross-Chain Bridge Protocol
- FlyCow Suffers $65,300 Loss Due to Incorrect Share Accounting
- DefiTuna Lending Exploit Results in $580K Loss
- BarnBridge Suffers Governance Attack Resulting in $776,000 Loss
- Cascade Platform Suffers $1.34 Million Attack on Arbitrum
- Price Oracle Manipulation Incident at Cascade Liquidity Strategy
- Ostium Suffers $18 Million Oracle Manipulation Exploit
- TeleSwap Cross-Chain Bridge Exploited with $735,000 Loss
- Bonzo Finance Loses $9.05 Million Due to Oracle Verifier Error
- Drips Network Exploited for $24,900 Due to Integer Vulnerability
- Chi Protocol Exploited for $8,500 Due to Logic Error
- Lumi Finance Exploit Results in $270,000 Loss
- BlueMove DEX Suffers $529,000 Loss Due to LP-share Inflation
- Bonzo Lend Exploited for $9.05 Million via Oracle Vulnerability
- $19.3 Million Drained from BonkDAO in Governance Attack
- $6.04 Million Stolen from Summer Finance's Lazy Summer Depositors
- BonkDAO Governance Attack Results in $20M Loss
- Lazy Summer Protocol Exploit Results in $6.04M Loss