Hacks, exploits, rug pulls, bridge attacks, and audit failures
An attacker deposited $2 in SAUCE tokens, submitted a forged oracle update with a zeroed BLS signature, and drained $9.05 million from Bonzo Lend — Hedera’s largest lending protocol — in under a minute.
A Zeroed Signature Drained $9 Million from Hedera’s Biggest Lender Read More »
Security firm Hexens disclosed a critical vulnerability in the Aptos blockchain’s Move VM that could have exposed $70 billion in crypto infrastructure. The attack cost? Just $3,000. The success rate? Nearly 90%. No funds were lost — but the details should terrify every protocol builder in the ecosystem.
Quantstamp links Humanity Protocol’s $36M exploit to North Korean hackers. A fake Bithumb email gave attackers seven private keys, draining 141M H tokens and crashing the price 90%. The BNB Chain deployment is permanently abandoned.
One Fake Email, $36 Million Gone: Inside North Korea’s Humanity Protocol Heist Read More »
An international law enforcement operation dismantled AudiA6, a cryptocurrency mixer that laundered $389 million in Bitcoin for ransomware gangs and dark web criminals since 2021. Two suspects were arrested in Georgia and face up to 20 years in US federal prison.
A counterfeiting bug hidden in Zcash’s Orchard pool since 2022 was found by AI after years of auditors missing it. ZEC crashed 41%, Arthur Hayes dumped everything, and nobody can prove the shielded pool is clean.
An attacker minted $77M in phantom eBTC on Monad using a single compromised admin key — but Monad’s thin liquidity trapped 99% of the loot. The third bridge hack in four days exposes DeFi’s single-key crisis.
Echo Protocol’s $77M Phantom Mint Exposes DeFi’s Single-Key Crisis Read More »
A 13-block chain reorganisation, a 37-day disclosure gap, and $600K in cross-chain exposure. Litecoin’s MWEB privacy feature caused its worst security incident in years.
