Top Stories
DeFi Exploit News
Top DeFi Exploit Stories
Latest DeFi Exploit News
Feature
The Kelp DAO bridge exploit did not just steal $292 million. It triggered the largest infrastructure migration in DeFi history, and the math shows LayerZero may never recover the lost ground. On April 18, 2026, an attacker forged a cross-chain…
News
BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered. The BTCPay Server project said on Monday…
BTC
Bitcoin
News
Crypto projects lost roughly $110 million to hacks in July as Immunefi recorded more confirmed bug bounty reports and found that audit competitions uncovered more serious vulnerabilities than private audits. Crypto hacks put 2026 on course for a record Immunefi…
News
A wallet linked to the Aztec Private Rollup Bridge exploit deposited another 300 ETH into Tornado Cash, bringing its total transfers to the mixer to 500 ETH. Aztec exploiter deposits 300 ETH into Tornado Cash Blockchain security firm PeckShield reported…
News
Coldcard has temporarily suspended its automatic customer data deletion process because of legal obligations tied to the security incident disclosed on July 30, preserving records that would otherwise have been erased after 120 days. Coldcard announced the policy change in…
BTC
Bitcoin
News
An attacker has drained about $72,000 worth of STRONG and STRNGR tokens after taking control of StrongBlock’s abandoned on-chain governance system through a malicious proposal. According to blockchain security firm Defimon Alerts, the attacker acquired enough voting power in StrongBlock’s…
News
Bitcoin onchain activity has reached its highest level of 2026 as researchers have linked the surge to the ongoing Coldcard wallet exploit, warning that similar spikes have historically coincided with local market turning points. K33 Research said nearly 890,000 BTC…
BTC
Bitcoin
Learn
Bridges move assets between blockchains using lock-and-mint, burn-and-mint, or liquidity pool mechanisms, but their trust assumptions have made them the most exploited category in crypto. Introduction Blockchains do not talk to each other. Ethereum cannot read Solana’s state. Arbitrum cannot…
News
Blockchain asset management protocol Swan Treasury has suffered an estimated $625,000 loss after attackers exploited a leaked off-chain signer key to buy STY tokens at a steep discount before selling them for profit. According to blockchain security firm Defimon Alerts,…
News
AFX has announced that it has prepared a goodwill plan for users affected by last week’s $24.15 million bridge exploit, with the recovery proposal scheduled for release on Aug. 3. According to an announcement shared by AFX, the decentralized derivatives…
News
Ostium has concluded that its July exploit originated from compromised off-chain infrastructure rather than a flaw in its smart contracts, after an investigation found the attacker manipulated price reporting to drain 23.75 million USDC from the protocol’s liquidity vault. According…
News
Garden Finance has temporarily taken its application offline after an attacker compromised the off-chain database of an independent solver, leading to the loss of solver-owned digital assets while leaving protocol contracts and user funds unaffected. Blockchain security firm Blockaid reported…
News
Triple-A has confirmed that unauthorized access to its treasury wallets resulted in the loss of company-owned digital assets while stating that client funds and payment operations have remained unaffected. Triple-A said in a statement on Monday that it detected unauthorized…
News
Triple-A’s hot wallets appear to have lost more than $9.7 million across several blockchains, with the suspected attacker swapping the assets and consolidating the proceeds on Ethereum. What happened to Triple-A’s hot wallets On-chain analyst Specter first identified suspicious transactions…
News
Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-chain protocol. Across attacker forged 1,627 Solana deposits The attack occurred between…
News
Lien Finance has lost about $542,000 in USDC after an attacker exploited a flaw in its bond token logic to mint unsupported assets and drain liquidity from the protocol. Blockchain security firm SlowMist said the exploit targeted Lien Finance’s bond…
Feature
Feature
