Top Stories
DeFi Exploit News
Top DeFi Exploit Stories
Latest DeFi Exploit News
News
Term Labs has recovered all fixed-rate loan positions held in vaults affected by its August governance exploit, with the final position moved on Aug. 25 as Meta Vaults and affected strategies remain shut down. Term Labs said in its latest…
News
YAM Finance has faced a governance takeover attempt after an attacker accumulated enough delegated YAM voting power to submit a proposal that could hand over control of the protocol’s Timelock and put roughly $337,000 at risk. Defimon, the on-chain monitoring…
News
RedStone has said Tectonic’s estimated $75 million exploit resulted from weak collateral controls rather than an inaccurate oracle after TONIC’s reported price rose about 100-fold in 20 minutes. RedStone co-founder Marcin Kazmierczak told crypto.news that the oracle accurately reported TONIC’s…
News
Cronos has resumed block production after validators halted the network during an exploit targeting Tectonic and restored the chain state to a point before the attack. Cronos Network said the blockchain was fully back online after the validator set coordinated…
CRO
Cronos
News
Float Protocol has lost about $28,000, or 10.71 ETH, after an attacker used a flash loan to manipulate a Uniswap V3 spot price and exploit how its Hypervisor contracts calculated liquidity provider share values. SlowMist said on Aug. 31 that…
News
CCC token on BSC has suffered an exploit that caused an estimated $117,000 loss after an attacker manipulated the token contract’s sell() function and burned tokens held in its liquidity pool. According to blockchain security firm TenArmorAlert, its monitoring system…
News
The Sandbox has contained a cross-chain bridge vulnerability that allowed an attacker to mint unbacked SAND on Base and BNB Smart Chain, with the project estimating the direct impact at less than 0.01% of the token’s 3 billion supply. The…
SAND
The Sandbox
Feature
The Kelp DAO bridge exploit did not just steal $292 million. It triggered the largest infrastructure migration in DeFi history, and the math shows LayerZero may never recover the lost ground. On April 18, 2026, an attacker forged a cross-chain…
News
BTCPay Server supporters have backed a recovery bounty equal to 10% of funds retrieved from a recent Lightning wallet exploit, with the reward capped at 3 BTC if all stolen assets are recovered. The BTCPay Server project said on Monday…
BTC
Bitcoin
News
Crypto projects lost roughly $110 million to hacks in July as Immunefi recorded more confirmed bug bounty reports and found that audit competitions uncovered more serious vulnerabilities than private audits. Crypto hacks put 2026 on course for a record Immunefi…
News
A wallet linked to the Aztec Private Rollup Bridge exploit deposited another 300 ETH into Tornado Cash, bringing its total transfers to the mixer to 500 ETH. Aztec exploiter deposits 300 ETH into Tornado Cash Blockchain security firm PeckShield reported…
News
Coldcard has temporarily suspended its automatic customer data deletion process because of legal obligations tied to the security incident disclosed on July 30, preserving records that would otherwise have been erased after 120 days. Coldcard announced the policy change in…
BTC
Bitcoin
News
An attacker has drained about $72,000 worth of STRONG and STRNGR tokens after taking control of StrongBlock’s abandoned on-chain governance system through a malicious proposal. According to blockchain security firm Defimon Alerts, the attacker acquired enough voting power in StrongBlock’s…
News
Bitcoin onchain activity has reached its highest level of 2026 as researchers have linked the surge to the ongoing Coldcard wallet exploit, warning that similar spikes have historically coincided with local market turning points. K33 Research said nearly 890,000 BTC…
BTC
Bitcoin
Learn
Bridges move assets between blockchains using lock-and-mint, burn-and-mint, or liquidity pool mechanisms, but their trust assumptions have made them the most exploited category in crypto. Introduction Blockchains do not talk to each other. Ethereum cannot read Solana’s state. Arbitrum cannot…
News
Blockchain asset management protocol Swan Treasury has suffered an estimated $625,000 loss after attackers exploited a leaked off-chain signer key to buy STY tokens at a steep discount before selling them for profit. According to blockchain security firm Defimon Alerts,…
Feature
Feature
