EigenLayer, the restaking protocol widely credited with driving Ethereum's recent staking boom, disclosed a roughly $6 million token loss traced back to a compromised email exchang…
As cryptocurrency holdings have grown into life-changing sums, a parallel trend has emerged: criminals willing to bypass hacking entirely and extract funds through direct physical …
On September 25th, a flaw in Bedrock's uniBTC vault contracts allowed attackers to mint the token at a distorted exchange rate, draining roughly $2 million before the protocol coul…
Onyx Protocol, a Compound v2 fork, was exploited a second time on September 26, 2024, this time for approximately $3.8 million. The attacker reused the same vulnerability class tha…
Banana Gun, a Telegram-based crypto trading bot marketed as secure, suffered a wallet-draining exploit on September 19 that ultimately cost users roughly $3 million. The first publ…
Shezmu lost roughly $4.9 million from one of its vaults on September 20, in an incident that ultimately ended through direct negotiation with the attacker rather than a permanent l…
Centralized exchange BingX became the latest trading platform to suffer a large-scale hot wallet compromise, with losses eventually tallied at $44.7 million. On September 19, the S…
DeltaPrime Blue's Arbitrum deployment lost $5.98 million on September 16, 2024, after an attacker gained control of the protocol's contract-administration key. Speculation began ci…
On September 10, 2024, Indodax, the largest cryptocurrency exchange in Indonesia, suffered a multi-chain security breach that drained roughly $25.22 million from its hot wallets. C…
Tigran Gambaryan spent his career chasing crypto criminals across the globe. In February 2024, that career took an unexpected detour: a trip to Nigeria, framed as a routine complia…
On September 3, 2024, Penpie , a yield-farming protocol built on top of the Pendle Finance ecosystem, lost approximately $27 million to an exploit. The fallout hit token prices alm…
This piece is a work of short fiction, not a report on an actual breach. It was written at the suggestion of a reader, Peter Kacherginsky of the Blockthreat newsletter , who public…
Get new scam files the moment we publish them — usually 2–3 emails a week.