BingX Hot Wallet Breach Drains $44.7 Million Across Multiple Chains
Centralized exchange BingX became the latest trading platform to suffer a large-scale hot wallet compromise, with losses eventually tallied at $44.7 million. On September 19, the S…
Latest
Fresh from the desk
Compromised Admin Key Costs DeltaPrime's Arbitrum Deployment $5.98 Million
DeltaPrime Blue's Arbitrum deployment lost $5.98 million on September 16, 2024, after an attacker gained control of the protocol's contract-administration key. Speculation began ci…
Indonesia's Top Exchange Bleeds $25 Million Across Six Chains
On September 10, 2024, Indodax, the largest cryptocurrency exchange in Indonesia, suffered a multi-chain security breach that drained roughly $25.22 million from its hot wallets. C…
From Crime Fighter to Captive: The Detention of Binance's Tigran Gambaryan in Nigeria
Tigran Gambaryan spent his career chasing crypto criminals across the globe. In February 2024, that career took an unexpected detour: a trip to Nigeria, framed as a routine complia…
Fake Pendle Market Lets Attacker Siphon $27M From Penpie's Reward Contracts
On September 3, 2024, Penpie , a yield-farming protocol built on top of the Pendle Finance ecosystem, lost approximately $27 million to an exploit. The fallout hit token prices alm…
Rekt's Reader-Commissioned Fiction: A White Hat's Fall and a $100 Million DeFi Revenge Heist
This piece is a work of short fiction, not a report on an actual breach. It was written at the suggestion of a reader, Peter Kacherginsky of the Blockthreat newsletter , who public…
Durov's Paris Detention Reopens the Fight Over Encryption and Platform Liability
Pavel Durov, the founder of Telegram long known for resisting government requests to weaken his platform's security, was taken into custody by French authorities on August 24 after…
Maker Vault Phisher Walks Away With $55.47 Million in DAI
A crypto holder lost $55.47 million in DAI on August 20, 2024, after falling for a phishing scheme that targeted their Maker vault, according to on-chain investigator ZachXBT , who…
When Polymarket's Oracle Overruled an Election Result
A contested presidential vote in Venezuela became the catalyst for a dispute that tested whether a blockchain-based prediction market could remain neutral once the stakes moved fro…
A Botched Contract Upgrade Exposed Ronin Bridge to a $12M MEV-Bot Exploit
More than two years after the $624 million hack of March 2022, Ronin Network's bridge was hit again on August 6 — this time for roughly $12 million, a fraction of the earlier loss …
How a Squarespace Login Flaw Turned Into a Multi-Protocol Domain Hijacking Wave
A string of crypto website takeovers between July 9 and July 12, 2024 traced back not to a smart-contract bug but to something far more mundane: weak account-security defaults at w…
How a Previously-Patched IBC Flaw Cost Astroport $6.4M on Terra
On July 30, Astroport, a decentralized exchange running on the Terra blockchain, suffered an exploit that drained roughly $6.4 million in assets. The root cause was a vulnerability…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.