Stolen Vault Admin Keys Drain $4.3M From AlexLab's BNB Bridge
A hijacked private key cost AlexLab, which bills itself as Bitcoin's finance layer, $4.3 million after attackers broke into the XLink bridge deployed on the BNB network. CertiK Ale…
Latest
Fresh from the desk
A Warning Ignored - How a Known Compound Fork Bug Cost Sonne Finance $20 Million
Sonne Finance, a lending protocol forked from Compound V2, lost roughly $20 million on its Optimism deployment to an exploit that the wider Compound-fork ecosystem had already been…
Washington's Widening Crackdown on Crypto Privacy Tools and Major Exchanges
U.S. regulators — the SEC, the DOJ, and the Treasury among them — have escalated their scrutiny of the crypto industry as it continues to grow, moving beyond the large, familiar ta…
Keith Gill's Return Sends GameStop Soaring Again, Torching $1 Billion in Short Bets
Keith Gill, the trader better known online as Roaring Kitty who helped spark the original 2021 meme-stock craze, resurfaced after roughly three years out of the public eye and set …
Pike Finance Hit Twice in Four Days as the Same Storage Bug Drains $1.9M Across Three Chains
Pike Finance, a cross-chain lending market that lets users borrow and lend native assets directly on their home blockchains without wrapping or bridging them, was exploited twice w…
Solana's Speed Obsession Comes With a Price Tag
Solana built its reputation on throughput. Since launching in 2020, the network has marketed itself as the "most performant blockchain" available, claiming the capacity to handle o…
How ZKasino Turned $33 Million in Deposited ETH Into a Forced Token Swap
ZKasino raised a substantial war chest despite a string of warning signs — canceled token listings, evasive team communication, overstated technical claims, and reports of unpaid s…
Flash Loan Trick Drains $44.7M From Hedgey's Vesting Contracts
Hedgey Finance, a platform marketed as a leading provider of token vesting and lockup infrastructure, lost roughly $44.7 million across Ethereum and Arbitrum in a single flash loan…
A Thought Experiment on a World Where Stablecoins Become the Default Money
What might everyday life look like if stablecoins were no longer a niche crypto product but the ordinary way people held and moved money, with blockchain infrastructure quietly run…
Leaked Deployer Key Lets Attacker Mint and Dump $2M in GB Tokens on Base
Grand Base, a real-world-asset (RWA) protocol built on Base, suffered a roughly $2 million exploit after the private key to its deployer wallet was compromised. A protocol administ…
How a Migration Helper Contract Bled Prisma Finance of $11.6M in wstETH
Prisma Finance had marketed itself as the definitive platform for liquid restaking. On March 28th, it earned a less flattering distinction: the first restaking protocol to be succe…
How a Planted Developer Nearly Walked Off With $62.5M From Munchables — Until ZachXBT Stepped In
Munchables, a project that had won an award in Blast's L2 "Big Bang" competition, was exploited for $62.5M by one of its own developers. In a chaotic sequence of events, the bulk o…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.