How a Lone Whale Nearly Redirected Compound's Treasury
On July 28th, Compound Finance became the center of a governance controversy after a contested proposal narrowly cleared the DAO's voting threshold. Proposal 289 passed by a slim 6…
Latest
Fresh from the desk
Nova Sahara, 2074 - A Debugger's Dispatch From the Fault Line Between Human and Machine
Nova Sahara's AI district wakes me the same way it always does: a low hum from my neural implant, cutting through sleep like an alarm wired straight into the skull. I reach for my …
Base's ETHTrustFund Vanishes With $2.1M After Months of Silence
Another exit scam has hit Base, Coinbase's L2 network — this time courtesy of a project that branded itself, somewhat ironically, ETHTrustFund. The name promised trust and an ETH-b…
Oracle Glitch Hands MEV Bot $7.5M at Rho Markets — Then It All Comes Back
A faulty price feed at Rho Markets briefly cost the Scroll-based lending protocol $7.5 million on July 19, 2024, before a self-described MEV operator quietly handed the entire sum …
How a Six-Signer Wallet Was Quietly Hijacked for $235 Million at WazirX
India's largest crypto exchange, WazirX, lost approximately $235 million after attackers gained control of its Safe multisig wallet. Blockchain security firm Cyvers flagged the inc…
Recycled Vulnerability Costs LiFi Protocol $9.73M in Cross-Chain Approval Drain
Cross-chain infrastructure provider LiFi lost $9.73 million after an attacker exploited previously granted infinite token approvals, draining wallets across several blockchains tha…
Inside MetaMax: The Watch-and-Earn Ponzi That Left 15,000 Victims and a Bombing in Cyprus
MetaMax marketed itself as an easy path to passive income: watch advertisements, rate content, get paid. Operating across countries including the Philippines, Afghanistan and Cypru…
Social Engineering, Not Code Flaws, Drove Crypto's 2024 Security Failures
Blockchain networks are frequently marketed as cryptographically secure by design, but the pattern of incidents through the first half of 2024 suggests the weakest point in crypto …
Poisoned PyPI Package Drains 32,000 TAO From Bittensor Validators
On July 2, 2024, Bittensor's network suffered an $8 million security incident traced to a compromised package on the Python Package Index (PyPI). The attacker used the tainted pack…
CertiK's Bug Bounty and Audit Practices Face Mounting Scrutiny
Blockchain security firm CertiK is facing a wave of criticism following a controversial episode involving Kraken, with researchers now raising separate concerns about how the compa…
Celebrity Meme Coins and the Recurring Cycle of Crypto Grifts
Crypto's promise of fast profits keeps drawing in new participants who struggle to separate legitimate opportunities from projects built on hype alone. The current cycle has been d…
Shkreli's Meme-Coin Confession Triggers Bounty Hunt, Million-Dollar Bets, and Parole Questions
A Solana-based meme coin called $DJT, rumored to be connected to former President Donald Trump and his family, became the center of a controversy after Martin Shkreli — the pharmac…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.