Approval Exploit Drains $6.4M From Seneca Protocol Users
Seneca Protocol users lost roughly $6.4 million on February 28 in an exploit that abused token approvals across Ethereum and Arbitrum. The incident was first flagged publicly by sp…
Latest
Fresh from the desk
How Aave's GHO Liquidity Committee Went Off-Script
Even as the bear market pushed many DeFi projects into decline, Aave's governance activity continued largely unabated — though not always in an orderly fashion. Concerns about casc…
Rounding Error in CauldronV4 Lets Attacker Drain $6.5M and Briefly Depeg MIM
On January 30, 2024, two of Abracadabra's lending vaults ("cauldrons") were exploited, resulting in a loss of roughly $6.5 million on Ethereum and a temporary depegging of the prot…
A Three-Day-Old Bridge Route Cost Socket's Bungee $3.3M in Approval Drains
Socket's Bungee bridge suffered a $3.3 million loss the day before this report, after an attacker drained wallets that had previously granted approvals to the SocketGateway contrac…
A Hacked SEC Twitter Account Sent Bitcoin on a Wild Round Trip
On January 9, 2024, the official SEC Twitter account posted that spot Bitcoin ETFs had been approved — an announcement the market had been anxiously anticipating for weeks. Bitcoin…
Gamma Strategies Loses $4.5 Million as Flash Loan Exploits a Misconfigured Price Threshold
Gamma Strategies, an Arbitrum-based concentrated liquidity management protocol, lost at least $4.5 million to an exploit on January 4, 2024. The exploit transaction landed on-chain…
Six-Second Flash Loan Exploit Drains $4.5M from Radiant Capital's New Arbitrum Market
Radiant Capital, a lending protocol forked from Aave V2 that runs on Arbitrum and BNB Smart Chain, lost 1,900 ETH (about $4.5 million) to an exploit targeting a previously known cl…
Orbit Chain's Ethereum Bridge Drained of $81.5M in Year-End Multisig Breach
Orbit Chain's Ethereum bridge lost $81.5 million in the closing hours of 2023, in what appears to have been a compromise of the bridge's multisig. Orbit Chain — distinct from the L…
How a Two-Week Oracle Delay Exploit Quietly Drained Levana Protocol of $1.1M
Perpetuals platform Levana Protocol lost more than $1.1 million — roughly 10% of its total liquidity — to an oracle-manipulation campaign that ran for nearly two weeks before anyon…
A Fat-Fingered Uniswap V3 Order Cost One LP $1.3M — and 98% Went to a Validator
A pricing mistake by a Uniswap V3 liquidity provider cost roughly $1.3 million on Tuesday, after an MEV bot captured the resulting arbitrage — then handed 98% of its take straight …
Speculators Return, So Do Familiar Exploits
Roughly a year after the collapse of FTX and the accompanying unraveling of Sam Bankman-Fried, commentators were quick to forecast or flatly announce that the crypto industry had r…
Two Days Into Its Life, Hypr Network's Bridge Loses $220K to a Forked Optimism Bug
Gaming-oriented layer-2 network Hypr lost roughly $220,000 — 2.57 million HYPR tokens — to a bridge exploit on Wednesday, December 13, 2023, barely 48 hours after its mainnet beta …
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.