Proxy Contract Takeover Drains $2.7M from OKX's DEX Aggregator
OKX's decentralized exchange aggregator became the latest casualty of a private key compromise, with roughly $2.7 million siphoned from users after attackers gained control of a pr…
Latest
Fresh from the desk
Phishing Campaigns Evolve With New Tools as Losses Mount Across Crypto
Phishing remains one of crypto's most persistent threats, and attackers — whether bored teenagers chasing Roblox currency or nation-state operations — continue refining their metho…
Precision Rounding Flaw Lets Attacker Drain $48M From KyberSwap Elastic Across Six Chains
KyberSwap , one of the longer-standing decentralized exchanges in DeFi, has become the latest major hack victim, losing more than $48 million spread across six blockchains. The exp…
Justin Sun's HECO Bridge and HTX Hot Wallets Drained of Roughly $99M in Same-Day Attacks
Two blockchain projects tied to Justin Sun were exploited within hours of one another, for combined losses of roughly $99 million. The Ethereum-side bridge for HECO (Huobi ECO Chai…
Compromised API Keys Cost Market Maker Kronos Research $26M, Rattle Partner Exchange Woo X
Taiwan-based trading firm Kronos Research lost $26 million over a weekend after attackers gained unauthorized access to a set of its API keys, triggering liquidity strain at closel…
dYdX's v3 Insurance Fund Loses $9 Million to Suspected YFI Market Manipulation
Over a single weekend, dYdX's v3 protocol lost close to 40% of its insurance fund — around $9 million — in what founder Antonio Juliano later called a " targeted attack " built aro…
Botched Infinite-Mint Attack on Raft Depegs R Stablecoin, Nets Exploiter Almost Nothing
Raft , the protocol behind the R stablecoin , was hit by an on-chain exploit on Friday that pushed R off its peg. Although the underlying infinite-mint bug was worth roughly $3.3 m…
Poloniex Hot Wallets Drained of $126M in Suspected Off-Chain Breach
Justin Sun's exchange Poloniex had its hot wallets drained of $126 million, an incident that quickly overshadowed the market's recent rally. Alerts were first raised by Cyvers and …
Second MEV Bot Falls to Its Own Tactics, Losing $2M in a Curve Sandwich
An MEV bot that made its living sandwiching other traders got sandwiched itself on Tuesday night, losing roughly $2 million in the process. Researcher Spreek first flagged the inci…
Familiar Compound Exploit Costs Onyx Protocol $2.1 Million
Onyx Protocol , a fork of Compound Finance, lost $2.1 million on Tuesday to an exploit technique that had already made the rounds elsewhere in the ecosystem this year. The same und…
New Router Contract Lets Attackers Drain Unibot Users for $640K
Users of the Telegram trading bot Unibot woke up on October 31, 2023 to reports that a newly deployed router contract had been exploited, draining at least $640,000 from wallets th…
How a 2022 LastPass Breach Turned Into a Year-Long, $37M Wallet-Draining Campaign
A slow-moving campaign of wallet drains, running since December of last year, has now hit hundreds of individual addresses — and this time, phishing isn't the vector. The operation…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.