zkSync's First Rug Pull Reopens the Debate Over Paid Audits
Roughly $1.8 million vanished from Merlin , a decentralized exchange built on the newly launched zkSync L2, in what looks like a straightforward rug pull. The project was three day…
Latest
Fresh from the desk
Donation Attack Exploits Hundred Finance's Empty WBTC Market for $7.4M on Optimism
Hundred Finance lost $7.4 million on the Optimism network in an exploit that began just after 14:00 UTC on April 15, 2023. Rather than reading as a formal disclosure of a multi-mil…
A Three-Year-Old Copy-Paste Error Drains $10M+ From Yearn's Legacy yUSDT Vault
More than two years after its first appearance on the leaderboard , Yearn Finance is back in the headlines, this time after losing more than $10 million. Yearn has long been regard…
A Fake Uniswap V3 Pool Let Attackers Pull $3.3M From SushiSwap's New Router
Over a single weekend, attackers extracted more than $3.3 million from SushiSwap users by exploiting a newly deployed routing contract. Anyone who had granted an approval to Sushi'…
Safemoon Upgrade Bug Lets Attacker Drain $8.9M From SFM/BNB Liquidity Pool
Safemoon lost $8.9 million worth of liquidity-pool funds on March 28, 2023, after a bug introduced in the project's most recent smart contract upgrade allowed an attacker to drain …
Kokomo Finance Vanishes With $4M Just Days After Optimism Launch
Kokomo Finance , a lending protocol on Optimism, disappeared with an estimated $4 million after its team deleted the project's website along with its Twitter , GitHub , and Medium …
How Silicon Valley Bank's Collapse Nearly Broke USDC's Peg
Faced with a wobbling economy, US authorities moved quickly to guarantee deposits at Silicon Valley Bank in an effort to stop the failure from spreading further through the financi…
Euler Finance Loses $197M to a Flash-Loan Attack on Its Donation Mechanism
Euler Finance, one of DeFi's more established lending platforms, suffered a roughly $200 million exploit on Tuesday, March 14, 2023 — arriving just as the market was recovering fro…
Hedera Halts Mainnet After $515K Theft Spirals Into $12M Ecosystem Fallout
An unclear, fast-moving threat shook the entire Hedera ecosystem the day before this report, sending both users and developers scrambling to understand what was happening. Hedera d…
How Silvergate Bank's Crypto Bet Ended in Voluntary Liquidation
The crypto industry's most important banking partner has thrown in the towel. In an announcement issued March 8, 2023, Silvergate Capital Corporation said it intended to wind down …
Alpha Homora Users Caught in Iron Bank's Two-Year Debt Standoff
DeFi is known for moving at breakneck speed, but not every mess resolves quickly. Some disputes simmer for years before boiling over — and that's exactly what happened between Iron…
Multisig-Approved Exit Scam Empties Hope Finance for $1.86M
Hope Finance, an Arbitrum-based fork of Tomb Finance, lost approximately $1.86 million on a Monday in what its own team publicly described as an inside job. The project's official …
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.