On October 4th, an attacker drained roughly $1.1 million from Sovryn, a DeFi protocol built on RSK, the Bitcoin-linked smart-contract sidechain that markets itself as one of the mo…
On October 7, 2022, BSC Token Hub — the bridge linking the original Binance Beacon Chain to BNB Chain (formerly BSC) — was exploited into minting two separate batches of 1 million …
Another weekend, another cross-chain protocol hemorrhaging funds. On Sunday, October 2, 2022, Transit Swap confirmed that an unidentified attacker had siphoned roughly $21 million …
For 75 days, an Ethereum arbitrage bot tracked on-chain as 0xbad ( 0xbadc0defafcf6d4239bdf0b66da4d7bd36fcf05a ) skimmed profit from other traders' mistakes. That streak ended abrup…
Market maker Wintermute has lost more than $160 million in its second major incident this summer. Back in June, the firm sent 20 million OP tokens to an address it didn't actually …
MakerDAO is in the middle of a governance crisis that cuts to the heart of what the protocol is for. A combination of falling markets and an intensifying U.S. crypto crackdown has …
Compound's governance model produced another self-inflicted setback this week, echoing a prior episode in which the protocol's own processes had already caused financial damage. On…
DeFi has just come through a rough summer. Two brutal market crashes and a grim macro backdrop have left much of the industry's optimism riding on the success of Ethereum's newly-c…
A configuration error in a newly launched liquidity pool on Acala Network, the Polkadot-based project describing itself as the "DeFi Hub of Polkadot," allowed users to mint roughly…
On August 9, 2022, Curve Finance's main interface, curve.fi , was compromised through a DNS hijack, first flagged publicly by a security researcher. Visitors were served a prompt t…
Tornado Cash, long the most contested application built on Ethereum, has finally run out of runway. Earlier efforts to appease regulators evidently weren't enough to hold off enfor…
A sudden, indiscriminate attack tends to produce the same reaction every time: panic first, then suspicion, as nobody can be sure who's already been hit and who's next. Roughly 8,0…
Get new scam files the moment we publish them — usually 2–3 emails a week.