No exploit, no bug, no stolen key — just a wallet that bought enough votes and then voted itself the money. On July 6, 2026, an anonymous actor spent $4.4 million acquiring a littl…
On July 6, 2026, an attacker converted a months-old administrative loose end into a $6.04 million loss for the Lazy Summer Protocol, draining two of its vaults in a single atomic t…
On-chain records leave a timestamped trail even when the people involved offer conflicting explanations for what that trail means. On December 30, 2025, a Tron wallet appeared and …
Cardano's biggest wallet application wasn't breached in the conventional sense — it was exposed through math. Between June 21 and 23, 2026, outside attackers pulled roughly 16 mill…
Roughly $4.67 million exited Secret Network on June 10th , yet the loss went undetected for a full week. The root cause, according to Common Prefix's exploit report , was a bridge …
On June 14th, an attacker had already pulled $2.28 million out of a shuttered Aztec Connect contract — a product Aztec Labs wound down in 2023 and stripped of admin control in 2024…
Two attackers, working independently on two consecutive mornings, extracted a combined $2.28 million from a set of Ethereum contracts that Aztec Labs had stopped maintaining more t…
Humanity Protocol marketed itself as a way to separate real people from bots and synthetic identity on-chain, branding itself, in the words of founder and CEO Terence Kwok, as the …
Five billion SYS appeared out of nowhere on June 7th. No private key was compromised and no cryptographic scheme was cracked — an attacker simply handed Syscoin's bridge relay a pr…
TesseraDAO's collapse was not a hack in the conventional sense — no bug was found, no code was broken. It was a protocol run entirely on a single, unrevoked private key, and on Jun…
Gravity Bridge, the Ethereum-Cosmos connector marketed as a decentralized alternative to multisig-based bridges , was emptied on May 29th . No private key was stolen and no signatu…
DxSale's liquidity-locking product was never hacked in the conventional sense. Instead, a wallet that had quietly held administrative control over an old 2021 locker contract used …
Get new scam files the moment we publish them — usually 2–3 emails a week.