Compound's Reservoir Drains Again, Pushing the COMP Bug Past $147M
The damage from Compound's governance bug turned out to be far larger than initially assumed. A week earlier , a flaw in the updated Comptroller contract had caused roughly $80 mil…
Latest
Fresh from the desk
Compound's COMP Distribution Bug Leaks $80 Million to Opportunistic Claimants
A community-authored governance proposal, Proposal 62 , which had reportedly been reviewed by Compound Labs before deployment, contained a calculation error that let certain users …
rekt.news Marks One Year With a 20-Piece NFT Auction on OpenSea
rekt.news marked its one-year anniversary by launching an auction of 20 original NFTs, intended both as a celebration of the site's first year and as a funding mechanism for future…
Rekt.news Celebrates Its First Anniversary With Merch and an NFT Auction
Twelve months have elapsed since rekt.news launched with its "Hello World" post. Over that stretch, the outlet has put out 100 pieces of investigative reporting, commentary, and in…
Oracle Manipulation on Avalanche Nets Attacker $34M From Vee Finance
Vee Finance lost $34 million to an exploit, placing the protocol seventh on the incident leaderboard. The attack marks the second major loss on the Avalanche network within the sam…
Rogue Contractor Diverts $3.1M From Sushi's MISO Auction Platform
A contractor hired to build out the MISO auction for a project called "JayPegs Automart" swapped his own wallet address into the contract in place of the designated auctionWallet —…
Behind Solana's Summer Rally - Speed Claims, TVL Growth and Centralization Concerns
As ETH gas fees climbed alongside the NFT boom, traders began looking elsewhere for cheaper and faster execution — and Solana was one of the main beneficiaries. With $SOL rallying …
Second Exploit in a Month Drains $4M from DAO Maker via Reinitialized Contracts
DAO Maker has been exploited for a second time in under a month. Less than four weeks after an earlier $7M loss , the platform has now lost an additional $4M. Credit: Mudit Gupta T…
Fantom's First Casualty: How a Tax-Dodging Tool Broke Tomb Finance's Peg
Tomb Finance , an algorithmic stablecoin project on the Fantom chain, became the network's first notable DeFi casualty — though whether the term "hack" even applies is up for debat…
A Fake Banksy NFT, a Hacked Website, and a Same-Day Refund
NFT collector Pranksy paid 100 ETH (roughly $344,000) for what appeared to be a genuine Banksy piece — only for the sale to unravel into one of the odder publicity mysteries the NF…
xToken Loses $4.5 Million in Second Flash Loan Attack on Its xSNX Contract
xToken was exploited for a second time on August 30, 2021, with attackers draining roughly $4.5 million from its xSNX contract using a flash loan — the same contract and the same g…
A Reentrant Borrow Call Drains $18.8M from Cream's AMP Market
Cream Finance lost approximately $18.8 million on Monday, August 30, 2021, after an attacker found a reentrancy path through a token the protocol had listed months earlier. The len…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.