FoomCash marketed itself as a "ZKProof-powered private lottery protocol," a system whose withdrawals were supposedly unforgeable thanks to zero-knowledge proofs. The project pitche…
YieldBlox's community-managed pool on Blend V2 lost $10.97 million to an attacker who needed no smart-contract exploit at all — just a single trade in the USTRY/USDC market , a pai…
On February 21, 2026, an attacker gained control of the owner key for the ioTube bridge's validator contract, giving them administrative authority over every asset the bridge held.…
A single absent multiplication step in a price feed cost lending protocol Moonwell $1.78 million in under four minutes on February 15. The oracle for cbETH, a liquid staking token,…
On February 13, 2026, a variant of the Vidar infostealer finished sweeping a compromised computer and turned up something its operators had likely never harvested before ( Bleeping…
A quiet shift in attacker behavior is reshaping how nation-state and financially motivated groups approach cybersecurity: rather than breaking into systems, many are simply getting…
Press releases exist, in theory, to announce genuine news. In crypto, mounting evidence suggests they're increasingly used to manufacture the appearance of news instead. A recent a…
It took roughly ninety minutes and a single compromised executive laptop to separate the Solana analytics platform Step Finance from $27.3 million . The protocol's smart contracts …
Peter Steinberger set out to build the personal assistant Siri never became. What shipped instead turned into one of the more consequential AI-agent security stories of early 2026 …
Trove Markets set out to build a perpetual-futures exchange for collectibles — think leveraged trading on Pokémon cards and CS2 skins — deployed on Hyperliquid. Its January ICO pul…
Saga's cross-chain messaging system is built to trust what it's told. On January 21st, an attacker exploited that trust, convincing SagaEVM's bridge that fabricated deposits were r…
Makina Finance lost $4.13 million on January 20th after an attacker manipulated the protocol's internal price oracle inside a single atomic transaction — a technique that PeckShiel…
Get new scam files the moment we publish them — usually 2–3 emails a week.