A $300,000 deposit was enough to trigger an $80 million overprint of Resolv's USR stablecoin, once an attacker gained control of the single off-chain key responsible for authorizin…
On March 15, 2026, an attacker who had spent roughly nine months quietly building an 84% share of Venus Protocol's supply cap for Thena's THE token triggered a Mango Markets-style …
Someone was sitting on a $50 million position in Aave — not idle, but earning, parked in yield-bearing aEthUSDT . On March 12, 2026, that holder decided to move the position into a…
Aave's own defensive infrastructure, not an attacker, wiped out $27.78 million in healthy user positions on March 10. The system responsible, the CAPO oracle, exists specifically t…
An unaudited smart contract belonging to Solv Protocol let an attacker mint the same tokens twice from a single deposit, draining roughly $2.73 million in a single, tightly looped …
For years, zero-knowledge proofs were pitched as a way to remove trust from the equation entirely: don't believe the team, verify the math. On that pitch, a decade of privacy tools…
FoomCash marketed itself as a "ZKProof-powered private lottery protocol," a system whose withdrawals were supposedly unforgeable thanks to zero-knowledge proofs. The project pitche…
YieldBlox's community-managed pool on Blend V2 lost $10.97 million to an attacker who needed no smart-contract exploit at all — just a single trade in the USTRY/USDC market , a pai…
On February 21, 2026, an attacker gained control of the owner key for the ioTube bridge's validator contract, giving them administrative authority over every asset the bridge held.…
A single absent multiplication step in a price feed cost lending protocol Moonwell $1.78 million in under four minutes on February 15. The oracle for cbETH, a liquid staking token,…
On February 13, 2026, a variant of the Vidar infostealer finished sweeping a compromised computer and turned up something its operators had likely never harvested before ( Bleeping…
A quiet shift in attacker behavior is reshaping how nation-state and financially motivated groups approach cybersecurity: rather than breaking into systems, many are simply getting…
Get new scam files the moment we publish them — usually 2–3 emails a week.