Press releases exist, in theory, to announce genuine news. In crypto, mounting evidence suggests they're increasingly used to manufacture the appearance of news instead. A recent a…
It took roughly ninety minutes and a single compromised executive laptop to separate the Solana analytics platform Step Finance from $27.3 million . The protocol's smart contracts …
Peter Steinberger set out to build the personal assistant Siri never became. What shipped instead turned into one of the more consequential AI-agent security stories of early 2026 …
Trove Markets set out to build a perpetual-futures exchange for collectibles — think leveraged trading on Pokémon cards and CS2 skins — deployed on Hyperliquid. Its January ICO pul…
Saga's cross-chain messaging system is built to trust what it's told. On January 21st, an attacker exploited that trust, convincing SagaEVM's bridge that fabricated deposits were r…
Makina Finance lost $4.13 million on January 20th after an attacker manipulated the protocol's internal price oracle inside a single atomic transaction — a technique that PeckShiel…
For nearly a year, ZeroLend let its LBTC market on Base sit empty while depositors were told nothing. The market was actually drained on February 23, 2025 , only eighteen days afte…
YO Protocol's own automated vault system, not an outside attacker, is responsible for one of DeFi's stranger losses this year: a single rebalancing trade that sent $3.71 million in…
On January 8, 2026, an attacker emptied Truebit's aging purchase contract of 8,535 ETH (roughly $26.2 million) in a single transaction, capping off nearly five years of dormancy fo…
TMXTribe, an Arbitrum-based perpetuals platform built as a fork of GMX, lost roughly $1.4 million to an exploit that ran for about 36 hours before the funds were bridged out and la…
A four-year regulatory overhang lifted for Aave in mid-December 2025, only for the protocol to spend the following weeks consumed by an internal dispute over ownership, revenue, an…
DeFi's habit of repeating itself isn't limited to patterns of behavior — sometimes it's the exact same bug, replayed against a different balance sheet. Yearn Finance has now been h…
Get new scam files the moment we publish them — usually 2–3 emails a week.