Trump signed the GENIUS Act into law on July 18, 2025, after clearing Congress by wide margins - 308-122 in the House and 68-30 in the Senate - to establish the country's first com…
WOO X, the centralized exchange arm of the WOO Network, disclosed a $14 million security breach that began on Thursday, July 24, 2025, after a targeted phishing attack compromised …
India's second-largest crypto exchange, CoinDCX, lost $44.3 million to attackers who spent days preparing the operation before draining its wallets — and the company said nothing p…
Exchange operators tend to focus their defenses on wallet security and cold storage, but the incident that hit BigONE on July 15th shows how a compromised internal pipeline can byp…
ArcadiaFi lost $3.6 million on Base after an attacker turned the protocol's own rebalancing mechanism into a withdrawal tool — and the sequence of events leading up to it began, od…
Kinto, a compliance-focused DeFi protocol built by Ramon Recuero, saw its native $K token crippled after an attacker exploited a flaw in the token's proxy contract. The breach allo…
On July 9th, roughly $42 million left GMX's V1 GLP pool on Arbitrum through a cross-contract reentrancy flaw that had gone unnoticed despite two years of live operation and two sep…
TON's leadership floated a plan to trade crypto staking for UAE residency rights. It took federal regulators less than two days to dismantle it publicly. The pitch On July 6th, TON…
Rowan Energy marketed itself as a bridge between rooftop solar and blockchain rewards: carbon-neutral mining, "SmartMiner" hardware, and a private ledger that would pay homeowners …
Cork Protocol lost $12 million on May 28, 2025, when an attacker exploited two separate flaws to drain its wstETH:weETH market. The technical breakdown that followed should have cl…
On June 25th, Resupply launched a new lending market with the usual fanfare of governance votes and audit sign-offs. Within roughly two hours of that market going live, an attacker…
Web3 security firm Hacken built its reputation auditing other people's protocols. On June 20th, its own infrastructure was the one that failed: a compromised bridge private key led…
Get new scam files the moment we publish them — usually 2–3 emails a week.