Hacks, exploits and vulnerability disclosures, bridge and wallet compromises, phishing and scams, fraud charges, sanctions, arrests and sentencing, stolen-funds tracing.
32 posts
CrowdStrike and federal law enforcement disrupted the Russia-based Sality botnet, isolating more than 15,000 machines that spent eight years silently swapping copied crypto wallet addresses for attacker-controlled ones.
A More Markets lending reserve on Flow EVM lost roughly $9.3 million in WFLOW after an attacker paired an Ankr liquid staking token with E-mode to overborrow, Blockaid said.
The Cronos chain stopped producing blocks Sunday after an attacker exploited lending protocol Tectonic, with an onchain researcher estimating roughly $75 million in affected assets from a TONIC token price-manipulation attack.
Cosmos Labs says it wrongly cleared an integer-underflow flaw in Cosmos EVM that attackers exploited across six chains for $5.7 million, with MANTRA Chain disputing the patch timeline.
Term Finance, a DeFi lending protocol built with a seven-day timelock and LP veto to stop malicious proposals, was drained of an estimated $8.5 million after a governance exploit bypassed both safeguards.
The Sandbox disabled cross-chain bridging on Base and BNB Chain after an exploit minted roughly 49 billion unbacked SAND, isolating the affected tokens and warning users not to trade on those networks.
BounceBit will shut down its native chain and move to BNB Chain after attackers pulled roughly $3 million in BB tokens from nine wallets, halting block production before the migration plan was announced.
MANTRA Chain froze all transactions after an unspecified incident, sending OM to a record low of $0.004126 amid a 600% volume spike and halting deposits and withdrawals across exchanges.
U.S. prosecutors unsealed charges against 17 alleged members of an Iran-linked hacking crew accused of stealing 31 terabytes of data and extorting HBO for $6 million in bitcoin.
A chain of six software bugs let an attacker drain bitcoin and other assets from Maya Protocol's cross-chain pools, crediting 48.87 million CACAO tokens that were never funded and sending the native token down 89%.
