Key Highlights: A logic flaw in MALT’s swap function allowed an attacker to siphon treasury funds by misclassifying protocol-funded DAI as user-deposited collateral. The breach joins a string of decentralized finance incidents, including a $3.8 million exploit on NEAR Intents and a $305,000 FlashLoopAdapter drain. Cumulative losses from DeFi exploits have surpassed $21 billion, according ...
Key Highlights: Goldpesatoken suffered an exploit resulting in an estimated loss of $114,900, according to blockchain security firm SlowMist (@SlowMist_Team). The vulnerability originated in the GPXHooks’ reBalance() function, which routed through a shared PositionManager that failed to validate currency deltas. Following the security breach, Goldpesatoken’s trading volume dropped to $0 as market participants halted activity ...
Key Highlights: Attackers from the Bitget security incident are moving stolen funds across chains using THORChain, according to SlowMist’s MistTrack platform. Bitget CEO Gracy Chen formally requested THORChain reject transactions from identified attacker addresses, arguing decentralization should not shield illicit fund flows. THORChain responded that its permissionless design mirrors Bitcoin and Ethereum, questioning how much ...
Key Highlights Blockchain security firm SlowMist, in collaboration with the OKX security team, discovered malicious code in FomoPeek versions 1.1 and 1.2 designed to steal private keys, seed phrases, and Keychain data from iOS devices. The malware includes an exploit framework targeting iOS kernel vulnerabilities across versions 12.0 through 18.7 and 26.0–26.1, capable of bypassing ...
A malware campaign disguised as downloadable model weights for Alibaba’s Qwen 3.8 27B AI model has targeted GitHub users who run open-source artificial intelligence models…