Key Highlights: A Binance wallet authorized an attacker-controlled smart contract to operate it on Thursday. Within under four minutes, approximately $2.5 billion worth of ether and tokens were siphoned from the wallet. Binance reports that the rapid drain was only a segment of an estimated $6.3 billion stolen in the broader exploit. Rapid Wallet Compromise ...
Key Highlights The Worldwide Asset eXchange (WAX) sustained an estimated loss of $90,500 following an exploit targeting a smart contract function. Attackers successfully bypassed intended fee validation mechanisms within the eth.token::withdraw function to drain unauthorized funds. The incident underscores persistent technical risks surrounding cross-chain bridge mechanisms and contract-level withdrawal logic in decentralized ecosystems. Technical Vulnerability ...
Key Highlights: A logic flaw in MALT’s swap function allowed an attacker to siphon treasury funds by misclassifying protocol-funded DAI as user-deposited collateral. The breach joins a string of decentralized finance incidents, including a $3.8 million exploit on NEAR Intents and a $305,000 FlashLoopAdapter drain. Cumulative losses from DeFi exploits have surpassed $21 billion, according ...
Key Highlights Fetch.ai suffered an approximately $2 million exploit targeting its TokenConversionManagerV3 smart contract via a flawed conversionIn() function and a leaked private key. The breach drained the contract’s entire FET token balance, prompting a market pause with reported trading volume dropping to $0 amid trader uncertainty. Security firm SlowMist Team flagged the vulnerability, underscoring ...