Key Highlights An onchain vault was drained of over 1.01 million $USDC using an exploit funded by a flash loan mechanism. Security firm Blockaid identified that flash loan capital was utilized to mint artificially inflated shares, enabling the malicious withdrawal. The victim contract balance dropped to zero $USDC, leaving no remaining funds to process user ...
Key Highlights Decentralized exchange Yapeswap suffered a governance exploit that allowed an attacker to manipulate administrative contract roles. The vulnerability surfaces amid mixed market momentum, heightening security scrutiny and investor caution across decentralized finance protocols. Market participants are watching for broader governance protocol reevaluations and monitoring the potential fallout on user engagement and investor trust. ...
Key Highlights: A third attacker exploited the same governance mechanism to drain approximately 550,000 X tokens in remaining liquidity from Uniswap V3. Across three separate operations, malicious actors have siphoned roughly 4.85 million USDT alongside 550,000 X tokens. According to cybersecurity firm Blockaid, the exploit remains active, with about 12.2 million X tokens still stored ...
Key Highlights: A missing access control vulnerability allowed an attacker to drain four separate 50 ETH batches left over from the historic Black Thursday event. Security firm CertiK verified the exploit origin, and the perpetrator laundered the extracted Ethereum in 10-ETH installments via Tornado Cash. Although the targeted keeper implementation contract was not an active ...
Key Highlights: Goldpesatoken suffered an exploit resulting in an estimated loss of $114,900, according to blockchain security firm SlowMist (@SlowMist_Team). The vulnerability originated in the GPXHooks’ reBalance() function, which routed through a shared PositionManager that failed to validate currency deltas. Following the security breach, Goldpesatoken’s trading volume dropped to $0 as market participants halted activity ...
Key Highlights Fetch.ai is actively investigating a reported exploit targeting its token conversion contract, prompting immediate security scrutiny. The project’s official X account (@Fetch_ai) has warned users to rely exclusively on official communication channels for updates. The incident has introduced uncertainty into Fetch.ai trading activity, with market participants awaiting investigation results. Fetch.ai Launches Investigation Into ...
GalaChain August Exploit Reveals Signature Verification Flaw That Survived Multiple Audits A security breach on GalaChain in August exploited a novel vulnerability: failed transactions were converted into reusable authorization credentials, allowing an attacker to drain approximately 2 billion $GALA tokens—worth roughly $3 million at the time—along with dozens of other assets from nine wallets. The ...
Bithumb Places HEMI Token on Delisting Watchlist Following Smart Contract Security Vulnerability South Korean cryptocurrency exchange Bithumb has added the HEMI token to its delisting watchlist after a security vulnerability was identified in the smart contract responsible for the token’s initial reward distribution. The exchange announced the decision in an official statement, citing unauthorized asset ...