Phishing Airdrop Tricked Users into Malicious Token Approval Theft
Malicious airdrop claims weaponized token approvals, bypassing private key security to execute authorized asset draining across multiple chains.
Lending Protocol Drained via Time Window Exploit during New Market Activation
A time-of-check-to-time-of-use (TOCTOU) vulnerability during new market initialization allowed an attacker to drain $4.5M in a 6-second window.
Stablecoin Bank Drained $50 Million via Private Key Compromise
Custodial private key theft resulted in $50M USDC being drained and laundered, exposing critical internal control failures.
Solana Lending Protocol Drained $2.2 Million via USDC Vault Contract Exploit
A critical flaw in the USDC Vault contract logic allowed unauthorized asset withdrawal, resulting in a $2.2 million loss before funds were mostly recovered.
DeFi Automated Market Maker Drained via Protocol Precision Manipulation
A subtle, systemic flaw in complex pool mathematics allowed for precision rounding manipulation, enabling unauthorized asset draining and immediate liquidity shock across multiple chains.
Web3 Users Compromised by New Eleven Drainer Phishing-as-a-Service
Eleven Drainer is the latest DaaS threat, leveraging social engineering to trick users into signing malicious token approvals, bypassing smart contract security.
Memecoin Launchpad Drained Exploiting Thin Liquidity Pool Manipulation
The exploitation of low-liquidity pools via self-trading and token inflation confirms that insufficient invariant checks enable catastrophic price oracle failure.
Aerodrome Velodrome Users Drained by Centralized DNS Hijacking Attack
A centralized DNS registrar compromise allowed a front-end hijack, tricking users into signing malicious token approvals and draining wallets.
