Phishing Airdrop Tricked Users into Malicious Token Approval Theft
Malicious airdrop claims weaponized token approvals, bypassing private key security to execute authorized asset draining across multiple chains.
Balancer Protocol Drained by Compounding Rounding Error and Access Flaw
A subtle rounding-down error in swap calculations, combined with flawed access control, allowed the attacker to systematically drain over $100M from stable pools.
Balancer Users Drained via DNS Provider Social Engineering Attack
A third-party DNS provider compromise redirected users to a malicious front-end, enabling unauthorized token approvals and asset draining.
Malicious Signature Phishing Drains User Wallets across Web3 Ecosystem
The systemic risk is shifting from smart contract flaws to user-signed malicious approvals, enabling rapid, irreversible wallet-draining attacks.
Centralized Exchange Hot Wallet Compromise Drains Thirty Million Solana Network Assets
A centralized exchange's internal system failure enabled an unauthorized transfer of $30.4M in Solana-based tokens, underscoring systemic hot wallet risk.
Balancer Protocol Drained $120 Million Exploiting Precision Rounding Logic
A systemic flaw in pool math allowed attackers to manipulate asset precision, draining $120M and exposing connected DeFi aggregators to contagion risk.
Mobile Wallets Exposed to Zero-Click Attacks via Operating System Flaws
Zero-click mobile exploits bypass OS security, enabling silent, full-device compromise to exfiltrate wallet seed phrases and private keys.
Individual Crypto Investor Drained $11 Million via Physical Coercion Attack
The most critical vulnerability remains the human element, which physical "wrench attacks" exploit to bypass all digital security controls.
Crypto Investors Face Global Physical Coercion Attacks to Steal Private Keys
The human layer is the new attack surface; physical coercion exploits social engineering to bypass all digital security controls.
