BtcTurk Exchange Suffers $48 Million Private Key Compromise
A compromised private key allowed attackers to drain hot wallets across seven blockchains, exposing critical operational security failures.
User Wallets Drained by Fake Zoom Social Engineering Attack
Malicious software delivered via a compromised communication channel enabled private key exfiltration, underscoring the pervasive threat of social engineering.
Memecoin Launchpad Odin.fun Exploited for $7 Million via AMM Logic Flaw
An inherent flaw within Odin.fun's AMM logic allowed attackers to manipulate token values, leading to significant capital drain and undermining protocol integrity.
Crypto Whale Loses $6.8 Million to Sophisticated Phishing Scam
A deceptive signature request vulnerability allowed an attacker to drain $6.8 million in digital assets, underscoring critical user-side security gaps.
AdsPower Users Lose Millions to Malicious Browser Extension Supply Chain Attack
A compromised software supply chain enabled attackers to distribute malicious wallet extensions, directly exposing users' private keys and draining substantial digital assets.
DeFi Trader Wallet Drained $6.5m via Phishing Permit Signatures
A sophisticated phishing campaign leveraging malicious permit signatures bypassed seasoned DeFi user defenses, resulting in a multi-million dollar asset drain.
Shibarium Bridge Suffers $2.3 Million Validator Key Compromise via Flash Loan
A critical vulnerability in Shibarium's validator system, exploited by a flash loan, enabled unauthorized asset withdrawals, halting the bridge and jeopardizing user funds.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
User Funds Drained by Malicious Uniswap Permit2 Signature
A deceptive Permit2 transaction approval allowed an attacker to siphon $118,000 in user assets, highlighting critical signature verification risks.
