Aerodrome and Velodrome Users Drained via Centralized DNS Hijacking Attack
Centralized domain registrar vulnerability enabled DNS hijacking, weaponizing the front-end to steal user token approvals.
Aerodrome Velodrome Users Drained by Centralized DNS Hijacking Attack
A centralized DNS registrar compromise allowed a front-end hijack, tricking users into signing malicious token approvals and draining wallets.
Aerodrome Velodrome DNS Hijacking Compromises User Token Approvals
Centralized DNS registrar vulnerability enabled front-end hijacking, exposing user wallets to malicious token approval transactions.
Moonwell Lending Protocol Drained by External Oracle Price Manipulation
Transient oracle pricing error on Base allowed negligible collateral to be valued at millions, exposing systemic risk in external data feeds.
Lending Protocol Impermax V3 Drained by Collateral Fee Valuation Flaw
Flash loan attack exploited Impermax V3 collateral valuation logic, leveraging uncollected fees to create bad debt and drain $400,000.
Lending Protocol Drained via External Oracle Mispricing on Base Network
A faulty external price feed on a key collateral asset allowed for massive over-collateralization, leading to an unrecoverable debt cascade.
Aerodrome and Velodrome Merge to Form Aero, Unifying Layer Two DeFi Liquidity
The $530 million merger of two leading Layer 2 DEXs creates a unified liquidity hub, strategically addressing fragmentation and enhancing capital efficiency across the Ethereum ecosystem.
Moonwell Lending Protocol Exploited via Erroneous External Oracle Price Feed
The absence of price deviation guardrails allowed a critical oracle misreport to facilitate $1M in illicit over-borrowing, creating $3.7M in bad debt.
Lending Protocol Drained via Oracle Price Feed Manipulation on Base
Critical oracle failure on Base allowed asset mispricing, enabling immediate, under-collateralized fund extraction from the lending pool.
