Centralized Exchange Hot Wallet Compromise Drains Thirty-Seven Million Solana Assets
A critical failure in key management or access control allowed unauthorized transfers, exposing the systemic risk of CEX hot wallet custody.
Centralized Exchange Hot Wallets Drained by Private Key Compromise
A critical lapse in operational security exposed hot wallet private keys, enabling a multi-chain drain of $48M across seven networks.
Malicious Chrome Extension Steals Seed Phrases via Covert Sui Transactions
A high-ranking malicious wallet extension weaponized the Sui blockchain to covertly exfiltrate user mnemonics, bypassing traditional network monitoring.
Cross-Chain DeFi Protocol Drained via Third-Party Solver Infrastructure Compromise
The compromise of a centralized Web2 solver's API key enabled unauthorized multi-chain withdrawals, exposing a critical centralization risk in cross-chain DeFi.
UXLINK Exploiter Loses $48 Million to Sophisticated Phishing Attack
A malicious `increaseAllowance` signature allowed a phishing group to drain $48 million from a prior UXLINK exploiter, underscoring persistent social engineering risks.
JavaScript Supply Chain Attack Threatens DeFi Ecosystem
A compromised JavaScript package, widely integrated across DeFi, enables transaction hijacking, posing a systemic risk to user funds and operational integrity.
Shibarium Bridge Compromised by Flash Loan and Validator Key Manipulation
A critical vulnerability in Shibarium's validator consensus, leveraged by a flash loan, enabled unauthorized asset exfiltration, posing systemic risk to cross-chain bridges.
SwissBorg Suffers $41 Million Solana Loss via Partner API Exploit
An exploited third-party API allowed attackers to drain $41 million in Solana tokens, highlighting critical risks in external service integrations for DeFi protocols.