DEX Users Drained by Centralized Domain Registrar Phishing Attack
Centralized domain registrar failure enabled a sophisticated front-end phishing attack, compromising user token approvals despite secure smart contracts.
Aerodrome Finance Users Drained by Malicious Token Approvals via DNS Hijacking
Centralized domain registrar failure enabled DNS hijacking, compromising the front-end and tricking users into signing unlimited token approvals.
Balancer Protocol Drained Exploiting BatchSwap Composable Stable Pool Rounding Flaw
The subtle rounding error in V6 Composable Stable Pool logic was weaponized, enabling batchSwap manipulation to siphon $121 million in assets.
Memecoin Launchpad Drained Seven Million Using Liquidity Pool Manipulation Flaw
The exploit leveraged invariant manipulation within a thin liquidity pool, proving that faulty token pair logic is a systemic risk to AMM integrity.
DeFi Protocol Balancer Drained via V2 Smart Contract Logic Flaw
A logic flaw in V2 Composable Stable Pools allowed invariant manipulation, compromising multi-chain asset security and causing systemic contagion.
DEX AMM Logic Flaw Exploited across Six Chains Draining $48 Million
A sophisticated trade manipulation caused the AMM smart contract to miscalculate key variables, enabling a multi-chain liquidity drain.
Balancer V2 Composable Pools Drained by Faulty Smart Contract Access Control
A precision error in Balancer's V2 pool logic enabled unauthorized internal withdrawals, compromising $128M and exposing systemic DeFi composability risk.
Balancer V2 Composable Pools Drained by Faulty Access Control Logic
A critical logic flaw in the `manageUserBalance` function enabled unauthorized internal withdrawals, resulting in a systemic, cross-chain vault drain.
Decentralized Exchange Cetus Drained $223 Million Exploiting Smart Contract Overflow Flaw
A critical integer overflow vulnerability in the DEX's forked code allowed a malicious actor to manipulate liquidity checks, resulting in a $223 million asset drain.
