Exchange Private Key Compromised via Partner Social Engineering Attack
Off-chain social engineering against third-party vendors remains a critical attack vector, bypassing hardened on-chain controls.
Law Enforcement Arrests Hacker for DeFi Platform Vulnerability Theft
The successful apprehension of a threat actor confirms that jurisdictional boundaries are closing on DeFi exploiters, fundamentally shifting the risk calculus for future attacks.
BNB Chain Payment Protocol Drained $3.1 Million by Contract Ownership Flaw
The exploit leveraged a critical smart contract access control flaw to alter ownership, underscoring systemic risk in unaudited DeFi deployment.
Decentralized Exchange GMX Drained Forty-Two Million via Smart Contract Re-Entrancy Flaw
A critical re-entrancy vulnerability in the GMX codebase allowed a threat actor to repeatedly execute withdrawal logic, resulting in a $42 million asset drain .
Cross-Chain Bridge Drained via Third-Party Solver Infrastructure Compromise
The reliance on centralized, off-chain solver infrastructure introduced an unacceptable single point of failure, enabling a multi-chain liquidity drain.
Hyperdrive Lending Protocol Suffers $782,000 Router Smart Contract Exploit
A critical flaw in Hyperdrive's router contract enabled unauthorized arbitrary calls, allowing an attacker to drain significant liquidity from core markets.
Truflation Treasury and Personal Wallets Compromised by Malware Attack
Malware compromised Truflation's operational wallets, exposing over $5 million to direct exfiltration and undermining trust in asset security.
Lazarus Group Targets Venus Protocol, $13.5 Million Theft Recovered
A sophisticated phishing attack, attributed to an Advanced Persistent Threat group, attempted to drain $13.5 million from Venus Protocol, highlighting persistent social engineering risks.
GMX V1 Vault Suffers Reentrancy Exploit, $42 Million Impact
A reentrancy vulnerability in GMX V1's vault logic permitted asset under management manipulation, risking substantial liquidity drain.
