Balancer Multi-Chain Pools Drained Exploiting Critical Access Control Flaw
Systemic weak permission controls across Balancer's multi-chain architecture enabled a massive $128M unauthorized asset drain, demanding immediate risk-mitigation action.
Validity Liquidity Fidelity Triad Formalizes Universal Smart Contract Security
This research introduces the VLF property triad to provide a foundational, generalized specification for formally verifying all smart contract security.
Centralized Stablecoin Bank Drained $50 Million via Private Key Compromise
A compromised private key facilitated the exfiltration of $49.5 million in USDC, exposing critical failures in centralized key management.
Third-Party Security Lapse Forces $22 Million WLFI Token Burn
The systemic risk from external dependencies materialized, enabling a catastrophic breach that necessitated the destruction of 167 million tokens.
DeFi Lender CrediX Drained via Compromised Admin Key Unbacked Token Minting
A compromised admin key allowed the attacker to mint unbacked collateral tokens, bypassing solvency checks and draining the protocol's liquidity.
Web3 Social Platform UXLINK Drained $41 Million via Multi-Sig Key Compromise
A multi-sig wallet's private key compromise enabled an attacker to weaponize a `delegatecall` function, resulting in unauthorized token minting and a $41M capital drain.
Zcloak Launches AI-Human Multi-Sig Wallet for Autonomous On-Chain Asset Management
This new multi-sig primitive integrates AI agents as verifiable signatories, creating a secure, automated framework for enterprise-grade on-chain treasury operations.
Ethereum Foundation Migrates $650 Million Treasury to Safe Smart Account Standard
The Ethereum Foundation's move to Safe{Wallet} validates smart account security, positioning it as the institutional standard for composable, active on-chain treasury management.
UXLINK Multi-Signature Wallet Compromised, Attacker Exploits Delegate Call Vulnerability
A delegate call vulnerability in multi-signature wallets grants unauthorized admin access, enabling asset drain and illicit token minting.
