Protocol Sub-Vault Drained Exploiting Upgradeable Smart Contract Logic
A critical logic flaw in the upgradeable sub-vault contract permitted unauthorized withdrawal of $8.45M in bond tokens, exposing systemic risk in asset-backed DeFi architecture.
Balancer V2 Drained $128m via Composable Stable Pool Logic Flaw
A critical access control logic error in the V2 vault allowed unauthorized internal withdrawals, compromising cross-chain liquidity.
Decentralized Finance Protocol Drained $200 Million via Smart Contract Reentrancy Flaw
The reentrancy flaw allowed unauthorized recursive calls, bypassing solvency checks and draining the contract's entire $200M liquidity pool.
OKX Web3 Wallet Backdoor Allegation Triggers $955,000 Security Bounty
Unproven wallet backdoor claims expose the systemic risk of closed-source key management, demanding immediate user fund migration.
Major DeFi Protocol Drained $200 Million Exploiting Critical Reentrancy Flaw
The reentrancy flaw allowed an external call to recursively withdraw assets, subverting state checks and draining $200M from the vault.
Curve Finance Pools Drained by Compiler-Level Smart Contract Reentrancy Flaw
A critical compiler-level reentrancy vulnerability in Vyper 0.2.15-0.3.0 allowed attackers to bypass non-reentrant guards, enabling multi-million dollar asset theft.
Website Supply Chain Attack Drains User Wallets via Malicious Script
Third-party resource compromise injected a malicious JavaScript drainer, weaponizing a trusted front-end to steal user token approvals.
Malicious Chrome Extension Skims Solana User Swaps via Hidden Transaction Instruction
Browser extension supply chain risk is high; hidden transaction instructions execute perpetual, low-volume asset skimming from user trades.
State-Sponsored Actors Exploit Exchange Wallet Interface Flaw Stealing $1.5 Billion
A compromised third-party wallet interface allowed a malicious transaction to execute, bypassing cold storage controls and draining $1.5B in ETH.
