UXLINK Multi-Signature Wallet Exploited, Billions of Tokens Minted
A `delegateCall` vulnerability in a multi-signature wallet allowed administrative control takeover and unauthorized token minting, posing a critical risk of asset inflation and value erosion.
Balancer V2 Pools Drained by Faulty Smart Contract Access Control
V2 vault access control logic failed to validate message senders, enabling unauthorized internal withdrawals and a $110 million multi-chain asset drain.
Lending Protocol Drained by Oracle Mispricing Exploit on Base Network
Flawed oracle feed for a staked asset allowed collateral overvaluation, enabling a $1.1M unauthorized loan execution.
Protocol Sub-Vault Drained Exploiting Upgradeable Smart Contract Logic
A critical logic flaw in the upgradeable sub-vault contract permitted unauthorized withdrawal of $8.45M in bond tokens, exposing systemic risk in asset-backed DeFi architecture.
Decentralized Exchange Vault Drained by Intentional Liquidity Manipulation Attack
The HLP vault's automated liquidation logic was weaponized by a synthetic volatility event, exposing a critical design flaw in low-liquidity asset risk control.
Decentralized Exchange Hyperliquid Exploited by Coordinated Pricing Mechanism Attack
A critical flaw in the DEX's smart contract pricing mechanism allowed a coordinated attack to manipulate the POPCAT token's collateral value, draining millions.
Yala Stablecoin Depegs after Issuer-Linked Wallet Drains Lending Liquidity
Protocol's faulty cross-chain bridge and issuer-linked debt accumulation triggered a systemic depeg, locking user liquidity on lending platforms.
Perpetual DEX Suffers Multi-Million Loss via Smart Contract Pricing Flaw
Internal pricing mechanism flaw on the perpetual DEX was exploited via coordinated low-liquidity asset manipulation, compromising collateral integrity.
Lending Protocol Drained Exploiting Collateral Price Oracle Glitch
An external oracle mispriced a wrapped staked asset by 29,000,000%, allowing an attacker to over-collateralize and drain $1M.
