DeFi Payment Protocol Drained after Centralized Admin Key Compromise
A compromised administrative private key allowed a threat actor to seize contract ownership, manipulate reward logic, and execute a $3.1M asset drain.
Goldfinch User Wallet Drained via Legacy Contract Share Price Manipulation
A legacy contract approval flaw was weaponized by an attacker to manipulate share price and drain $330K, underscoring systemic risk in stale permissions.
Perpetual DEX Suffers Economic Exploit from Low-Liquidity Asset Manipulation
The liquidation engine was exploited by manipulating a low-cap asset's price, forcing the protocol to absorb $4.9 million in bad debt.
Uniswap V4 Launches Hooks Enabling Programmable Liquidity Pool Customization
The V4 Hooks architecture transforms the AMM from a fixed primitive into a modular execution layer, unlocking infinite capital efficiency strategies.
Legacy DeFi Pool Drained Exploiting Infinite Token Minting Flaw
A critical flaw in a custom stable-swap contract allowed an attacker to mint near-infinite yETH, bypassing core pool solvency checks.
Prisma Finance Migration Contract Drained via Flash Loan Input Validation Flaw
Critical lack of input validation within the MigrateTroveZap contract allowed an attacker to spoof migration data during a flash loan callback, resulting in a $12.3 million collateral drain.
Cross-Chain Bridge Flaw Enables Massive Token Minting and Asset Drain
A sophisticated cross-chain bridge manipulation allowed a threat actor to mint and dump billions of fake tokens, causing an 87% token price crash.
Legacy Token Contract Flaw Enables Nine Million Dollar Liquidity Pool Drain
An infinite mint vulnerability in a retired token contract was leveraged to siphon assets from linked liquidity pools.
Perpetual DEX Hyperliquid Suffers $4.9 Million Market Manipulation Exploit
Illiquid assets and high leverage created a structural vulnerability, forcing the liquidity vault to absorb $4.9M in unbacked bad debt.
