PlayDapp Suffers $290 Million Token Minting Exploit via Private Key Compromise
A compromised deployer private key enabled unauthorized token minting, creating a systemic risk of hyperinflation and devaluing existing assets.
OWASP Identifies Top 10 Smart Contract Vulnerabilities for 2025
The OWASP Smart Contract Top 10 for 2025 highlights persistent architectural flaws, posing systemic risk to decentralized finance protocols and user assets.
New Gold Protocol Suffers $2 Million Flash Loan Price Manipulation
A single-source price oracle vulnerability enabled a flash loan attack, compromising $2 million and exposing critical DeFi risk.
New Gold Protocol Suffers $2m Price Oracle Manipulation via Flash Loan
A single-source price oracle vulnerability, exploitable by flash loans, enabled the theft of $2 million, highlighting critical systemic risk.
Cork Protocol Suffers $12m Exploit via Uniswap V4 Hook Manipulation
A sophisticated economic-logic exploit in Cork Protocol's Uniswap V4 hook bypassed access controls, enabling unauthorized token issuance and draining $12.1M in assets.
Nervos Force Bridge Suffers $3.9 Million Access Control Exploit
A compromised access control mechanism in the Nervos Force Bridge allowed an attacker to drain $3.9 million in cross-chain assets, exposing critical vulnerabilities in bridge security.
Bedrock uniBTC Suffers $2 Million Exploit via Minting Logic Flaw
A critical smart contract vulnerability allowed attackers to mint undervalued tokens, leading to a significant loss of protocol assets.
Moby Trade Suffers Private Key Compromise, $2.5 Million Drained
A compromised administrative private key enabled unauthorized contract upgrades, exposing user funds to direct exfiltration.
Web3 Wallet Transaction Simulation Spoofing Drains User Funds
Attackers manipulate Web3 wallet transaction previews via time-delay exploits, enabling full wallet drains after user approval, a critical flaw in user-facing security.
