NPM Supply Chain Compromise Redirects Crypto Transactions via Malicious Packages
A phishing-induced account takeover enabled malicious code injection into widely used NPM packages, silently rerouting cryptocurrency transactions at the browser level.
Shibarium Bridge Compromised via Flash Loan and Validator Key Exploit
A critical vulnerability in Shibarium's cross-chain bridge allowed an attacker to manipulate governance tokens and seize validator control, leading to a multi-million dollar asset drain.
Marginfi Protocol Safeguards $160 Million from Collateral Management Vulnerability
A critical flaw in Marginfi's collateral management function could have enabled unauthorized flash loans, exposing $160 million to manipulation.
BetterBank Suffers $5 Million Exploit via Reward Minting Logic
BetterBank's reward minting flaw allowed attackers to drain $5M via manipulated liquidity, highlighting critical risks in unaudited DeFi protocols.
Investor Loses $6 Million to Phishing-Induced Multicall Transaction
A deceptive link led to an unauthorized multicall transaction, demonstrating how social engineering can bypass user intent and drain digital assets.
Abracadabra Suffers $13 Million Exploit via GMX Integration Vulnerability
A critical state tracking error within Abracadabra's GMX-integrated lending cauldrons enabled a flash loan attack, compromising $13 million in user funds.
Shibarium Bridge Drained via Flash Loan and Validator Key Exploit
A flash loan attack on Shibarium's bridge compromised validator keys, exposing critical vulnerabilities in Layer 2 consensus and governance mechanisms.
Browser Vulnerability Exposes Crypto Wallets to Remote Theft
A critical type confusion vulnerability in Chromium's V8 engine permits remote code execution, directly threatening locally stored digital asset keys.
Chrome V8 Engine Exploit Threatens Crypto Wallets and Sensitive Data
A critical "Type Confusion" vulnerability in the V8 engine allows remote code execution, enabling attackers to steal private keys and seed phrases via malicious websites.
