DeFi Protocol Drained $200 Million Exploiting Critical Reentrancy Flaw
Unchecked external calls within a withdrawal function allowed a reentrant loop to drain $200M before the state update was committed.
Balancer Users Drained via DNS Provider Social Engineering Attack
A third-party DNS provider compromise redirected users to a malicious front-end, enabling unauthorized token approvals and asset draining.
Centralized Exchange Hot Wallet Drained by Compromised Administrative Credential
The compromise of a single administrative credential on a hot wallet system presents an existential operational risk, bypassing cold storage security models.
Malicious Signature Phishing Drains User Wallets across Web3 Ecosystem
The systemic risk is shifting from smart contract flaws to user-signed malicious approvals, enabling rapid, irreversible wallet-draining attacks.
DeFi Protocol Balancer V2 Drained Exploiting Smart Contract Rounding Flaw
A systemic flaw in Balancer V2's Stable Pool rounding logic permitted an attacker to drain $128M across five chains, exposing deep audit limitations.
UXLINK Multisig Wallet Compromised by Critical Delegate Call Vulnerability
A delegate call flaw in the multisig contract granted admin-level access, enabling unauthorized token minting and severe asset devaluation.
Legacy Transaction Flaw Splits Cardano Network, Threatening Consensus Integrity
A legacy transaction validation bug enabled a chain-splitting partition, threatening network consensus and operational continuity.
Yearn yUSND Vault Suffers Economic Exploit via Liquidity Slippage Flaw
Insufficient liquidity during liquidation reward swaps created an economic vector, allowing a 5.2% capital drawdown on the yUSND vault through severe slippage manipulation.
Lending Protocol Drained $197 Million Exploiting Flash Loan Logic Flaw
The Euler exploit leveraged atomic flash loans to manipulate the collateralization logic, demonstrating systemic risk in unverified lending mechanisms.
