Balancer V2 Stable Pools Drained Exploiting Precision Rounding Logic
The logic flaw in the Stable Pool's rounding function permitted batched-swap price manipulation, resulting in a nine-figure asset drain.
Web3 Users Compromised by EtherHiding Malware Campaign via JavaScript Injection
Threat actors are leveraging compromised websites and four BSC contracts to deploy credential-stealing malware, bypassing traditional network defenses.
Moonwell Lending Protocol Drained by Erroneous Chainlink Oracle Price Feed
A critical failure in collateral price validation allowed an attacker to leverage a faulty Chainlink oracle feed for $3.7M in uncollateralized debt .
Peer-to-Peer Platform NoOnes Suffers $8 Million Solana Bridge Exploit
Bridge logic failure on the Solana component allowed unauthorized cross-chain asset withdrawal, exposing systemic risk in multi-chain infrastructure.
Ionic Protocol on Mode L2 Drained via Fake Collateral Social Engineering
Operational failure allowed attackers to whitelist counterfeit collateral, compromising the lending protocol's core solvency.
Bitcoin Mining Pool Suffers Private Key Deduction via Weak Entropy Flaw
A weak pseudorandom number generator in a third-party tool allowed private key derivation, compromising a massive Bitcoin treasury.
Stream Finance Collateral Mismanagement Causes $93 Million Asset Loss and Depeg
Centralized fund management and rehypothecation practices introduced catastrophic operational risk, resulting in a 77% stablecoin depeg.
New EVM Chain Users Targeted by ERC-20 Log Spoofing Phishing Attack
The ERC-20 standard permits non-transferring contracts to emit fake logs, weaponizing block explorers for large-scale social engineering.
Centralized Exchange Hot Wallet Flaw Allows Private Key Inference Theft
A systemic flaw in CEX hot wallet key management permitted private key inference, resulting in a $30 million asset drain; this highlights critical operational risk.
