Beets Finance Drained $3.8 Million Exploiting Inherited Pool Logic Flaw
A systemic logic flaw in a core liquidity pool standard allowed a derivative protocol to be drained, underscoring critical contagion risk in shared DeFi infrastructure.
DeFi Protocol Stableswap Pool Drained by Token Infinite Mint Logic Flaw
A critical logic flaw in a legacy DeFi index token contract permitted an uncollateralized infinite mint, compromising pool integrity and draining $9M in LST assets.
Web Users Targeted by Malware Using Blockchain for Payload Delivery
The EtherHiding campaign leverages smart contracts for resilient, decentralized malware C2, transforming the blockchain into a novel supply chain attack vector.
Cross-Chain Bridge Drained by Forged Signature Verification Flaw
A critical flaw in the bridge's signature verification logic allowed the attacker to forge a valid Guardian set approval, resulting in unauthorized asset minting.
SwissBorg Staking Program Compromised via Partner API Supply Chain Attack
External API supply chain compromise allowed unauthorized Solana stake authority manipulation, resulting in $41.5M asset loss.
Bex Protocol Drained $12.4 Million by Inherited Smart Contract Logic Flaw
An architectural vulnerability in the V2 vault logic of a forked protocol allowed for unauthorized, multi-chain asset extraction.
Perpetual DEX Hyperliquid Suffers $4.9 Million Market Manipulation Exploit
Illiquid assets and high leverage created a structural vulnerability, forcing the liquidity vault to absorb $4.9M in unbacked bad debt.
Stablecoin Bank Private Key Compromise Drains Fifty Million USDC Assets
Critical internal key management failure allowed a single actor to compromise a $50M treasury, underscoring acute insider risk in centralized custody.
Yearn Finance Legacy Pool Drained Exploiting Infinite Token Minting Logic Flaw
A critical logic flaw in a custom stableswap contract allowed an attacker to mint unbacked yETH, leading to an immediate $9 million liquidity drain.
