DeFi Payment Platform Drained after Centralized Admin Key Compromise
Centralized contract authority remains a critical risk; a single compromised admin key can bypass core protocol logic to drain all user assets.
Yearn Finance Legacy yETH Pool Drained via Infinite Token Minting Flaw
A critical logic flaw in a legacy stableswap pool enabled an attacker to mint an unlimited token supply, compromising liquidity pool integrity.
Cross-Chain Bridge Flaw Enables Massive Token Minting and Asset Drain
A sophisticated cross-chain bridge manipulation allowed a threat actor to mint and dump billions of fake tokens, causing an 87% token price crash.
Legacy Token Contract Flaw Enables Nine Million Dollar Liquidity Pool Drain
An infinite mint vulnerability in a retired token contract was leveraged to siphon assets from linked liquidity pools.
Arcadia Finance Drained $3.6m via Rebalancer Contract Input Validation Flaw
Unchecked `swapData` in the Rebalancer contract enabled a malicious router injection, granting unauthorized access to user liquidity provider assets.
Legacy Staking Pool Exploited via Synthetic Token Inflation Logic
A flaw in the custom stableswap pool's token accounting allowed the attacker to mint unlimited synthetic assets, draining $9M in liquid staking collateral.
Aerodrome Finance Users Drained via Malicious DNS Hijacking Front-End Attack
The protocol's reliance on a centralized DNS provider was exploited, enabling a malicious frontend to solicit unlimited token approvals from users.
Centralized Exchange Hot Wallet Drained by Compromised Operational Security
A critical failure in CEX hot wallet key management permitted the exfiltration of $33M in Solana assets, underscoring systemic operational risk.
Yearn Legacy yETH Pool Drained by Infinite Minting Logic Flaw
A critical logic flaw in a legacy token's minting function enabled a threat actor to create 235 trillion fake tokens, compromising $9 million in liquid staking assets.
