Balancer V2 Pools Drained by Compounded Arithmetic Precision Loss
Asymmetric rounding in Composable Stable Pool math was weaponized via batched swaps, creating a multi-chain invariant drain and $128M loss.
Stablecoin Protocol Drained via Compromised Proxy Implementation Attack
A deployment-phase flaw allowed an attacker to seize proxy admin rights, enabling unauthorized token minting and a $1M liquidity drain.
Autonomous AI Agents Exploit Smart Contracts Proving Feasibility of Zero-Day Attacks
Commercial AI models successfully exploited smart contract logic, demonstrating autonomous zero-day attack capability and escalating systemic risk.
Centralized Exchange Hot Wallet Signing Flow Compromised on Solana
State-sponsored threat actors bypassed CEX operational controls, draining $35 million in Solana assets via a rapid, high-frequency withdrawal approval attack.
DeFi Protocol UwU Lend Drained by Flash Loan Oracle Manipulation
The protocol's oracle design, which lacked price smoothing and relied on manipulable low-liquidity pools, enabled a $4 billion flash loan attack.
Lending Protocol Moonwell Exploited via Chainlink Oracle Mispricing on Base Network
Oracle data integrity failure on Base network allowed a $1.1 million over-borrowing exploit, bypassing collateral checks.
Yearn Finance yETH Pool Drained Exploiting Stale Storage Cache
Unvalidated state transitions in the yETH pool's custom stableswap logic allowed an attacker to mint infinite tokens, resulting in a $9M capital drain.
Advanced AI Models Prove Autonomous Smart Contract Exploitation Feasible
The rapid evolution of large language models enables autonomous, low-cost vulnerability discovery and exploitation, accelerating the systemic risk to unaudited DeFi logic.
Cross-Chain Bridge Contract Exploit Drains Nine Hundred Ninety Million BOA Tokens
A critical logic flaw in a custom cross-chain bridge contract allowed an attacker to execute an unauthorized asset transfer, draining the protocol's liquidity pool.
