54 articles tagged with #exploit. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
Polkadot experienced a critical security vulnerability that enabled a sophisticated attack exploiting liquidity on the network. The incident highlights significant risks in the protocol's safety mechanisms and raises concerns about asset protection across the ecosystem.
Drift Protocol on Solana suffered a $270M exploit, prompting Circle's chief strategy officer to advocate for 'circuit breakers' in DeFi protocols. The incident highlights unresolved questions about responsibility distribution among stablecoin issuers, DeFi developers, and regulators when hacks occur.
Cybersecurity expert Omer Goldberg highlights critical vulnerabilities in DeFi multisig security following the Drift attack. The analysis emphasizes the urgent need for time locks and stronger admin key protection to prevent sophisticated exploits in decentralized finance protocols.
Resolv Labs burned 36.7 million USR stablecoins after a security breach allowed an attacker to mint 80 million unbacked tokens through key compromise. The exploit resulted in $24.5 million in ETH being dumped and created a $34 million hole in the protocol's reserves.
Drift, a cryptocurrency platform, suffered a $280 million exploit that the company attributes to the Radiant hackers with medium-high confidence. The attack appears to have been a sophisticated operation that involved months of planning and preparation.
Drift Protocol suffered a $280 million exploit that required months of deliberate preparation by sophisticated attackers. The protocol believes with medium-high confidence that the same actors behind the $58 million Radiant Capital hack in October 2024 were responsible for this attack.
DeFi lending protocol Moonwell is under a governance attack where an attacker spent only $1,800 to purchase tokens and push through a malicious proposal. The attack threatens to drain over $1 million from the protocol, highlighting vulnerabilities in DeFi governance systems.
Onchain asset manager kpk has declared that depositors experienced no losses following a $23 million exploit of the Resolv protocol. The company confirmed that despite the significant hack, all investor funds remained protected.
Google discovered a new iOS exploit kit called Coruna that silently infiltrates iPhones through compromised websites to steal cryptocurrency from popular wallet apps including MetaMask, Phantom, and Trust Wallet. The attack requires no user interaction beyond visiting a malicious website on an unpatched iPhone device.
A DeFi exploiter successfully manipulated oracle pricing on Ploutos Money lending protocol, using BTC/USD price data for USDC tokens. This oracle manipulation allowed the attacker to borrow $400,000 worth of ETH using only $8 of collateral, highlighting critical vulnerabilities in DeFi lending protocol oracle systems.
Stellar-based lending protocol Blend suffered a major exploit over the weekend, losing over $10 million through oracle manipulation. The attack represents a significant security breach in the DeFi lending space, highlighting ongoing vulnerabilities in oracle-dependent protocols.
Major crypto market developments include Tom Lee's $130M ETH purchase, BlackRock's BUIDL reaching $2B assets with $100M dividends, and Metaplanet adding 4,279 BTC to holdings. The market also saw a $3.9M exploit on Unleash Protocol and onchain perpetuals hitting $1T monthly volume.
Mist browser has security vulnerabilities that expose low-level APIs, allowing malicious DApps to access users' file systems and potentially read or delete files. Users are strongly advised to upgrade Mist immediately to protect against these exploits when navigating to untrusted decentralized applications.
A high-severity DoS vulnerability has been discovered in geth 1.4.8's implementation of the DAO soft fork. The vulnerability allows attackers to execute EVM code up to the block gas limit without payment, creating a potential denial of service attack vector.
SecondFi disclosed that a self-custody exploit resulted in approximately $2.4 million being drained from a limited number of Cardano wallets. The platform cautioned that it may lack sufficient resources to fully compensate all affected users, raising concerns about accountability and recovery mechanisms in decentralized finance.
THORChain resumed trading after a five-week suspension triggered by a $10.7 million exploit affecting an Asgard vault in May. The incident highlights persistent security vulnerabilities in cross-chain protocols and raises questions about the platform's safeguards and recovery mechanisms.
Yuga Labs, creator of the Bored Ape Yacht Club, has recovered over 60 NFTs from an exploit and is working to return them to their rightful owners. This incident highlights ongoing security vulnerabilities in the NFT ecosystem and demonstrates how major projects are responding to theft and fraud.
Yuga Labs executed a whitehat operation on June 8 to rescue 68 blue-chip NFTs worth over $500,000 from an active exploit in Flooring Protocol, deploying its own capital to prevent further losses to the community. The intervention highlights both the security vulnerabilities in DeFi-adjacent NFT protocols and the role major stakeholders play in protecting ecosystem assets.
Stake DAO has contained a vsdCRV exploit to the Arbitrum network, secured mainnet backing for affected assets, and closed the bridge connecting the two networks to prevent further damage. The protocol is sunsetting an affected market while maintaining the security of its other key products.
Circle CEO Jeremy Allaire defended the company's decision not to freeze USDC tokens involved in the Drift Protocol exploit, stating that Circle has a clear legal obligation to operate within the law rather than make discretionary asset freezes. The stance highlights tensions between stablecoin issuers' technical capabilities and their regulatory and ethical constraints.
The Solana Foundation has launched two new DeFi security programs called STRIDE and SIRN to enhance security across the Solana ecosystem. The initiative comes in response to recent security exploits, including a hack affecting the Drift protocol, highlighting the urgent need for improved DeFi security measures.
NFT lending platform Gondi suffered a smart contract exploit on Monday resulting in approximately $230,000 worth of stolen NFTs. The platform has committed to fully compensating all affected users following the security breach.
NFT lending platform Gondi suffered a $230,000 exploit that drained 78 NFTs across approximately 40 transactions. The platform is taking steps to compensate affected users following the contract vulnerability exploitation.
Solv Protocol was hacked for $2.7 million after an attacker exploited a bug that allowed them to mint tokens freely. The protocol is now offering a 10% bounty to recover the stolen funds, with the hacker having swapped the minted tokens for Bitcoin-tied assets.
Solv Protocol suffered a security exploit that drained approximately $2.7 million from its Bitcoin yield vault, affecting around 10 users. The protocol team has committed to covering all losses from what they describe as a 'limited exploit.'
