15 articles tagged with #smart-contract-exploit. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
The KelpDAO exploit reveals critical security vulnerabilities in DeFi protocols, raising concerns about a potential $1.2B in crypto hacks anticipated for 2026. The incident underscores the need for stronger security measures and may influence future regulatory frameworks governing decentralized finance.
A vulnerability in Gnosis Pay's Zodiac delay module allowed an attacker to initiate Safe transactions, prompting users to withdraw EURe and GNO tokens. The exploit highlights critical risks in modular smart contract architecture and raises concerns about the security of account abstraction implementations.
In April 2026, an attacker exploited a critical vulnerability in the Kelp rsETH bridge caused by a single-point-of-failure DVN configuration, forging bridge messages to steal 89,567 rsETH. The attacker subsequently used the stolen tokens as collateral across eight Aave V3 positions to borrow over 82,000 WETH and 821 wstETH, prompting a coordinated $300 million recovery effort from major DeFi protocols including Lido and Ethena.
North Korean threat actors executed a coordinated six-month operation targeting DeFi protocols, stealing $285M from Drift Protocol and $292M from KelpDAO for a combined $577M haul. The attacks expose critical vulnerabilities in DeFi security infrastructure and raise urgent questions about protocol resilience against sophisticated state-sponsored threats.
Carrot, a Solana-based DeFi yield protocol, announced permanent shutdown following significant losses from the Drift Protocol exploit on April 1. The breach depleted the protocol's total value locked (TVL), making continued operations financially unfeasible.
Alex Lab, a Bitcoin DeFi protocol, has suffered a security breach that reportedly affected customers of Shanghai Pudong Development Bank, marking a spillover from crypto into traditional finance. This incident follows an earlier $8.3M exploit on the platform, raising concerns about the protocol's security infrastructure and the interconnected risks between decentralized and traditional financial systems.
Bitcoin recovered above $76,000 amid geopolitical tensions, but the DeFi sector faces significant headwinds following the KelpDAO exploit, which triggered a $14 billion exodus from decentralized finance protocols. This marks one of 2024's largest security breaches and signals renewed concerns about smart contract vulnerabilities and protocol risk management.
A $293 million DeFi exploit has been identified as the largest hack of 2026, raising critical questions about fund recovery and security protocols across decentralized finance platforms. The incident underscores persistent vulnerabilities in smart contract architecture and highlights the need for enhanced auditing standards within the DeFi ecosystem.
A $280 million theft affecting Ethereum and Arbitrum DeFi protocols has exposed critical vulnerabilities in decentralized finance infrastructure, triggering concerns about systemic risks across major blockchain ecosystems. The incident underscores the need for comprehensive security audits and risk management frameworks as DeFi platforms continue to scale.
Kelp DAO's rsETH token faces a potential security exploit that could put approximately $100M at risk, raising concerns about smart contract vulnerabilities in liquid staking protocols. The incident highlights systemic risks in DeFi infrastructure and could significantly impact investor confidence in Ethereum-based derivatives and broader market sentiment.
An attacker exploited a vulnerability in a cross-chain bridge contract by forging a state proof message to gain admin control over bridged Polkadot (DOT) tokens on Ethereum. Despite minting $1 billion in fake tokens, the attacker only managed to extract approximately $250,000 in value before liquidity constraints and market impact limited further sales.
Raydium's Legacy AMM V3 protocol suffered a $1.34M exploit through an LP mint validation flaw that allowed an attacker to bypass proportion checks in deprecated pools. The attacker created a fake LP mint to drain five idle pools, though no private keys were compromised and current mainnet programs remain unaffected. Raydium's treasury will compensate affected users while conducting a security review.
Raydium, a major Solana-based decentralized exchange, suffered a $1.34 million exploit targeting five inactive liquidity pools in its retired AMM program. The platform has committed to compensating affected users through its treasury, limiting direct losses to the wider ecosystem.
Attackers exploited vulnerabilities in the WUSD.fi and GLOVE incentive systems on Uniswap V3, draining approximately $200,000 from DeFi liquidity pools by cycling funds through multiple wallets to repeatedly farm rewards. The incident highlights systemic security weaknesses in DeFi protocol design, with developers warning that incentive structures remain largely unaudited against sophisticated attack vectors.
Renegade.fi recovered approximately $190,000 after a whitehat hacker exploited a vulnerability in its Arbitrum-based dark pool and voluntarily returned over 90% of the $209,000 drained assets. The incident highlights both the security risks in decentralized finance protocols and the emerging practice of ethical hackers responsibly disclosing vulnerabilities.
