9 articles tagged with #smart-contract-vulnerability. AI-curated summaries with sentiment analysis and key takeaways from 50+ sources.
North Korea has stolen over $500 million from DeFi protocols Drift and Kelp in successive exploits within two weeks, signaling a coordinated campaign rather than isolated incidents. The attacks reflect the sanctioned state's strategic pivot toward cryptocurrency theft as a revenue mechanism, raising critical security concerns across the DeFi ecosystem.
An Ethereum MEV bot operating under the address 'Jaredfromsubway.eth' lost $7.5M through a sophisticated exploit involving a transaction approval trap in its router contract. The attack, detailed by security firm Blockaid, reveals critical vulnerabilities in how some MEV bots manage token approvals and contract interactions.
Humanity Protocol's $H token surged 41% despite the platform suffering a $1 billion loss from a security exploit, revealing a paradoxical market reaction. The incident underscores serious vulnerabilities in decentralized systems that could shake investor confidence and destabilize the broader market.
Stake DAO suffered a significant exploit on Arbitrum where an attacker minted 5.4 trillion vsdCRV tokens and converted them to ETH, exposing critical vulnerabilities in the protocol's token minting mechanisms. This incident highlights ongoing security risks in DeFi platforms handling derivative assets and staking mechanisms.
KelpDAO suffered a $280M exploit that exposed critical vulnerabilities in DeFi smart contract infrastructure. The incident raises serious questions about security auditing practices and threatens to shake investor confidence in decentralized finance protocols operating on Solana.
A $293M exploit targeting KelpDAO exposes critical vulnerabilities in DeFi protocols, potentially triggering a Bitcoin price decline toward $60K in April. The hack underscores systemic risks in decentralized finance and threatens to erode investor confidence across the crypto ecosystem.
Kelp DAO's rsETH bridge suffered a $292 million exploit through a LayerZero-based attack, with the protocol's emergency multisig freezing core contracts within 46 minutes and blocking two additional exploitation attempts. The incident highlights critical vulnerabilities in cross-chain bridge infrastructure and the risks associated with LayerZero's messaging protocol.
Raydium experienced a $1.34M exploit affecting its deprecated Solana pools, with the platform's treasury committing to full reimbursement of affected users. Security firms have traced the stolen funds to Tornado Cash, a privacy mixer commonly used to obscure transaction origins.
Raydium, a Solana-based DEX, suffered a $1.34 million exploit on its deprecated AMM V3 program due to insufficient validation of LP mint addresses, allowing an attacker to drain approximately 150,000 RAY, 5,600 SOL, and 900,000 USDC. The stolen funds were subsequently laundered across Solana and Ethereum through KuCoin and mixing services including Tornado Cash.
