58 stories about Exploit from across the crypto press, curated and summarized daily. Most recent: Oct 24, 2026.
Initia suspended its layer-1 network and rollups after researchers identified unauthorized token minting. Onchain data cited by The Block shows a transfer of about $2.7 million in ether to Ethereum, while the team investigates the incident.
A wallet linked to the $295 million Drift exploit sent 25,700 ETH—about $61 million—through Tornado Cash in two hours, according to Decrypt. A separate report says the attacker moved more funds over two days and that linked wallets still held $138 million in Ether, underscoring that the reported balances and transfer totals vary by snapshot.
NEAR Intents, a popular cross-chain trading system, was exploited for $3.8 million. The team has identified the hacker and plans to reimburse all losses. This is the latest in a series of high-profile crypto hacks this year.
KelpDAO is suing LayerZero and its CEO, claiming the bridge protocol endorsed a risky setup that led to a $292 million exploit in April. The lawsuit highlights ongoing concerns about bridge security in DeFi.
Magic Eden alerted users that old Ethereum NFT listings were vulnerable to an exploit in Limit Break's Payment Processor V2. Whitehat hackers rescued over 23,000 NFTs, valued at $5.7 million, before any were stolen. Users are urged to revoke NFT permissions to stay safe.
Evercrest, a developer for the KelpDAO cross-chain lending protocol, is suing LayerZero for $292 million in damages. The lawsuit claims LayerZero approved a risky single-verifier configuration in writing multiple times, then warned a different developer about the same vulnerability. This is the largest crypto exploit of 2026 so far.
An MEV bot called 'Yoink' intercepted $7.7M in stolen rsETH from an attempted Ethereum wallet exploit. Kelp temporarily froze the receiving address, preventing further damage.
A hacker exploited two software bugs to create 46 billion fake BTC tokens on the Symbiosis DeFi bridge, turning just 25 cents of Bitcoin into an unbacked supply. The preliminary losses are estimated at 9.97 BTC, highlighting the risks of DeFi vulnerabilities.
Cronos validators rolled back nearly two hours of blockchain history to recover $111 million in crypto. However, attackers still managed to steal $9.19 million before the network was halted. This controversial move highlights the risks and challenges of blockchain security.
Fogo, a Layer 1 blockchain, temporarily halted its mainnet after an attacker received 400 million FOGO tokens, worth around $3 million. The stolen tokens represent 10% of the circulating supply and 4% of the genesis supply.
Crypto.com's Cronos blockchain was halted after a $75 million exploit. $6 million was moved to Ethereum before validators froze the chain, leaving the rest stranded. The network is currently not producing blocks.
The Cronos network, linked to Crypto.com, paused operations after a $75 million exploit on the Tectonic platform. The attacker manipulated token prices to borrow against inflated collateral, similar to the Mango Markets hack.
Moonwell is investigating a potential exploit on its lending platform, with security firms estimating losses of $8.7 million. The incident involves the manipulation of collateral prices for MAMO tokens on the Base network.
BounceBit is shutting down its blockchain and migrating to BNB Chain after a $3 million exploit. The attacker stole 286.5 million BB tokens from nine wallets, prompting the team to halt block production.
Term Finance, an Ethereum-based lending app, lost $8.5 million after an attacker bought enough voting tokens to manipulate the protocol. This highlights a growing risk in decentralized finance where control of a protocol can be cheaper than the assets it manages.
The Sandbox has temporarily stopped bridging tokens between Base and BNB Chain to prevent further damage from an exploit. The incident impacted less than 0.01% of the SAND token supply, and users are advised not to trade SAND on these networks.
Coinkite has released a new firmware for its Coldcard hardware wallets, requiring users to add their own randomness when generating wallet seeds. This update follows a $130 million Bitcoin exploit and a three-week security review.
The MANTRA token fell to a record low of $0.004126 before the blockchain halted due to an exploit. The team confirmed a vulnerability in the network's software was exploited by an attacker.
An attacker exploited a flaw in an XRP bridge, creating fake deposits to drain millions. The bug went undetected despite multiple audits, highlighting risks in cross-chain bridges. The attacker withdrew 5 million XRP, worth approximately $2.5 million, from the bridge’s reserves.
Harmony has confirmed a security breach where an attacker minted 4 billion ONE tokens without authorization. The exploit was first reported by X user Juiceberg and has raised concerns about the network's security.
BTCPay told users running LND to update immediately or take servers offline after attackers stole credentials that can control Lightning wallets and move funds.
Binance founder Changpeng Zhao (CZ) advised Bitcoin holders to diversify their storage methods after a $70 million exploit involving Coldcard wallets. The incident highlights the risks of storing large amounts of cryptocurrency in a single wallet.
A software bug in the Coldcard hardware wallet has led to the theft of nearly 600 Bitcoin, worth around $38 million. This incident is causing some investors to question the safety of managing their own private keys and consider alternatives like Bitcoin ETFs.
The Verus-Ethereum bridge was exploited for the second time in two months, with attackers stealing $7.54 million through the same vulnerability class used in May, according to Blockaid.