49 stories about Exploit from across the crypto press, curated and summarized daily. Most recent: Aug 31, 2026.
SecondFi suffered a $2.4 million loss due to three attacks exploiting a flaw in its wallet software. The team managed to secure 129 million ADA before further damage could occur.
THORChain has restarted all network activities after a month-long pause to fix vulnerabilities that led to a $10.7 million exploit. The team implemented multiple security upgrades and a vault migration to ensure safety.
Taiko halted its Ethereum layer-2 network after a bridge exploit drained $1.7 million. An attacker forged withdrawal proofs, the same type of flaw behind this year's biggest bridge hacks. Fast containment limited damage. Taiko's token dropped about 10%.
Secret Network lost $4.67 million in an infinite-mint exploit on the Axelar bridge, which went undetected for seven days. The attacker still holds about $770,000 in an Axelar wallet, which Axelar declined to freeze.
The largest 'sandwich' bot on Ethereum, which itself front-runs trades to profit, was ironically exploited and drained of $7.5 million. The incident underscores the risks in DeFi, even for sophisticated automated tools.
The Bored Ape Yacht Club creator now holds more than 60 rescued NFTs in its custody as it works to return them to their rightful owners.
Gnosis Pay is facing an active exploit in its delay module, but the team has pledged to fully refund affected users. Co-founder Martin Köppelmann initially urged users to withdraw funds but later walked back the warning.
The Gravity Bridge, a cross-chain bridge in the Cosmos ecosystem, has temporarily halted operations following a reported $5.4 million exploit. Validators have paused the bridge while an investigation into the suspected signing key compromise is underway.
A memecoin platform, DxSale, was drained of $7.3 million from BNB Chain liquidity providers. The exploit highlights risks associated with outdated DeFi locker contracts.
A user on X claims to have discovered a $100 million exploit in a major crypto project. The exploit allegedly involves a smart contract vulnerability, but details are still emerging.
Security researchers have identified an ongoing exploit of Stake DAO, where an attacker minted 5.4 trillion vsdCRV tokens on Arbitrum and is swapping them for ether. This highlights the ongoing risks of smart contract vulnerabilities in decentralized finance.
Squid's core protocol remains unaffected after a third-party module, SquidRouterModule, was exploited for $3.2 million. The company has no information about who deployed the vulnerable module.
DeFi platform HawkFi.ag suffered a $3.2 million exploit. The team has promised full transparency and is working on a recovery plan. This is the latest in a series of high-profile DeFi hacks this year.
Stablecoins pegged to the euro and USD have lost their value after a $2.8 million exploit on the StablR platform. The suspected cause is a compromised private key in a multisig account, according to Blockaid.
A $10.7 million exploit on THORChain was caused by a flaw in its GG20 protocol, allowing a malicious node to access a vault's private key. The incident highlights risks in decentralized finance (DeFi) security.
Blockchain investigator ZachXBT discovered a $520,000 exploit on the Polymarket platform. The Polymarket team has confirmed the issue but stated that user funds are secure.
The Map Protocol token (MAPO) lost 96% of its value after an attacker exploited a cross-chain bridge to mint a quadrillion tokens. The exploit resulted in a massive loss of over $2.5 billion in value for MAPO holders.
Echo Protocol, a Bitcoin-based DeFi platform, reported a $76 million exploit due to a compromised admin key. The incident highlights ongoing security risks in decentralized finance.
Aave, a major DeFi lending platform, has lifted borrowing restrictions on ether (ETH) after recovering from a $230 million exploit in April. This move signals growing confidence in the protocol's security as the crypto market stabilizes.
A security breach has drained $11.6 million from the Verus-Ethereum bridge, affecting 103.6 tBTC, 1,625 ETH, and 147,000 USDC. Peckshield flagged the exploit, highlighting the ongoing risks in cross-chain bridges.
THORChain, a decentralized exchange, suffered a major exploit affecting Bitcoin, Ethereum, and Binance Smart Chain. Hackers stole over $10 million, highlighting security vulnerabilities in cross-chain transactions.
THORChain has confirmed a $10 million exploit and launched a recovery portal for affected users. The portal allows users to revoke malicious approvals and claim refunds across four blockchain networks.
Lombard is the latest project to abandon LayerZero's cross-chain bridge, shifting $4 billion to Chainlink's alternative. This follows a $292 million exploit on LayerZero's Kelp DAO bridge, raising security concerns.
Thorchain, a cross-chain liquidity protocol, paused all trading after a $10.8 million exploit. The attack affected Bitcoin, Ethereum, BSC, and Base networks, causing the RUNE token to drop 12%.