58 stories about Exploit from across the crypto press, curated and summarized daily. Most recent: Oct 24, 2026.
The Balance stablecoin lost 99% of its value after an attacker exploited a flaw in its lending system. The attacker manipulated bitcoin prices to drain vaults, pocketing $1 million in a single transaction.
Allbridge, a cross-chain protocol, has temporarily halted operations following a $1.65 million exploit involving a flash loan. The attacker manipulated pool ratios to withdraw assets at favorable rates before bridging funds.
A hacker exploited Ostium's price-reporting system to steal $18 million, the latest in a wave of attacks targeting decentralized finance protocols. The attacker manipulated future-dated oracle data to create fake trading profits.
A Hedera-based lending protocol, Bonzo Lend, was exploited for $9 million after a manipulated price update was accepted by Supra's verifier. A second wallet, claiming to be a white hat hacker, borrowed $1 million and promised to return the funds.
Lending protocol Bonzo Lend lost $9.05 million after an attacker exploited a verification flaw in a third-party Supra oracle contract on the Hedera network. The incident highlights the risks of relying on external data providers in decentralized finance.
Bonzo Lend lost $9 million after an attacker manipulated the value of SAUCE collateral using a flaw in Supra's on-chain oracle verifier. The exploit highlights ongoing risks in decentralized finance (DeFi) platforms.
An attacker followed every rule of a crypto system perfectly, drained $20 million from its treasury, and may still go to prison. The incident highlights vulnerabilities in decentralized governance mechanisms.
Summer.fi has paused its Lazy Summer vaults following a $6 million exploit, causing its SUMR token to drop over 18%. The DeFi protocol is investigating the incident and has not yet provided details on the cause or recovery efforts.
SecondFi has completed its forensic investigation into a recent Cardano wallet exploit, taken a final balance snapshot, and plans to return affected assets to users within two weeks.
SecondFi suffered a $2.4 million loss due to three attacks exploiting a flaw in its wallet software. The team managed to secure 129 million ADA before further damage could occur.
THORChain has restarted all network activities after a month-long pause to fix vulnerabilities that led to a $10.7 million exploit. The team implemented multiple security upgrades and a vault migration to ensure safety.
Taiko halted its Ethereum layer-2 network after a bridge exploit drained $1.7 million. An attacker forged withdrawal proofs, the same type of flaw behind this year's biggest bridge hacks. Fast containment limited damage. Taiko's token dropped about 10%.
Secret Network lost $4.67 million in an infinite-mint exploit on the Axelar bridge, which went undetected for seven days. The attacker still holds about $770,000 in an Axelar wallet, which Axelar declined to freeze.
The largest 'sandwich' bot on Ethereum, which itself front-runs trades to profit, was ironically exploited and drained of $7.5 million. The incident underscores the risks in DeFi, even for sophisticated automated tools.
The Bored Ape Yacht Club creator now holds more than 60 rescued NFTs in its custody as it works to return them to their rightful owners.
Gnosis Pay is facing an active exploit in its delay module, but the team has pledged to fully refund affected users. Co-founder Martin Köppelmann initially urged users to withdraw funds but later walked back the warning.
The Gravity Bridge, a cross-chain bridge in the Cosmos ecosystem, has temporarily halted operations following a reported $5.4 million exploit. Validators have paused the bridge while an investigation into the suspected signing key compromise is underway.
A memecoin platform, DxSale, was drained of $7.3 million from BNB Chain liquidity providers. The exploit highlights risks associated with outdated DeFi locker contracts.
A user on X claims to have discovered a $100 million exploit in a major crypto project. The exploit allegedly involves a smart contract vulnerability, but details are still emerging.
Security researchers have identified an ongoing exploit of Stake DAO, where an attacker minted 5.4 trillion vsdCRV tokens on Arbitrum and is swapping them for ether. This highlights the ongoing risks of smart contract vulnerabilities in decentralized finance.
Squid's core protocol remains unaffected after a third-party module, SquidRouterModule, was exploited for $3.2 million. The company has no information about who deployed the vulnerable module.
DeFi platform HawkFi.ag suffered a $3.2 million exploit. The team has promised full transparency and is working on a recovery plan. This is the latest in a series of high-profile DeFi hacks this year.
Stablecoins pegged to the euro and USD have lost their value after a $2.8 million exploit on the StablR platform. The suspected cause is a compromised private key in a multisig account, according to Blockaid.
A $10.7 million exploit on THORChain was caused by a flaw in its GG20 protocol, allowing a malicious node to access a vault's private key. The incident highlights risks in decentralized finance (DeFi) security.