58 stories about Exploit from across the crypto press, curated and summarized daily. Most recent: Oct 24, 2026.
Blockchain investigator ZachXBT discovered a $520,000 exploit on the Polymarket platform. The Polymarket team has confirmed the issue but stated that user funds are secure.
The Map Protocol token (MAPO) lost 96% of its value after an attacker exploited a cross-chain bridge to mint a quadrillion tokens. The exploit resulted in a massive loss of over $2.5 billion in value for MAPO holders.
Echo Protocol, a Bitcoin-based DeFi platform, reported a $76 million exploit due to a compromised admin key. The incident highlights ongoing security risks in decentralized finance.
Aave, a major DeFi lending platform, has lifted borrowing restrictions on ether (ETH) after recovering from a $230 million exploit in April. This move signals growing confidence in the protocol's security as the crypto market stabilizes.
A security breach has drained $11.6 million from the Verus-Ethereum bridge, affecting 103.6 tBTC, 1,625 ETH, and 147,000 USDC. Peckshield flagged the exploit, highlighting the ongoing risks in cross-chain bridges.
THORChain, a decentralized exchange, suffered a major exploit affecting Bitcoin, Ethereum, and Binance Smart Chain. Hackers stole over $10 million, highlighting security vulnerabilities in cross-chain transactions.
THORChain has confirmed a $10 million exploit and launched a recovery portal for affected users. The portal allows users to revoke malicious approvals and claim refunds across four blockchain networks.
Lombard is the latest project to abandon LayerZero's cross-chain bridge, shifting $4 billion to Chainlink's alternative. This follows a $292 million exploit on LayerZero's Kelp DAO bridge, raising security concerns.
Thorchain, a cross-chain liquidity protocol, paused all trading after a $10.8 million exploit. The attack affected Bitcoin, Ethereum, BSC, and Base networks, causing the RUNE token to drop 12%.
Aave has started a binding vote on Arbitrum to transfer $71 million in disputed ETH. The funds are tied to a 2024 exploit, with creditors and Aave in a legal battle over ownership.