-
$8.1M lost · August 10, 2026 · Access Control
On August 10, 2026, cryptocurrency payment platform Coinsbuy suffered a coordinated hot wallet compromise across both TRON and Ethereum, losing approximately $7.9 million to $8.07 million in under an hour. Coinsbuy tempo…
-
$673K lost · August 3, 2026 · Other
On August 3, 2026, perpetual exchange protocol RISEx experienced an unauthorized withdrawal of 673,011.56 USDC from the Real-World Asset (RWA) yield strategy linked to its XLP liquidity vault due to a smart contract misc…
-
$573K lost · August 2, 2026 · Oracle Issue
On August 2, 2026, LOOPSDAO's LpdFi protocol on BNB Chain was exploited for approximately $690,000 in USDC (netting ~$573,000 in profit) through a combination of spot price oracle manipulation and a flaw in the protocol'…
-
$907K lost · August 2, 2026 · Access Control
On August 2, 2026, the MOKE token protocol on BNB Chain was exploited for approximately $907,700 (~1,546 BNB) due to a critical access control flaw in its smart contract architecture.
-
$130.0M lost · July 30, 2026 · Other
Starting July 30, 2026, Bitcoin hardware wallet manufacturer Coldcard (by Coinkite) disclosed a critical firmware entropy defect that enabled attackers to systematically brute-force and drain user funds offline, resultin…
-
$578K lost · July 28, 2026 · Flash Loan Attack
On July 28, 2026, the LULA token protocol on BNB Chain was exploited for approximately $578,100 through a price manipulation attack abusing the contract's recycle() function with a massive ~$237 million flash loan.
-
$6.3M lost · July 26, 2026 · Access Control
On July 26, 2026, WEMIX (the blockchain ecosystem backed by South Korean gaming company Wemade) suffered a smart contract compromise affecting its WEMIX$ stablecoin contract, resulting in an unauthorized minting and tran…
-
$450K lost · July 26, 2026 · Other
On July 26, 2026, cross-chain atomic swap protocol Garden Finance suffered a supply chain compromise affecting its Hash Time-Locked Contracts (HTLC), resulting in an initial drain of approximately $450,000 in USDT across…
-
$11.8M lost · July 25, 2026 · Access Control
On July 25, 2026, Singapore-based licensed stablecoin payment gateway Triple-A suffered a hot wallet compromise across multiple blockchains, resulting in the unauthorized extraction of approximately $9.7 million to $11.8…
-
$560K lost · July 25, 2026 · Flash Loan Attack
On July 25, 2026, the Projekt (GREEN/GOLD) reward vault on Ethereum was exploited, resulting in the loss of approximately 301.7 ETH (valued at ~$560,000) due to a logic flaw in its buy-to-earn reward allocation tracking.
-
$3.8M lost · July 23, 2026 · Access Control
On July 23, 2026, Bitcoin Layer-2 protocol B² Network suffered a security incident on BNB Chain targeting its B2 token staking service, resulting in the unauthorized extraction of approximately 8.59 million B2 tokens (va…
-
$24.1M lost · July 23, 2026 · Access Control
On July 23, 2026, the cross-chain custody bridge operated by decentralized exchange AFX on Arbitrum was exploited, resulting in the unauthorized withdrawal of 24.15 million USDC.
-
$7.5M lost · July 23, 2026 · Other
On July 23, 2026, the cross-chain bridge connecting the Verus blockchain to Ethereum was exploited for the second time in two months, resulting in the unauthorized extraction of approximately $7.53 million across multipl…
-
$73K lost · July 23, 2026 · Oracle Issue
On July 23, 2026, Solido Cash on the Supra blockchain was exploited due to an oracle fallback misconfiguration on its SOLID vault. An attacker leveraged an invalid stale price fallback to over-mint CASH stablecoins and e…
-
$500K lost · July 21, 2026 · Other
On July 21, 2026, the cross-chain interoperability protocol Wanchain suffered a security exploit targeting its Cardano-BNB Chain bridge, resulting in the unauthorized minting and withdrawal of over 203 million NIGHT toke…
-
$1.6M lost · July 20, 2026 · Flash Loan Attack
On July 20, 2026, the cross-chain bridging protocol Allbridge Core suffered a security exploit on its Solana deployment. The attacker extracted approximately $1.65 million in digital assets by manipulating the internal v…
-
$4.5M lost · July 17, 2026 · Other
On July 17, 2026, cross-chain intents protocol Across Protocol suffered a security incident targeting Risk Labs' off-chain Solana relayer event-parsing infrastructure. An attacker forged fake deposit events on Solana, tr…
-
$570K lost · July 16, 2026 · Other
On July 16, 2026, the Solana-based lending protocol DeFiTuna suffered a smart contract exploit targeting its USDC lending pool, resulting in a loss of approximately $570,000 and leaving the lending pool at a direct defic…
-
$24.0M lost · July 15, 2026 · Oracle Issue
On July 15, 2026, the real-world asset (RWA) perpetual trading protocol Ostium suffered a devastating oracle manipulation exploit on Arbitrum, resulting in a loss of approximately $24 million USDC from its Ostium Liquidi…
-
$1.3M lost · July 15, 2026 · Other
On July 15, 2026, the decentralized trading platform Cascade suffered an economic exploit targeting its Collaborative Liquidity Provision (CLS) vault on Arbitrum, resulting in a loss of approximately $1.34 million USDC.