-
$6.0M lost · October 4, 2026 · Access Control
On October 4, 2026, an unnamed Aave v3 adapter vault on Base was drained of 1,783.07 wstETH (~$6.0 million USD). The attacker withdrew the Aave interest-bearing tokens (aBaswstETH), redeemed them for wstETH, and initiate…
-
$3.8M lost · October 1, 2026 · Other
On October 1, 2026, cross-chain protocol NEAR Intents was exploited for approximately $3,8 million following a hot wallet drain on BNB Smart Chain caused by an integration bug in its Omni bridge infrastructure. On-chain…
-
$93K lost · September 30, 2026 · Other
On September 30, 2026, the MCN Labs LPBonus contract on BNB Smart Chain was exploited for ~$92,600 USD (1,442,165.71 FIST) due to a reward accounting logic flaw that used inconsistent MSN reserve values during reward acc…
-
$93K lost · September 29, 2026 · Other
On September 29, 2026, the FastSwap protocol on BNB Smart Chain was exploited in an on-chain attack detected by TenArmor, resulting in an estimated loss of approximately $92,600 USD.
-
$2.0M lost · September 26, 2026 · Phishing
On September 26–27, 2026, scammers deployed a fake OP Stack Layer 2 network impersonating the unreleased GIWA Mainnet (Chain ID 9134) and set up a fraudulent bridge. 1,335 user addresses deposited 767.65 ETH into the fak…
-
$1.8M lost · September 24, 2026 · Access Control
On September 24, 2026, privacy-focused stablecoin payment protocol Payy Network suffered a security breach on its rollup contract, resulting in the drain of ~$1.83 million in USDC. The stolen funds were swapped for 683.3…
-
$7.0M lost · September 24, 2026 · Access Control
On September 24, 2026, crypto casino and sportsbook platform Duelbits suffered a multi-chain hot wallet compromise resulting in estimated total losses of $4.9M to $7.0M across Ethereum, BNB Chain, Tron, Bitcoin, and Sola…
-
$351.0M lost · September 24, 2026 · Access Control
On September 24, 2026, centralized exchange Bitget suffered a major infrastructure breach resulting in ~$351.6 million stolen from its hot and warm wallet layers. Bitget paused withdrawals while confirming its cold walle…
-
$2.3M lost · September 23, 2026 · Other
On September 23–24, 2026, Meter.io suffered a dual consensus and bridge exploit after an attacker leveraged a block validation flaw on Meter mainnet and exploited the Meter Passport bridge on BNB Chain, resulting in ~$2.…
-
$50K lost · September 22, 2026 · Access Control
On September 22, 2026, Cosmos ecosystem DEX Astroport suffered a security breach on the Neutron chain that exposed protocol admin controls. Validators halted Neutron and Cosmos Hub to coordinate an emergency response, in…
-
$109K lost · September 21, 2026 · Other
On September 21, 2026, the RWC token protocol on BNB Smart Chain was hit by an on-chain attack detected by TenArmor, resulting in an estimated loss of approximately $109,000 USD.
-
$260K lost · September 21, 2026 · Other
On September 21, 2026, the Internet Token protocol on Base was exploited for 5.85 WETH and 764 million INT after an attacker leveraged an unvalidated Uniswap V3 pool callback parameter to arbitrarily mint ~925 million IN…
-
$1.5M lost · September 19, 2026 · Access Control
On September 19–20, 2026, an attacker used compromised SingularityNET bridge and NuNet deployer private keys to drain $FET and mint unauthorized supplies of $AGIX,$NTX, $WMTx, and $CGV on Ethereum. The attacker extracted…
-
$3.5M lost · September 17, 2026 · Oracle Issue
On September 17, 2026, Starknet money market Nostra Finance suffered an oracle price manipulation exploit resulting in ~$3.53 million in unauthorized borrows across ETH, STRK, USDC, USDT, WBTC, and DAIv1 against inflated…
-
$47K lost · September 16, 2026 · Phishing
On September 16, 2026, an attacker executed a batched approval-drain sweep targeting holders of the Bonfire (BONFIRE) token on BNB Chain, resulting in a loss of approximately 66.08 WBNB (~$47.4K USD). T
-
$600K lost · September 16, 2026 · Phishing
On September 16, 2026, a social engineering campaign disguised as a Cloudflare human verification check targeted meme coin traders on DEX aggregators like DexScreener and Axiom. Bypassing Web3 wallet signatures entirely,…
-
$346K lost · September 16, 2026 · Flash Loan Attack
On September 16, 2026, legacy Ethereum yield-aggregator Flamincome (associated with Flamingo Finance) suffered an oracle and vault share price manipulation exploit, resulting in a net attacker profit of $345,902.67 USDT…
-
$736K lost · September 12, 2026 · Other
On September 12, 2026, cross-chain swap protocol Chainflip suffered a memo-manipulation exploit on its Tron settlement layer, resulting in six unauthorized payouts totaling 736,442.17 USDT after an attacker attached cust…
-
$116K lost · September 9, 2026 · Reentrancy
On September 9, 2026, PoolTogether-V3 fork Amnext (AMC) on BNB Smart Chain was exploited for ~$116.1K USD (~154 WBNB) after a credit-burn accounting flaw allowed an attacker to repeatedly re-claim prize allocations, infl…
-
$3.1M lost · September 9, 2026 · Other
On September 9, 2026, a flaw in Nomic's custom forwarding mechanism allowed an attacker to double-spend nBTC and send ~39.84 unbacked nBTC vouchers (~$3.15M USD) to Osmosis, compromising roughly 36% of the backing behind…