-
$3.5M lost · September 17, 2026 · Oracle Issue
On September 17, 2026, Starknet money market Nostra Finance suffered an oracle price manipulation exploit resulting in ~$3.53 million in unauthorized borrows across ETH, STRK, USDC, USDT, WBTC, and DAIv1 against inflated…
-
$47K lost · September 16, 2026 · Phishing
On September 16, 2026, an attacker executed a batched approval-drain sweep targeting holders of the Bonfire (BONFIRE) token on BNB Chain, resulting in a loss of approximately 66.08 WBNB (~$47.4K USD). T
-
$600K lost · September 16, 2026 · Phishing
On September 16, 2026, a social engineering campaign disguised as a Cloudflare human verification check targeted meme coin traders on DEX aggregators like DexScreener and Axiom. Bypassing Web3 wallet signatures entirely,…
-
$346K lost · September 16, 2026 · Flash Loan Attack
On September 16, 2026, legacy Ethereum yield-aggregator Flamincome (associated with Flamingo Finance) suffered an oracle and vault share price manipulation exploit, resulting in a net attacker profit of $345,902.67 USDT…
-
$736K lost · September 12, 2026 · Other
On September 12, 2026, cross-chain swap protocol Chainflip suffered a memo-manipulation exploit on its Tron settlement layer, resulting in six unauthorized payouts totaling 736,442.17 USDT after an attacker attached cust…
-
$116K lost · September 9, 2026 · Reentrancy
On September 9, 2026, PoolTogether-V3 fork Amnext (AMC) on BNB Smart Chain was exploited for ~$116.1K USD (~154 WBNB) after a credit-burn accounting flaw allowed an attacker to repeatedly re-claim prize allocations, infl…
-
$3.1M lost · September 9, 2026 · Other
On September 9, 2026, a flaw in Nomic's custom forwarding mechanism allowed an attacker to double-spend nBTC and send ~39.84 unbacked nBTC vouchers (~$3.15M USD) to Osmosis, compromising roughly 36% of the backing behind…
-
$320.0M lost · September 6, 2026 · Other
On September 6–7, 2026, Bitcoin sidechain Liquid Network suffered an Elements consensus bug exploit resulting in losses of ~4,000 BTC (~$320 million USD), after unbacked L-BTC tokens were minted and redeemed for real Bit…
-
$1.7M lost · September 4, 2026 · Other
On September 4, 2026, lending protocol Notional Finance suffered an integer truncation and rounding error exploit on Ethereum, resulting in an estimated loss of $1.73 million in DAI and USDC, which the attacker swapped i…
-
$170K lost · September 2, 2026 · Oracle Issue
On September 2, 2026, DeFi protection protocol Cozy Finance was exploited on Optimism for 170,186 USDC.e (~$160K–$170K USD) across three v2 markets after an attacker submitted false oracle triggers that went completely u…
-
$2.5M lost · August 31, 2026 · Other
On August 31, 2026, Solana-based automated market maker Aquifer suffered an unverified CPI token program injection exploit resulting in approximately $2.5 million in total losses across 90+ attack transactions, after whi…
-
$75.0M lost · August 30, 2026 · Oracle Issue
On August 30, 2026, decentralized lending protocol Tectonic on Cronos suffered an oracle price manipulation exploit resulting in estimated total losses between $75 million and $119.5 million, with approximately $6 millio…
-
$102.0M lost · August 28, 2026 · Access Control
On August 28, 2026, crypto card provider Avici and three other card programs suffered an exploit totaling approximately $1.02 million (~10,000 SOL) due to an instruction verification flaw in their shared card contract ma…
-
$8.7M lost · August 27, 2026 · Oracle Issue
On August 27, 2026, Moonwell’s MAMO lending market on Base was exploited through a combination of collateral-accounting manipulation and DEX oracle manipulation. The attacker deployed roughly $1.95 million in starting ca…
-
$8.5M lost · August 23, 2026 · Other
On August 23, 2026, fixed-rate lending provider Term Labs suffered a governance exploit affecting its Term Vaults (built on Yearn v3 vault infrastructure), resulting in the loss of approximately $8.5 million in digital a…
-
$650K lost · August 21, 2026 · Access Control
On August 21–22, 2026, The Sandbox gaming platform experienced an exploit targeting its LayerZero-based Omnichain Fungible Token (OFT) bridge deployments on Base and BNB Smart Chain (BSC). By hijacking LayerZero delegate…
-
$1.7M lost · August 19, 2026 · Other
On August 19, 2026, cross-chain liquidity network Maya Protocol was exploited for approximately $1.7 million in assets (including 20.83 BTC valued at ~$1.4M), leading to an overall liquidity pool valuation drop of ~$11 m…
-
$678K lost · August 15, 2026 · Flash Loan Attack
On August 15, 2026, BSC-based bond market protocol Fox Market was exploited via an atomic flash-loan attack. The attacker utilized ~$482 million in flash-loaned stablecoins to trigger over-minting of protocol bonds and s…
-
$25.6M lost · August 13, 2026 · Phishing
Q uick Summary On August 13, 2026, an unknown victim address (0x13e382dfe53207E9ce2eeEab330F69da2794179E) was drained of approximately $25.6 million in cryptocurrency assets, including aWBTC ($6.3M), DAI ($5.1M), WBTC ($…
-
$300K lost · August 12, 2026 · Other
On August 12, 2026, Layer-1 blockchain Harmony Protocol suffered a major protocol-level security incident when an attacker exploited an "empty blocks" vulnerability to fraudulently mint approximately 4 billion ONE tokens…