Over $16 million drained by a fake that tricked their vaults using their own permissions. AlexLab got rekt - again. Last year it was a leaked key, this time it’s bad logic. Two exploits, two attack vectors - same protocol, still not learning.
Force Bridge on Nervos Network dies the day after announcing its own funeral. $3.76M gone in an attack that didn’t exploit a bug - it exploited control. Someone had the keys and someone knew the timing.
No funds lost. No chaos. Just a whitehat report, a five-day fix, and a protocol that treated security like engineering - not damage control. Vesu did everything right… which is exactly why no one’s talking about it.
Fake tokens just popped the Cork protocol for $12 million. The protocol built to hedge depeg risk got depegged from reality by trusting counterfeit contracts.
A sneaky bug in Marinade Finance, Solana's liquid staking protocol, flipped the rules upside down - letting low-effort validators with low bids leech millions in rewards. For 126 epochs, they earned more by doing less, while mSOL holders got shortchanged by 37k SOL.
$223 million from Cetus through broken math. Sui validators froze $162 million mid-heist. Over $60 million walked across Wormhole and never looked back. Was it an exploit - or just the math working as written?
User funds have been frozen for months while Chainge Finance is still accepting deposits. Promises fade, excuses pile up - could this be a slow rug pull disguised as technical failure? When withdrawals stall but deposits flow, what else could it be?
Admin keys leaked. Contracts tweaked. $1.18M gone. LNDfi blames North Korea, but the chain tells a simpler story - a quiet backdoor, a drained pool, and a protocol that trusted too much, too easily.
A backdoor function drained BrincFi’s staking contract in December 2021. They allege an ex-dev, still active in crypto, was behind it. The case drags on in court while users are left without answers. A cold case, still haunting the industry.
67 cents minted 9.73 quadrillion MBU via a double-decimal bug, letting an attacker siphon $2.15 million, dump tokens, and vanish through Tornado Cash. MobiusDAO went from launch to zero in three days - undone by math nobody may have bothered to test.
Our ancestors fought wars for freedom, we surrendered ours for a user agreement we never read. What if the greatest technological threat isn't AI taking over, but humanity willingly stepping aside? This isn’t a story of machines rising against us, it’s a chronicle of how we sank into them.
Was Movement's community revolution an extraction scheme in disguise? Middlemen helped insiders dump 66M tokens for $38M profit before blaming market makers. Exchanges needed one look to delist. Is this the same liquidity extraction game with fancier packaging?