A sealed Ledger box, a hidden LTE modem, 24 recovery words silently radioed out. Bitquery counts about $102 million drained from CryptoBilis buyers, and implants have since surfaced in devices from another authorized reseller, MediaMarkt. Who is still listening?
Balancer holders voted 99.2% to shut down 11 months after a $128M exploit. Pools go withdrawals-only Oct. 30; redemptions open May 2027 at an estimated $0.158 per BAL. Unreconciled losses, a liability release and a reset vote remain. Who balances the books?
A wallet funded with 10 USDT drained $3.87M from a BNB Chain vault serving NEAR Intents using valid signed authorizations. After a 48-hour ultimatum, the team announced a full recovery and closed its investigation; the full story of the failure remains unclear.
An attacker moved ~$6.07 million from Duelbits' hot wallets across five chains in a suspected private-key compromise, including the replacement wallet named after its $4.6 million theft in 2024. It reopened days later, cause still undisclosed. What changed since 2024?
An attacker drained $387.5 million from Bitget’s hot and warm wallets after breaching third-party security products and reaching its wallet system. No keys stolen, Bitget says; freezes barely dented the loss, and the products remain unnamed. Who audits the guards?
An attacker accessed SingularityNET’s cloud infrastructure. Valid bridge signatures authorized AGIX, WMTX and CGV mints; NTX was minted directly, and 8.72 million FET was drained, and $2.29M in gross liquid proceeds traced. When a signature is treated as proof, who checks whether it tells the truth?
A rigged pool fed Nostra's oracle a fake NSTR price, 8,306x real value, unlocking a $3.5 million borrow on Starknet. Pragma says it warned Nostra the feed was high-risk beforehand. Money market is still paused, and still no post-mortem.
A flaw in Nomic’s forwarding logic minted 40.65 unbacked nBTC and left Osmosis allBTC about $3.15 million short. Osmosis froze 22.65 allBTC, but roughly 18 BTC-equivalent had already reached Tornado Cash before the 74-day-delayed discovery.
An actor exploited a range-proof cache-key collision in Elements to mint ~4,000 unbacked L-BTC, draining $320 million from Liquid Network. The actor returned 3,400 BTC and kept roughly 598.5 BTC. Was it a bounty or theft? The dispute continues.
An attacker pumped Tectonic's TONIC token roughly 300x and borrowed $120.4 million against the inflated collateral. Cronos rolled back 10,961 blocks to recover $111.2 million; $9.19 million had already left the chain and remains unrecovered.
An attacker bridged 257.7 million NES, roughly $50 million, from Nesa to Ethereum in an incident consistent with the Cosmos EVM bug chain that hit MANTRA, TAC, and KiiChain. Nesa never published the mechanism; Bubblemaps estimated slippage cut net profit to roughly $60k.
An attacker drained 148.3 million KII, worth roughly $9.7 million at the pre-exploit price, from KiiChain through the Cosmos EVM exploit class that also hit MANTRA and TAC. A halt immobilized 54.4% on-chain, but the rest had already crossed to BNB Chain.