Hackers exploited a hidden proxy backdoor to mint millions of $K tokens on Arbitrum, draining $1.55 million from liquidity pools and crashing the price. Kinto blames old proxy code - but the timing, just after massive insider unlocks, raises uneasy questions.
$42 million appeared to vanish from GMX V1 on July 9 via cross-contract reentrancy exploit introduced by a 2022 bug fix. Attacker manipulated globalShortAveragePrices to inflate GLP pricing, but funds were later recovered in coordinated disclosure - $5M bounty paid.
The CEO of TON promised UAE Golden Visas for $100K staked + $35K fees. Three federal regulators fact-checked him in 48 hours, revealing zero licenses or partnerships. From definitely real to communication clusterbleep before most investors knew what hit them.
Clean energy blockchain Rowan Energy claimed 545 million supply while secretly holding 945 million and a mint function. Researcher exposed the fraud by minting 1 billion tokens then burning them as proof. Was this CEO's first scam or part of a longer pattern?
Cork Protocol’s $12 million hack turned into pure audit theater. Hacker drops technical corrections on-chain, one audit firm’s CEO calls out a sloppy competitor, while they hide behind confidentiality. The thief may have given better analysis than some pros.
$9.8M lost in just 2 hours after ResupplyFi deployed a new market when someone donated pocket change to manipulate their fresh vault's exchange rate to zero. Attacker then drained the entire market using 1 wei of worthless shares as collateral.
A security firm forgot its own security. Hacken's HAI token got nuked after a bridge key leak let an attacker mint 900M tokens and dump $170K. 99% crash, KuCoin KYC twist, and a tokenomics pivot no one asked for. They wrote the report - and lived it.
$500k vanished from Zunami Protocol in a mid-May admin key exploit. Months of stagnant development & perfect timing may have paved the way. Team offered weak excuses, dismissed concerns, left users empty-handed. When emergency keys open doors, who's in control?
Over $16 million drained by a fake that tricked their vaults using their own permissions. AlexLab got rekt - again. Last year it was a leaked key, this time it’s bad logic. Two exploits, two attack vectors - same protocol, still not learning.
Force Bridge on Nervos Network dies the day after announcing its own funeral. $3.76M gone in an attack that didn’t exploit a bug - it exploited control. Someone had the keys and someone knew the timing.
No funds lost. No chaos. Just a whitehat report, a five-day fix, and a protocol that treated security like engineering - not damage control. Vesu did everything right… which is exactly why no one’s talking about it.
Fake tokens just popped the Cork protocol for $12 million. The protocol built to hedge depeg risk got depegged from reality by trusting counterfeit contracts.