$9.8M lost in just 2 hours after ResupplyFi deployed a new market when someone donated pocket change to manipulate their fresh vault's exchange rate to zero. Attacker then drained the entire market using 1 wei of worthless shares as collateral.
A security firm forgot its own security. Hacken's HAI token got nuked after a bridge key leak let an attacker mint 900M tokens and dump $170K. 99% crash, KuCoin KYC twist, and a tokenomics pivot no one asked for. They wrote the report - and lived it.
$500k vanished from Zunami Protocol in a mid-May admin key exploit. Months of stagnant development & perfect timing may have paved the way. Team offered weak excuses, dismissed concerns, left users empty-handed. When emergency keys open doors, who's in control?
Over $16 million drained by a fake that tricked their vaults using their own permissions. AlexLab got rekt - again. Last year it was a leaked key, this time it’s bad logic. Two exploits, two attack vectors - same protocol, still not learning.
Force Bridge on Nervos Network dies the day after announcing its own funeral. $3.76M gone in an attack that didn’t exploit a bug - it exploited control. Someone had the keys and someone knew the timing.
No funds lost. No chaos. Just a whitehat report, a five-day fix, and a protocol that treated security like engineering - not damage control. Vesu did everything right… which is exactly why no one’s talking about it.
Fake tokens just popped the Cork protocol for $12 million. The protocol built to hedge depeg risk got depegged from reality by trusting counterfeit contracts.
A sneaky bug in Marinade Finance, Solana's liquid staking protocol, flipped the rules upside down - letting low-effort validators with low bids leech millions in rewards. For 126 epochs, they earned more by doing less, while mSOL holders got shortchanged by 37k SOL.
$223 million from Cetus through broken math. Sui validators froze $162 million mid-heist. Over $60 million walked across Wormhole and never looked back. Was it an exploit - or just the math working as written?
User funds have been frozen for months while Chainge Finance is still accepting deposits. Promises fade, excuses pile up - could this be a slow rug pull disguised as technical failure? When withdrawals stall but deposits flow, what else could it be?
Admin keys leaked. Contracts tweaked. $1.18M gone. LNDfi blames North Korea, but the chain tells a simpler story - a quiet backdoor, a drained pool, and a protocol that trusted too much, too easily.
A backdoor function drained BrincFi’s staking contract in December 2021. They allege an ex-dev, still active in crypto, was behind it. The case drags on in court while users are left without answers. A cold case, still haunting the industry.