A flaw in a third-party Safe wallet module allowed attackers to bypass multisig approvals and drain 86 wallets of $3.2M in USDC, USDT, and ENA across Ethereum and Base.

Attackers abused WUSD.fi's flawed reward function using flash loans and Sybil wallets to farm GLOVE tokens, then dumped them into Uniswap V3 pools for ~$200K.

36 malicious packages across npm, PyPI, and Crates.io steal crypto wallet seeds, SSH keys, and AWS credentials from Solana, Sui, and Aptos developers.

Fake recovery portals and fraudulent airdrop scams target THORChain users after $10.8M exploit. THORChain warns: no official refund or compensation programs exist.

Compromised admin key let attacker mint 1,000 unauthorized eBTC ($76M) on Monad. Only ~$816K extracted via Curvance before Echo burned remaining tokens.

A compromised admin key allowed an attacker to mint $77M in fake eBTC on Monad, borrow WBTC on Curvance, and launder 384 ETH through Tornado Cash. Actual losses: ~$816K.

Compromised admin key lets attacker mint 1,000 unbacked eBTC ($76.7M) on Monad. Actual losses limited to $816K after Echo burns remaining tokens.

A cross-chain validation gap let an attacker submit a 0.02 VRSC transaction that triggered $11.6M in ETH, tBTC, and USDC withdrawals. The exploiter returned $8.5M under a bounty deal.