Compromised Deployer Key Drains $1.14M From Steadefi Vaults
Steadefi, a yield farming protocol running on Arbitrum and Avalanche, lost roughly $1.14 million on Monday after the private key controlling its deployer address fell into an attac…
Latest
Fresh from the desk
Base's BALD Memecoin Rug Pull Drains $23 Million in a Single Day
Coinbase's layer-2 network, Base — still officially a testnet — suffered its first major rug pull less than a day after a new memecoin called BALD took off on the chain, with the r…
Vyper Compiler Bug Drains $69M Across Curve and Dependent Protocols
Curve Finance re-entered the leaderboard of major DeFi losses on July 30, 2023, with a figure roughly 100 times larger than its earlier appearance tied to a 2022 DNS hijack. Across…
Kannagi Finance Vanishes With $1.1M in zkSync Yield Vault Rug Pull
A yield aggregator operating on zkSync, Kannagi Finance, executed an exit scam on Saturday, walking away with an estimated $1.1 million in user funds. Before the rug pull, DeFiLlam…
Backdoor Withdraw Function Lets DeFiLabs Drain $1.6M From BSC Stakers
On July 27, DeFiLabs , a BSC-based staking platform, walked off with $1.6 million belonging to its users through a hidden withdrawal function embedded in its staking contract. The …
Read-Only Reentrancy Bug Drains $3.4M From zkSync Lender EraLend
EraLend, a lending protocol built on zkSync Era, lost $3.4 million on July 25, 2023 to the same read-only reentrancy flaw that has been hitting DeFi protocols throughout the year. …
Suspected Lazarus Group Drains $60M From Payments Processor AlphaPo
AlphaPo , a payment processing service used by gambling platforms, saw roughly $60 million siphoned from its infrastructure across Ethereum, Tron, and Bitcoin over a single weekend…
Conic Finance Loses $4.2M in Back-to-Back Curve Pool Exploits
Lightning does strike twice. Conic Finance was hit by two separate exploits on the same Friday, losing a combined $4.2 million across its ETH and crvUSD omnipools. Conic's omnipool…
Multichain's Detained CEO Leaves an Entire Bridge — and the Fantom Chain — in Limbo
The speculation has been confirmed: Multichain's founder, known online as Zhaojun, has reportedly been held by Chinese authorities since May 21st, according to a statement from the…
Arkham's Pay-to-Doxx Intel Market Draws Fire Right As Its Own Users Get Exposed
Arkham Intelligence has unveiled a bounty marketplace where users pay to have on-chain addresses identified and fund flows traced — an "intel exchange," in the company's framing, t…
$126M Vanishes From Multichain's Bridges as Fantom and Moonriver Take the Hit
Multichain's addresses were drained of a combined $126M in the previous day's activity, wiping out roughly 50% of the FTM bridge's holdings and 80% of the Moonriver bridge's . This…
Poly Network Loses $4.4M as Multisig Signers Approve Forged Withdrawals
Poly Network, the cross-chain protocol that suffered a record-setting $600M+ hack roughly two years earlier, was exploited again — this time for a comparatively modest $4.4 million…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.