How a Single Flash-Loaned Vote Emptied Beanstalk's Treasury
Beanstalk, the algorithmic stablecoin protocol, had $181 million pulled out of it in a governance exploit, though the attacker ended up keeping closer to $76 million once flash-loa…
Latest
Fresh from the desk
Flash Loan Price Manipulation Drains Elephant Money's TRUNK Stablecoin
Despite having undergone a security audit, Elephant Money fell victim to a flash loan exploit that manipulated the price of its native ELEPHANT token during the minting process of …
Inverse Finance Drained of $15.6M as Attacker Manipulates SushiSwap TWAP Oracle
Inverse Finance, an Ethereum-based lending protocol, was hit for roughly $15 million after an anonymous attacker engineered a price distortion in INV, the platform's governance tok…
Fuse Network's ERC677 Callback Flaw Drains $4M From Voltage Finance via Ola Finance
Voltage Finance lost roughly $4 million after attackers exploited its lending infrastructure, which runs on Ola Finance's "Lending-as-a-Service" product on the Fuse Network. Ola do…
How a Leftover Whitelist Signature Let Attackers Drain $624M From the Ronin Bridge
Poly Network's record for the largest crypto theft has been surpassed: roughly $624 million was stolen from Ronin Network, and the breach went unnoticed for six days before anyone …
Reentrancy Bug in Revest's NFT Vaults Drains $2M Across Three Protocols
Revest Finance, a platform that describes itself as offering "instant liquidity for locked assets" through financial NFTs, lost roughly $2 million to a reentrancy exploit on March …
Solana Stablecoin Protocol Cashio Drained of $48 Million via Infinite Mint Bug
An anonymous attacker exploited a flaw in Cashio's collateral verification logic on Solana, minting an unlimited supply of the protocol's CASH stablecoin and ultimately converting …
Flash Loan Strikes Deus DAO's New DEI Lending Market, Netting Attacker $3M
Deus DAO saw its users liquidated after a flash loan attack targeted the project's recently deployed DEI lending contract , with the attacker walking away with an estimated $3 mill…
One Reentrancy Bug, Two Protocols, $11.7M Gone on Gnosis Chain
A single reentrancy flaw took down two lending protocols on the same day. Agave DAO , an Aave fork, and Hundred Finance , a Compound fork, were both drained through the identical a…
A Missing Quantity Check Let an Attacker Walk Off With $1.4M in Treasure DAO NFTs
Treasure DAO, the largest NFT marketplace on Arbitrum, lost approximately $1.4 million worth of NFTs to an exploiter on Thursday, March 3, 2022. In response, the team advised affec…
Ukraine Weaponizes Airdrop Hype to Supercharge War-Fund Donations
When Ukraine's government began accepting war-fund donations in ETH and BTC , crypto Twitter's first reaction was to joke about the possibility of an eventual airdrop for donors. T…
Crypto's Double Edge in the Russia-Ukraine Conflict
When Canada's government froze the bank accounts of protesting truckers under Justin Trudeau, cryptocurrency demonstrated its value as a tool of resistance for ordinary citizens. T…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.