PancakeBunny Gets Hit Again — $2.4M Drained From Its Polygon Vaults
Two months after PancakeBunny's original $45 million exploit on BNB Smart Chain, the protocol suffered a similar attack on Polygon, this time losing $2.4 million — enough to earn i…
Latest
Fresh from the desk
A Bifrost Bridge Flaw Drains $5 Million From THORChain
THORChain became the newest name added to the growing list of cross-chain protocols hit by exploits, losing roughly $5 million across several assets after an attacker found a flaw …
Bondly Finance Token Holders Lose Millions After a 373 Million-Token Infinite Mint
Bondly Finance, a multi-service NFT platform founded in November 2020, suffered an infinite-mint exploit that netted its attacker an estimated $5.9 million in profit, leaving the p…
ChainSwap's Second Bridge Exploit in a Month Nets Attacker $4.4 Million
Cross-chain bridges are increasingly attractive targets as demand for multi-chain DeFi grows, and ChainSwap — the Alameda-backed platform describing itself as a "cross-chain hub fo…
Repeated ECDSA Nonce Lets Attacker Recover Private Key and Drain $7.9M From Anyswap's V3 Router
Cross-chain bridges took another hit as Anyswap became the second bridge exploited within a 24-hour span, alongside Chainswap . Anyswap moved quickly to disclose what had happened:…
Yearn, Convex and Stake DAO: Inside the Fight for Curve's Governance Crown
A quiet governance mechanism buried inside Curve Finance has turned into the battleground for one of DeFi's fiercest ongoing rivalries. Yearn Finance, Convex, and Stake DAO are loc…
Merlin Finance Exploited a Third Time, Losses Surpass $1.5 Million
Merlin Finance's latest hack marks the third time the DeFi protocol has landed on rekt's leaderboard, and each repeat raises the same question: why do users keep entrusting it with…
SafeDollar's SDO Stablecoin Collapses to Zero After $250K Infinite-Mint Exploit
SafeDollar, a stablecoin protocol running on Polygon, saw its SDO token collapse to $0 after an attacker exploited an infinite-mint bug in the project's reward mechanism, walking a…
Tipped Off and Powerless — How StableMagnet's $27M Rugpull Played Out
Hours before StableMagnet collapsed, an anonymous tipster reached out to warn that the project was about to rug its users. The claim could not be independently verified, which left…
Vault Exploit Drains $4.5M From Eleven Finance's Nerve-Bridged Assets
Eleven.finance , a yield aggregator running on Binance Smart Chain and Polygon, lost $4.5 million to an exploit. Early speculation on Twitter pointed toward Nerve Finance itself be…
Debt-Forgiveness Bug Leaves Alchemix Owing Millions in ETH
Alchemix has published a post-mortem detailing a bug in its newly added ETH collateral system that inadvertently let users withdraw collateral without ever incurring the debt meant…
TITAN's Collapse Drags Iron Finance's Stablecoin Off Its Peg
No contract was hacked here — what took down Iron Finance was closer to a bank run, driven by panic among holders of its TITAN token. As confidence evaporated, the IRON stablecoin'…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.