Forgotten SushiMaker Bridge Let a Bot Skim 81 ETH From DIGG Fees
A single trade converting 0.001 of an asset into 81.68 ETH first looked like a serious breach of SushiSwap. Closer inspection showed something narrower: a known DeFi wallet had exp…
Latest
Fresh from the desk
Saddle Finance's Curve Copycat Launch Costs Early LPs a Quarter-Million Dollars
Saddle Finance entered the market as a near-replica of Curve Finance's stablecoin-swap design, having secured $4.2 million in funding before it ever shipped a feature the original …
Requiem for the Crypto Whitepaper
The document that once defined the opening act of nearly every crypto project has quietly become a historical curiosity. During the 2017 ICO boom, whitepapers served as the entry p…
A $2.9 Billion Liquidation Day Exposes Cracks at Coinbase and Kraken
Roughly $2.9 billion in crypto positions were liquidated over a single 24-hour period as the market's recent euphoria gave way to a sharp retracement, following a run-up of roughly…
The Rug Pull: How a Hidden Bitcoin Prize Was Extracted From SuperMassive's NFT Experiment
An NFT-based social experiment built on game theory and quantum superposition promised a Bitcoin prize to whoever ended up holding the right token. It ended instead with a quiet ex…
The Whistleblower Behind the yCredit Warning Speaks on Cronje's "Test in Prod" Habit
On January 1, 2021, Andre Cronje announced the launch of tokenized yield credit through yCredit . Because Cronje no longer uses Twitter, the announcement went out quietly, as a Med…
Infinite-Mint Bug at Cover Protocol Ends With a Self-Styled "White Hat" Rescue
An infinite-mint vulnerability in Cover Protocol's shield-mining contract let attackers create COVER tokens out of nothing, inflating the total supply by roughly 48 quadrillion per…
Inside the $8M Nexus Mutual Hack — Founder Hugh Karp on What Happened Next
Owning a hardware wallet and never exposing your private keys is not, on its own, a guarantee of safety — not if the machine you're signing from has already been compromised. That …
Ledger Data Breach: Full Customer Database Leaked for Free
Ledger's standing with its own customer base took a fresh hit this week. Records stolen from the company months earlier, previously accessible only to buyers who could pay for them…
Oracle Manipulation Drains $7.8M From Warp Finance's Lending Vaults
Warp Finance became the newest entry in a lengthening list of DeFi protocols undone by price-oracle manipulation. A wallet funded with just one ETH routed through Tornado Cash depl…
Inside the DeTrade Fund Scam and the Deepfake Panic It Sparked
Fabricated news isn't a new problem, but the tools producing it have changed shape. Technology designed purely to deceive doesn't leave much room for a moral use case, and deepfake…
SolarWinds Breach Shows Nation-States Get Hacked Too
State-level actors are not immune to the same security failures that plague crypto protocols — they just get different labels for it. When a nation-state is the victim, the inciden…
Investigation alerts
Get new scam files the moment we publish them — usually 2–3 emails a week.