YO Protocol's own automated vault system, not an outside attacker, is responsible for one of DeFi's stranger losses this year: a single rebalancing trade that sent $3.71 million in…
On January 8, 2026, an attacker emptied Truebit's aging purchase contract of 8,535 ETH (roughly $26.2 million) in a single transaction, capping off nearly five years of dormancy fo…
TMXTribe, an Arbitrum-based perpetuals platform built as a fork of GMX, lost roughly $1.4 million to an exploit that ran for about 36 hours before the funds were bridged out and la…
A four-year regulatory overhang lifted for Aave in mid-December 2025, only for the protocol to spend the following weeks consumed by an internal dispute over ownership, revenue, an…
DeFi's habit of repeating itself isn't limited to patterns of behavior — sometimes it's the exact same bug, replayed against a different balance sheet. Yearn Finance has now been h…
On December 12, Aevo's dormant Ribbon Finance vaults lost $2.7 million — not to some novel cryptographic break, but to a routine oracle configuration change that had quietly stripp…
Paradigm led a $1 billion investment into Kalshi on December 2, 2025 , with participation from Sequoia, Andreessen Horowitz, Meritech Capital, IVP, ARK Invest, Anthos Capital, Capi…
USPD's smart contracts passed audit review and its unit tests held up fine. What the protocol failed to notice was that an outside party had been sitting in its admin role for near…
In 1969, Philip K. Dick imagined a door that would not open until its occupant paid it five cents — a scene from his novel Ubik that read, at the time, as satire aimed at a hyper-c…
An old, largely overlooked corner of the Yearn ecosystem became the site of a nine-figure — in token count, not dollars — minting event on November 30. A custom stableswap pool for…
On November 25, 2025, MegaETH — a Layer 2 network backed by Ethereum co-founders Vitalik Buterin and Joe Lubin's MegaLabs, which had just closed a $450 million token sale and carri…
GANA Payment, a payment protocol that had only just gone live on BNB Smart Chain, lost $3.1 million before its staking product had a chance to build any real track record. There wa…
Get new scam files the moment we publish them — usually 2–3 emails a week.