A wave of 2025 exploits is exposing a simple pattern: protocols that skimp on bug bounties keep paying far more to attackers than they ever would have paid to the researchers who c…
A single compromised video-conferencing client set off a chain of events that cost a Venus Protocol user roughly $13 million — and pushed the lending platform into an emergency gov…
BetterBank, a lending protocol on PulseChain that had been operating for roughly six weeks, lost $5 million after an attacker found a way to mint unlimited bonus tokens through a s…
The US Treasury Department has issued a Request for Comment press release framed as routine compliance guidance, but its implications reach far beyond paperwork. Tucked inside lang…
A Russian blockchain developer believed he'd taken every reasonable precaution: a freshly installed operating system, a minimal set of trusted applications, no pirated software, no…
A corporate wallet belonging to Coinbase was systematically emptied of roughly $550,000 in tokens on August 13, after it granted open-ended ERC-20 spending approvals to the wrong c…
Turkish exchange BTCTurk has lost $51.7 million from its hot wallets in an attack that spread across seven blockchains, marking the second major private-key compromise the platform…
In under two hours on August 12, 2025, attackers drained 58.2 BTC from Odin.fun, the Bitcoin-token trading platform built by founder Bob Bodily and marketed as the "world's fastest…
A project built around a $300 million AI token spent August claiming it had overpowered a privacy-focused blockchain worth roughly $6 billion — and the details of that claim turned…
A theft first reported in August 2025 concerns 127,426 Bitcoin that disappeared from the LuBian mining pool nearly five years earlier. At the time of the loss, the sum was worth ro…
Credix, a lending protocol on the Sonic chain, lost roughly $4.5 million on August 5, 2025, after an account holding compromised administrative and bridge permissions used them to …
Crypto lending platform Abra is facing mounting complaints from non-U.S. customers who say they have been unable to withdraw funds from its Earn and Boost products, even as CEO Bil…
Get new scam files the moment we publish them — usually 2–3 emails a week.