#defi-exploit
LightNews LightNews
yuplovewallpq.bsky.social
Radiant exploit: 💀 Radiant Capital halts lending after a $58M exploit. Yikes! Stay safe out there, DeFi warriors. 🛡️ #DeFi #CryptoExploit
October 18, 2024 at 10:01 PM
web3isgoinggreat.com
TrustedVolumes suffers $6.7 million exploit

May 6, 2026
https://www.web3isgoinggreat.com/?id=trustedvolumes-exploit
TrustedVolumes suffers $6.7 million exploit TrustedVolumes, a resolver and market maker used by 1inch and other defi platforms, suffered a $6.7 million exploit after an attacker was able to steal funds without proper validation. The thief then swapped the stolen wETH, USDT, wBTC, and USDC through ChangeNow and converted them to ETH to evade freezes. Blockchain research firm Blockaid has linked the attacker to a similar exploit in March 2025 that saw $5 million drained from 1inch. This time, 1inch has asserted that although they use TrustedVolumes as a resolver, the exploit did not involve any of their systems.
May 7, 2026 at 2:42 PM
web3isgoinggreat.com
Loopscale hacked for $5.8 million two weeks after launch

April 26, 2025
https://www.web3isgoinggreat.com/?id=loopscale-exploit
Loopscale hacked for $5.8 million two weeks after launch A new Solana-based defi protocol called Loopscale, backed by Coinbase Ventures and Solana Labs, suffered a $5.8 million exploit only two weeks after its launch. The stolen funds represented 12% of the protocol's TVL. The project blamed the exploit on a bug in the protocol's pricing calculations. Although the project had been audited in February by OShield, the audit evidently did not detect the flaw.
April 27, 2025 at 6:58 PM
beingliberal.bsky.social
Supporters, such as Democratic Representative Lloyd Doggett, said in March that killing the IRS rule would create a (crypto) loophole that wealthy tax cheats would exploit.
Trump signs resolution killing IRS DeFi broker rule
US President Donald Trump signed a resolution repealing the IRS DeFi broker rule, a Biden-era rule requiring decentralized crypto protocols to report to the country's tax authority.
cointelegraph.com
April 11, 2025 at 10:38 AM
web3isgoinggreat.com
Balancer exploited for at least $110 million

November 3, 2025
https://www.web3isgoinggreat.com/?id=balancer-exploit-2
Balancer exploited for at least $110 million The defi protocol Balancer suffered a major exploit that drained over $110 million across several blockchains, including Ethereum, Polygon, Base, and Sonic. Attackers exploited faulty access control in the manageUserBalance function of Balancer's v2 smart contract, enabling unauthorized internal withdrawals. The stolen tokens included 6,850 osETH, 6,590 wETH, and 4,260 wstETH, later consolidated into new wallets likely for laundering. The exploit also impacted forked protocols like Beets Finance, which lost around $3 million. Balancer's BAL token dropped over 10% following the theft. This was Balancer's third major security incident since 2020, despite prior audits by OpenZeppelin and Trail of Bits.
November 3, 2025 at 3:29 PM
opale60.bsky.social
Saluuuuuuut !!
On n’est pas dimanche mais je suis OBLIGÉE de vous raconter mon exploit du jour .
J’ai réussi mon défi personnel : aller toute seule à Paris ( ça déjà fait pour passer d’une gare à l’autre ) mais aujourd’hui c’était journée solo DANS
April 8, 2026 at 6:57 PM
web3isgoinggreat.com
Solv Protocol exploited for $2.7 million

March 5, 2026
https://www.web3isgoinggreat.com/?id=solv-protocol-exploit
Solv Protocol exploited for $2.7 million The Solv Protocol bitcoin defi lending and staking platform disclosed an exploit that they said affected fewer than ten users, but nevertheless netted the attacker 38 SolvBTC (a wrapped bitcoin token priced at $2.7 million). Although Solv has not disclosed specifics of the attack, some researchers have suggested it was a bug in the protocol's burn and mint functionality.
March 10, 2026 at 10:19 PM
web3isgoinggreat.com
Moonwell loses $8.7 million to fourth exploit in less than a year

August 27, 2026
https://www.web3isgoinggreat.com/?id=moonwell-price-manipulation-attack
Moonwell loses $8.7 million to fourth exploit in less than a year An attacker stole around $8.7 million from the Moonwell defi lending protocol after manipulating the price of an illiquid token called MAMO. After pumping the MAMO token price, they "borrowed" various assets and abandoned the overinflated collateral. This theft is the fourth Moonwell exploit in less than a year, following a $3.7 million oracle manipulation attack in November 2025, another oracle attack in February 2026 amounting to $1.78 million, and a $1 million governance attack in March.
August 27, 2026 at 7:25 PM
web3isgoinggreat.com
Wasabi Protocol exploited for more than $5 million

April 30, 2026
https://www.web3isgoinggreat.com/?id=wasabi-protocol-exploit
Wasabi Protocol exploited for more than $5 million The Wasabi Protocol defi derivatives platform has been exploited for more than $5 million across multiple blockchains. The attack has been attributed by blockchain security firms to a compromised admin key, which allowed the attacker to upgrade contracts to steal assets.
April 30, 2026 at 12:43 PM
web3isgoinggreat.com
Drift exploited for $280 million

April 1, 2026
https://www.web3isgoinggreat.com/?id=drift-exploit
Drift exploited for $280 million The Solana-based Drift defi perpetual futures exchange was exploited for $280 million. The project alerted the community on social media, writing: "Drift Protocol is experiencing an active attack. ... This is not an April Fools joke." The project later described the exploit as "a novel attack involving durable nonces, resulting in a rapid takeover of Drift's Security Council administrative powers." Once the attacker had access to admin capabilities, they quickly eliminated risk management limits on the protocol and drained huge quantities of tokens, which they swapped to USDC and then ETH. Some have criticized USDC's issuer, Circle, for not freezing the stolen funds during the six hours they were held in USDC. Unlike ETH, USDC is controlled by a centralized company that can, and regularly does, freeze assets determined to have been stolen or connected to illicit activity. The theft is among the largest in defi history.
April 2, 2026 at 1:50 PM
noahschneider.bsky.social
🚨 Hackers drained $13M from Abracadabra Protocol, despite a prior security audit! 🕵️‍♂️ Team now offering 20% bounty for stolen funds. GMX says no impact on their platform. Another day, another DeFi exploit… 😬 #Crypto #DeFi #Hacks
March 27, 2025 at 9:20 PM
web3isgoinggreat.com
Credix exploited for $4.5 million, reaches deal with thief

August 4, 2025
https://www.web3isgoinggreat.com/?id=credix-exploit
Credix exploited for $4.5 million, reaches deal with thief The defi lending protocol Credix lost $4.5 million to an exploit after a hacker gained control of an admin wallet and used it to mint tokens and drain liquidity pools. Credix subsequently announced they had negotiated with the thief, who agreed to return the funds "in return for money fully paid by the credix treasury". They have not disclosed how much they paid to the hacker.
August 4, 2025 at 7:17 PM
web3isgoinggreat.com
Aave faces approximately $200 million in bad debt after Kelp DAO bridge exploit

April 19, 2026
https://www.web3isgoinggreat.com/?id=aave-bad-debt
Aave faces approximately $200 million in bad debt after Kelp DAO bridge exploit The Aave defi lending protocol is grappling with anywhere from $177 million to $236 million in bad debt after the Kelp DAO bridge exploiter used Aave to cash out their stolen rsETH. Rather than selling the tokens, the attacker used the rsETH as collateral to borrow wETH, leaving Aave stuck with the huge quantity of unbacked rsETH. Although Kelp and Aave both froze affected markets, the attacker had already cashed out. The attacker borrowed essentially all of the wETH available on the platform, leaving those who'd loaned those tokens unable to withdraw. Aave maintains a $50 million insurance fund to absorb bad debt. However, this can't cover such a huge shortfall.
April 20, 2026 at 3:54 PM
bluser12.bsky.social
Mythos is going to be a disaster for defi

decrypt.co/370112/morni...
Morning Minute: Massive ZCash Exploit Found by Claude, Extent Unknown - Decrypt
The ZCash team hired a hacker to find an exploit in the ZCash protocol, and he exposed a glitch that has been out there for four years.
decrypt.co
June 5, 2026 at 1:26 PM
web3isgoinggreat.com
Nemo Protocol exploited for $2.4 million

September 7, 2025
https://www.web3isgoinggreat.com/?id=nemo-protocol-exploit
Nemo Protocol exploited for $2.4 million The Nemo Protocol on the Sui blockchain suffered a $2.4 million exploit. The defi yield infrastructure protocol acknowledged the theft shortly after, explaining they had paused the protocol smart contracts as they investigated the theft. It appears the thief was able to manipulate a price oracle, siphoning $2.4 million in USDC from the project. They then bridged the funds from Arbitrum to Ethereum.
September 8, 2025 at 4:34 PM
campuscodi.risky.biz
Hackers have stolen $1.7 million worth of crypto-assets from DeFi lending platform Abracadabra Finance.

This is the company's third hack in the past two years.

Abracadabra previously lost $13 million in March and another $6.5 million in January last year.

coincentral.com/abracadabra-...
Abracadabra Faces Third DeFi Exploit as Hackers Drain $1.7 M
Abracadabra DeFi platform suffers its third exploit with hackers stealing $1.7 million. Team pauses contracts to prevent further losses.
coincentral.com
October 6, 2025 at 7:36 PM
griais.bsky.social
Sonne Finance faces a setback as it grapples with a $20 million exploit. The team vows to investigate and offers a bounty for the return of funds. 💸🛡️ #DeFi #Crypto
May 16, 2024 at 11:00 AM
csfrayer.bsky.social
Another big crypto exploit - $75m. What's interesting is Cronos, supposedly defi, stopped the network and is considering reversing transactions. Just 6 validators control over 50% of the Cronos network, which is affiliated with crypto.com

"Decentralized"

www.coindesk.com/tech/2026/08...
www.coindesk.com
August 31, 2026 at 3:25 PM
gizmodo.com
$120 Million Exploit Has Chilling Effect on Entire Crypto Ecosystem
$120 Million Exploit Has Chilling Effect on Entire Crypto Ecosystem
The incident casts a dark shadow on the trustworthiness of defi protocols.
gizmodo.com
November 3, 2025 at 8:01 PM
decrypt.co
Balancer Labs Winds Down Months After $128M DeFi Exploit
Balancer Labs Winds Down Months After $128M DeFi Exploit
The restructuring comes as analysts say older DeFi models built on token incentives and emissions are increasingly under pressure.
decrypt.co
March 24, 2026 at 4:40 AM
web3isgoinggreat.com
$6 million taken from Delta Prime defi protocol

September 16, 2024
https://www.web3isgoinggreat.com/?id=delta-prime-exploit
$6 million taken from Delta Prime defi protocol The DeltaPrime defi protocol suffered a $6 million loss after a private key was leaked. Access to the private key allowed the attacker to mint 1.1×1069 DPUSDC, which are tokens that allow holders to redeem the USDC stablecoin at a 1:1 ratio. They repeated the mint with several other deposit receipt tokens for bitcoin, ether, and other cryptocurrencies. Altogether, they redeemed a small fraction of these enormous quantities of deposit receipts, amounting to around $6 million in assets. DeltaPrime acknowledged the attack on Twitter, and announced that "the risk is contained". They also stated that they were "looking into other ways to reduce user losses to a minimum", including by pulling from the protocol's insurance pool.
September 16, 2024 at 3:46 PM
web3isgoinggreat.com
CrossCurve users exploited for around $3 million

February 1, 2026
https://www.web3isgoinggreat.com/?id=crosscurve-users-exploited-for-around-3-million
CrossCurve users exploited for around $3 million Hackers exploited a bug in smart contracts deployed by the defi protocol CrossCurve to steal an estimated $3 million across multiple blockchains. The thief was able to spoof cross-chain messages, causing the CrossCurve bridge to release assets not belonging to them. CrossCurve took a conciliatory tone in on-chain messages sent to the thief, writing, "These tokens were wrongfully taken from users due to a smart contract exploit. We do not believe this was intentional on your part, and there is no indication of malicious intent." (Who among us hasn't accidentally stolen millions of dollars?) However, they warned, they planned to escalate to working with law enforcement and blockchain security firms to investigate and prosecute the theft if the funds were not returned within 72 hours.
February 7, 2026 at 10:39 PM
blockchainreport.bsky.social
Limit Break protocol targeted by ongoing exploit! ~$1.7M in NFTs drained by attackers impersonating users via a vulnerability in the Payment Processor V2 smart contract. If you've granted NFT Operator permissions to this contract, revoke them IMMEDIATELY. #blockchain #security #defi
September 25, 2026 at 8:33 AM