Reported • Attributed • UpdatedLive source feed
A regularly refreshed view of reported crypto exploits, wallet compromises, bridge incidents, and related security events. Each item links to the attributed third-party report.
Latest attributed reports
Source feed updated . Items are ordered by their reported publication date.
Defi lending project More Markets lost $9.3 million after an attacker was able to trick the lending protocol logic and empty the project's reserve. The attack was noticed by blockchain security researchers at Blockaid; More Labs later announced they were investigating. Oddly,…
Read attributed reportThe ostensibly decentralized Cronos blockchain was halted after a price manipulation attack allowed an attacker to borrow more than $75 million against nearly worthless collateral from the Tectonic lending platform. The attacker pumped the price of the thinly traded TONIC token,…
Read attributed reportA vulnerability in a smart contract belonging to Rain, a crypto payments infrastructure provider, resulted in $1.1 million in losses to various firms. Customers of the Avici cryptocurrency neobank, which offers a Visa credit card through which customers can spend crypto,…
Read attributed reportThe Maya Protocol announced that an attacker had stolen 20 BTC (~$1.4 million) and various other assets totaling $1.76 million. A postmortem disclosed that the "sophisticated attacker exploited six chained bugs" to steal the assets. "The bugs exploited were not caught by Halborn…
Read attributed reportMultiple blockchains based on the Cosmos chain suffered exploits after Cosmos Labs publicly disclosed a vulnerability in the Cosmos EVM. Some have criticized Cosmos for "negligence" in their vulnerability management. KiiChain, one of the affected chains, wrote in their…
Read attributed reportAn attacker took advantage of a bug in the authorization logic for the BounceBit layer-1 blockchain, allowing them to transfer around 286.5 million BB (~$3 million) from nine wallets. BounceBit halted the blockchain shortly after, then later announced they would be permanently…
Read attributed reportAn attacker stole around $8.7 million from the Moonwell defi lending protocol after manipulating the price of an illiquid token called MAMO. After pumping the MAMO token price, they "borrowed" various assets and abandoned the overinflated collateral.
Read attributed reportEthereum lending protocol Term Finance lost around $8.5 million when an attacker purchased the majority of the project's governance token — which was not widely held — and then voted themselves to be the controller of the project's vaults. Although the project has governance…
Read attributed reportAttackers exploited a vulnerability in Ravencoin, a blockchain based on the bitcoin codebase, to mine invalid blocks. Although Ravencoin subsequently patched the bug, the blockchain contains roughly four days of invalid history.
Read attributed reportAn attacker was able to exploit the Harmony blockchain to mint 4 billion of the network's $ONE token. The massive increase in token supply caused the token price to plunge 40%.
Read attributed reportSingapore-based stablecoin payments company Triple-A confirmed that an attacker stole $11.8 million in company funds from its treasury wallets. The company briefly took some services offline while they investigated the hack.
Read attributed reportSouth Korean police say scammers running a fake staking website under the name of the real Flare Network took 3.4 million XRP (~$8.5 million) from 71 investors. It's possible the scammers stole closer to $19 million. Victims were promised guaranteed returns of 1.5% to 1.8% a…
Read attributed reportRead reports carefully
Asset prices, recoveries, duplicated transfers, and later investigation can change the total.
One event does not describe every product, user, contract, network, or current control.
If you may be affected, verify instructions through the project or provider’s known official channels before signing or transferring anything.
Source and licence
Incident titles and summaries are supplied by Web3 is Going Just Great through its public Atom feed and are used under CC BY-SA 3.0. CryptooChai may shorten descriptions, normalize whitespace, reorder items by publication date, and add its own context. Feed-derived excerpts on this page are shared under the same licence.
Source feed: web3isgoinggreat.com/feed.xml