Hacks
Spotlighting security breaches, exploits and unauthorized access incidents within the cryptocurrency ecosystem.
Top Stories

Cronos Restarts Chain by Rolling State Back to Before the Tectonic Exploit
Validators discarded almost 11,000 blocks, erasing the attacker's Cronos balances along with close to two hours of everyone else's transactions. The $6.29 million already bridged to Ethereum is beyond the rollback's reach.
Avici Says 1,685 Users Lost $500,859 In Rain Card Contract Exploit
Card issuer Rain says an attacker used an outdated version of its Solana contract, which a small number of programs were running. Both companies say affected users will be made whole.
Advertisement
Videos
Recent articles

Cronos Restarts Chain by Rolling State Back to Before the Tectonic Exploit
Validators discarded almost 11,000 blocks, erasing the attacker's Cronos balances along with close to two hours of everyone else's transactions. The $6.29 million already bridged to Ethereum is beyond the rollback's reach.
Avici Says 1,685 Users Lost $500,859 In Rain Card Contract Exploit
Card issuer Rain says an attacker used an outdated version of its Solana contract, which a small number of programs were running. Both companies say affected users will be made whole.

The Sandbox Pledges 1:1 SAND Repayment After Bridge Exploit
Treasury-funded compensation will use pre-incident balances on Base and BNB Chain without increasing SAND’s fixed 3 billion maximum supply.
Moonwell Loses $8.7 Million To MAMO Price Manipulation On Base
The lending protocol cut borrow caps on every Base core market to 1 wei after an attacker inflated the price of a thinly traded collateral token and borrowed against it.

Term Finance Permanently Shuts Meta Vaults After Exploit PeckShield Estimated at $8.5 Million
Withdrawals remain open, but Term’s Aug. 23 update did not quantify remaining vault assets and only said it would explore ways to address any shortfall.

The Sandbox Says It Contained Bridge Exploit That Minted Unbacked SAND on Base and BSC
Upbit and Bithumb froze SAND transfers under South Korea's user-protection law, with Upbit halting deposits and withdrawals on Ethereum — the chain the studio says was not affected.

Maya Protocol Exploit Drains $1.7 Million From Shared Liquidity
Founder Aaluxx said he would ‘work to fix and recover in full,’ while routing service LeoDex reported that Maya had activated a global halt.

Harmony Patches Pre-Staking Quorum and Receipt-Replay Flaws After ONE Mint Claim
Harmony asked exchanges to block four wallets and paused its bridge, while an analyst’s estimate of four billion unauthorized ONE remains unconfirmed.

Lightning Nodes Drained As BTCPay Server Users Race To Patch
Hardware wallet maker Foundation and the Bitcoin zine Citadel21 both said their nodes were swept, in some cases hours before the project's public alert. BTCPay says the flaw under attack is not the one disclosed in its changelog.
'I Did Everything Right': Coldcard Victims Recount Losing Life Savings
Bitcoiners who followed self-custody best practices — air-gapped devices, steel seed plates, safety deposit boxes — describe watching years of savings disappear in minutes as attackers exploiting the Coldcard flaw drained more than $114 million.


