A single manipulated price feed let an attacker turn 250 SAUCE tokens worth a few dollars into $9.05 million in borrowed USDC and wrapped HBAR in eight seconds.

Summer.fi's own post-mortem confirms the attacker began laundering the $6M haul through the mixer, calling it a sign of "limited intent to return the funds voluntarily."

The wallet behind BonkDAO's $20 million governance attack has parked most of the stolen BONK in a multisig controlled by a newly created shadow DAO, Chainalysis said in a post on its official X account Tuesday.

EMURGO, the Cardano-founding entity behind SecondFi, said Monday the hacked wallet service will not resume normal operations even after ongoing security audits conclude, telling all users to migrate away using its official recovery process. "Although we believe unaffected users remain safe,…

BonkDAO, the decentralized autonomous organization tied to the Solana-based memecoin BONK, said Monday it was the target of a malicious governance proposal that drained an estimated $20 million worth of BONK tokens from its treasury, according to a post on its official X account. The DAO said the…

DeFi vault platform Summer Finance was drained of roughly $6 million on Monday in an exploit that security firm Blockaid said its detection system flagged as it was unfolding. Blockaid posted the exploit transaction, the attacker's address and the affected Lazy Summer contracts within minutes of…

A federal judge ordered Guo to forfeit $889 million after a jury convicted him of running a scheme that raised over $1 billion partly through the fake Himalaya Coin cryptocurrency.

Blockchain intelligence firm AMLBot has confirmed the Polymarket supply-chain attack total at approximately $3.1 million in PUSD across 11 user wallets, with funds bridged from Polygon to Ethereum and converted to ETH. Polymarket has pledged full refunds but has not named the compromised vendor.

Polymarket confirmed hackers drained approximately $3 million through a compromised third-party vendor that injected malicious code into the platform's website, and pledged full refunds to fewer than 15 affected accounts.

An attacker forged withdrawal proofs using an RSA-3072 private key accidentally committed to Taiko’s public raiko GitHub repository, draining $1.7 million from L1 bridge contracts and forcing the protocol to halt block production and urge all users to exit.