DeFi lending protocol CREAM Finance has been exploited for over $100M, according to data compiled by security firm Peckshield. 

The victims of a 2017 hack - Aeternity, Edgeless, and Swarm City -have offered a bug bounty to recover their stolen ETH.

It took the team at Jay Pegs Auto Mart basically zero time to identify and find the hacker responsible for stealing the proceeds from their auction of DONA tokens on SushiSwap’s MISO platform Thursday night. “It only took us five minutes to figure out who he was,” BasedMoneyGod, a salesman at Jay Pegs told The…

New token standards introduce complexity that DeFi applications are still learning how to grapple with. Prime example: Money market CREAM Finance was hit with a reentrancy attack on Aug. 30 that allowed attackers to drain $22.8 million in Flexa’s AMP token and $4.2 million worth of ETH (based on market prices in mid-morning trading Monday).…

Should I just steal the money? There’s a vulnerability in the code… Of a DeFi protocol with $3B in TVL. I was just looking at the open-source code for fun. But now, it’s serious. There’s a bug bounty, a reward that pays out $10K to anyone who finds a major weakness. But exploiting this vulnerability…

At 6am ET on August 10, over half a billion dollars worth of crypto assets were stolen from Poly Network, a cross-chain protocol that facilitates token swaps across multiple blockchains including Ethereum, Binance Smart Chain and Polygon. With the total drained at $600M, this is the biggest DeFi hack in history, dwarfing the $59M EasyFi…

Over the weekend, DeFi traders lost more than $11M across two hacks on Binance Smart Chain (BSC).  On July 10, Anyswap, a decentralized cross-chain protocol, suffered a hack worth nearly $8M of USDC and MIM (Magic Internet Money), a lesser known stablecoin. The exploit happened in the protocol’s new V3 cross-chain liquidity pools. According to…

The defacing of the website for DeFi100-Rebase, a Binance Smart Chain-based index token, has sparked a flurry of speculation about a possible heist and a brazen rug pull.   On May 22, a message materialized on the DEFI 100 website homepage reading: “WE SCAMMED YOU GUYS AND YOU CANT [sic] DO SHIT ABOUT IT HAHA…All you…

xToken, a project which automates staking and liquidity strategies and wraps them into ERC-20 tokens, has been hacked to the tune of ~$25M. The attack resulted in xToken’s TVL dropping by roughly 30% to $63M, according to DeFi Llama. The xSNXa and xBNTa token contracts, for which xToken automates the staking strategies as well as…

With hacks and exploits breaking every week in DeFi, participants are undoubtedly asking where to look for red flags, how to protect their investments and how to vet projects. In this three-part series, we provide a framework to help with just this. Part I analyzed Tokenomics, Part III will analyze mental frameworks, and Part II…