- Home
- Exploits
Exploits

1inch Resolver TrustedVolumes Drained for $6.7M on Ethereum
Blockchain security firm Blockaid linked the exploit to the same operator behind the March 2025 1inch Fusion V1 incident, though it stems from a different vulnerability.

Kelp DAO Accuses LayerZero of Deflecting Blame for $300M Bridge Hack
The liquid restaking protocol argues that the 1-of-1 verifier setup at the center of the April 18 exploit was LayerZero's own documented default.

Drift Sets Out Token-Based Recovery Framework for $295M April Exploit
The Solana-based perpetuals exchange will issue burn-on-redeem recovery tokens funded by exchange revenue, a $127.5M Tether commitment, and another $20M from partners.

Lawyer Attempts to Seize Frozen ETH Linked to Kelp Exploit From Arbitrum DAO
A U.S. attorney is attempting to claim ETH frozen by Arbitrum following the Kelp DAO exploit — on behalf of victims of North Korean state hackers from prior incidents.

DeFi Sets New Hack Record as April Logs 28 Exploits with $635M Stolen
April's exploits were driven less by smart contract bugs and more by social engineering, bridge spoofing, and AI-assisted reconnaissance.

Wasabi Loses $5M+ in Latest DeFi Exploit
Wasabi Protocol is the latest victim in what appears to be a record bad month for DeFi hacks.

Arbitrum Freezes 30,766 ETH Linked to KelpDAO Exploit
Since the freeze, ZachXBT reported that the attackers had begun moving funds from Ethereum mainnet to Bitcoin.

Drift Protocol Vault Loses $270 Million in Potential Exploit
Onchain data shows more than a dozen asset types drained from the Solana perp DEX's main vault address in a rapid burst of transactions.

Resolv Co-Founder Pledges 1:1 Redemptions for All Pre-Exploit USR Holders
Ivan Kozlov shared the first public update on recovery efforts nine days after an attacker minted 80 million unbacked USR tokens and extracted roughly $23 million.

Steakhouse Financial Warns Users of Phishing Attack
The DeFi curator says existing deposits and smart contracts are unaffected, but asked users to avoid the platform until the front-end is restored.





