Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $0
<$10KLive fundsJul 16, 20268 viewsSolana (relayer side); Ethereum and Base bridges unaffectedCross-chain bridge / relayer exploit (vector pending post-mortem)Contained
Estimated amount: $569.6K
<$1MLive fundsJul 15, 20261 viewsSolana (cash-out bridged to Ethereum via Mayan Finance140 ETH parked in Railgun mixer)Smart contract logic flaw (rounding bypass)Contained
Estimated amount: $1.3M
<$10MLive fundsJul 15, 20264 viewsArbitrum → Solana → Ethereum (via Relay Protocolconverted to DAI to evade USDC blacklisting)Signer / operator key compromisePaused
Estimated amount: $776K
<$1MLive fundsJul 14, 20261 viewsEthereumGovernance attackClosed
Estimated amount: $180M
$10M+Live fundsJul 14, 20261 viewsArbitrumOracle manipulation / private key compromisePaused
Estimated amount: $0
<$10KLive fundsJul 13, 20260 viewsEthereumFee-layer exploit (Uniswap V4 hook)Resolved
Estimated amount: $270K
<$1MLive fundsJul 12, 20262 viewsArbitrum OneAccount abstraction / ERC-4337 paymaster abuseActive
Estimated amount: $8.6K
<$10KLive fundsJul 12, 20260 viewsEthereumSmart contract logic flaw (peg check bypass)Closed
Estimated amount: $135K
<$1MLive fundsJul 11, 20260 viewsEthereumSocial engineering / brand account hijackRugged
Estimated amount: $0
<$10KLive fundsJul 10, 20260 viewstargets MetaMaskPhantomExodusCoinbaseTrust Wallet — EthereumSolanamulti-EVMBitcoinSupply chain attack (npm) — crypto wallet infostealerResolved
Estimated amount: $9.1M
<$10MLive fundsJul 10, 20260 viewsHedera (cash-out bridged to Ethereum via LayerZerolaundered through Tornado Cash)Oracle manipulationRecovering
Estimated amount: $14.2M
$10M+Live fundsJul 9, 20261 viewsSolana → EthereumSuspected Key CompromiseActive
Estimated amount: $800.0K
<$1MLive fundsJul 7, 20261 viewsEthereumApproval Phishing / Address PoisoningClosed
Estimated amount: $0
<$10KLive fundsJul 7, 20260 viewsInjective (npm SDKcross-environment: browserNodeReact Native)Supply Chain AttackResolved
Estimated amount: $2.0M
<$10MLive fundsJul 6, 20260 viewsEthereumMEV / Same-Block BackrunClosed
Estimated amount: $6.0M
<$10MLive fundsJul 5, 20260 viewsEthereumFlash Loan / NAV ManipulationContained
Estimated amount: $20M
$10M+Live fundsJul 5, 20260 viewsSolanaGovernance AttackActive
Estimated amount: $5M
<$10MLive fundsJul 4, 20260 viewsBitcoinEthereumPolygonRootstockTronSolana (BNB ChainMonadArbitrumGnosisOptimismBaseAvaxLineaHyperEVM per Coinspect FAQ)Weak Randomness / Wallet Generation VulnerabilityActive
Estimated amount: $797K
<$1MLive fundsJul 1, 20261 viewsEthereumZero-knowledge protocol logic flaw / proofless deposit exploitPaused
Estimated amount: —
UnknownLive fundsJun 30, 20260 viewsoff-chain npm supply-chain attack; wallet-agnosticSupply chain attack / npm infostealer campaignActive
Estimated amount: $403.4K
<$1MLive fundsJun 30, 20261 viewsEthereumOracle manipulation / wrapped exchange-rate exploitContained
Estimated amount: $12.3K
<$100KLive fundsJun 24, 20260 viewsEthereumSmart contract vulnerability / forged permit signatureActive
Estimated amount: $2.9M
<$10MLive fundsJun 24, 20262 viewsPolygon → EthereumFrontend supply-chain attack (third-party vendor compromise)Contained
Estimated amount: —
UnknownLive fundsJun 23, 20261 viewsAvalanche (frontend attack; fake wallet-connect modal targeted Phantomindicating cross-chainSolana wallet targeting despite Yield Yak being an Avalanche product)Frontend supply-chain attack (Eleven Drainer)Contained
Estimated amount: $261.2K
<$1MLive fundsJun 22, 20261 viewsPolygonReward accounting exploit / flash-loan amplificationActive
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
Across Protocol — Solana Relayer Exploit (Risk Labs Capital Only, User Funds Safe)Solana (relayer side); Ethereum and Base bridges unaffected | Cross-chain bridge / relayer exploit (vector pending post-mortem) | Contained | <$10K | $0 | >10 | 50% | Jul 16, 2026 | 8 | Sign in | ||
DefiTuna — Solvency Check Bypass via Illiquid Pool RoundingSolana (cash-out bridged to Ethereum via Mayan Finance / 140 ETH parked in Railgun mixer) | Smart contract logic flaw (rounding bypass) | Contained | <$1M | $569.6K | >10 | 75% | Jul 15, 2026 | 1 | Sign in | ||
Cascade — CLS Vault Drain via Compromised Signer / Operator Key (pidzhachello Polymarket Attribution Lead)Arbitrum → Solana → Ethereum (via Relay Protocol / converted to DAI to evade USDC blacklisting) | Signer / operator key compromise | Paused | <$10M | $1.3M | >10 | 75% | Jul 15, 2026 | 4 | Sign in | ||
| Governance attack | Closed | <$1M | $776K | 50 | 100% | Jul 14, 2026 | 1 | Sign in | |||
| Oracle manipulation / private key compromise | Paused | $10M+ | $180M | >10 | 75% | Jul 14, 2026 | 1 | Sign in | |||
| Fee-layer exploit (Uniswap V4 hook) | Resolved | <$10K | $0 | >10 | 75% | Jul 13, 2026 | 0 | Sign in | |||
| Account abstraction / ERC-4337 paymaster abuse | Active | <$1M | $270K | 50 | 75% | Jul 12, 2026 | 2 | Sign in | |||
| Smart contract logic flaw (peg check bypass) | Closed | <$10K | $8.6K | >10 | 100% | Jul 12, 2026 | 0 | Sign in | |||
| Social engineering / brand account hijack | Rugged | <$1M | $135K | >10 | 100% | Jul 11, 2026 | 0 | Sign in | |||
+5 | jscrambler npm Supply Chain Attack — IronWorm Rust Infostealertargets MetaMask / Phantom / Exodus / Coinbase / Trust Wallet — Ethereum / Solana / multi-EVM / Bitcoin | Supply chain attack (npm) — crypto wallet infostealer | Resolved | <$10K | $0 | 1479 | 100% | Jul 10, 2026 | 0 | Sign in | |
Bonzo Lend Oracle Manipulation — Supra BLS Signature BypassHedera (cash-out bridged to Ethereum via LayerZero / laundered through Tornado Cash) | Oracle manipulation | Recovering | <$10M | $9.1M | >10 | 90% | Jul 10, 2026 | 0 | Sign in | ||
Solana Genesis Whale — Suspected Key Compromise & Cross-Chain BridgeSolana → Ethereum | Suspected Key Compromise | Active | $10M+ | $14.2M | 1 | 75% | Jul 9, 2026 | 1 | Sign in | ||
| Approval Phishing / Address Poisoning | Closed | <$1M | $800.0K | 1 | 75% | Jul 7, 2026 | 1 | Sign in | |||
+1 | Injective Labs SDK npm Supply Chain BackdoorInjective (npm SDK / cross-environment: browser / Node / React Native) | Supply Chain Attack | Resolved | <$10K | $0 | >10 | 100% | Jul 7, 2026 | 0 | Sign in | |
| MEV / Same-Block Backrun | Closed | <$10M | $2.0M | 1 | 100% | Jul 6, 2026 | 0 | Sign in | |||
| Flash Loan / NAV Manipulation | Contained | <$10M | $6.0M | 258 | 75% | Jul 5, 2026 | 0 | Sign in | |||
| Governance Attack | Active | $10M+ | $20M | 1 | 75% | Jul 5, 2026 | 0 | Sign in | |||
+12 | Ill Bloom — Weak Randomness Wallet VulnerabilityBitcoin / Ethereum / Polygon / Rootstock / Tron / Solana ( / BNB Chain / Monad / Arbitrum / Gnosis / Optimism / Base / Avax / Linea / HyperEVM per Coinspect FAQ) | Weak Randomness / Wallet Generation Vulnerability | Active | <$10M | $5M | 431 | 50% | Jul 4, 2026 | 0 | Sign in | |
| Zero-knowledge protocol logic flaw / proofless deposit exploit | Paused | <$1M | $797K | >10 | 75% | Jul 1, 2026 | 1 | Sign in | |||
npm Supply-Chain Campaign — 30+ Malicious DeFi/Polymarket-Themed Packages Deliver Infostealers (SM-2026-780174)off-chain npm supply-chain attack; wallet-agnostic | Supply chain attack / npm infostealer campaign | Active | Unknown | — | >10 | 50% | Jun 30, 2026 | 0 | Sign in | ||
| Oracle manipulation / wrapped exchange-rate exploit | Contained | <$1M | $403.4K | >10 | 75% | Jun 30, 2026 | 1 | Sign in | |||
| Smart contract vulnerability / forged permit signature | Active | <$100K | $12.3K | >10 | 50% | Jun 24, 2026 | 0 | Sign in | |||
Polymarket — Frontend Supply-Chain Phishing DrainPolygon → Ethereum | Frontend supply-chain attack (third-party vendor compromise) | Contained | <$10M | $2.9M | 11 | 75% | Jun 24, 2026 | 2 | Sign in | ||
Yield Yak — Frontend Eleven Drainer InjectionAvalanche (frontend attack; fake wallet-connect modal targeted Phantom / indicating cross-chain / Solana wallet targeting despite Yield Yak being an Avalanche product) | Frontend supply-chain attack (Eleven Drainer) | Contained | Unknown | — | >10 | 50% | Jun 23, 2026 | 1 | Sign in | ||
| Reward accounting exploit / flash-loan amplification | Active | <$1M | $261.2K | >10 | 100% | Jun 22, 2026 | 1 | Sign in |
Page 1 of 6, showing 25 of 145 incidents
← Back to home
