Estimated amount: $0
<$10KLive fundsKITE Foundation Token Attack — Detected and Contained
Aug 5, 20264 viewsEthereumDetected & contained attackContained
Investigation progress 100%
Sources3
Recent hacks radar
LiveDiscover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Filters
Chain
Type
Status
Severity
results200 of 200 incidents shown after filters and sort.
- Sign in to watchOpen incident>10 victims
- Sign in to watch
Estimated amount: $14.3K
<$100KLive fundsPanther Protocol Base Deployment — Reality.eth Governance Drain
Aug 5, 20264 viewsBaseGovernance attack (optimistic oracle)Resolved
Investigation progress 100%WalletsOpen incident>10 victims0x7dB4cFea07042ca13a8E26cC90BbB59982Fe95B60x9400161d512C740e1C0C77f3c931D112f068210c0xead22569665b4749709c069271e21f437bc99869fd94f23a6479c0d110fe332d+3 more on incident page - Sign in to watch
Estimated amount: $501.7K
<$1MLive fundsBase Wallet Drain via Steakhouse Prime Vault — Attacker Sandwiched by MEV Bot
Aug 5, 20262 viewsBasePhishing / wallet compromiseClosed
Investigation progress 90%WalletsOpen incident1 victims0x920d3b63541eAFe13E05dc4f3453904102c397080xF3A4F4094BD2c6C06cA2F61789d8727B8d1e72590x3a5385D8eB0d05B006edFF978BA4b95c51F70B5c+1 more on incident page - Sign in to watch
Estimated amount: $0
<$10KLive fundsSolidity Pro VS Code Extension — Web3 Developer Credential Stealer
Aug 5, 20260 viewsChain-agnostic (Web3 developer toolingsupply chain)Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution)Contained
Open incident>10 victimsInvestigation progress 100% - Sign in to watch
Estimated amount: $111M
$10M+Live fundsColdcard Firmware RNG Vulnerability — Ongoing Multi-Wave Bitcoin Drain
Aug 6, 20264 viewsBitcoinFirmware vulnerability / weak entropyActive
Investigation progress 75%WalletsOpen incident7300 victimsbc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9rbc1qx76cae2706qd5q576feh7xq8rfcsjpf2htfhe3bc1q8jy96fe5lf8vfugydnte3cguk92gpev7kwtp3q+2 more on incident page - Sign in to watch
Estimated amount: $0
<$10KLive fundsBTCPay Server LND Macaroon Credential Exposure — Active Exploitation
Aug 6, 20265 viewsBitcoinLightning NetworkCritical vulnerability — active exploitationActive
Open incident2 victimsInvestigation progress 40% - Sign in to watch
Estimated amount: $0
<$10KLive fundsOraichain — ICS-20 EVM Precompile Unauthorized Mint (~1.51B ORAI)
Aug 7, 20265 viewsOraichain L1Cross-chain exploit — Unauthorized mint via ICS-20 EVM precompileRecovering
Open incident>10 victimsInvestigation progress 50% - Sign in to watch
Estimated amount: $30.0K
<$100KLive fundsAtomic Green — Uniswap V3 LP Signature Replay Exploit
Aug 7, 20261 viewsArbitrumSmart contract exploit — Signature replayContained
Investigation progress 50%WalletsOpen incident>10 victims0xf8803DaE13A6757E53711214769B5fb52Ec26C7E0x44d2D34E148e1Da5c4291C110f6ff0E4720372550xbd4a009cd609a05f1a64458969a1e2c2065472f0ee06a322246f155be12e3a9a+3 more on incident page - Sign in to watch
Estimated amount: $136K
<$1MLive fundsUSM Protocol — Split-Invariance Flash Loan Exploit
Aug 8, 20263 viewsEthereum L1Smart contract exploit — Arithmetic split-invariance violationContained
Investigation progress 75%WalletsOpen incident>10 victims0xb92b2E47680c89DA8f951B8963ef469f461a50Fc0x5a5e29ba89663a3558273354E990426F3cAc7de70xE3C6346b6F282029312d2CAf4677EF39BeaBBF99+5 more on incident page - Sign in to watch
Estimated amount: $7.9M
<$10MLive fundsCoinsbuy — Coordinated Multi-Chain Hot Wallet Drain
Aug 8, 20262 viewsEthereumTRONHot wallet drain — multi-chain access compromiseResolved
Investigation progress 75%WalletsOpen incident>10 victims0x4d1bEF2Fe998B3E3C4029EF9EA6A0534d95661d30x66790b54B891e2ebdef58a15B969Ff6fb4374b170x2bc77e147d18153fda24944e17b857ca63bc0044+6 more on incident page - Sign in to watch
Estimated amount: $200K
<$1MLive fundsCoreum/tx XRPL Bridge — Fake Deposit Relayer Logic Exploit
Aug 8, 20261 viewsXRP LedgerCoreumtxBridge exploit — relayer deposit verification logic flawPaused
Open incident>10 victimsInvestigation progress 50% - Sign in to watch
Estimated amount: $5M
<$10MLive fundsTiffany Milanovich — Crypto Support Impersonation Fraud Network
Aug 9, 20263 viewsBitcoinEthereumCoinbaseSocial engineering — Support impersonation phone fraud networkActive
Investigation progress 75%WalletsOpen incident>10 victimsbc1qw3mej5hx7jhtdagqwt7ljls7wzkda2tym3w0d2 - Sign in to watch
Estimated amount: $0
<$10KLive fundsRavencoin — KAWPOW PoW Consensus Flaw & Chain Rollback
Aug 10, 20262 viewsRavencoin (RVN) — Bitcoin codebase forkKAWPOW PoWProtocol exploit — KAWPOW PoW consensus input validation flaw (chain rollback)Active
Open incident>10 victimsInvestigation progress 50% - Sign in to watch
Estimated amount: $3.2M
<$10MLive fundsHarmony Protocol — Unauthorized 4B ONE Mint via Cross-Shard Receipt Replay
Aug 10, 20261 viewsHarmony L1 (Shard 0Shard 1)Protocol exploit — Unauthorized ONE token mint via cross-shard receipt replay + quorum bypassRecovering
Investigation progress 75%WalletsOpen incident>10 victims0xbd357b1b7cebf824b1fe4f1f5c71ac58ff1a70ba0xec10b4546793bd1507a9dafccbde2f22570d913d8498fe6bc2727459371c10f00x54d2109ef4b5cfbba2da7b229049301b9598f22fd5f9f27641c5490af53f05e0+2 more on incident page - Sign in to watch
Estimated amount: $100.0K
<$1MLive fundsEthereum Address Poisoning — $100K USDT 82-Day Lookalike Preparation
Aug 10, 20261 viewsEthereum L1Social engineering — Address poisoning (82-day lookalike preparation)Active
Investigation progress 75%WalletsOpen incident1 victims0xae7c08afad91db18666eeac055d7562c9f4e2c850xae7c0ffab6e77be2d7d7880a4ce433f59a4e2c850x435638925879ab8fc2ee874d123fc1b01ce8d159+2 more on incident page - Sign in to watch
Estimated amount: $25.6M
$10M+Live fundsTLBL Whale — $25.6M Private Key Compromise & DeFi Position Drain
Aug 11, 20262 viewsEthereum L1Private key compromise — systematic DeFi position unwindingActive
Investigation progress 50%WalletsOpen incident1 victims0x8fEB0c6eF08B20bA19C04F951d4408bB5A1F95Ae0xe4C3422A189ae40d5898987423bCf6477eA4400e0x994AE00b0F86f905FB4B1A7D9107686a9ab57Ad6+1 more on incident page - Sign in to watch
Estimated amount: $1.9M
<$10MLive fundsTornado Cash Fake Frontend Phishing — 810 ETH Drained via Deposit-Note Theft
Aug 11, 20262 viewsEthereumPhishing campaign — Tornado Cash-themed fake frontend (entry vector unconfirmed: expired-domain takeover alleged by coActive
Investigation progress 75%WalletsOpen incident1 victims0xd8B356356d7B143D7ece9F5876FE4b954E93b7450x02d7DFAa227Ef44D5eEE36a8edaf2924cc38D23c0x2bCE45670cbA81658e45c132f0B4eAbA97a7FbbA - Sign in to watch
Estimated amount: $0
<$10KLive fundsTrezor/ShipMonk — Customer Data Breach (13,689 Clients Exposed)
Aug 12, 20267 viewsOff-chainSupply chain attack — third-party data breach (Metabase SQL injection zero-day)Contained
Open incident13689 victimsInvestigation progress 75% - Sign in to watch
Estimated amount: $118.7K
<$1MLive fundsFoxMarket Flash-Loan Stale Spot-Price Bond Mint Exploit
Aug 14, 20260 viewsBNB Smart ChainFlash-loan attack — stale AMM spot-price oracle manipulation (time-of-check/time-of-use)Closed
Investigation progress 75%WalletsOpen incident>10 victims0x5670d36f00bc7f6860b6afddb288e3668efc0ef90x3a82a2a77061017927e5331fffd07c0308a1d2da0x005806c04ec29fe0740eb508c5f431c230b031e2+4 more on incident page - Sign in to watch
Estimated amount: $0
<$10KLive fundsSafePal Order-Tracking Plugin Data Breach — 39,798 Customers Exposed
Aug 15, 20261 viewsNot applicable (Web2 e-commerceorder-tracking system; SafePal is a hardwaresoftware wallet provider)Third-party data breach — authorization flaw in an order-tracking plugin (no wallet or fund compromise)Resolved
Open incident39798 victimsInvestigation progress 100% - Sign in to watch
Estimated amount: $0
<$10KLive fundsBits of Gold Third-Party Analytics Breach — ~200,000 Customers Exposed
Aug 15, 20260 viewsNot applicable (CEXregulated crypto brokerIsrael; Web2 third-party analytics system)Third-party/supply chain data breach — unauthorized access to an external analytics/support system (no custody or tradContained
Open incident200000 victimsInvestigation progress 75% - Sign in to watch
Estimated amount: $1.4M
<$10MLive fundsMaya Protocol Six-Bug MAYAChain Exploit — Uncapped Slash Subsidy Drain
Aug 17, 20261 viewsMAYAChainBitcoinArbitrumProtocol logic flaw — chained six-bug accounting exploit (uncapped slash subsidy)Paused
Investigation progress 75%WalletsOpen incident>10 victimsbc1q0hsgwunccczelq05ucpmfz268eyy5jr2y5l646 - Sign in to watch
Estimated amount: $3.3M
<$10MLive fundsBounceBit Chain Evmos Authorization Flaw — Permanent L1 Sunset
Aug 18, 20260 viewsBounceBit Chainreissued as BEP-20 on BNB ChainProtocol-level authorization flaw — Evmos native module trusted-input bypass (no key compromise)Closed
Open incident9 victimsInvestigation progress 75% - Sign in to watch
Estimated amount: $0
<$10KLive fundsRust Crates Supply Chain Attack — arrayref, internment, append-only-vec
Aug 19, 20262 viewsChain-agnostic (Rustcrates.io ecosystemheavily used in Solana and broader Web3 tooling)Supply chain attack — malicious dependency injection (typosquat build-script malware, 86-107 minute exposure window)Contained
Open incident>10 victimsInvestigation progress 100% - Sign in to watch
Estimated amount: $0
<$10KLive fundsMANTRA Chain Cosmos-EVM Module Exploit — Full Recovery, No User Funds Affected
Aug 20, 20263 viewsMANTRA ChainUpstream dependency vulnerability — Cosmos-EVM stack authorization bypass (bank-layer debit via staking precompile), nResolved
Open incident>10 victimsInvestigation progress 100%
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Detected & contained attack | Contained | <$10K | $0 | >10 | 100% | Aug 5, 2026 | 4 | Sign in | |||
| Governance attack (optimistic oracle) | Resolved | <$100K | $14.3K | >10 | 100% | Aug 5, 2026 | 4 | Sign in | |||
| Phishing / wallet compromise | Closed | <$1M | $501.7K | 1 | 90% | Aug 5, 2026 | 2 | Sign in | |||
Solidity Pro VS Code Extension — Web3 Developer Credential StealerChain-agnostic (Web3 developer tooling / supply chain) | Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution) | Contained | <$10K | $0 | >10 | 100% | Aug 5, 2026 | 0 | Sign in | ||
| Firmware vulnerability / weak entropy | Active | $10M+ | $111M | 7300 | 75% | Aug 6, 2026 | 4 | Sign in | |||
BTCPay Server LND Macaroon Credential Exposure — Active ExploitationBitcoin / Lightning Network | Critical vulnerability — active exploitation | Active | <$10K | $0 | 2 | 40% | Aug 6, 2026 | 5 | Sign in | ||
| Cross-chain exploit — Unauthorized mint via ICS-20 EVM precompile | Recovering | <$10K | $0 | >10 | 50% | Aug 7, 2026 | 5 | Sign in | |||
| Smart contract exploit — Signature replay | Contained | <$100K | $30.0K | >10 | 50% | Aug 7, 2026 | 1 | Sign in | |||
| Smart contract exploit — Arithmetic split-invariance violation | Contained | <$1M | $136K | >10 | 75% | Aug 8, 2026 | 3 | Sign in | |||
Coinsbuy — Coordinated Multi-Chain Hot Wallet DrainEthereum / TRON | Hot wallet drain — multi-chain access compromise | Resolved | <$10M | $7.9M | >10 | 75% | Aug 8, 2026 | 2 | Sign in | ||
Coreum/tx XRPL Bridge — Fake Deposit Relayer Logic ExploitXRP Ledger / Coreum / tx | Bridge exploit — relayer deposit verification logic flaw | Paused | <$1M | $200K | >10 | 50% | Aug 8, 2026 | 1 | Sign in | ||
Tiffany Milanovich — Crypto Support Impersonation Fraud NetworkBitcoin / Ethereum / Coinbase | Social engineering — Support impersonation phone fraud network | Active | <$10M | $5M | >10 | 75% | Aug 9, 2026 | 3 | Sign in | ||
Ravencoin — KAWPOW PoW Consensus Flaw & Chain RollbackRavencoin (RVN) — Bitcoin codebase fork / KAWPOW PoW | Protocol exploit — KAWPOW PoW consensus input validation flaw (chain rollback) | Active | <$10K | $0 | >10 | 50% | Aug 10, 2026 | 2 | Sign in | ||
Harmony Protocol — Unauthorized 4B ONE Mint via Cross-Shard Receipt ReplayHarmony L1 (Shard 0 / Shard 1) | Protocol exploit — Unauthorized ONE token mint via cross-shard receipt replay + quorum bypass | Recovering | <$10M | $3.2M | >10 | 75% | Aug 10, 2026 | 1 | Sign in | ||
| Social engineering — Address poisoning (82-day lookalike preparation) | Active | <$1M | $100.0K | 1 | 75% | Aug 10, 2026 | 1 | Sign in | |||
| Private key compromise — systematic DeFi position unwinding | Active | $10M+ | $25.6M | 1 | 50% | Aug 11, 2026 | 2 | Sign in | |||
| Phishing campaign — Tornado Cash-themed fake frontend (entry vector unconfirmed: expired-domain takeover alleged by co | Active | <$10M | $1.9M | 1 | 75% | Aug 11, 2026 | 2 | Sign in | |||
| Supply chain attack — third-party data breach (Metabase SQL injection zero-day) | Contained | <$10K | $0 | 13689 | 75% | Aug 12, 2026 | 7 | Sign in | |||
FoxMarket Flash-Loan Stale Spot-Price Bond Mint ExploitBNB Smart Chain | Flash-loan attack — stale AMM spot-price oracle manipulation (time-of-check/time-of-use) | Closed | <$1M | $118.7K | >10 | 75% | Aug 14, 2026 | 0 | Sign in | ||
SafePal Order-Tracking Plugin Data Breach — 39,798 Customers ExposedNot applicable (Web2 e-commerce / order-tracking system; SafePal is a hardware / software wallet provider) | Third-party data breach — authorization flaw in an order-tracking plugin (no wallet or fund compromise) | Resolved | <$10K | $0 | 39798 | 100% | Aug 15, 2026 | 1 | Sign in | ||
Bits of Gold Third-Party Analytics Breach — ~200,000 Customers ExposedNot applicable (CEX / regulated crypto broker / Israel; Web2 third-party analytics system) | Third-party/supply chain data breach — unauthorized access to an external analytics/support system (no custody or trad | Contained | <$10K | $0 | 200000 | 75% | Aug 15, 2026 | 0 | Sign in | ||
Maya Protocol Six-Bug MAYAChain Exploit — Uncapped Slash Subsidy DrainMAYAChain / Bitcoin / Arbitrum | Protocol logic flaw — chained six-bug accounting exploit (uncapped slash subsidy) | Paused | <$10M | $1.4M | >10 | 75% | Aug 17, 2026 | 1 | Sign in | ||
BounceBit Chain Evmos Authorization Flaw — Permanent L1 SunsetBounceBit Chain / reissued as BEP-20 on BNB Chain | Protocol-level authorization flaw — Evmos native module trusted-input bypass (no key compromise) | Closed | <$10M | $3.3M | 9 | 75% | Aug 18, 2026 | 0 | Sign in | ||
Rust Crates Supply Chain Attack — arrayref, internment, append-only-vecChain-agnostic (Rust / crates.io ecosystem / heavily used in Solana and broader Web3 tooling) | Supply chain attack — malicious dependency injection (typosquat build-script malware, 86-107 minute exposure window) | Contained | <$10K | $0 | >10 | 100% | Aug 19, 2026 | 2 | Sign in | ||
| Upstream dependency vulnerability — Cosmos-EVM stack authorization bypass (bank-layer debit via staking precompile), n | Resolved | <$10K | $0 | >10 | 100% | Aug 20, 2026 | 3 | Sign in |
Page 8 of 8, showing 25 of 200 incidents
← Back to home