Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $0
<$10KLive fundsAug 19, 20264 viewsChain-agnostic (Rustcrates.io ecosystemheavily used in Solana and broader Web3 tooling)Supply chain attack — malicious dependency injection (typosquat build-script malware, 86-107 minute exposure window)Contained
Estimated amount: $0
<$10KLive fundsAug 20, 20265 viewsMANTRA ChainUpstream dependency vulnerability — Cosmos-EVM stack authorization bypass (bank-layer debit via staking precompile), nResolved
Estimated amount: $1.6M
<$10MLive fundsAug 21, 20262 viewsKiiChainShared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2)Contained
Estimated amount: $1.0M
<$10MLive fundsAug 21, 20260 viewsTACShared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2)Contained
Estimated amount: $8.5M
<$10MLive fundsAug 22, 20261 viewsEthereumGovernance takeover exploitContained
Estimated amount: $60K
<$100KLive fundsAug 23, 20261 viewsNesaShared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2), possibly distinct actorContained
Estimated amount: $338.7K
<$1MLive fundsAug 24, 20261 viewsEthereumBNB ChainAlgorandStellarRealio L1Signing key compromiseContained
Estimated amount: $181.5K
<$1MLive fundsAug 26, 20260 viewsICONCross-chain signature replay attackContained
Estimated amount: $9.1M
<$10MLive fundsAug 26, 20261 viewsBaseOracle manipulation / donation attackContained
Estimated amount: $455K
<$1MLive fundsAug 27, 20260 viewsIOTAOracle signing key compromiseContained
Estimated amount: $1.2M
<$10MLive fundsAug 27, 20261 viewsFogoPrivate key compromiseContained
Estimated amount: $775.4K
<$1MLive fundsAug 27, 20261 viewsEthereumLiquidation logic / accounting manipulationActive
Estimated amount: $0
<$10KLive fundsAug 28, 20260 viewsZano L1Protocol bug (unauthorized issuance via Gateway Address)Recovering
Estimated amount: —
UnknownLive fundsAug 28, 20262 viewsZIGChainTODOActive
Estimated amount: $91K
<$100KLive fundsAug 28, 20260 viewsSuiOracle signing key compromiseClosed
Estimated amount: $330K
<$1MLive fundsAug 28, 20260 viewsSolanaRug pull / social media account compromiseContained
Estimated amount: $234K
<$1MLive fundsAug 29, 20261 viewsEthereumRounding error / precision exploitContained
Estimated amount: $9.2M
<$10MLive fundsAug 29, 20262 viewsCronosOracle / donation-attack price manipulationContained
Estimated amount: $1.3M
<$10MLive fundsAug 30, 20260 viewsRadixEngine-level vault authorization bugContained
Estimated amount: $246K
<$1MLive fundsAug 30, 20261 viewsFlow EVMUnbacked liquid staking token mintContained
Estimated amount: $4.9M
<$10MLive fundsAug 30, 20261 viewsInjectiveEthereumMarket-ID hash collision / oracle refund abuseActive
Estimated amount: $28K
<$100KLive fundsAug 30, 20260 viewsEthereumFlash loan / spot-price oracle manipulationContained
Estimated amount: $2.5M
<$10MLive fundsAug 30, 20261 viewsSolanaEthereumFake token account / spoofed balance exploitActive
Estimated amount: —
UnknownLive fundsSep 1, 20260 viewsMulti-chainPhishing / wallet drainerActive
Estimated amount: $170K
<$1MLive fundsSep 1, 20260 viewsOptimismOptimistic oracle abuse / unresolved claimContained
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
Rust Crates Supply Chain Attack — arrayref, internment, append-only-vecChain-agnostic (Rust / crates.io ecosystem / heavily used in Solana and broader Web3 tooling) | Supply chain attack — malicious dependency injection (typosquat build-script malware, 86-107 minute exposure window) | Contained | <$10K | $0 | Not confirmed | 100% | Aug 19, 2026 | 4 | Sign in | ||
| Upstream dependency vulnerability — Cosmos-EVM stack authorization bypass (bank-layer debit via staking precompile), n | Resolved | <$10K | $0 | Not confirmed | 100% | Aug 20, 2026 | 5 | Sign in | |||
| Shared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2) | Contained | <$10M | $1.6M | Not confirmed | 55% | Aug 21, 2026 | 2 | Sign in | |||
| Shared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2) | Contained | <$10M | $1.0M | Not confirmed | 55% | Aug 21, 2026 | 0 | Sign in | |||
| Governance takeover exploit | Contained | <$10M | $8.5M | 1 | 90% | Aug 22, 2026 | 1 | Sign in | |||
| Shared Cosmos EVM module vulnerability (GHSA-7g4w-cg88-2cq2), possibly distinct actor | Contained | <$100K | $60K | Not confirmed | 50% | Aug 23, 2026 | 1 | Sign in | |||
+2 | Realio Network Multi-Chain Signing Key Compromise — $6.2M Gross / $338.7K LiquidEthereum / BNB Chain / Algorand / Stellar / Realio L1 | Signing key compromise | Contained | <$1M | $338.7K | Not confirmed | 40% | Aug 24, 2026 | 1 | Sign in | |
| Cross-chain signature replay attack | Contained | <$1M | $181.5K | Not confirmed | 50% | Aug 26, 2026 | 0 | Sign in | |||
| Oracle manipulation / donation attack | Contained | <$10M | $9.1M | 1 | 80% | Aug 26, 2026 | 1 | Sign in | |||
| Oracle signing key compromise | Contained | <$1M | $455K | Not confirmed | 55% | Aug 27, 2026 | 0 | Sign in | |||
| Private key compromise | Contained | <$10M | $1.2M | Not confirmed | 60% | Aug 27, 2026 | 1 | Sign in | |||
| Liquidation logic / accounting manipulation | Active | <$1M | $775.4K | Not confirmed | 40% | Aug 27, 2026 | 1 | Sign in | |||
| Protocol bug (unauthorized issuance via Gateway Address) | Recovering | <$10K | $0 | Not confirmed | 75% | Aug 28, 2026 | 0 | Sign in | |||
| TODO | Active | Unknown | — | Not confirmed | 0% | Aug 28, 2026 | 2 | Sign in | |||
| Oracle signing key compromise | Closed | <$100K | $91K | Not confirmed | 60% | Aug 28, 2026 | 0 | Sign in | |||
| Rug pull / social media account compromise | Contained | <$1M | $330K | Not confirmed | 30% | Aug 28, 2026 | 0 | Sign in | |||
| Rounding error / precision exploit | Contained | <$1M | $234K | Not confirmed | 70% | Aug 29, 2026 | 1 | Sign in | |||
| Oracle / donation-attack price manipulation | Contained | <$10M | $9.2M | 1 | 75% | Aug 29, 2026 | 2 | Sign in | |||
| Engine-level vault authorization bug | Contained | <$10M | $1.3M | Not confirmed | 70% | Aug 30, 2026 | 0 | Sign in | |||
| Unbacked liquid staking token mint | Contained | <$1M | $246K | Not confirmed | 45% | Aug 30, 2026 | 1 | Sign in | |||
| Market-ID hash collision / oracle refund abuse | Active | <$10M | $4.9M | 1 | 30% | Aug 30, 2026 | 1 | Sign in | |||
| Flash loan / spot-price oracle manipulation | Contained | <$100K | $28K | 1 | 90% | Aug 30, 2026 | 0 | Sign in | |||
| Fake token account / spoofed balance exploit | Active | <$10M | $2.5M | 1 | 65% | Aug 30, 2026 | 1 | Sign in | |||
| Phishing / wallet drainer | Active | Unknown | — | Not confirmed | 0% | Sep 1, 2026 | 0 | Sign in | |||
| Optimistic oracle abuse / unresolved claim | Contained | <$1M | $170K | Not confirmed | 50% | Sep 1, 2026 | 0 | Sign in |
Page 9 of 12, showing 25 of 280 incidents
← Back to home
