Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $0
<$10KLive fundsAug 5, 20260 viewsChain-agnostic (Web3 developer toolingsupply chain)Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution)Contained
Estimated amount: $72K
<$100KLive fundsAug 4, 20261 viewsEthereumAdmin key compromise / governance takeoverClosed
Estimated amount: $0
<$10KLive fundsAug 4, 20262 viewsBitcoin Lightning NetworkInfrastructure compromiseResolved
Estimated amount: $0
<$10KLive fundsAug 3, 20261 viewsnpmGitHub supply chain; Ethereum used for C2 resolutionSupply chain attackContained
Estimated amount: $0
<$10KLive fundsAug 2, 20261 viewsBitcoinLightning NetworkLiquidInfrastructure compromise (AI-assisted attacks)Paused
Estimated amount: $0
<$10KLive fundsAug 2, 20261 viewswallet-agnostic phishingremote access trojan campaignPhishing / social engineering (RAT deployment)Active
Estimated amount: $673.0K
<$1MLive fundsAug 2, 20262 viewsRISE ChainSmart contract misconfigurationResolved
Estimated amount: $907.7K
<$1MLive fundsAug 1, 20262 viewsBNB ChainSmart contract vulnerability (access control)Active
Estimated amount: $689.5K
<$1MLive fundsAug 1, 20261 viewsBNB ChainFlash loan / price manipulationClosed
Estimated amount: $38.3M
$10M+Live fundsJul 30, 202615 viewsBitcoinHardware wallet RNG flawActive
Estimated amount: $8.2M
<$10MLive fundsJul 27, 202621 viewsBNB ChainAccess control vulnerability (public vault function)Active
Estimated amount: $578.1K
<$1MLive fundsJul 27, 20269 viewsBNB ChainReserve manipulation via privileged function (EIP-7702 delegation)Closed
Estimated amount: $11.8M
$10M+Live fundsJul 26, 20265 viewsEthereumTRONPolygonArbitrumSolanaTONHot wallet compromiseRecovering
Estimated amount: $450K
<$1MLive fundsJul 25, 20262 viewsEthereumBaseArbitrumBNB ChainSupply chain attack (off-chain solver compromise)Paused
Estimated amount: $615K
<$1MLive fundsJul 25, 202610 viewsVenom 2.0 (bridge; fix applied across HumoMshariaTONTetraVenom 2.0)Cross-chain bridge exploit — missing callback authenticationResolved
Estimated amount: $758K
<$1MLive fundsJul 25, 20261 viewsWEMIX3.0 (bridged to EthereumBSC)Proxy re-initialization / logic flawContained
Estimated amount: $561.2K
<$1MLive fundsJul 24, 20261 viewsEthereum L1Flash loan / reward-logic exploitClosed
Estimated amount: $191.2K
<$1MLive fundsJul 24, 20260 viewsBaseBridge logic flaw — phantom CCTP deposit (forged Circle attestation credited without balance verification)Contained
Estimated amount: $479.9K
<$1MLive fundsJul 24, 20262 viewsBaseAccount compromise / wallet drainContained
Estimated amount: $542.1K
<$1MLive fundsJul 23, 20267 viewsEthereumSmart Contract Logic / Bond Token BugActive
Estimated amount: $1.2M
<$10MLive fundsJul 22, 20262 viewsRobinhood Chain (Ethereum L2Arbitrum Orbit)Social Engineering / Account TakeoverContained
Estimated amount: $7.5M
<$10MLive fundsJul 22, 20262 viewsEthereumBridge / Smart Contract Logic FlawActive
Estimated amount: $915K
<$1MLive fundsJul 21, 20262 viewsBNB ChainOracle ManipulationRugged
Estimated amount: $24.1M
$10M+Live fundsJul 21, 20261 viewsArbitrum → EthereumBridge / Private Key CompromiseActive
Estimated amount: $3.9M
<$10MLive fundsJul 21, 20262 viewsBNB Chain → EthereumAccess Control / Upgrade Authority CompromiseContained
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
Solidity Pro VS Code Extension — Web3 Developer Credential StealerChain-agnostic (Web3 developer tooling / supply chain) | Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution) | Contained | <$10K | $0 | >10 | 100% | Aug 5, 2026 | 0 | Sign in | ||
| Admin key compromise / governance takeover | Closed | <$100K | $72K | >10 | 95% | Aug 4, 2026 | 1 | Sign in | |||
ZEUS Lightning Wallet Infrastructure CompromiseBitcoin Lightning Network | Infrastructure compromise | Resolved | <$10K | $0 | >10 | 100% | Aug 4, 2026 | 2 | Sign in | ||
npm Supply Chain Attack — Shai-Hulud Wave 6 (Keyv/Cacheable Ecosystem)npm / GitHub supply chain; Ethereum used for C2 resolution | Supply chain attack | Contained | <$10K | $0 | >10 | 70% | Aug 3, 2026 | 1 | Sign in | ||
Boltz Bitcoin Bridge — AI-Assisted Attack SuspensionBitcoin / Lightning Network / Liquid | Infrastructure compromise (AI-assisted attacks) | Paused | <$10K | $0 | >10 | 50% | Aug 2, 2026 | 1 | Sign in | ||
Coldcard-Themed 'Hardware Wallet Audit' Phishing Campaignwallet-agnostic phishing / remote access trojan campaign | Phishing / social engineering (RAT deployment) | Active | <$10K | $0 | >10 | 25% | Aug 2, 2026 | 1 | Sign in | ||
| Smart contract misconfiguration | Resolved | <$1M | $673.0K | >10 | 95% | Aug 2, 2026 | 2 | Sign in | |||
| Smart contract vulnerability (access control) | Active | <$1M | $907.7K | >10 | 25% | Aug 1, 2026 | 2 | Sign in | |||
| Flash loan / price manipulation | Closed | <$1M | $689.5K | >10 | 90% | Aug 1, 2026 | 1 | Sign in | |||
| Hardware wallet RNG flaw | Active | $10M+ | $38.3M | 500 | 75% | Jul 30, 2026 | 15 | Sign in | |||
| Access control vulnerability (public vault function) | Active | <$10M | $8.2M | >10 | 75% | Jul 27, 2026 | 21 | Sign in | |||
| Reserve manipulation via privileged function (EIP-7702 delegation) | Closed | <$1M | $578.1K | >10 | 100% | Jul 27, 2026 | 9 | Sign in | |||
+3 | Triple-A Multi-Chain Hot Wallet CompromiseEthereum / TRON / Polygon / Arbitrum / Solana / TON | Hot wallet compromise | Recovering | $10M+ | $11.8M | >10 | 50% | Jul 26, 2026 | 5 | Sign in | |
+1 | Garden Finance Solver Database Compromise — Cross-Chain HTLC DrainEthereum / Base / Arbitrum / BNB Chain | Supply chain attack (off-chain solver compromise) | Paused | <$1M | $450K | >10 | 100% | Jul 25, 2026 | 2 | Sign in | |
+2 | ChainConnect Bridge Callback Exploit — White Hat ResolutionVenom 2.0 (bridge; fix applied across Humo / Msharia / TON / Tetra / Venom 2.0) | Cross-chain bridge exploit — missing callback authentication | Resolved | <$1M | $615K | >10 | 100% | Jul 25, 2026 | 10 | Sign in | |
WEMIX$ Proxy Re-Initialization Exploit — DIOS/AMA Contract TakeoverWEMIX3.0 (bridged to Ethereum / BSC) | Proxy re-initialization / logic flaw | Contained | <$1M | $758K | >10 | 100% | Jul 25, 2026 | 1 | Sign in | ||
| Flash loan / reward-logic exploit | Closed | <$1M | $561.2K | >10 | 75% | Jul 24, 2026 | 1 | Sign in | |||
| Bridge logic flaw — phantom CCTP deposit (forged Circle attestation credited without balance verification) | Contained | <$1M | $191.2K | 1 | 100% | Jul 24, 2026 | 0 | Sign in | |||
| Account compromise / wallet drain | Contained | <$1M | $479.9K | >10 | 75% | Jul 24, 2026 | 2 | Sign in | |||
| Smart Contract Logic / Bond Token Bug | Active | <$1M | $542.1K | 1 | 75% | Jul 23, 2026 | 7 | Sign in | |||
Robinhood CEO Vlad Tenev X account hijack — fake $VLAD memecoinRobinhood Chain (Ethereum L2 / Arbitrum Orbit) | Social Engineering / Account Takeover | Contained | <$10M | $1.2M | >10 | 75% | Jul 22, 2026 | 2 | Sign in | ||
| Bridge / Smart Contract Logic Flaw | Active | <$10M | $7.5M | >10 | 75% | Jul 22, 2026 | 2 | Sign in | |||
| Oracle Manipulation | Rugged | <$1M | $915K | >10 | 75% | Jul 21, 2026 | 2 | Sign in | |||
AFX Trade — Arbitrum USDC bridge validator key compromiseArbitrum → Ethereum | Bridge / Private Key Compromise | Active | $10M+ | $24.1M | >10 | 75% | Jul 21, 2026 | 1 | Sign in | ||
B² Network — Staking contract upgrade authority compromiseBNB Chain → Ethereum | Access Control / Upgrade Authority Compromise | Contained | <$10M | $3.9M | >10 | 75% | Jul 21, 2026 | 2 | Sign in |
Page 2 of 8, showing 25 of 200 incidents
← Back to home
