Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $0
<$10KLive fundsAug 5, 20261 viewsChain-agnostic (Web3 developer toolingsupply chain)Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution)Contained
Estimated amount: $0
<$10KLive fundsAug 5, 20266 viewsEthereumDetected & contained attackContained
Estimated amount: $1.6M
<$10MLive fundsAug 5, 20263 viewsBitcoinPhishing campaignActive
Estimated amount: $14.3K
<$100KLive fundsAug 5, 20265 viewsBaseGovernance attack (optimistic oracle)Resolved
Estimated amount: $501.7K
<$1MLive fundsAug 5, 20262 viewsBasePhishing / wallet compromiseClosed
Estimated amount: $0
<$10KLive fundsAug 4, 20263 viewsBitcoin Lightning NetworkInfrastructure compromiseResolved
Estimated amount: $72K
<$100KLive fundsAug 4, 20262 viewsEthereumAdmin key compromise / governance takeoverClosed
Estimated amount: $0
<$10KLive fundsAug 3, 20262 viewsnpmGitHub supply chain; Ethereum used for C2 resolutionSupply chain attackContained
Estimated amount: $0
<$10KLive fundsAug 2, 20263 viewswallet-agnostic phishingremote access trojan campaignPhishing / social engineering (RAT deployment)Active
Estimated amount: $0
<$10KLive fundsAug 2, 20262 viewsBitcoinLightning NetworkLiquidInfrastructure compromise (AI-assisted attacks)Paused
Estimated amount: $673.0K
<$1MLive fundsAug 2, 20263 viewsRISE ChainSmart contract misconfigurationResolved
Estimated amount: $907.7K
<$1MLive fundsAug 1, 20266 viewsBNB ChainSmart contract vulnerability (access control)Active
Estimated amount: $689.5K
<$1MLive fundsAug 1, 20261 viewsBNB ChainFlash loan / price manipulationClosed
Estimated amount: $38.3M
$10M+Live fundsJul 30, 202616 viewsBitcoinHardware wallet RNG flawActive
Estimated amount: $578.1K
<$1MLive fundsJul 27, 202610 viewsBNB ChainReserve manipulation via privileged function (EIP-7702 delegation)Closed
Estimated amount: $8.2M
<$10MLive fundsJul 27, 202625 viewsBNB ChainAccess control vulnerability (public vault function)Active
Estimated amount: $11.8M
$10M+Live fundsJul 26, 20266 viewsEthereumTRONPolygonArbitrumSolanaTONHot wallet compromiseRecovering
Estimated amount: $615K
<$1MLive fundsJul 25, 202614 viewsVenom 2.0 (bridge; fix applied across HumoMshariaTONTetraVenom 2.0)Cross-chain bridge exploit — missing callback authenticationResolved
Estimated amount: $450K
<$1MLive fundsJul 25, 20266 viewsEthereumBaseArbitrumBNB ChainSupply chain attack (off-chain solver compromise)Paused
Estimated amount: $758K
<$1MLive fundsJul 25, 20261 viewsWEMIX3.0 (bridged to EthereumBSC)Proxy re-initialization / logic flawContained
Estimated amount: $191.2K
<$1MLive fundsJul 24, 20261 viewsBaseBridge logic flaw — phantom CCTP deposit (forged Circle attestation credited without balance verification)Contained
Estimated amount: $561.2K
<$1MLive fundsJul 24, 20262 viewsEthereum L1Flash loan / reward-logic exploitClosed
Estimated amount: $479.9K
<$1MLive fundsJul 24, 20264 viewsBaseAccount compromise / wallet drainContained
Estimated amount: $542.1K
<$1MLive fundsJul 23, 20267 viewsEthereumSmart Contract Logic / Bond Token BugActive
Estimated amount: $1.2M
<$10MLive fundsJul 22, 20264 viewsRobinhood Chain (Ethereum L2Arbitrum Orbit)Social Engineering / Account TakeoverContained
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
Solidity Pro VS Code Extension — Web3 Developer Credential StealerChain-agnostic (Web3 developer tooling / supply chain) | Supply chain attack — malicious IDE extension (credential/seed harvesting, remote payload execution) | Contained | <$10K | $0 | Not confirmed | 100% | Aug 5, 2026 | 1 | Sign in | ||
| Detected & contained attack | Contained | <$10K | $0 | Not confirmed | 100% | Aug 5, 2026 | 6 | Sign in | |||
| Phishing campaign | Active | <$10M | $1.6M | 1 | 55% | Aug 5, 2026 | 3 | Sign in | |||
| Governance attack (optimistic oracle) | Resolved | <$100K | $14.3K | Not confirmed | 100% | Aug 5, 2026 | 5 | Sign in | |||
| Phishing / wallet compromise | Closed | <$1M | $501.7K | 1 | 90% | Aug 5, 2026 | 2 | Sign in | |||
ZEUS Lightning Wallet Infrastructure CompromiseBitcoin Lightning Network | Infrastructure compromise | Resolved | <$10K | $0 | Not confirmed | 100% | Aug 4, 2026 | 3 | Sign in | ||
| Admin key compromise / governance takeover | Closed | <$100K | $72K | Not confirmed | 95% | Aug 4, 2026 | 2 | Sign in | |||
npm Supply Chain Attack — Shai-Hulud Wave 6 (Keyv/Cacheable Ecosystem)npm / GitHub supply chain; Ethereum used for C2 resolution | Supply chain attack | Contained | <$10K | $0 | Not confirmed | 70% | Aug 3, 2026 | 2 | Sign in | ||
Coldcard-Themed 'Hardware Wallet Audit' Phishing Campaignwallet-agnostic phishing / remote access trojan campaign | Phishing / social engineering (RAT deployment) | Active | <$10K | $0 | Not confirmed | 25% | Aug 2, 2026 | 3 | Sign in | ||
Boltz Bitcoin Bridge — AI-Assisted Attack SuspensionBitcoin / Lightning Network / Liquid | Infrastructure compromise (AI-assisted attacks) | Paused | <$10K | $0 | Not confirmed | 50% | Aug 2, 2026 | 2 | Sign in | ||
| Smart contract misconfiguration | Resolved | <$1M | $673.0K | Not confirmed | 95% | Aug 2, 2026 | 3 | Sign in | |||
| Smart contract vulnerability (access control) | Active | <$1M | $907.7K | Not confirmed | 25% | Aug 1, 2026 | 6 | Sign in | |||
| Flash loan / price manipulation | Closed | <$1M | $689.5K | Not confirmed | 90% | Aug 1, 2026 | 1 | Sign in | |||
| Hardware wallet RNG flaw | Active | $10M+ | $38.3M | 500 | 75% | Jul 30, 2026 | 16 | Sign in | |||
| Reserve manipulation via privileged function (EIP-7702 delegation) | Closed | <$1M | $578.1K | Not confirmed | 100% | Jul 27, 2026 | 10 | Sign in | |||
| Access control vulnerability (public vault function) | Active | <$10M | $8.2M | Not confirmed | 75% | Jul 27, 2026 | 25 | Sign in | |||
+3 | Triple-A Multi-Chain Hot Wallet CompromiseEthereum / TRON / Polygon / Arbitrum / Solana / TON | Hot wallet compromise | Recovering | $10M+ | $11.8M | Not confirmed | 50% | Jul 26, 2026 | 6 | Sign in | |
+2 | ChainConnect Bridge Callback Exploit — White Hat ResolutionVenom 2.0 (bridge; fix applied across Humo / Msharia / TON / Tetra / Venom 2.0) | Cross-chain bridge exploit — missing callback authentication | Resolved | <$1M | $615K | Not confirmed | 100% | Jul 25, 2026 | 14 | Sign in | |
+1 | Garden Finance Solver Database Compromise — Cross-Chain HTLC DrainEthereum / Base / Arbitrum / BNB Chain | Supply chain attack (off-chain solver compromise) | Paused | <$1M | $450K | Not confirmed | 100% | Jul 25, 2026 | 6 | Sign in | |
WEMIX$ Proxy Re-Initialization Exploit — DIOS/AMA Contract TakeoverWEMIX3.0 (bridged to Ethereum / BSC) | Proxy re-initialization / logic flaw | Contained | <$1M | $758K | Not confirmed | 100% | Jul 25, 2026 | 1 | Sign in | ||
| Bridge logic flaw — phantom CCTP deposit (forged Circle attestation credited without balance verification) | Contained | <$1M | $191.2K | 1 | 100% | Jul 24, 2026 | 1 | Sign in | |||
| Flash loan / reward-logic exploit | Closed | <$1M | $561.2K | Not confirmed | 75% | Jul 24, 2026 | 2 | Sign in | |||
| Account compromise / wallet drain | Contained | <$1M | $479.9K | Not confirmed | 75% | Jul 24, 2026 | 4 | Sign in | |||
| Smart Contract Logic / Bond Token Bug | Active | <$1M | $542.1K | 1 | 75% | Jul 23, 2026 | 7 | Sign in | |||
Robinhood CEO Vlad Tenev X account hijack — fake $VLAD memecoinRobinhood Chain (Ethereum L2 / Arbitrum Orbit) | Social Engineering / Account Takeover | Contained | <$10M | $1.2M | Not confirmed | 75% | Jul 22, 2026 | 4 | Sign in |
Page 5 of 12, showing 25 of 280 incidents
← Back to home
