Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $7.5M
<$10MLive fundsJul 22, 20263 viewsEthereumBridge / Smart Contract Logic FlawActive
Estimated amount: $915K
<$1MLive fundsJul 21, 20266 viewsBNB ChainOracle ManipulationRugged
Estimated amount: $3.9M
<$10MLive fundsJul 21, 20264 viewsBNB Chain → EthereumAccess Control / Upgrade Authority CompromiseContained
Estimated amount: $24.1M
$10M+Live fundsJul 21, 20264 viewsArbitrum → EthereumBridge / Private Key CompromiseActive
Estimated amount: $98K
<$100KLive fundsJul 20, 20265 viewsSolanaSDK Validation FlawResolved
Estimated amount: $10M
$10M+Live fundsJul 19, 20265 viewsCardano → BNB ChainBridge / Signature Encoding FlawPaused
Estimated amount: $0
<$10KLive fundsJul 18, 20261 viewsZilliqa (nativenon-EVM)Cryptographic Flaw / Private Key ExposurePaused
Estimated amount: $1.6M
<$10MLive fundsJul 18, 20262 viewsSolana → EthereumFlash Loan / Price ManipulationPaused
Estimated amount: $0
<$10KLive fundsJul 16, 202616 viewsSolana (relayer side); Ethereum and Base bridges unaffectedCross-chain bridge / relayer exploit (vector pending post-mortem)Contained
Estimated amount: $305K
<$1MLive fundsJul 16, 20260 viewsEthereum L1Access control + unconstrained call (Safe module)Contained
Estimated amount: $569.6K
<$1MLive fundsJul 15, 20267 viewsSolana (cash-out bridged to Ethereum via Mayan Finance140 ETH parked in Railgun mixer)Smart contract logic flaw (rounding bypass)Contained
Estimated amount: $1.3M
<$10MLive fundsJul 15, 20266 viewsArbitrum → Solana → Ethereum (via Relay Protocolconverted to DAI to evade USDC blacklisting)Signer / operator key compromisePaused
Estimated amount: $180M
$10M+Live fundsJul 14, 20261 viewsArbitrumOracle manipulation / private key compromisePaused
Estimated amount: $776K
<$1MLive fundsJul 14, 20265 viewsEthereumGovernance attackClosed
Estimated amount: $0
<$10KLive fundsJul 13, 20266 viewsEthereumFee-layer exploit (Uniswap V4 hook)Resolved
Estimated amount: $8.6K
<$10KLive fundsJul 12, 20260 viewsEthereumSmart contract logic flaw (peg check bypass)Closed
Estimated amount: $270K
<$1MLive fundsJul 12, 20264 viewsArbitrum OneAccount abstraction / ERC-4337 paymaster abuseActive
Estimated amount: $135K
<$1MLive fundsJul 11, 20260 viewsEthereumSocial engineering / brand account hijackRugged
Estimated amount: $0
<$10KLive fundsJul 10, 20261 viewstargets MetaMaskPhantomExodusCoinbaseTrust Wallet — EthereumSolanamulti-EVMBitcoinSupply chain attack (npm) — crypto wallet infostealerResolved
Estimated amount: $9.1M
<$10MLive fundsJul 10, 20264 viewsHedera (cash-out bridged to Ethereum via LayerZerolaundered through Tornado Cash)Oracle manipulationRecovering
Estimated amount: $14.2M
$10M+Live fundsJul 9, 20262 viewsSolana → EthereumSuspected Key CompromiseActive
Estimated amount: $0
<$10KLive fundsJul 7, 20260 viewsInjective (npm SDKcross-environment: browserNodeReact Native)Supply Chain AttackResolved
Estimated amount: $800.0K
<$1MLive fundsJul 7, 20261 viewsEthereumApproval Phishing / Address PoisoningClosed
Estimated amount: $2.0M
<$10MLive fundsJul 6, 20261 viewsEthereumMEV / Same-Block BackrunClosed
Estimated amount: $20M
$10M+Live fundsJul 5, 20263 viewsSolanaGovernance AttackActive
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Bridge / Smart Contract Logic Flaw | Active | <$10M | $7.5M | Not confirmed | 75% | Jul 22, 2026 | 3 | Sign in | |||
| Oracle Manipulation | Rugged | <$1M | $915K | Not confirmed | 75% | Jul 21, 2026 | 6 | Sign in | |||
B² Network — Staking contract upgrade authority compromiseBNB Chain → Ethereum | Access Control / Upgrade Authority Compromise | Contained | <$10M | $3.9M | Not confirmed | 75% | Jul 21, 2026 | 4 | Sign in | ||
AFX Trade — Arbitrum USDC bridge validator key compromiseArbitrum → Ethereum | Bridge / Private Key Compromise | Active | $10M+ | $24.1M | Not confirmed | 75% | Jul 21, 2026 | 4 | Sign in | ||
| SDK Validation Flaw | Resolved | <$100K | $98K | Not confirmed | 100% | Jul 20, 2026 | 5 | Sign in | |||
| Bridge / Signature Encoding Flaw | Paused | $10M+ | $10M | Not confirmed | 75% | Jul 19, 2026 | 5 | Sign in | |||
Zilliqa — Ledger app Schnorr nonce-generation flaw (HNP private key recovery)Zilliqa (native / non-EVM) | Cryptographic Flaw / Private Key Exposure | Paused | <$10K | $0 | Not confirmed | 50% | Jul 18, 2026 | 1 | Sign in | ||
Allbridge Core — Kamino flash loan stablecoin pool manipulationSolana → Ethereum | Flash Loan / Price Manipulation | Paused | <$10M | $1.6M | Not confirmed | 75% | Jul 18, 2026 | 2 | Sign in | ||
Across Protocol — Solana Relayer Exploit (Risk Labs Capital Only, User Funds Safe)Solana (relayer side); Ethereum and Base bridges unaffected | Cross-chain bridge / relayer exploit (vector pending post-mortem) | Contained | <$10K | $0 | Not confirmed | 50% | Jul 16, 2026 | 16 | Sign in | ||
| Access control + unconstrained call (Safe module) | Contained | <$1M | $305K | 1 | 75% | Jul 16, 2026 | 0 | Sign in | |||
DefiTuna — Solvency Check Bypass via Illiquid Pool RoundingSolana (cash-out bridged to Ethereum via Mayan Finance / 140 ETH parked in Railgun mixer) | Smart contract logic flaw (rounding bypass) | Contained | <$1M | $569.6K | Not confirmed | 75% | Jul 15, 2026 | 7 | Sign in | ||
Cascade — CLS Vault Drain via Compromised Signer / Operator Key (pidzhachello Polymarket Attribution Lead)Arbitrum → Solana → Ethereum (via Relay Protocol / converted to DAI to evade USDC blacklisting) | Signer / operator key compromise | Paused | <$10M | $1.3M | Not confirmed | 75% | Jul 15, 2026 | 6 | Sign in | ||
| Oracle manipulation / private key compromise | Paused | $10M+ | $180M | Not confirmed | 75% | Jul 14, 2026 | 1 | Sign in | |||
| Governance attack | Closed | <$1M | $776K | 50 | 100% | Jul 14, 2026 | 5 | Sign in | |||
| Fee-layer exploit (Uniswap V4 hook) | Resolved | <$10K | $0 | Not confirmed | 75% | Jul 13, 2026 | 6 | Sign in | |||
| Smart contract logic flaw (peg check bypass) | Closed | <$10K | $8.6K | Not confirmed | 100% | Jul 12, 2026 | 0 | Sign in | |||
| Account abstraction / ERC-4337 paymaster abuse | Active | <$1M | $270K | 50 | 75% | Jul 12, 2026 | 4 | Sign in | |||
| Social engineering / brand account hijack | Rugged | <$1M | $135K | Not confirmed | 100% | Jul 11, 2026 | 0 | Sign in | |||
+5 | jscrambler npm Supply Chain Attack — IronWorm Rust Infostealertargets MetaMask / Phantom / Exodus / Coinbase / Trust Wallet — Ethereum / Solana / multi-EVM / Bitcoin | Supply chain attack (npm) — crypto wallet infostealer | Resolved | <$10K | $0 | 1479 | 100% | Jul 10, 2026 | 1 | Sign in | |
Bonzo Lend Oracle Manipulation — Supra BLS Signature BypassHedera (cash-out bridged to Ethereum via LayerZero / laundered through Tornado Cash) | Oracle manipulation | Recovering | <$10M | $9.1M | Not confirmed | 90% | Jul 10, 2026 | 4 | Sign in | ||
Solana Genesis Whale — Suspected Key Compromise & Cross-Chain BridgeSolana → Ethereum | Suspected Key Compromise | Active | $10M+ | $14.2M | 1 | 75% | Jul 9, 2026 | 2 | Sign in | ||
+1 | Injective Labs SDK npm Supply Chain BackdoorInjective (npm SDK / cross-environment: browser / Node / React Native) | Supply Chain Attack | Resolved | <$10K | $0 | Not confirmed | 100% | Jul 7, 2026 | 0 | Sign in | |
| Approval Phishing / Address Poisoning | Closed | <$1M | $800.0K | 1 | 75% | Jul 7, 2026 | 1 | Sign in | |||
| MEV / Same-Block Backrun | Closed | <$10M | $2.0M | 1 | 100% | Jul 6, 2026 | 1 | Sign in | |||
| Governance Attack | Active | $10M+ | $20M | 1 | 75% | Jul 5, 2026 | 3 | Sign in |
Page 6 of 12, showing 25 of 280 incidents
← Back to home
