Estimated amount: $6.0M
<$10MLive fundsSummer.fi Lazy Summer Protocol — Flash Loan NAV Manipulation
Jul 5, 20260 viewsEthereumFlash Loan / NAV ManipulationContained
Discover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Estimated amount: $6.0M
<$10MLive fundsJul 5, 20260 viewsEthereumFlash Loan / NAV ManipulationContained
Estimated amount: $5M
<$10MLive fundsJul 4, 20265 viewsBitcoinEthereumPolygonRootstockTronSolana (BNB ChainMonadArbitrumGnosisOptimismBaseAvaxLineaHyperEVM per Coinspect FAQ)Weak Randomness / Wallet Generation VulnerabilityActive
Estimated amount: $797K
<$1MLive fundsJul 1, 20262 viewsEthereumZero-knowledge protocol logic flaw / proofless deposit exploitPaused
Estimated amount: —
UnknownLive fundsJun 30, 20261 viewsoff-chain npm supply-chain attack; wallet-agnosticSupply chain attack / npm infostealer campaignActive
Estimated amount: $403.4K
<$1MLive fundsJun 30, 20261 viewsEthereumOracle manipulation / wrapped exchange-rate exploitContained
Estimated amount: $12.3K
<$100KLive fundsJun 24, 20261 viewsEthereumSmart contract vulnerability / forged permit signatureActive
Estimated amount: $2.9M
<$10MLive fundsJun 24, 20263 viewsPolygon → EthereumFrontend supply-chain attack (third-party vendor compromise)Contained
Estimated amount: —
UnknownLive fundsJun 23, 20263 viewsAvalanche (frontend attack; fake wallet-connect modal targeted Phantomindicating cross-chainSolana wallet targeting despite Yield Yak being an Avalanche product)Frontend supply-chain attack (Eleven Drainer)Contained
Estimated amount: $261.2K
<$1MLive fundsJun 22, 20263 viewsPolygonReward accounting exploit / flash-loan amplificationActive
Estimated amount: $1.7M
<$10MLive fundsJun 21, 20263 viewsTaiko (Ethereum L2) ↔ EthereumBridge exploit / key compromise (forged withdrawal proofs)Recovering
Estimated amount: $2.4M
<$10MLive fundsJun 20, 20264 viewsCardanoWallet key compromise (predictable key generation)Contained
Estimated amount: —
UnknownLive fundsJun 19, 20263 viewsfrontend attack; fake wallet-connect modal offered PhantomSolflarei.e. targeted Solana wallets in addition to EVMFrontend supply-chain attack (Eleven Drainer)Contained
Estimated amount: $1.1M
<$10MLive fundsJun 19, 20264 viewsBNB Chain → EthereumAMM logic exploit / reserve desynchronizationActive
Estimated amount: $7.5M
<$10MLive fundsJun 19, 20264 viewsEthereumMEV bot exploit / approval hijacking (counter-MEV honeypot)Active
Estimated amount: $4.7M
<$10MLive fundsJun 18, 20261 viewsSecret NetworkCosmos IBCBridge exploit — infinite-mint bug in modified CW20-ICS20 contractContained
Estimated amount: $305K
<$1MLive fundsJun 18, 20262 viewsStarknetSmart contract exploit — fake token CL pool accounting manipulationClosed
Estimated amount: $600K
<$1MLive fundsJun 17, 20260 viewsNamada (Cosmos ecosystemIBC)Cross-chain (IBC) shielded-pool drain / stale indexer maskingActive
Estimated amount: $377.6K
<$1MLive fundsJun 17, 20265 viewsBNB ChainSmart contract exploit — zero-value transferFrom bypass / unauthorized mintClosed
Estimated amount: $2.2M
<$10MLive fundsJun 16, 20262 viewsEthereum L1 (deprecated Private Rollup Bridgesunset 2022)Smart contract exploit — escapeHatch access control flaw / public input binding issueClosed
Estimated amount: $0
<$10KLive fundsJun 15, 20266 viewsHaveno protocol (Monero-based P2P escrowmultisig 2-of-3) — not a smart contract chainBusiness logic exploit — forged AckMessage NACK / unsafe wallet deletionPaused
Estimated amount: $111.1K
<$1MLive fundsJun 15, 20267 viewsBNB ChainSmart contract exploit — missing return statement / double-transfer logic flawClosed
Estimated amount: $2.1K
<$10KLive fundsJun 14, 20263 viewsSolanaSmart contract exploit — missing account check / inflated stake balanceResolved
Estimated amount: $105K
<$1MLive fundsJun 14, 20265 viewsEthereum L1Smart contract exploit — legacy vault redemption math flawContained
Estimated amount: $2.2M
<$10MLive fundsJun 13, 20262 viewsEthereum L1Smart contract exploit — ZK-rollup settlement boundary bypassClosed
Estimated amount: $64.8M
$10M+Live fundsJun 12, 20263 viewsBNB ChainRug pull — whale-controlled supply dumpRugged
| Chain | Title | Type | Status | Severity | Amount | Victims | Progress | Occurred | Live | Views | Watch |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Flash Loan / NAV Manipulation | Contained | <$10M | $6.0M | 258 | 75% | Jul 5, 2026 | 0 | Sign in | |||
+12 | Ill Bloom — Weak Randomness Wallet VulnerabilityBitcoin / Ethereum / Polygon / Rootstock / Tron / Solana ( / BNB Chain / Monad / Arbitrum / Gnosis / Optimism / Base / Avax / Linea / HyperEVM per Coinspect FAQ) | Weak Randomness / Wallet Generation Vulnerability | Active | <$10M | $5M | 431 | 50% | Jul 4, 2026 | 5 | Sign in | |
| Zero-knowledge protocol logic flaw / proofless deposit exploit | Paused | <$1M | $797K | Not confirmed | 75% | Jul 1, 2026 | 2 | Sign in | |||
npm Supply-Chain Campaign — 30+ Malicious DeFi/Polymarket-Themed Packages Deliver Infostealers (SM-2026-780174)off-chain npm supply-chain attack; wallet-agnostic | Supply chain attack / npm infostealer campaign | Active | Unknown | — | Not confirmed | 50% | Jun 30, 2026 | 1 | Sign in | ||
| Oracle manipulation / wrapped exchange-rate exploit | Contained | <$1M | $403.4K | Not confirmed | 75% | Jun 30, 2026 | 1 | Sign in | |||
| Smart contract vulnerability / forged permit signature | Active | <$100K | $12.3K | Not confirmed | 50% | Jun 24, 2026 | 1 | Sign in | |||
Polymarket — Frontend Supply-Chain Phishing DrainPolygon → Ethereum | Frontend supply-chain attack (third-party vendor compromise) | Contained | <$10M | $2.9M | 11 | 75% | Jun 24, 2026 | 3 | Sign in | ||
Yield Yak — Frontend Eleven Drainer InjectionAvalanche (frontend attack; fake wallet-connect modal targeted Phantom / indicating cross-chain / Solana wallet targeting despite Yield Yak being an Avalanche product) | Frontend supply-chain attack (Eleven Drainer) | Contained | Unknown | — | Not confirmed | 50% | Jun 23, 2026 | 3 | Sign in | ||
| Reward accounting exploit / flash-loan amplification | Active | <$1M | $261.2K | Not confirmed | 100% | Jun 22, 2026 | 3 | Sign in | |||
Taiko Bridge — Leaked SGX Signing Key Forged-Proof DrainTaiko (Ethereum L2) ↔ Ethereum | Bridge exploit / key compromise (forged withdrawal proofs) | Recovering | <$10M | $1.7M | Not confirmed | 100% | Jun 21, 2026 | 3 | Sign in | ||
| Wallet key compromise (predictable key generation) | Contained | <$10M | $2.4M | 374 | 100% | Jun 20, 2026 | 4 | Sign in | |||
Gitcoin — Frontend Eleven Drainer Injectionfrontend attack; fake wallet-connect modal offered Phantom / Solflare / i.e. targeted Solana wallets in addition to EVM | Frontend supply-chain attack (Eleven Drainer) | Contained | Unknown | — | Not confirmed | 50% | Jun 19, 2026 | 3 | Sign in | ||
OLPC/LABUBU PancakeSwap V2 Pool — Reserve Desync DrainBNB Chain → Ethereum | AMM logic exploit / reserve desynchronization | Active | <$10M | $1.1M | Not confirmed | 100% | Jun 19, 2026 | 4 | Sign in | ||
| MEV bot exploit / approval hijacking (counter-MEV honeypot) | Active | <$10M | $7.5M | Not confirmed | 75% | Jun 19, 2026 | 4 | Sign in | |||
Axelar-Secret Network ICS-20 Bridge Infinite-Mint ExploitSecret Network / Cosmos IBC | Bridge exploit — infinite-mint bug in modified CW20-ICS20 contract | Contained | <$10M | $4.7M | Not confirmed | 75% | Jun 18, 2026 | 1 | Sign in | ||
| Smart contract exploit — fake token CL pool accounting manipulation | Closed | <$1M | $305K | Not confirmed | 90% | Jun 18, 2026 | 2 | Sign in | |||
Namada Shielded Pools — MASP Drained via IBC Behind a Stale Indexer — Silent Hack Discovered by F12 SecurityNamada (Cosmos ecosystem / IBC) | Cross-chain (IBC) shielded-pool drain / stale indexer masking | Active | <$1M | $600K | Not confirmed | 50% | Jun 17, 2026 | 0 | Sign in | ||
| Smart contract exploit — zero-value transferFrom bypass / unauthorized mint | Closed | <$1M | $377.6K | Not confirmed | 90% | Jun 17, 2026 | 5 | Sign in | |||
Aztec Private Rollup Bridge escapeHatch Exploit — Second Aztec Incident of the WeekEthereum L1 (deprecated Private Rollup Bridge / sunset 2022) | Smart contract exploit — escapeHatch access control flaw / public input binding issue | Closed | <$10M | $2.2M | Not confirmed | 100% | Jun 16, 2026 | 2 | Sign in | ||
RetoSwap / Haveno Forged DepositRequest NACK ExploitHaveno protocol (Monero-based P2P escrow / multisig 2-of-3) — not a smart contract chain | Business logic exploit — forged AckMessage NACK / unsafe wallet deletion | Paused | <$10K | $0 | Not confirmed | 50% | Jun 15, 2026 | 6 | Sign in | ||
| Smart contract exploit — missing return statement / double-transfer logic flaw | Closed | <$1M | $111.1K | Not confirmed | 75% | Jun 15, 2026 | 7 | Sign in | |||
| Smart contract exploit — missing account check / inflated stake balance | Resolved | <$10K | $2.1K | Not confirmed | 100% | Jun 14, 2026 | 3 | Sign in | |||
| Smart contract exploit — legacy vault redemption math flaw | Contained | <$1M | $105K | Not confirmed | 90% | Jun 14, 2026 | 5 | Sign in | |||
| Smart contract exploit — ZK-rollup settlement boundary bypass | Closed | <$10M | $2.2M | Not confirmed | 100% | Jun 13, 2026 | 2 | Sign in | |||
| Rug pull — whale-controlled supply dump | Rugged | $10M+ | $64.8M | Not confirmed | 75% | Jun 12, 2026 | 3 | Sign in |
Page 7 of 12, showing 25 of 280 incidents
← Back to home