#exploit
exploit
104,885 views
331 Discussing
Hot
Latest
BounceBit just erased its own Layer-1: 286.5M BB (~$3M) drained in 14 transactions over 4h52m starting Aug 19 -- and the fix is shutting the whole chain down.
The news: BounceBit (backed by YZi Labs, formerly Binance Labs) confirmed a protocol-level authorization flaw in its Evmos-based L1 let an attacker pull BB from 9 mainnet accounts starting 21:02 UTC Aug 19 -- no private keys, wallets, or exchange accounts touched, a smart-contract logic bug, not a user-side hack. Since the Evmos stack it ran on is now discontinued anyway, BounceBit is permanently sunsetting BounceBit Chain and reissuing BB as a BEP-20 token on BNB Chain from a pre-attack snapshot (block 20,697,260, 21:02:35 UTC Aug 19). The stolen 286.5M BB is excluded; legitimate holders, including staked/unbonding positions, get automatic reissuance -- no claim needed. BB printed a record low of $0.0079 on Aug 20 before bouncing ~16%.
The catch: this isn't a routine bridge patch -- BounceBit is abandoning the L1 its entire "BTC restaking chain" thesis was built on, effectively admitting the core infrastructure was the weak point. A full chain-to-chain migration is operationally fragile: exchange re-listings, wallet contract updates, and DeFi integrations all have to catch up cleanly, and any gap during that window is exactly where the next loss happens. This is ongoing execution risk, not a resolved incident.
Our read: a real structural admission dressed up as a clean fix. Falsifiable watch-point: does the BNB Chain migration complete without a second incident, and does CEX/DeFi liquidity actually follow?
Does abandoning your own Layer-1 restore confidence in a "BTC restaking" thesis, or does it confirm the infrastructure was never solid?
Not financial advice. DYOR.
$BB #BounceBit #CryptoNews #Exploit
The news: BounceBit (backed by YZi Labs, formerly Binance Labs) confirmed a protocol-level authorization flaw in its Evmos-based L1 let an attacker pull BB from 9 mainnet accounts starting 21:02 UTC Aug 19 -- no private keys, wallets, or exchange accounts touched, a smart-contract logic bug, not a user-side hack. Since the Evmos stack it ran on is now discontinued anyway, BounceBit is permanently sunsetting BounceBit Chain and reissuing BB as a BEP-20 token on BNB Chain from a pre-attack snapshot (block 20,697,260, 21:02:35 UTC Aug 19). The stolen 286.5M BB is excluded; legitimate holders, including staked/unbonding positions, get automatic reissuance -- no claim needed. BB printed a record low of $0.0079 on Aug 20 before bouncing ~16%.
The catch: this isn't a routine bridge patch -- BounceBit is abandoning the L1 its entire "BTC restaking chain" thesis was built on, effectively admitting the core infrastructure was the weak point. A full chain-to-chain migration is operationally fragile: exchange re-listings, wallet contract updates, and DeFi integrations all have to catch up cleanly, and any gap during that window is exactly where the next loss happens. This is ongoing execution risk, not a resolved incident.
Our read: a real structural admission dressed up as a clean fix. Falsifiable watch-point: does the BNB Chain migration complete without a second incident, and does CEX/DeFi liquidity actually follow?
Does abandoning your own Layer-1 restore confidence in a "BTC restaking" thesis, or does it confirm the infrastructure was never solid?
Not financial advice. DYOR.
$BB #BounceBit #CryptoNews #Exploit
Another protocol gets absolutely nuked.
Total carnage for MAYAChain. A $1.7M exploit used six chained bugs to drain CACAO, sending the token down 89%. This is a brutal reminder that security is still a massive weak point.
#MAYAChain #Exploit
Total carnage for MAYAChain. A $1.7M exploit used six chained bugs to drain CACAO, sending the token down 89%. This is a brutal reminder that security is still a massive weak point.
#MAYAChain #Exploit
Harmony is rolling back its entire chain to Aug 11 after an exploiter forged roughly 4 billion ONE -- discarding over 109,000 legitimate transactions in the process.
The news: Harmony confirmed Aug 12 that an attacker exploited a cross-shard receipt-validation flaw to illegitimately mint ~4 billion ONE (~26% of circulating supply), sending price sharply lower. On Aug 17, the core team announced a full network rollback to the Aug 11, 11:25pm UTC checkpoint -- discarding 109,126 regular transactions and 315 staking transactions, forged and legitimate alike.
The catch: a rollback erases every real user transaction in that window along with the fraudulent ones, and it can't claw back tokens already cashed out through exchanges before any freeze -- so the real economic damage may be largely irreversible regardless of the rollback. This also echoes Harmony's 2022 bridge hack, undercutting any "problem solved" framing. Some outlets cite far larger forged-balance figures (trillions via repeated replay) not independently confirmed against Harmony's official 4B number -- we're treating 4B as the reliable baseline.
Our read: the rollback addresses the on-chain supply distortion, but rewriting chain history is a controversial precedent, and off-chain damage already done can't be reversed by it. Falsifiable watch-point: does Harmony publish a full post-mortem accounting for exactly how much reached exchanges before any freeze, or does that number stay contested?
Should a chain ever roll back its own history to undo an exploit, or does that break the point of a blockchain?
Not financial advice. DYOR.
$ONE #Harmony #Exploit #CryptoNews #Security
The news: Harmony confirmed Aug 12 that an attacker exploited a cross-shard receipt-validation flaw to illegitimately mint ~4 billion ONE (~26% of circulating supply), sending price sharply lower. On Aug 17, the core team announced a full network rollback to the Aug 11, 11:25pm UTC checkpoint -- discarding 109,126 regular transactions and 315 staking transactions, forged and legitimate alike.
The catch: a rollback erases every real user transaction in that window along with the fraudulent ones, and it can't claw back tokens already cashed out through exchanges before any freeze -- so the real economic damage may be largely irreversible regardless of the rollback. This also echoes Harmony's 2022 bridge hack, undercutting any "problem solved" framing. Some outlets cite far larger forged-balance figures (trillions via repeated replay) not independently confirmed against Harmony's official 4B number -- we're treating 4B as the reliable baseline.
Our read: the rollback addresses the on-chain supply distortion, but rewriting chain history is a controversial precedent, and off-chain damage already done can't be reversed by it. Falsifiable watch-point: does Harmony publish a full post-mortem accounting for exactly how much reached exchanges before any freeze, or does that number stay contested?
Should a chain ever roll back its own history to undo an exploit, or does that break the point of a blockchain?
Not financial advice. DYOR.
$ONE #Harmony #Exploit #CryptoNews #Security
Feed-Creator-6a4013fc3:
区块链现在还有什么意义？除了诈骗还有什么用？
🚨 $WEMIX UNDER SIEGE — $6.25M EXPLOIT SHAKES THE SMART CONTRACT! 💥
No Trade Signal — Alert Only
🔴 The exploit hit like a flash loan nightmare: an attacker minted and transferred WEMIX tokens directly from the smart contract. 📊 Initial reaction suggests liquidity pools are bleeding, but the team's swift response could act as a firewall. 📌 This isn't a full-blown collapse yet — it's a test of their incident response muscle. 💡 History shows fast-recovering projects often trap late sellers. 🛡️
💬 Will the WEMIX team freeze the exploited contract and claw back funds, or are we watching a slow bleed into support levels? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #WEMIX #Exploit #CryptoAlert #SmartContract
💥 🦈
No Trade Signal — Alert Only
🔴 The exploit hit like a flash loan nightmare: an attacker minted and transferred WEMIX tokens directly from the smart contract. 📊 Initial reaction suggests liquidity pools are bleeding, but the team's swift response could act as a firewall. 📌 This isn't a full-blown collapse yet — it's a test of their incident response muscle. 💡 History shows fast-recovering projects often trap late sellers. 🛡️
💬 Will the WEMIX team freeze the exploited contract and claw back funds, or are we watching a slow bleed into support levels? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #WEMIX #Exploit #CryptoAlert #SmartContract
💥 🦈
⚠️ DEFI SUMMERFI PROTOCOL ANNOUNCES ITS CLOSURE AFTER A MASSIVE EXPLOIT 🛑📉
💥 Impact and Final Shutdown
The decentralized finance protocol SummerFi (formerly known as Oasis.app) formally announced that it will begin the process of winding down and gradually liquidating its services (sunsetting) after failing to recover from the impact caused by a critical security exploit in its smart contracts.
🛡️ Withdrawals and Liquidation
The development team urged all users and investors to immediately withdraw their liquidity and close their leveraged positions through the official interface before the platform’s final disconnection to avoid capital losses.
📊 Impact on the DeFi Ecosystem
SummerFi’s exit serves as another reminder of the security risks in smart contracts and DeFi infrastructure, adding volatility to the lending and decentralized yield management sector.
#SummerFi #DeFi #Exploit #CryptoNews #BinanceSquare
$SUN
$BTC
$ETH
💥 Impact and Final Shutdown
The decentralized finance protocol SummerFi (formerly known as Oasis.app) formally announced that it will begin the process of winding down and gradually liquidating its services (sunsetting) after failing to recover from the impact caused by a critical security exploit in its smart contracts.
🛡️ Withdrawals and Liquidation
The development team urged all users and investors to immediately withdraw their liquidity and close their leveraged positions through the official interface before the platform’s final disconnection to avoid capital losses.
📊 Impact on the DeFi Ecosystem
SummerFi’s exit serves as another reminder of the security risks in smart contracts and DeFi infrastructure, adding volatility to the lending and decentralized yield management sector.
#SummerFi #DeFi #Exploit #CryptoNews #BinanceSquare
$SUN
$BTC
$ETH
🚨 $AFX EXPLOIT – $24M DRAINED, ATTACKER FLOODS ETH WITH FRESH LIQUIDITY! 💣
📌 AFX Trade just got gutted for 24.15M USDC – attacker bridged it straight to Ethereum and swapped into 12,467 ETH at $1,937 average. This isn't random – it's a classic exit play 💡
💥 The moment those USDC hit the order books, buyer pressure on ETH spiked. Smart money? No – this is forced demand from stolen capital. The same pattern we've seen after every major DeFi heist – sell the stablecoins, buy the blue chip token of choice, then wash out through mixers or CEXs. 📊
⚠️ No official recovery update yet. If the attacker dumps those ETH in chunks, we could see local resistance near $1,950 get tested. But for now, ETH is absorbing a 24M injection. 💬 Do you think this buy pressure gets absorbed cleanly or does the hacker unwind it into a cascade? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #AFX #ETH #DeFi #Exploit #Crypto
🛡️ 🔍
📌 AFX Trade just got gutted for 24.15M USDC – attacker bridged it straight to Ethereum and swapped into 12,467 ETH at $1,937 average. This isn't random – it's a classic exit play 💡
💥 The moment those USDC hit the order books, buyer pressure on ETH spiked. Smart money? No – this is forced demand from stolen capital. The same pattern we've seen after every major DeFi heist – sell the stablecoins, buy the blue chip token of choice, then wash out through mixers or CEXs. 📊
⚠️ No official recovery update yet. If the attacker dumps those ETH in chunks, we could see local resistance near $1,950 get tested. But for now, ETH is absorbing a 24M injection. 💬 Do you think this buy pressure gets absorbed cleanly or does the hacker unwind it into a cascade? 👇
⚠️ Not financial advice. Always manage your risk. 🛡️
🏷️ #AFX #ETH #DeFi #Exploit #Crypto
🛡️ 🔍
$OST SUFFERS $23.7M EXPLOIT - TRADERS' FUNDS SAFE 🔥
On July 15th, Ostium's liquidity treasury was hit for 23.7 million USDC — attacker faked price reports through off-chain infrastructure. But here's the key: trader collateral sits in a separate smart contract and was untouched. All positions remain open and trading was frozen within 60 minutes of the first attack.
The team is working with Mandiant, zeroShadow, and law enforcement to chase the funds. Opened positions will be marked to market when trading resumes, unaffected by the suspension period. How do you see this impacting DeFi protocol trust going forward?
Not financial advice. Always manage your risk.
#Ostium #Exploit #DeFi #SecurityAlert
🔥
On July 15th, Ostium's liquidity treasury was hit for 23.7 million USDC — attacker faked price reports through off-chain infrastructure. But here's the key: trader collateral sits in a separate smart contract and was untouched. All positions remain open and trading was frozen within 60 minutes of the first attack.
The team is working with Mandiant, zeroShadow, and law enforcement to chase the funds. Opened positions will be marked to market when trading resumes, unaffected by the suspension period. How do you see this impacting DeFi protocol trust going forward?
Not financial advice. Always manage your risk.
#Ostium #Exploit #DeFi #SecurityAlert
🔥
Thetanuts Finance was exploited on June 15 after an attacker targeted a legacy Ethereum vault and drained assets valued at about $2.1 million.
According to Blockaid, ExVul, and PeckShield, the attack exploited a low-supply accounting flaw in the vault's minting and redemption calculations. The attacker used flash-loaned capital to reduce token supply to an extremely low level, then reminted tokens at a discounted rate due to rounding behavior in the contract logic.
ExVul's analysis found that the vault's redemption formula became vulnerable when the total supply approached near-zero levels. This allowed the attacker to generate inflated redemption values and repeatedly execute mint-and-claim transactions that withdrew more assets than were deposited.
Initial estimates placed losses near $105,500 in USDC. A later analysis by PeckShield reported a total impact of $2.1 million.
PeckShield also stated that about $2 million worth of option tokens were secured by whitehat actors. The attacker converted about $105,000 in USDC into ETH and continued to hold additional assets linked to the exploit.
Thetanuts Finance said the affected vault was a deprecated product that had been migrated years ago and was not connected to any current contracts or active products. The team plans to release a full post-mortem after completing its investigation.
The incident serves as another reminder that legacy DeFi infrastructure can remain vulnerable even after protocols migrate users to newer systems.
#exploit #SecurityAlert #Thetanuts #CryptoNews #CryptocurrencyNews
According to Blockaid, ExVul, and PeckShield, the attack exploited a low-supply accounting flaw in the vault's minting and redemption calculations. The attacker used flash-loaned capital to reduce token supply to an extremely low level, then reminted tokens at a discounted rate due to rounding behavior in the contract logic.
ExVul's analysis found that the vault's redemption formula became vulnerable when the total supply approached near-zero levels. This allowed the attacker to generate inflated redemption values and repeatedly execute mint-and-claim transactions that withdrew more assets than were deposited.
Initial estimates placed losses near $105,500 in USDC. A later analysis by PeckShield reported a total impact of $2.1 million.
PeckShield also stated that about $2 million worth of option tokens were secured by whitehat actors. The attacker converted about $105,000 in USDC into ETH and continued to hold additional assets linked to the exploit.
Thetanuts Finance said the affected vault was a deprecated product that had been migrated years ago and was not connected to any current contracts or active products. The team plans to release a full post-mortem after completing its investigation.
The incident serves as another reminder that legacy DeFi infrastructure can remain vulnerable even after protocols migrate users to newer systems.
#exploit #SecurityAlert #Thetanuts #CryptoNews #CryptocurrencyNews
🚨 ANOTHER CRYPTO TOKEN JUST GOT NUKED TO ZERO 🩸😱
$TSR/USDT collapsed nearly 100% in a single day, crashing to around $0.0002 after a reported exploit on $BNB Chain. 👀
Here’s what allegedly happened:
⚠️ An exploiter minted 99 MILLION $TSR
⚠️ Dumped the tokens on the market
⚠️ Extracted roughly $2.5M in $USDT
⚠️ Bridged funds to Ethereum
⚠️ Moved 1,285+ $ETH through Tornado Cash
The result?
📉 Price destruction
📉 Liquidity wiped out
📉 Holders left devastated
This is a brutal reminder of one of crypto’s biggest risks:
A project can look strong…
Until a smart contract vulnerability, exploit, or token mint issue turns everything upside down overnight. 🔥
In just hours:
💸 Millions disappeared
💸 Confidence vanished
💸 A token was effectively wiped out
The harsh reality?
In crypto, risk management matters more than chasing the next 100x.
Because sometimes one exploit is all it takes to erase an entire market. 👀
Stay safe.
Verify projects.
And never underestimate smart contract risk. ⚠️
$BNB
#Crypto #BNBChain #Exploit #Trading
$TSR/USDT collapsed nearly 100% in a single day, crashing to around $0.0002 after a reported exploit on $BNB Chain. 👀
Here’s what allegedly happened:
⚠️ An exploiter minted 99 MILLION $TSR
⚠️ Dumped the tokens on the market
⚠️ Extracted roughly $2.5M in $USDT
⚠️ Bridged funds to Ethereum
⚠️ Moved 1,285+ $ETH through Tornado Cash
The result?
📉 Price destruction
📉 Liquidity wiped out
📉 Holders left devastated
This is a brutal reminder of one of crypto’s biggest risks:
A project can look strong…
Until a smart contract vulnerability, exploit, or token mint issue turns everything upside down overnight. 🔥
In just hours:
💸 Millions disappeared
💸 Confidence vanished
💸 A token was effectively wiped out
The harsh reality?
In crypto, risk management matters more than chasing the next 100x.
Because sometimes one exploit is all it takes to erase an entire market. 👀
Stay safe.
Verify projects.
And never underestimate smart contract risk. ⚠️
$BNB
#Crypto #BNBChain #Exploit #Trading
At this point of continuous exploitation, questions need to be asked.
1. Who's behind this ?
2. How did you build your protocols?
3. What security majors did you take?
At this point we need to consider security,
Of late projects are building with real utilities
We have a lot to consider, we are all building the future here, and need the PROPER SECURITY it deserves.
Crypto currency will not gain mass adoption if it continues like this. LETS BUILD SECURITY
#exploit
1. Who's behind this ?
2. How did you build your protocols?
3. What security majors did you take?
At this point we need to consider security,
Of late projects are building with real utilities
We have a lot to consider, we are all building the future here, and need the PROPER SECURITY it deserves.
Crypto currency will not gain mass adoption if it continues like this. LETS BUILD SECURITY
#exploit
🚨 Breaking
BonkDAO just got wrecked... 🚨 $20M lost to a malicious governance attack!! Upbit's already freezing $BONK deposits and withdrawals... seriously watch those governance votes, things move fast!! 🛑
#Exploit
BonkDAO just got wrecked... 🚨 $20M lost to a malicious governance attack!! Upbit's already freezing $BONK deposits and withdrawals... seriously watch those governance votes, things move fast!! 🛑
#Exploit
Stablecoins face massive exploit.
StablR Stablecoins Depeg After $2.8 Million Exploit
StablR's EURR and USDR depegged after a $2.8 million exploit, sparking concerns about stablecoin security - traders watch for further depegging or regulatory action. The attacker used a compromised multisig key to mint and swap $10.4M in tokens, causing instability. This incident highlights the need for robust security measures.
#Crypto #Stablecoins #Exploit #Blockchain
StablR Stablecoins Depeg After $2.8 Million Exploit
StablR's EURR and USDR depegged after a $2.8 million exploit, sparking concerns about stablecoin security - traders watch for further depegging or regulatory action. The attacker used a compromised multisig key to mint and swap $10.4M in tokens, causing instability. This incident highlights the need for robust security measures.
#Crypto #Stablecoins #Exploit #Blockchain
$ZRO EXPLOIT TRIGGERS $2.4M LOSS — LIQUIDITY SWEEP INCOMING? ⚡
LayerZero Executor wallets got hit for $2.4 million across multiple chains. Not a bank-breaker for the protocol, but these events usually shake out the paper hands and create a liquidity vacuum below.
Volume is already spiking on the 4H and order book depth shows a thin bid wall around the $3.80 area. If that gets swept, expect a fast bounce back toward $4.20 — classic exploitation pattern. Are you watching for a dip buy or staying out?
Not financial advice. Always manage your risk.
#ZRO #LayerZero #Exploit #CryptoNews
⚡
LayerZero Executor wallets got hit for $2.4 million across multiple chains. Not a bank-breaker for the protocol, but these events usually shake out the paper hands and create a liquidity vacuum below.
Volume is already spiking on the 4H and order book depth shows a thin bid wall around the $3.80 area. If that gets swept, expect a fast bounce back toward $4.20 — classic exploitation pattern. Are you watching for a dip buy or staying out?
Not financial advice. Always manage your risk.
#ZRO #LayerZero #Exploit #CryptoNews
⚡
🚨 $H Crashes 85.3% 📉💥
$H has plunged 85.3% after an exploit linked to the compromise of a foundation member’s private keys.
🔓 Private keys compromised 💸 Massive token dump 📉 Market confidence shattered
A brutal reminder: security failures can wipe out months of gains in hours.
#H #Crypto #Hack #exploit 🚨💀
$H has plunged 85.3% after an exploit linked to the compromise of a foundation member’s private keys.
🔓 Private keys compromised 💸 Massive token dump 📉 Market confidence shattered
A brutal reminder: security failures can wipe out months of gains in hours.
#H #Crypto #Hack #exploit 🚨💀
Bonzo Lend suffered $9 million in losses due to an Oracle error on Hedera
- The Bonzo Lend lending platform was subjected to a publicly disclosed attack exploiting an oracle vulnerability.
- The incident is estimated to have caused $9 million in damage.
- The attacker used a flaw in Supra’s on-chain oracle verification module to inflate the value of SAUCE collateral.
- The attacker then borrowed $9 million from Bonzo Lend on the Hedera network.
- The incident once again highlights security risks in DeFi protocols and the importance of reliable oracles.
#BinanceSquare #CryptoNews #Exploit #DeFi #Hedera Oracle
$sauce sauce $hbar hbar
vlikevn Titanbot
Source: CoinTelegraph
- The Bonzo Lend lending platform was subjected to a publicly disclosed attack exploiting an oracle vulnerability.
- The incident is estimated to have caused $9 million in damage.
- The attacker used a flaw in Supra’s on-chain oracle verification module to inflate the value of SAUCE collateral.
- The attacker then borrowed $9 million from Bonzo Lend on the Hedera network.
- The incident once again highlights security risks in DeFi protocols and the importance of reliable oracles.
#BinanceSquare #CryptoNews #Exploit #DeFi #Hedera Oracle
$sauce sauce $hbar hbar
vlikevn Titanbot
Source: CoinTelegraph
Log in to explore more content