Binance Square
#defisecurity

defisecurity

128,459 views
674 Discussing
Crypto Benzai
·
--
One Key, $12.5M Gone: 79thVault Drained on BNB Chain A wallet with special admin powers over the 79AU token pulled 2.01M tokens out of its PancakeSwap pool and sold them back in. That cut the pool's USDT from $15.2M to $3.9M, and the attacker walked off with 16,249 $BNB (~$12.5M) Lookonchain and CertiK point to a likely leaked operator key. The team revoked the role and offered a 10% bounty. Lesson: check who holds the admin keys before you ape in. Do you check token permissions before buying? #DeFiSecurity #BNBChain #CryptoSafety
One Key, $12.5M Gone: 79thVault Drained on BNB Chain
A wallet with special admin powers over the 79AU token pulled 2.01M tokens out of its PancakeSwap pool and sold them back in. That cut the pool's USDT from $15.2M to $3.9M, and the attacker walked off with 16,249 $BNB (~$12.5M) Lookonchain and CertiK point to a likely leaked operator key. The team revoked the role and offered a 10% bounty. Lesson: check who holds the admin keys before you ape in.
Do you check token permissions before buying?
#DeFiSecurity #BNBChain #CryptoSafety
🚨 $6M drained from a Base vault controlled by a 7-signer Safe — owners still unknown. 1,783 wstETH moved, Base and Aave contracts untouched. This points to a private key compromise or insider risk, not protocol failure. ETH holders should watch for similar stealth outflows on L2s. Could this signal rising custody risks in DeFi? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 $6M drained from a Base vault controlled by a 7-signer Safe — owners still unknown. 1,783 wstETH moved, Base and Aave contracts untouched. This points to a private key compromise or insider risk, not protocol failure. ETH holders should watch for similar stealth outflows on L2s. Could this signal rising custody risks in DeFi?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
🚨 بروتوكول NEAR Intents يحدد هوية المخترق ويمنحه مهلة 48 ساعة أعلن بروتوكول NEAR Intents اللامركزي عن تمكنه من تحديد هوية الفرد المسؤول عن الاختراق الأخير الذي أدى إلى سرقة حوالي 3.8 مليون دولار. وقد منحت الإدارة المخترق مهلة 48 ساعة لإعادة الأموال، مؤكدة على اتخاذ الإجراءات القانونية اللازمة في حال عدم الاستجابة. ━━━━━━━━━━━━━━ 📊 التأثير: 📈 مرتفع 🏷️ DEFI #NEARProtocol #DeFiSecurity #BlockchainNews #CryptoCrime 📰 المصدر: cointelegraph.com
🚨 بروتوكول NEAR Intents يحدد هوية المخترق ويمنحه مهلة 48 ساعة

أعلن بروتوكول NEAR Intents اللامركزي عن تمكنه من تحديد هوية الفرد المسؤول عن الاختراق الأخير الذي أدى إلى سرقة حوالي 3.8 مليون دولار.
وقد منحت الإدارة المخترق مهلة 48 ساعة لإعادة الأموال، مؤكدة على اتخاذ الإجراءات القانونية اللازمة في حال عدم الاستجابة.

━━━━━━━━━━━━━━
📊 التأثير: 📈 مرتفع
🏷️ DEFI

#NEARProtocol #DeFiSecurity #BlockchainNews #CryptoCrime

📰 المصدر: cointelegraph.com
🚨 A third-party Aave adapter was exploited, draining ~114 ETH from compromised Safe multisig wallets. Aave v3 core remains secure; the flaw lay in the FlashLoopAdapter integration. This highlights risks in peripheral DeFi tools, even when base protocols are sound. Traders should audit third-party contracts before interacting with yield strategies. How deep does the DeFi supply chain risk go? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 A third-party Aave adapter was exploited, draining ~114 ETH from compromised Safe multisig wallets. Aave v3 core remains secure; the flaw lay in the FlashLoopAdapter integration. This highlights risks in peripheral DeFi tools, even when base protocols are sound. Traders should audit third-party contracts before interacting with yield strategies.
How deep does the DeFi supply chain risk go?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
Another DeFi exploit to watch A custom FlashLoopAdapter managing Aave v3 positions was exploited on Ethereum, resulting in a $305,000 loss across two Safe wallets after an attacker bypassed access controls. #Aave #DeFiSecurity ‎
Another DeFi exploit to watch

A custom FlashLoopAdapter managing Aave v3 positions was exploited on Ethereum, resulting in a $305,000 loss across two Safe wallets after an attacker bypassed access controls.

#Aave #DeFiSecurity ‎
🚨 NEAR Intents says it has identified the hacker behind the $3.8M exploit and issued a 48-hour ultimatum for fund return. While recovery remains uncertain, the transparency may restore some confidence in the protocol’s security posture. Traders are watching for on-chain signals of fund movement or developer action. Could this deter future attacks on DeFi platforms? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents says it has identified the hacker behind the $3.8M exploit and issued a 48-hour ultimatum for fund return. While recovery remains uncertain, the transparency may restore some confidence in the protocol’s security posture. Traders are watching for on-chain signals of fund movement or developer action. Could this deter future attacks on DeFi platforms?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents exploited for $3.8M due to a bug impacting cross-chain deposits/withdrawals. Team pledges full reimbursement. Highlights ongoing security risks in DeFi infrastructure. Market may see short-term volatility as trust is tested. How will NEAR recover user confidence after this breach? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents exploited for $3.8M due to a bug impacting cross-chain deposits/withdrawals. Team pledges full reimbursement. Highlights ongoing security risks in DeFi infrastructure. Market may see short-term volatility as trust is tested. How will NEAR recover user confidence after this breach?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
Another day another exploit NEAR Intents just got hit by a $3.8 million exploit. This is just more fuel for the fire in a year already defined by massive security failures across the space. #NearProtocol #DeFiSecurity ‎
Another day another exploit

NEAR Intents just got hit by a $3.8 million exploit. This is just more fuel for the fire in a year already defined by massive security failures across the space.

#NearProtocol #DeFiSecurity ‎
🚨 Bitget hacker swap attempts exceeded $50M, testing NEAR Intents’ permissionless design. Most blocked funds rerouted via other providers, highlighting resilience but raising questions about real-world security under pressure. Market may reassess trust in intent-based layers amid rising exploit sophistication. How does NEAR balance openness with defense against large-scale attacks? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 Bitget hacker swap attempts exceeded $50M, testing NEAR Intents’ permissionless design. Most blocked funds rerouted via other providers, highlighting resilience but raising questions about real-world security under pressure. Market may reassess trust in intent-based layers amid rising exploit sophistication.
How does NEAR balance openness with defense against large-scale attacks?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents blocked $50M linked to Bitget hackers, showing proactive on-chain defense. Unlike THORChain’s neutral stance, this highlights a security-first approach that could boost trust in NEAR’s ecosystem. Market may view this as a bullish signal for protocol integrity. How does selective censorship affect long-term decentralization ideals? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents blocked $50M linked to Bitget hackers, showing proactive on-chain defense. Unlike THORChain’s neutral stance, this highlights a security-first approach that could boost trust in NEAR’s ecosystem. Market may view this as a bullish signal for protocol integrity.
How does selective censorship affect long-term decentralization ideals?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 Scammers mimicked the GIWA L2 with a fake RPC, bridge, and Chain ID 9134, tricking 1,333 wallets into sending 767 ETH before draining funds. This highlights rising sophistication in DeFi exploits targeting layer-2 expectations. Always verify network contracts and RPCs—never trust UI alone. How deep does this rabbit hole go? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 Scammers mimicked the GIWA L2 with a fake RPC, bridge, and Chain ID 9134, tricking 1,333 wallets into sending 767 ETH before draining funds. This highlights rising sophistication in DeFi exploits targeting layer-2 expectations. Always verify network contracts and RPCs—never trust UI alone. How deep does this rabbit hole go? #DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
🚨 Scammers deployed a fake Giwa-backed ETH L2 chain, stealing over 760 ETH from users. DYORSWAP identified the fraud and initiated a compensation process. This highlights rising risks in L2 ecosystems and the need for rigorous contract verification before bridging funds. Traders should scrutinize chain authenticity and avoid unverified bridges. How can users better detect fake L2 deployments before connecting wallets? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 Scammers deployed a fake Giwa-backed ETH L2 chain, stealing over 760 ETH from users. DYORSWAP identified the fraud and initiated a compensation process. This highlights rising risks in L2 ecosystems and the need for rigorous contract verification before bridging funds. Traders should scrutinize chain authenticity and avoid unverified bridges.
How can users better detect fake L2 deployments before connecting wallets?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
LayerZero is facing severe pressure as a massive $292M lawsuit challenges its core security design following the KelpDAO rsETH exploit. With nearly $15B exiting the protocol and mounting reputational damage, the legal battle goes beyond a financial dispute—it puts omnichain trust on trial. Cross-chain infra must prioritize bulletproof validation, or user capital will keep fleeing. Security is everything in DeFi. #LayerZero #DeFiSecurity #CryptoNews
LayerZero is facing severe pressure as a massive $292M lawsuit challenges its core security design following the KelpDAO rsETH exploit. With nearly $15B exiting the protocol and mounting reputational damage, the legal battle goes beyond a financial dispute—it puts omnichain trust on trial. Cross-chain infra must prioritize bulletproof validation, or user capital will keep fleeing. Security is everything in DeFi. #LayerZero #DeFiSecurity #CryptoNews
🔥 A compromised admin key isn’t a “hack”—it’s a governance failure that can drain millions in seconds. 📊 The Wasabi Protocol lost $4.5 M after an admin deployer key without timelock or multisig was seized, echoing Drift’s $285 M breach earlier this week #DeFiSecurity #SmartContractRisk. 💡 With #Bitcoin trading at $80,416, RSI 61.2 and open interest $8.76 B, the market shows bullish confidence (funding +0.0100% longs paying), yet governance lapses still bite, underscoring why #CryptoSafety will separate resilient projects from the rest. 📌 Practical move: audit any protocol you stake in for multisig controls and timelocks; prioritize platforms that publish transparent governance dashboards before allocating capital. ❓ How do you vet a project’s contract security—relying on community audits, formal verification, or on‑chain monitoring tools?
🔥 A compromised admin key isn’t a “hack”—it’s a governance failure that can drain millions in seconds.

📊 The Wasabi Protocol lost $4.5 M after an admin deployer key without timelock or multisig was seized, echoing Drift’s $285 M breach earlier this week #DeFiSecurity #SmartContractRisk.

💡 With #Bitcoin trading at $80,416, RSI 61.2 and open interest $8.76 B, the market shows bullish confidence (funding +0.0100% longs paying), yet governance lapses still bite, underscoring why #CryptoSafety will separate resilient projects from the rest.

📌 Practical move: audit any protocol you stake in for multisig controls and timelocks; prioritize platforms that publish transparent governance dashboards before allocating capital.

❓ How do you vet a project’s contract security—relying on community audits, formal verification, or on‑chain monitoring tools?
中文版: MEV机器人太秀了!黑客想通过自定义Safe模块搞事情,偷走770万美元rsETH,结果被"Yoink"机器人先下手为强,截获了赃款。Kelp赶紧冻结了接收地址。这表明DeFi安全机制在进化,黑客空间被压缩。短期内rsETH价格可能因消息影响波动,但长期看,这类积极事件反而能增强市场信心。#DeFiSecurity #MEVProtection $rsETH $ETH 英文版: MEV bot just pulled off the ultimate flex! A hacker tried exploiting a custom Safe module to steal $7.7M in rsETH, but the "Yoink" bot front-ran the attack and snatched the funds before Kelp froze the receiving address. This shows DeFi security is evolving fast, squeezing hackers out. Short-term rsETH price might see volatility, but long-term, these positive events actually boost market confidence. #DeFiSecurity #MEVProtection $rsETH $ETH
中文版:
MEV机器人太秀了!黑客想通过自定义Safe模块搞事情,偷走770万美元rsETH,结果被"Yoink"机器人先下手为强,截获了赃款。Kelp赶紧冻结了接收地址。这表明DeFi安全机制在进化,黑客空间被压缩。短期内rsETH价格可能因消息影响波动,但长期看,这类积极事件反而能增强市场信心。#DeFiSecurity #MEVProtection $rsETH $ETH

英文版:
MEV bot just pulled off the ultimate flex! A hacker tried exploiting a custom Safe module to steal $7.7M in rsETH, but the "Yoink" bot front-ran the attack and snatched the funds before Kelp froze the receiving address. This shows DeFi security is evolving fast, squeezing hackers out. Short-term rsETH price might see volatility, but long-term, these positive events actually boost market confidence. #DeFiSecurity #MEVProtection $rsETH $ETH
Article
Structural Security: XRPL Proposal Eliminates Flash Loan RiskCan sacrificing a core decentralized finance tool protect ecosystem liquidity, or will it stifle institutional adoption? A major structural shift is heating up on the XRP Ledger. The viral discussion under #XRPLProposalBlocksFlashLoans highlights a major architectural evolution in blockchain security. A newly introduced automated market maker (AMM) draft amendment has proposed making flash loan exploits "structurally impossible" across the network. By enforcing strictly atomic transactions that lack composable intra-transaction calls, the network eliminates the exact borrow-manipulate-repay sequences that hackers rely on. The development addresses a massive pain point for Web3 security. Recent high-profile exploits on protocols like Thorchain and Drift have drained hundreds of millions of dollars using flash loan vectors, fueling a massive demand for structural exploit resistance. However, this safety feature comes with a definitive tradeoff: it permanently blocks legitimate, capital-efficient DeFi utilities like instantaneous arbitrage and collateral swaps. The Binance Square community is highly divided over the economic impact. While safety advocates argue that built-in exploit prevention will attract cautious institutional investors looking to safeguard their real-world assets (RWA), traders worry it might leave the ecosystem trailing behind more flexible, highly liquid networks. Key Tokens Impacted by the Security Amendment $XRP (XRP): The native asset powering the ledger, experiencing heightened volatility as node operators review the proposal.$AAVE (Aave): The leading Ethereum-based lending protocol, serving as a baseline comparison for legacy flash loan utility.$RUNE (THORChain): Heavily discussed on the boards following recent exploit vulnerabilities, putting the spotlight back on multi-chain cross-security. #XRPL #DeFiSecurity #CryptoSafety

Structural Security: XRPL Proposal Eliminates Flash Loan Risk

Can sacrificing a core decentralized finance tool protect ecosystem liquidity, or will it stifle institutional adoption? A major structural shift is heating up on the XRP Ledger.
The viral discussion under #XRPLProposalBlocksFlashLoans highlights a major architectural evolution in blockchain security. A newly introduced automated market maker (AMM) draft amendment has proposed making flash loan exploits "structurally impossible" across the network. By enforcing strictly atomic transactions that lack composable intra-transaction calls, the network eliminates the exact borrow-manipulate-repay sequences that hackers rely on.
The development addresses a massive pain point for Web3 security. Recent high-profile exploits on protocols like Thorchain and Drift have drained hundreds of millions of dollars using flash loan vectors, fueling a massive demand for structural exploit resistance. However, this safety feature comes with a definitive tradeoff: it permanently blocks legitimate, capital-efficient DeFi utilities like instantaneous arbitrage and collateral swaps.
The Binance Square community is highly divided over the economic impact. While safety advocates argue that built-in exploit prevention will attract cautious institutional investors looking to safeguard their real-world assets (RWA), traders worry it might leave the ecosystem trailing behind more flexible, highly liquid networks.
Key Tokens Impacted by the Security Amendment
$XRP (XRP): The native asset powering the ledger, experiencing heightened volatility as node operators review the proposal.$AAVE (Aave): The leading Ethereum-based lending protocol, serving as a baseline comparison for legacy flash loan utility.$RUNE (THORChain): Heavily discussed on the boards following recent exploit vulnerabilities, putting the spotlight back on multi-chain cross-security.
#XRPL #DeFiSecurity #CryptoSafety
🚨 $BTX LIQUIDITY DRAINED AS FLASH LOAN EXPLOIT EXPOSES ORACLE VULNERABILITY ⚠️ 🔍 BeatSwap ($BTX ) suffered a contract exploit draining roughly $77.5K (2.98M $BTX ) through spot price manipulation. The attacker deployed a 6M $BTX flash loan into a DEX pool to artificially crush spot pricing metrics before calling deposit functions to mint skewed LP positions. 📊 This attack vector succeeded by exploiting a missing Time-Weighted Average Price (TWAP) implementation and lacking price deviation safeguards. When smart contracts rely solely on instantaneous spot prices, massive temporary liquidity shifts can easily distort structural mechanics for immediate extraction. 💬 Should DEX protocols mandate TWAP filters before launching LP conversion contracts? 👇 ⚠️ Not financial advice. Always manage your risk. 🛡️ 🏷️ #BTX #DeFiSecurity #SmartMoney #CryptoAnalysis 🔍 🛡️
🚨 $BTX LIQUIDITY DRAINED AS FLASH LOAN EXPLOIT EXPOSES ORACLE VULNERABILITY ⚠️

🔍 BeatSwap ($BTX ) suffered a contract exploit draining roughly $77.5K (2.98M $BTX ) through spot price manipulation. The attacker deployed a 6M $BTX flash loan into a DEX pool to artificially crush spot pricing metrics before calling deposit functions to mint skewed LP positions.

📊 This attack vector succeeded by exploiting a missing Time-Weighted Average Price (TWAP) implementation and lacking price deviation safeguards. When smart contracts rely solely on instantaneous spot prices, massive temporary liquidity shifts can easily distort structural mechanics for immediate extraction.

💬 Should DEX protocols mandate TWAP filters before launching LP conversion contracts? 👇

⚠️ Not financial advice. Always manage your risk. 🛡️

🏷️ #BTX #DeFiSecurity #SmartMoney #CryptoAnalysis

🔍 🛡️
🚨 BREAKING !!! CIRCLE ĐÓNG BĂNG 12.6 TRIỆU USD cUSDC CỦA GIAO THỨC BẢO MẬT ZAMA 🔴 ZachXBT tiết lộ Circle có thể đã blacklist địa chỉ hợp đồng cUSDC của Zama trên Ethereum, đóng băng khoảng 12.6 triệu USD tiền của người dùng 💸 Địa chỉ bị đóng băng trước đó tham gia vote quản trị Overnight Finance về phân bổ ngân quỹ 🛠 Zama dường như không nhận được thông báo trước khi lệnh đóng băng được thực thi, trong khi một số người dùng cáo buộc đội dự án rug pull 📊 ZachXBT chỉ ra nguyên đơn trong vụ kiện dân sự liên quan — Patagon Management — từng có tiền sử tấn công DAO và chiếm đoạt giao thức. Vụ việc còn nhiều ẩn số cần làm rõ. #DeFiSecurity #Stablecoin $ETH $BTC $HEI
🚨 BREAKING !!!

CIRCLE ĐÓNG BĂNG 12.6 TRIỆU USD cUSDC CỦA GIAO THỨC BẢO MẬT ZAMA 🔴

ZachXBT tiết lộ Circle có thể đã blacklist địa chỉ hợp đồng cUSDC của Zama trên Ethereum, đóng băng khoảng 12.6 triệu USD tiền của người dùng 💸

Địa chỉ bị đóng băng trước đó tham gia vote quản trị Overnight Finance về phân bổ ngân quỹ 🛠

Zama dường như không nhận được thông báo trước khi lệnh đóng băng được thực thi, trong khi một số người dùng cáo buộc đội dự án rug pull 📊

ZachXBT chỉ ra nguyên đơn trong vụ kiện dân sự liên quan — Patagon Management — từng có tiền sử tấn công DAO và chiếm đoạt giao thức. Vụ việc còn nhiều ẩn số cần làm rõ.

#DeFiSecurity #Stablecoin

$ETH $BTC $HEI
$NEWT IS SHIFTING WHERE DEFI SECURITY BEGINS 🧠 Most protocols focus on stopping attacks after they execute. Newton Protocol flips that by validating intent and risk before settlement. This isn't just another AI wrapper — it's rethinking the timing of security itself. As crypto moves toward intent-based execution and AI agents making more decisions, the moment of validation becomes critical. The question isn't just how fast a transaction executes, but whether it should execute at all. But can pre-settlement checks hold up when markets go chaotic, not predictable? That's where design meets reality. Are you betting on prevention or cleanup? Not financial advice. Always manage your risk. #NEWT #DeFiSecurity #IntentBased #CryptoInnovation 💎
$NEWT IS SHIFTING WHERE DEFI SECURITY BEGINS 🧠

Most protocols focus on stopping attacks after they execute. Newton Protocol flips that by validating intent and risk before settlement. This isn't just another AI wrapper — it's rethinking the timing of security itself.

As crypto moves toward intent-based execution and AI agents making more decisions, the moment of validation becomes critical. The question isn't just how fast a transaction executes, but whether it should execute at all.

But can pre-settlement checks hold up when markets go chaotic, not predictable? That's where design meets reality. Are you betting on prevention or cleanup?

Not financial advice. Always manage your risk.

#NEWT #DeFiSecurity #IntentBased #CryptoInnovation

💎
$NEWT IS REWRITING DEFI SECURITY WITH PRE-TRANSACTION ENFORCEMENT 🔥 Entry: Not provided Most security tools start work after funds are gone. Newton Mainnet Beta flips that — it validates every transaction against active policies (OFAC compliance, identity, real-time threat blocking, oracle health) before a single coin moves. Magic Labs, the team behind embedded wallets, already uses it to shift from wallet security to transaction authorization. This is infrastructure, not airdrop hype. DeFi has never had a layer that enforces rules before execution, on-chain, cross-chain. Are you building something that could benefit from a policy engine that acts before the damage is done? Not financial advice. Always manage your risk. #NEWT #DeFiSecurity #Infrastructure #Web3 🔥
$NEWT IS REWRITING DEFI SECURITY WITH PRE-TRANSACTION ENFORCEMENT 🔥

Entry: Not provided

Most security tools start work after funds are gone. Newton Mainnet Beta flips that — it validates every transaction against active policies (OFAC compliance, identity, real-time threat blocking, oracle health) before a single coin moves. Magic Labs, the team behind embedded wallets, already uses it to shift from wallet security to transaction authorization. This is infrastructure, not airdrop hype.

DeFi has never had a layer that enforces rules before execution, on-chain, cross-chain. Are you building something that could benefit from a policy engine that acts before the damage is done?

Not financial advice. Always manage your risk.

#NEWT #DeFiSecurity #Infrastructure #Web3

🔥
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
အီးမေးလ် / ဖုန်းနံပါတ်