Binance Square
#defisecurity

defisecurity

128,465 views
674 Discussing
Crypto Benzai
·
--
One Key, $12.5M Gone: 79thVault Drained on BNB Chain A wallet with special admin powers over the 79AU token pulled 2.01M tokens out of its PancakeSwap pool and sold them back in. That cut the pool's USDT from $15.2M to $3.9M, and the attacker walked off with 16,249 $BNB (~$12.5M) Lookonchain and CertiK point to a likely leaked operator key. The team revoked the role and offered a 10% bounty. Lesson: check who holds the admin keys before you ape in. Do you check token permissions before buying? #DeFiSecurity #BNBChain #CryptoSafety
One Key, $12.5M Gone: 79thVault Drained on BNB Chain
A wallet with special admin powers over the 79AU token pulled 2.01M tokens out of its PancakeSwap pool and sold them back in. That cut the pool's USDT from $15.2M to $3.9M, and the attacker walked off with 16,249 $BNB (~$12.5M) Lookonchain and CertiK point to a likely leaked operator key. The team revoked the role and offered a 10% bounty. Lesson: check who holds the admin keys before you ape in.
Do you check token permissions before buying?
#DeFiSecurity #BNBChain #CryptoSafety
🚨 $6M drained from a Base vault controlled by a 7-signer Safe — owners still unknown. 1,783 wstETH moved, Base and Aave contracts untouched. This points to a private key compromise or insider risk, not protocol failure. ETH holders should watch for similar stealth outflows on L2s. Could this signal rising custody risks in DeFi? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 $6M drained from a Base vault controlled by a 7-signer Safe — owners still unknown. 1,783 wstETH moved, Base and Aave contracts untouched. This points to a private key compromise or insider risk, not protocol failure. ETH holders should watch for similar stealth outflows on L2s. Could this signal rising custody risks in DeFi?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
🚨 The NEAR Intents protocol identifies the attacker and grants a 48-hour window The decentralized NEAR Intents protocol announced that it was able to identify the individual responsible for the recent hack that resulted in the theft of approximately $3.8 million. The administration has granted the attacker a 48-hour deadline to return the funds, confirming that legal action will be taken in the event of no response. ━━━━━━━━━━━━━━ 📊 Impact: 📈 High 🏷️ DEFI #NEARProtocol #DeFiSecurity #BlockchainNews #CryptoCrime 📰 Source: cointelegraph.com
🚨 The NEAR Intents protocol identifies the attacker and grants a 48-hour window

The decentralized NEAR Intents protocol announced that it was able to identify the individual responsible for the recent hack that resulted in the theft of approximately $3.8 million.
The administration has granted the attacker a 48-hour deadline to return the funds, confirming that legal action will be taken in the event of no response.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ DEFI

#NEARProtocol #DeFiSecurity #BlockchainNews #CryptoCrime

📰 Source: cointelegraph.com
🚨 A third-party Aave adapter was exploited, draining ~114 ETH from compromised Safe multisig wallets. Aave v3 core remains secure; the flaw lay in the FlashLoopAdapter integration. This highlights risks in peripheral DeFi tools, even when base protocols are sound. Traders should audit third-party contracts before interacting with yield strategies. How deep does the DeFi supply chain risk go? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 A third-party Aave adapter was exploited, draining ~114 ETH from compromised Safe multisig wallets. Aave v3 core remains secure; the flaw lay in the FlashLoopAdapter integration. This highlights risks in peripheral DeFi tools, even when base protocols are sound. Traders should audit third-party contracts before interacting with yield strategies.
How deep does the DeFi supply chain risk go?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
Another DeFi exploit to watch A custom FlashLoopAdapter managing Aave v3 positions was exploited on Ethereum, resulting in a $305,000 loss across two Safe wallets after an attacker bypassed access controls. #Aave #DeFiSecurity ‎
Another DeFi exploit to watch

A custom FlashLoopAdapter managing Aave v3 positions was exploited on Ethereum, resulting in a $305,000 loss across two Safe wallets after an attacker bypassed access controls.

#Aave #DeFiSecurity ‎
🚨 NEAR Intents says it has identified the hacker behind the $3.8M exploit and issued a 48-hour ultimatum for fund return. While recovery remains uncertain, the transparency may restore some confidence in the protocol’s security posture. Traders are watching for on-chain signals of fund movement or developer action. Could this deter future attacks on DeFi platforms? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents says it has identified the hacker behind the $3.8M exploit and issued a 48-hour ultimatum for fund return. While recovery remains uncertain, the transparency may restore some confidence in the protocol’s security posture. Traders are watching for on-chain signals of fund movement or developer action. Could this deter future attacks on DeFi platforms?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents exploited for $3.8M due to a bug impacting cross-chain deposits/withdrawals. Team pledges full reimbursement. Highlights ongoing security risks in DeFi infrastructure. Market may see short-term volatility as trust is tested. How will NEAR recover user confidence after this breach? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents exploited for $3.8M due to a bug impacting cross-chain deposits/withdrawals. Team pledges full reimbursement. Highlights ongoing security risks in DeFi infrastructure. Market may see short-term volatility as trust is tested. How will NEAR recover user confidence after this breach?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
Another day another exploit NEAR Intents just got hit by a $3.8 million exploit. This is just more fuel for the fire in a year already defined by massive security failures across the space. #NearProtocol #DeFiSecurity ‎
Another day another exploit

NEAR Intents just got hit by a $3.8 million exploit. This is just more fuel for the fire in a year already defined by massive security failures across the space.

#NearProtocol #DeFiSecurity ‎
🚨 Bitget hacker swap attempts exceeded $50M, testing NEAR Intents’ permissionless design. Most blocked funds rerouted via other providers, highlighting resilience but raising questions about real-world security under pressure. Market may reassess trust in intent-based layers amid rising exploit sophistication. How does NEAR balance openness with defense against large-scale attacks? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 Bitget hacker swap attempts exceeded $50M, testing NEAR Intents’ permissionless design. Most blocked funds rerouted via other providers, highlighting resilience but raising questions about real-world security under pressure. Market may reassess trust in intent-based layers amid rising exploit sophistication.
How does NEAR balance openness with defense against large-scale attacks?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents blocked $50M linked to Bitget hackers, showing proactive on-chain defense. Unlike THORChain’s neutral stance, this highlights a security-first approach that could boost trust in NEAR’s ecosystem. Market may view this as a bullish signal for protocol integrity. How does selective censorship affect long-term decentralization ideals? #DeFiSecurity $NEAR #TradingSignal #CryptoAnalysis
🚨 NEAR Intents blocked $50M linked to Bitget hackers, showing proactive on-chain defense. Unlike THORChain’s neutral stance, this highlights a security-first approach that could boost trust in NEAR’s ecosystem. Market may view this as a bullish signal for protocol integrity.
How does selective censorship affect long-term decentralization ideals?
#DeFiSecurity

$NEAR #TradingSignal #CryptoAnalysis
🚨 Scammers mimicked the GIWA L2 with a fake RPC, bridge, and Chain ID 9134, tricking 1,333 wallets into sending 767 ETH before draining funds. This highlights rising sophistication in DeFi exploits targeting layer-2 expectations. Always verify network contracts and RPCs—never trust UI alone. How deep does this rabbit hole go? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 Scammers mimicked the GIWA L2 with a fake RPC, bridge, and Chain ID 9134, tricking 1,333 wallets into sending 767 ETH before draining funds. This highlights rising sophistication in DeFi exploits targeting layer-2 expectations. Always verify network contracts and RPCs—never trust UI alone. How deep does this rabbit hole go? #DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
🚨 Scammers deployed a fake Giwa-backed ETH L2 chain, stealing over 760 ETH from users. DYORSWAP identified the fraud and initiated a compensation process. This highlights rising risks in L2 ecosystems and the need for rigorous contract verification before bridging funds. Traders should scrutinize chain authenticity and avoid unverified bridges. How can users better detect fake L2 deployments before connecting wallets? #DeFiSecurity $ETH #TradingSignal #CryptoAnalysis
🚨 Scammers deployed a fake Giwa-backed ETH L2 chain, stealing over 760 ETH from users. DYORSWAP identified the fraud and initiated a compensation process. This highlights rising risks in L2 ecosystems and the need for rigorous contract verification before bridging funds. Traders should scrutinize chain authenticity and avoid unverified bridges.
How can users better detect fake L2 deployments before connecting wallets?
#DeFiSecurity

$ETH #TradingSignal #CryptoAnalysis
LayerZero is facing severe pressure as a massive $292M lawsuit challenges its core security design following the KelpDAO rsETH exploit. With nearly $15B exiting the protocol and mounting reputational damage, the legal battle goes beyond a financial dispute—it puts omnichain trust on trial. Cross-chain infra must prioritize bulletproof validation, or user capital will keep fleeing. Security is everything in DeFi. #LayerZero #DeFiSecurity #CryptoNews
LayerZero is facing severe pressure as a massive $292M lawsuit challenges its core security design following the KelpDAO rsETH exploit. With nearly $15B exiting the protocol and mounting reputational damage, the legal battle goes beyond a financial dispute—it puts omnichain trust on trial. Cross-chain infra must prioritize bulletproof validation, or user capital will keep fleeing. Security is everything in DeFi. #LayerZero #DeFiSecurity #CryptoNews
🔥 A compromised admin key isn’t a “hack”—it’s a governance failure that can drain millions in seconds. 📊 The Wasabi Protocol lost $4.5 M after an admin deployer key without timelock or multisig was seized, echoing Drift’s $285 M breach earlier this week #DeFiSecurity #SmartContractRisk. 💡 With #Bitcoin trading at $80,416, RSI 61.2 and open interest $8.76 B, the market shows bullish confidence (funding +0.0100% longs paying), yet governance lapses still bite, underscoring why #CryptoSafety will separate resilient projects from the rest. 📌 Practical move: audit any protocol you stake in for multisig controls and timelocks; prioritize platforms that publish transparent governance dashboards before allocating capital. ❓ How do you vet a project’s contract security—relying on community audits, formal verification, or on‑chain monitoring tools?
🔥 A compromised admin key isn’t a “hack”—it’s a governance failure that can drain millions in seconds.

📊 The Wasabi Protocol lost $4.5 M after an admin deployer key without timelock or multisig was seized, echoing Drift’s $285 M breach earlier this week #DeFiSecurity #SmartContractRisk.

💡 With #Bitcoin trading at $80,416, RSI 61.2 and open interest $8.76 B, the market shows bullish confidence (funding +0.0100% longs paying), yet governance lapses still bite, underscoring why #CryptoSafety will separate resilient projects from the rest.

📌 Practical move: audit any protocol you stake in for multisig controls and timelocks; prioritize platforms that publish transparent governance dashboards before allocating capital.

❓ How do you vet a project’s contract security—relying on community audits, formal verification, or on‑chain monitoring tools?
Article
Structural Security: XRPL Proposal Eliminates Flash Loan RiskCan sacrificing a core decentralized finance tool protect ecosystem liquidity, or will it stifle institutional adoption? A major structural shift is heating up on the XRP Ledger. The viral discussion under #XRPLProposalBlocksFlashLoans highlights a major architectural evolution in blockchain security. A newly introduced automated market maker (AMM) draft amendment has proposed making flash loan exploits "structurally impossible" across the network. By enforcing strictly atomic transactions that lack composable intra-transaction calls, the network eliminates the exact borrow-manipulate-repay sequences that hackers rely on. The development addresses a massive pain point for Web3 security. Recent high-profile exploits on protocols like Thorchain and Drift have drained hundreds of millions of dollars using flash loan vectors, fueling a massive demand for structural exploit resistance. However, this safety feature comes with a definitive tradeoff: it permanently blocks legitimate, capital-efficient DeFi utilities like instantaneous arbitrage and collateral swaps. The Binance Square community is highly divided over the economic impact. While safety advocates argue that built-in exploit prevention will attract cautious institutional investors looking to safeguard their real-world assets (RWA), traders worry it might leave the ecosystem trailing behind more flexible, highly liquid networks. Key Tokens Impacted by the Security Amendment $XRP (XRP): The native asset powering the ledger, experiencing heightened volatility as node operators review the proposal.$AAVE (Aave): The leading Ethereum-based lending protocol, serving as a baseline comparison for legacy flash loan utility.$RUNE (THORChain): Heavily discussed on the boards following recent exploit vulnerabilities, putting the spotlight back on multi-chain cross-security. #XRPL #DeFiSecurity #CryptoSafety

Structural Security: XRPL Proposal Eliminates Flash Loan Risk

Can sacrificing a core decentralized finance tool protect ecosystem liquidity, or will it stifle institutional adoption? A major structural shift is heating up on the XRP Ledger.
The viral discussion under #XRPLProposalBlocksFlashLoans highlights a major architectural evolution in blockchain security. A newly introduced automated market maker (AMM) draft amendment has proposed making flash loan exploits "structurally impossible" across the network. By enforcing strictly atomic transactions that lack composable intra-transaction calls, the network eliminates the exact borrow-manipulate-repay sequences that hackers rely on.
The development addresses a massive pain point for Web3 security. Recent high-profile exploits on protocols like Thorchain and Drift have drained hundreds of millions of dollars using flash loan vectors, fueling a massive demand for structural exploit resistance. However, this safety feature comes with a definitive tradeoff: it permanently blocks legitimate, capital-efficient DeFi utilities like instantaneous arbitrage and collateral swaps.
The Binance Square community is highly divided over the economic impact. While safety advocates argue that built-in exploit prevention will attract cautious institutional investors looking to safeguard their real-world assets (RWA), traders worry it might leave the ecosystem trailing behind more flexible, highly liquid networks.
Key Tokens Impacted by the Security Amendment
$XRP (XRP): The native asset powering the ledger, experiencing heightened volatility as node operators review the proposal.$AAVE (Aave): The leading Ethereum-based lending protocol, serving as a baseline comparison for legacy flash loan utility.$RUNE (THORChain): Heavily discussed on the boards following recent exploit vulnerabilities, putting the spotlight back on multi-chain cross-security.
#XRPL #DeFiSecurity #CryptoSafety
🚨 BREAKING !!! CIRCLE FREEZES $12.6 MILLION cUSDC FROM ZAMA SECURITY PROTOCOL 🔴 ZachXBT reveals that Circle might have blacklisted the cUSDC contract address of Zama on Ethereum, freezing around $12.6 million of user funds 💸 The frozen address previously participated in a governance vote for Overnight Finance regarding fund allocation 🛠 Zama apparently didn't receive any notice before the freeze was implemented, while some users are accusing the project team of a rug pull 📊 ZachXBT points out that the plaintiff in the civil lawsuit involved — Patagon Management — has a history of attacking DAOs and siphoning protocols. There are still many unknowns to clarify in this incident. #DeFiSecurity #Stablecoin $ETH $BTC $HEI
🚨 BREAKING !!!

CIRCLE FREEZES $12.6 MILLION cUSDC FROM ZAMA SECURITY PROTOCOL 🔴

ZachXBT reveals that Circle might have blacklisted the cUSDC contract address of Zama on Ethereum, freezing around $12.6 million of user funds 💸

The frozen address previously participated in a governance vote for Overnight Finance regarding fund allocation 🛠

Zama apparently didn't receive any notice before the freeze was implemented, while some users are accusing the project team of a rug pull 📊

ZachXBT points out that the plaintiff in the civil lawsuit involved — Patagon Management — has a history of attacking DAOs and siphoning protocols. There are still many unknowns to clarify in this incident.

#DeFiSecurity #Stablecoin

$ETH $BTC $HEI
$NEWT IS SHIFTING WHERE DEFI SECURITY BEGINS 🧠 Most protocols focus on stopping attacks after they execute. Newton Protocol flips that by validating intent and risk before settlement. This isn't just another AI wrapper — it's rethinking the timing of security itself. As crypto moves toward intent-based execution and AI agents making more decisions, the moment of validation becomes critical. The question isn't just how fast a transaction executes, but whether it should execute at all. But can pre-settlement checks hold up when markets go chaotic, not predictable? That's where design meets reality. Are you betting on prevention or cleanup? Not financial advice. Always manage your risk. #NEWT #DeFiSecurity #IntentBased #CryptoInnovation 💎
$NEWT IS SHIFTING WHERE DEFI SECURITY BEGINS 🧠

Most protocols focus on stopping attacks after they execute. Newton Protocol flips that by validating intent and risk before settlement. This isn't just another AI wrapper — it's rethinking the timing of security itself.

As crypto moves toward intent-based execution and AI agents making more decisions, the moment of validation becomes critical. The question isn't just how fast a transaction executes, but whether it should execute at all.

But can pre-settlement checks hold up when markets go chaotic, not predictable? That's where design meets reality. Are you betting on prevention or cleanup?

Not financial advice. Always manage your risk.

#NEWT #DeFiSecurity #IntentBased #CryptoInnovation

💎
$NEWT IS REWRITING DEFI SECURITY WITH PRE-TRANSACTION ENFORCEMENT 🔥 Entry: Not provided Most security tools start work after funds are gone. Newton Mainnet Beta flips that — it validates every transaction against active policies (OFAC compliance, identity, real-time threat blocking, oracle health) before a single coin moves. Magic Labs, the team behind embedded wallets, already uses it to shift from wallet security to transaction authorization. This is infrastructure, not airdrop hype. DeFi has never had a layer that enforces rules before execution, on-chain, cross-chain. Are you building something that could benefit from a policy engine that acts before the damage is done? Not financial advice. Always manage your risk. #NEWT #DeFiSecurity #Infrastructure #Web3 🔥
$NEWT IS REWRITING DEFI SECURITY WITH PRE-TRANSACTION ENFORCEMENT 🔥

Entry: Not provided

Most security tools start work after funds are gone. Newton Mainnet Beta flips that — it validates every transaction against active policies (OFAC compliance, identity, real-time threat blocking, oracle health) before a single coin moves. Magic Labs, the team behind embedded wallets, already uses it to shift from wallet security to transaction authorization. This is infrastructure, not airdrop hype.

DeFi has never had a layer that enforces rules before execution, on-chain, cross-chain. Are you building something that could benefit from a policy engine that acts before the damage is done?

Not financial advice. Always manage your risk.

#NEWT #DeFiSecurity #Infrastructure #Web3

🔥
Thetanuts exploit update puts $ETH security flows in focus 🛡️ Folks, Thetanuts Finance is suspected to have faced an attack with early losses estimated near $2.1 million. The cleaner detail is that around $2 million in options tokens were reportedly recovered through a white-hat route, which softens the hit but does not erase the risk signal. The key takeaway is simple: DeFi security remains the real battleground while everyone chases candles. Until an official recap or vulnerability report lands, smart money stays patient, avoids panic narratives, and watches whether confidence returns or weak hands get shaken out. Not financial advice. Manage your risk. #ETH #DeFiSecurity #CryptoNews #RiskManagement 🫡
Thetanuts exploit update puts $ETH security flows in focus 🛡️

Folks, Thetanuts Finance is suspected to have faced an attack with early losses estimated near $2.1 million. The cleaner detail is that around $2 million in options tokens were reportedly recovered through a white-hat route, which softens the hit but does not erase the risk signal.

The key takeaway is simple: DeFi security remains the real battleground while everyone chases candles. Until an official recap or vulnerability report lands, smart money stays patient, avoids panic narratives, and watches whether confidence returns or weak hands get shaken out.

Not financial advice. Manage your risk.

#ETH #DeFiSecurity #CryptoNews #RiskManagement

🫡
XRP Ledger Says "No Flash Loans Here" A new XRPL Upgrade proposal includes a blunt note: flash loan attacks can't happen on XRP Ledger because transactions can't chain multiple actions together. One transaction, one action. Done. Ethereum DeFi has lost billions to flash loan exploits. XRPL's design kills that attack vector outright. The catch is you also lose flash loans for arbitrage and quick liquidations. With over $3B n tokenized assets already on XRPL, some teams are betting security beats speed. Banks are stepping in, geopolitics is heating up, betting markets are exploding, and blockchains are making hard design choices. Intitutions want safety. Traders want options. Builders are picking sides. #XRPledger #XRP #Flashloans #DeFiSecurity #AMM
XRP Ledger Says "No Flash Loans Here"

A new XRPL Upgrade proposal includes a blunt note: flash loan attacks can't happen on XRP Ledger because transactions can't chain multiple actions together. One transaction, one action. Done.

Ethereum DeFi has lost billions to flash loan exploits. XRPL's design kills that attack vector outright. The catch is you also lose flash loans for arbitrage and quick liquidations. With over $3B n tokenized assets already on XRPL, some teams are betting security beats speed.

Banks are stepping in, geopolitics is heating up, betting markets are exploding, and blockchains are making hard design choices. Intitutions want safety. Traders want options. Builders are picking sides.
#XRPledger #XRP #Flashloans #DeFiSecurity #AMM
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number