Binance Square
#hacked

hacked

513,958 views
312 Discussing
sema coin
·
--
Bearish
🚨‼️🚨‼️🚨🛑🛑 Hackers compromise SpaceX and Starlink X accounts to promote SCATMAN memecoin before rug pull The summary describes a compromised social media campaign and a rug pull, with tokens minted and sold for ETH. This is clearly negative for the promoted token and could move related memecoin sentiment quickly, though it is not a broad market event. Expected Investor Sentiment: Very Bearish🚨 Potential Market Impact: Significant🚨 #US2YearYieldFalls14bpsBiggestDropSinceFebruary #Hacked #MicronFallsNearly14%InAMonth $LAB $TOWNS $SXT {spot}(SXTUSDT)
🚨‼️🚨‼️🚨🛑🛑
Hackers compromise SpaceX and Starlink X accounts to promote SCATMAN memecoin before rug pull
The summary describes a compromised social media campaign and a rug pull, with tokens minted and sold for ETH. This is clearly negative for the promoted token and could move related memecoin sentiment quickly, though it is not a broad market event.

Expected Investor Sentiment: Very Bearish🚨

Potential Market Impact: Significant🚨
#US2YearYieldFalls14bpsBiggestDropSinceFebruary
#Hacked
#MicronFallsNearly14%InAMonth
$LAB
$TOWNS
$SXT
$BONK received a hit not from the market, but from its own governance system. BonkDAO has officially confirmed that it became a victim of a governance attack. Through a malicious proposal in the voting mechanism, about $20 million in $BONK was withdrawn from the project treasury. After that, the tokens began moving on exchanges, which only intensified pressure on the price. Most interestingly, this is not about a classic smart contract hack. The code executed exactly as it was programmed to. The issue was governance: the attacker was able to pass a proposal that granted access to the treasury funds. This once again shows that in DeFi, security isn’t just about auditing code—it’s also about a well-designed governance system. The team is already working with exchanges, law enforcement, and the Solana ecosystem to track the stolen assets and try to get them back. For investors, this is a reminder of an important point: even a strong community project can lose trust not due to a market downturn, but because of weak spots in its governance model. If a DAO controls large reserves, governance itself is often the most valuable target for attacks. And such events can affect the price for much longer than a typical market correction. #UkrainianContent #Hacked {spot}(BONKUSDT)
$BONK received a hit not from the market, but from its own governance system.

BonkDAO has officially confirmed that it became a victim of a governance attack. Through a malicious proposal in the voting mechanism, about $20 million in $BONK was withdrawn from the project treasury. After that, the tokens began moving on exchanges, which only intensified pressure on the price.

Most interestingly, this is not about a classic smart contract hack. The code executed exactly as it was programmed to. The issue was governance: the attacker was able to pass a proposal that granted access to the treasury funds. This once again shows that in DeFi, security isn’t just about auditing code—it’s also about a well-designed governance system.
The team is already working with exchanges, law enforcement, and the Solana ecosystem to track the stolen assets and try to get them back.

For investors, this is a reminder of an important point: even a strong community project can lose trust not due to a market downturn, but because of weak spots in its governance model. If a DAO controls large reserves, governance itself is often the most valuable target for attacks. And such events can affect the price for much longer than a typical market correction.

#UkrainianContent #Hacked
. Warning: Cryptocurrency hacking losses exceed $780 million in Q2! 😣DeFiLlama data showed that the second quarter of 2026 saw 88 hacking incidents in the cryptocurrency sector, resulting in total losses of $780.3 million as of June 30. April alone accounted for $644.8 million of these losses [1].These figures highlight the utmost importance of security in the world of cryptocurrencies. Investors and projects must take the highest levels of caution to protect their assets.What steps are you taking to safeguard your investments?#DeFi #CryptoSecurity urity #blockchain ain #Hacked ks #BinanceSquare quare
. Warning: Cryptocurrency hacking losses exceed $780 million in Q2! 😣DeFiLlama data showed that the second quarter of 2026 saw 88 hacking incidents in the cryptocurrency sector, resulting in total losses of $780.3 million as of June 30. April alone accounted for $644.8 million of these losses [1].These figures highlight the utmost importance of security in the world of cryptocurrencies. Investors and projects must take the highest levels of caution to protect their assets.What steps are you taking to safeguard your investments?#DeFi #CryptoSecurity urity #blockchain ain #Hacked ks #BinanceSquare quare
The $1.7 million exploit of the Taiko bridge turned out not to be the result of a sophisticated smart contract attack, but rather a basic security mistake — a private key used to verify the authenticity of SGX enclaves had been publicly exposed on GitHub for nearly two years. After obtaining the key, the attacker created a fake enclave that the system recognized as legitimate, allowing them to send forged messages to the bridge and withdraw funds. The incident serves as a reminder that even the most advanced cryptographic systems can be undermined by poor operational security. In this case, the weakness wasn't in the smart contracts or SGX itself, but in the handling of a critical private key. Subscribe for updates #Hacked #scamriskwarning
The $1.7 million exploit of the Taiko bridge turned out not to be the result of a sophisticated smart contract attack, but rather a basic security mistake — a private key used to verify the authenticity of SGX enclaves had been publicly exposed on GitHub for nearly two years.

After obtaining the key, the attacker created a fake enclave that the system recognized as legitimate, allowing them to send forged messages to the bridge and withdraw funds.
The incident serves as a reminder that even the most advanced cryptographic systems can be undermined by poor operational security. In this case, the weakness wasn't in the smart contracts or SGX itself, but in the handling of a critical private key.

Subscribe for updates

#Hacked #scamriskwarning
·
--
Bearish
Verified
🚨 $H CRASHES 90% AFTER MAJOR SECURITY BREACH $H token plunged nearly 90% after an exploit linked to the compromise of a foundation member's private keys, resulting in an estimated $20M loss. 📉 HUSDT Perp: 0.07445 (-89.64%) The damage may not be over yet. Selling pressure could continue as the hacker is reportedly still offloading stolen tokens into the market. ⚠️ Expect more volatility and downside risk on $H while the situation unfolds. {future}(HUSDT) #HumanityProtocol #Hacked #crypto
🚨 $H CRASHES 90% AFTER MAJOR SECURITY BREACH

$H token plunged nearly 90% after an exploit linked to the compromise of a foundation member's private keys, resulting in an estimated $20M loss.

📉 HUSDT Perp: 0.07445 (-89.64%)

The damage may not be over yet. Selling pressure could continue as the hacker is reportedly still offloading stolen tokens into the market.

⚠️ Expect more volatility and downside risk on $H while the situation unfolds.

#HumanityProtocol #Hacked #crypto
·
--
Bullish
#OstiumHackCausesOver$23.75MLosses 💸 Over 23.75 MILLION USD vanishes from Ostium: The tricks are getting even more sophisticated, folks! First it was smart contract hacks—now the hacker switches to “direct attacks” on off-chain infrastructure, taking over the system’s price feed signing key (oracle signer key). They fabricate future price levels to continuously open and close positions, draining the liquidity pool in the blink of an eye. At this point, no matter how carefully devs wrote the code, if the infrastructure private key leaks, it’s game over—this is a god-tier hack, so how could the public not be panicked?! 🤯 What should traders do right now? 🛡️ Avoid the LP trap: Temporarily withdraw funds or limit deposits as a Liquidity Provider in new pools. 📈 Watch the unfreeze timing: Ostium is about to reopen the trading contract after 24 hours of notification—time your move to catch the volatility wave at the market open. 💎 Seek refuge on major exchanges: Move capital to a reputable exchange to stay safer. ⚠️ This is not financial advice! Open a new Binance account, use the code: VINHTOCDO—fight now to get fee discounts! 🚀 #Ostium #Hacked #Arbitrum #VINHTOCDO $BTC {future}(BTCUSDT) $ETH {future}(ETHUSDT) $BNB {future}(BNBUSDT)
#OstiumHackCausesOver$23.75MLosses
💸 Over 23.75 MILLION USD vanishes from Ostium: The tricks are getting even more sophisticated, folks! First it was smart contract hacks—now the hacker switches to “direct attacks” on off-chain infrastructure, taking over the system’s price feed signing key (oracle signer key). They fabricate future price levels to continuously open and close positions, draining the liquidity pool in the blink of an eye. At this point, no matter how carefully devs wrote the code, if the infrastructure private key leaks, it’s game over—this is a god-tier hack, so how could the public not be panicked?! 🤯
What should traders do right now?
🛡️ Avoid the LP trap: Temporarily withdraw funds or limit deposits as a Liquidity Provider in new pools.
📈 Watch the unfreeze timing: Ostium is about to reopen the trading contract after 24 hours of notification—time your move to catch the volatility wave at the market open.
💎 Seek refuge on major exchanges: Move capital to a reputable exchange to stay safer.
⚠️ This is not financial advice!
Open a new Binance account, use the code: VINHTOCDO—fight now to get fee discounts! 🚀
#Ostium #Hacked #Arbitrum #VINHTOCDO
$BTC
$ETH
$BNB
·
--
Bearish
#CocaColaSuspendsFairlifeUSProductionAfterCyberattack 🥛 Hack a dairy line to demand ransom, huh, guys? 💸 Coca-Cola has just stopped producing Fairlife milk in the US because hackers paid a visit. Not even kid’s milk is safe for them—are they thinking of escaping with a bottle of milk contraption or what? 😂 This hacker is weird: instead of hacking exchanges, they hack a milk factory. Are they planning to demand ransom in BTC, or a few million liters of ultrafiltered milk? 📉 What should traders do right now? Check whether you’re holding KO shares or a token from the “milk” ecosystem. Sit tight and see if the money flows into the “soft drinks” ecosystem. 🚨 This is not financial advice. New referral code to install: VINHTOCDO #CocaCola #Hacked #USstock #VINHTOCDO $NVDAB {spot}(NVDABUSDT) $MUB {spot}(MUBUSDT) $SPCXB {spot}(SPCXBUSDT)
#CocaColaSuspendsFairlifeUSProductionAfterCyberattack
🥛 Hack a dairy line to demand ransom, huh, guys? 💸
Coca-Cola has just stopped producing Fairlife milk in the US because hackers paid a visit. Not even kid’s milk is safe for them—are they thinking of escaping with a bottle of milk contraption or what? 😂
This hacker is weird: instead of hacking exchanges, they hack a milk factory. Are they planning to demand ransom in BTC, or a few million liters of ultrafiltered milk?
📉 What should traders do right now?
Check whether you’re holding KO shares or a token from the “milk” ecosystem. Sit tight and see if the money flows into the “soft drinks” ecosystem.
🚨 This is not financial advice.
New referral code to install: VINHTOCDO
#CocaCola #Hacked #USstock #VINHTOCDO
$NVDAB
$MUB
$SPCXB
MUB+1.97%
SPCXB+0.03%
KOUS-3.95%
·
--
Bearish
#taikosaysl2incidentnouserfundloss A mix of crying and laughing with Taiko! When a developer accidentally uploaded an RSA-3072 security key to public GitHub, hackers immediately “snatched” $2M via a fake bridge. Binance and exchanges scramble to close deposit gateways—everyone is in total panic! Luckily, a reserve fund protection project will compensate 1:1, so the money won’t be lost, but hearts definitely dropped. What should investors do now? Sit tight, watch the chart—don’t click random “compensation” links, or you’ll fall for a scam! Enter code VINHTOCDO to speed things up. DYOR — This is not financial advice! #Taiko #Layer2 #Hacked #VINHTOCDO $TAIKO {future}(TAIKOUSDT) $BTC {future}(BTCUSDT) $BNB {future}(BNBUSDT)
#taikosaysl2incidentnouserfundloss
A mix of crying and laughing with Taiko! When a developer accidentally uploaded an RSA-3072 security key to public GitHub, hackers immediately “snatched” $2M via a fake bridge. Binance and exchanges scramble to close deposit gateways—everyone is in total panic! Luckily, a reserve fund protection project will compensate 1:1, so the money won’t be lost, but hearts definitely dropped. What should investors do now? Sit tight, watch the chart—don’t click random “compensation” links, or you’ll fall for a scam! Enter code VINHTOCDO to speed things up. DYOR — This is not financial advice!
#Taiko #Layer2 #Hacked #VINHTOCDO
$TAIKO
$BTC
$BNB
DefiLlama data shows that over the past decade, the crypto industry has experienced 518 attacks, resulting in total losses exceeding 17 billion USD. This 17 billion is essentially the industry's painful tuition fee, but this data has been thrown out, and not even a ripple has been seen in the market. Today's players have become completely desensitized to hacker news; this 'security aesthetic fatigue' is actually a typical emotional turning point. From a chip perspective, a large portion of the stolen coins have become a black hole that can never be recovered, effectively completing a forced deflation. When such negative news can no longer trigger panic selling and is even regarded as old news, it indicates that the resilience of the market bottom has already been forged. Instead of worrying about code vulnerabilities, people might as well be concerned that their wallets haven't yet seen a hundredfold dog. After so many years, have you contributed 'tuition fees' to hackers? #Security #DeFi #Hacked $BTC $ETH {future}(ETHUSDT) {future}(BTCUSDT)
DefiLlama data shows that over the past decade, the crypto industry has experienced 518 attacks, resulting in total losses exceeding 17 billion USD.
This 17 billion is essentially the industry's painful tuition fee, but this data has been thrown out, and not even a ripple has been seen in the market. Today's players have become completely desensitized to hacker news; this 'security aesthetic fatigue' is actually a typical emotional turning point.
From a chip perspective, a large portion of the stolen coins have become a black hole that can never be recovered, effectively completing a forced deflation. When such negative news can no longer trigger panic selling and is even regarded as old news, it indicates that the resilience of the market bottom has already been forged. Instead of worrying about code vulnerabilities, people might as well be concerned that their wallets haven't yet seen a hundredfold dog.
After so many years, have you contributed 'tuition fees' to hackers? #Security #DeFi #Hacked $BTC $ETH
Article
Scallop Exploit: Targeted AttackScallop, the leading money market in the Sui ecosystem, fell victim to a targeted attack. Although the scale of the damage isn't critical for the protocol, this incident has raised a red flag for the entire Sui network, which was previously considered one of the safest due to the Move programming language. Details

Scallop Exploit: Targeted Attack

Scallop, the leading money market in the Sui ecosystem, fell victim to a targeted attack. Although the scale of the damage isn't critical for the protocol, this incident has raised a red flag for the entire Sui network, which was previously considered one of the safest due to the Move programming language.
Details
Article
The Digital Heist of the Decade: How Kelp DAO Lost $300M in MinutesApril 20, 2026, will go down in cybersecurity history as the day of one of the boldest hacks in the decentralized finance space. Hackers managed to snag over $300 million, throwing the stability of the entire crypto market into jeopardy. The attackers uncovered a critical vulnerability in the cross-chain infrastructure used by the Kelp DAO protocol. Due to a bug in the bridge code based on LayerZero technology, the hackers were able to compromise the transaction verification system.

The Digital Heist of the Decade: How Kelp DAO Lost $300M in Minutes

April 20, 2026, will go down in cybersecurity history as the day of one of the boldest hacks in the decentralized finance space. Hackers managed to snag over $300 million, throwing the stability of the entire crypto market into jeopardy.
The attackers uncovered a critical vulnerability in the cross-chain infrastructure used by the Kelp DAO protocol. Due to a bug in the bridge code based on LayerZero technology, the hackers were able to compromise the transaction verification system.
·
--
Bearish
🚨 BINANCE SQUARE POST $606,000,000 stolen in 18 days. April 2026 is already the worst month for crypto hacks since the $1.4B Bybit breach. Two attacks. Both Lazarus Group. Both devastating: → $285M — Drift Protocol (April 1) → $292M — KelpDAO (April 18) The KelpDAO exploit alone triggered $10B+ in Aave outflows and sent shockwaves across 20+ connected protocols. And it's not slowing down. DeFi attack frequency is up 68% year-on-year. Smart contract audits alone are no longer enough — attackers have shifted to private keys, bridge infrastructure, and AI-driven social engineering. 😫Most retail traders only think about fees and leverage when choosing an exchange. Security should be the first filter. What actually matters when vetting an exchange: ✅ Proof of reserves (independently verified) ✅ Cold storage ratio ✅ Track record after a breach — did they compensate users? ✅ MiCA / regulated status in your jurisdiction ✅ Insurance funds We review every exchange on these criteria before anything else. 🔗 Full exchange rankings: https://trading365.org/reviews Don't let the next hack be your exit from crypto. #Hacked #StolenFunds
🚨 BINANCE SQUARE POST

$606,000,000 stolen in 18 days. April 2026 is already the worst month for crypto hacks since the $1.4B Bybit breach.

Two attacks. Both Lazarus Group. Both devastating:
→ $285M — Drift Protocol (April 1)
→ $292M — KelpDAO (April 18)

The KelpDAO exploit alone triggered $10B+ in Aave outflows and sent shockwaves across 20+ connected protocols.

And it's not slowing down. DeFi attack frequency is up 68% year-on-year. Smart contract audits alone are no longer enough — attackers have shifted to private keys, bridge infrastructure, and AI-driven social engineering.

😫Most retail traders only think about fees and leverage when choosing an exchange. Security should be the first filter.

What actually matters when vetting an exchange:
✅ Proof of reserves (independently verified)
✅ Cold storage ratio
✅ Track record after a breach — did they compensate users?
✅ MiCA / regulated status in your jurisdiction
✅ Insurance funds

We review every exchange on these criteria before anything else.

🔗 Full exchange rankings: https://trading365.org/reviews

Don't let the next hack be your exit from crypto.
#Hacked #StolenFunds
☠️ Wasabi Protocol got hacked for $5 million across Ethereum, Base, Berachain and Blast Not a day without a hack 😫 #Hacked $ETH $BERA
☠️ Wasabi Protocol got hacked for $5 million across Ethereum, Base, Berachain and Blast

Not a day without a hack 😫
#Hacked $ETH $BERA
Article
$13 BILLION vanished from DeFi in just 48 hours.Panic hit the market — but is this really the end for Aave ($AAVE)? Let’s cut through the noise. The recent exploit tied to KelpDAO didn’t just trigger losses — it shook confidence across decentralized finance overnight. Liquidity fled, prices reacted violently, and fear spread faster than facts. Billions were erased, leaving investors questioning whether DeFi’s biggest protocols can survive the shock. But market chaos doesn’t automatically equal collapse. Short-Term Shock vs Long-Term Reality Crypto history shows one pattern repeating: every major disruption looks like the end — until recovery begins. DeFi is still an emerging financial system, and security incidents, while damaging, have historically accelerated improvement rather than destruction. Established platforms with deep liquidity and proven infrastructure tend to endure after weaker projects fall away. Aave sits in that category. Stress Test, Not a Death Sentence Moments like this act as pressure tests. While the market reacts emotionally, strong protocols adapt. Aave’s lending architecture, risk management systems, and long-standing community support give it resilience many newer projects lack. In decentralized finance, survival often belongs to platforms that evolve fastest after crises. Fundamentals Still Matter Unlike speculative tokens driven purely by hype, Aave provides real utility — borrowing, lending, and capital efficiency within the ecosystem. That utility creates staying power. Even during market-wide selloffs, platforms delivering consistent value tend to regain traction once panic fades. The Bigger Picture Yes, $13B disappearing is massive. But zooming out reveals something different: this is part of DeFi’s maturation process. Every cycle removes weak structures and forces stronger standards. Meanwhile, institutional curiosity around decentralized finance continues to grow, suggesting long-term capital hasn’t disappeared — it’s waiting for stability. Markets panic. Infrastructure adapts. Survivors lead the next cycle. The real question isn’t whether DeFi survives — it’s which protocols emerge stronger when the fear ends #Hacked $AAVE #BTC #insight

$13 BILLION vanished from DeFi in just 48 hours.

Panic hit the market — but is this really the end for Aave ($AAVE )?
Let’s cut through the noise.
The recent exploit tied to KelpDAO didn’t just trigger losses — it shook confidence across decentralized finance overnight. Liquidity fled, prices reacted violently, and fear spread faster than facts. Billions were erased, leaving investors questioning whether DeFi’s biggest protocols can survive the shock.
But market chaos doesn’t automatically equal collapse.
Short-Term Shock vs Long-Term Reality
Crypto history shows one pattern repeating: every major disruption looks like the end — until recovery begins. DeFi is still an emerging financial system, and security incidents, while damaging, have historically accelerated improvement rather than destruction. Established platforms with deep liquidity and proven infrastructure tend to endure after weaker projects fall away.
Aave sits in that category.
Stress Test, Not a Death Sentence
Moments like this act as pressure tests. While the market reacts emotionally, strong protocols adapt. Aave’s lending architecture, risk management systems, and long-standing community support give it resilience many newer projects lack. In decentralized finance, survival often belongs to platforms that evolve fastest after crises.
Fundamentals Still Matter
Unlike speculative tokens driven purely by hype, Aave provides real utility — borrowing, lending, and capital efficiency within the ecosystem. That utility creates staying power. Even during market-wide selloffs, platforms delivering consistent value tend to regain traction once panic fades.
The Bigger Picture
Yes, $13B disappearing is massive. But zooming out reveals something different: this is part of DeFi’s maturation process. Every cycle removes weak structures and forces stronger standards. Meanwhile, institutional curiosity around decentralized finance continues to grow, suggesting long-term capital hasn’t disappeared — it’s waiting for stability.
Markets panic. Infrastructure adapts. Survivors lead the next cycle.
The real question isn’t whether DeFi survives — it’s which protocols emerge stronger when the fear ends
#Hacked $AAVE #BTC #insight
🏛️💔 WHEN SECURITY BREAKS: MY REFLECTION AFTER THE $292 MILLION BLOW TO KELP DAO$BTC ✨ $ETH ✨ $BNB Hello, family! Good morning. ☕️ Today it was a bit harder than usual for me to sit down and write to you. Sometimes, in this crypto world, we get carried away by the excitement of the charts, the all-time highs, and that feeling that we are all going to win. But today, Monday, April 20, reality hit us with a blow that makes you think for a while. If you have been checking the trends, you surely saw the hashtag #KelpDAOFacesAttack And no, it’s not just another news item. We are talking about $292 million that vanished in the blink of an eye. 🏛️💸

🏛️💔 WHEN SECURITY BREAKS: MY REFLECTION AFTER THE $292 MILLION BLOW TO KELP DAO

$BTC $ETH $BNB
Hello, family! Good morning. ☕️ Today it was a bit harder than usual for me to sit down and write to you. Sometimes, in this crypto world, we get carried away by the excitement of the charts, the all-time highs, and that feeling that we are all going to win. But today, Monday, April 20, reality hit us with a blow that makes you think for a while.
If you have been checking the trends, you surely saw the hashtag #KelpDAOFacesAttack And no, it’s not just another news item. We are talking about $292 million that vanished in the blink of an eye. 🏛️💸
Article
THORChain Hit Again: A $10.8M Exploit That Shouldn't Surprise AnyoneFriday, May 15, 2026, decentralized cross-chain liquidity protocol THORChain was exploited for approximately $10.8 million, with the attack spanning four separate blockchains simultaneously. A wallet labeled by Arkham as the THORChain exploiter showed $10.8 million in holdings, transferred across several smaller transactions in the 30 minutes before 10:11 AM UTC. Wallets linked to the attacker currently hold roughly 3,443 ETH, 36.85 BTC, and 96.6 BNB. The incident was first flagged by on-chain investigator ZachXBT on Telegram, prompting the protocol to immediately halt all trading and signing operations. $RUNE dropped over 6% after the initial alert, trading near $0.50, and ultimately fell around 13% following the suspected exploit, also now down 72% over the past year. As of this writing, THORChain has yet to publish a post-mortem identifying the specific attack vector {future}(RUNEUSDT) This is far from THORChain's first rodeo with exploits. Cross-chain bridges and liquidity protocols have historically been the most exploited category in DeFi, with over $2.8 billion in cumulative bridge-related theft since 2021 per Chainalysis. Today's breach is at least the third security incident for the protocol in recent years. The protocol's security troubles are compounded by its growing reputation as a conduit for illicit funds — the majority of the $1.4 billion stolen during the Bybit hack, or about $1.2 billion, was moved through THORChain by hackers, who swapped it from Ether to Bitcoin. Earlier in April, the attacker behind the $293 million Kelp DAO exploit swapped 75,700 ETH through THORChain, generating about $910,000 in revenue for the protocol itself. This creates a deeply uncomfortable reality: THORChain profits from crime, even when it isn't the direct target. Personally, this exploit is hard to be shocked by but it's still frustrating to watch. THORChain's core idea, native cross-chain swaps without bridges or centralized intermediaries, remains genuinely valuable and technically ambitious. Just weeks ago, the protocol burned 64.4 million RUNE and launched a major v3.17.0 network upgrade with over 100 improvements focused on security, swaps, and cross-chain reliability. There's clearly a committed team building here. But the pattern is becoming undeniable: every time THORChain gains momentum, a new exploit drags it back down. At some point, "decentralized" can't be an excuse for "insecure." The lack of a post-mortem hours after the attack is also telling transparency should be the first response, not an afterthought. If THORChain wants to be taken seriously as infrastructure for the broader DeFi ecosystem, it needs to treat security with the same urgency it treats innovation.$RIVER #VitalikMovesETHviaPrivacyPools I #SolanaTreasuryQ1SPSUp108 I #PredictionMarketRisingCompetition I #StriveQ1Results15009BTCHoldings I #Hacked

THORChain Hit Again: A $10.8M Exploit That Shouldn't Surprise Anyone

Friday, May 15, 2026, decentralized cross-chain liquidity protocol THORChain was exploited for approximately $10.8 million, with the attack spanning four separate blockchains simultaneously. A wallet labeled by Arkham as the THORChain exploiter showed $10.8 million in holdings, transferred across several smaller transactions in the 30 minutes before 10:11 AM UTC.
Wallets linked to the attacker currently hold roughly 3,443 ETH, 36.85 BTC, and 96.6 BNB. The incident was first flagged by on-chain investigator ZachXBT on Telegram, prompting the protocol to immediately halt all trading and signing operations. $RUNE dropped over 6% after the initial alert, trading near $0.50, and ultimately fell around 13% following the suspected exploit, also now down 72% over the past year. As of this writing, THORChain has yet to publish a post-mortem identifying the specific attack vector
This is far from THORChain's first rodeo with exploits. Cross-chain bridges and liquidity protocols have historically been the most exploited category in DeFi, with over $2.8 billion in cumulative bridge-related theft since 2021 per Chainalysis. Today's breach is at least the third security incident for the protocol in recent years. The protocol's security troubles are compounded by its growing reputation as a conduit for illicit funds — the majority of the $1.4 billion stolen during the Bybit hack, or about $1.2 billion, was moved through THORChain by hackers, who swapped it from Ether to Bitcoin. Earlier in April, the attacker behind the $293 million Kelp DAO exploit swapped 75,700 ETH through THORChain, generating about $910,000 in revenue for the protocol itself. This creates a deeply uncomfortable reality: THORChain profits from crime, even when it isn't the direct target. Personally, this exploit is hard to be shocked by but it's still frustrating to watch. THORChain's core idea, native cross-chain swaps without bridges or centralized intermediaries, remains genuinely valuable and technically ambitious.
Just weeks ago, the protocol burned 64.4 million RUNE and launched a major v3.17.0 network upgrade with over 100 improvements focused on security, swaps, and cross-chain reliability. There's clearly a committed team building here. But the pattern is becoming undeniable: every time THORChain gains momentum, a new exploit drags it back down. At some point, "decentralized" can't be an excuse for "insecure."
The lack of a post-mortem hours after the attack is also telling transparency should be the first response, not an afterthought. If THORChain wants to be taken seriously as infrastructure for the broader DeFi ecosystem, it needs to treat security with the same urgency it treats innovation.$RIVER
#VitalikMovesETHviaPrivacyPools I #SolanaTreasuryQ1SPSUp108 I #PredictionMarketRisingCompetition I #StriveQ1Results15009BTCHoldings I #Hacked
#Hacked 🚨 $6.7 million heist: TrustedVolumes hacker starts laundering money The cybercriminal who hacked liquidity provider TrustedVolumes on May 7 has moved into the active phase of legalizing the stolen assets. According to PeckShield, the first $278,000 has already passed through mixers and cross-chain protocols. How is the money moving? • Tornado Cash: the first 10.2 $ETH were sent there. • THORChain: 110 ETH ($250,000) were converted to $BTC via this protocol. • Railgun: a deposit was attempted, but the hacker changed his mind and returned 0.5 ETH to the wallet. Why did this happen? The hack was possible due to a critical error in the RFQ (request for quotation) system. The hacker was able to bypass three layers of protection at once: signature authentication, order replay protection, and token source verification. The TrustedVolumes protocol itself calls on the hacker to engage in dialogue and offers a bug bounty in exchange for the return of the remaining funds ($6.4 million is still in known wallets). {future}(BTCUSDT) {future}(ETHUSDT)
#Hacked
🚨 $6.7 million heist: TrustedVolumes hacker starts laundering money

The cybercriminal who hacked liquidity provider TrustedVolumes on May 7 has moved into the active phase of legalizing the stolen assets. According to PeckShield, the first $278,000 has already passed through mixers and cross-chain protocols.

How is the money moving?
• Tornado Cash: the first 10.2 $ETH were sent there.
• THORChain: 110 ETH ($250,000) were converted to $BTC via this protocol.
• Railgun: a deposit was attempted, but the hacker changed his mind and returned 0.5 ETH to the wallet.

Why did this happen?
The hack was possible due to a critical error in the RFQ (request for quotation) system. The hacker was able to bypass three layers of protection at once: signature authentication, order replay protection, and token source verification.

The TrustedVolumes protocol itself calls on the hacker to engage in dialogue and offers a bug bounty in exchange for the return of the remaining funds ($6.4 million is still in known wallets).
The situation with the Echo Protocol ($ECHO ) on the Monad network looks pretty grim. According to on-chain analysis, the attacker initially gained control of about 1,000 eBTC (~$76.6 million), and then used part of the funds in Curvance: they deposited 45 eBTC and withdrew 11.3 $WBTC . From there, it followed a classic playbook — moving assets to Ethereum, exchanging for 385 ETH, and sending through Tornado Cash. The market reacted instantly: ECHO has already dipped about 11%, and this seems like just the first wave of risk reevaluation. The worst part of these stories isn't just the exploit itself, but the loss of trust. In DeFi, liquidity isn’t just maintained by TVL or flashy numbers on a dashboard; it relies on users' confidence that the protocol mechanics won't collapse in an instant. Personally, what worries me the most is the route of the funds. It doesn't look like a 'white hat' move or an attempt to negotiate with the team through a bug bounty. On the contrary — it all seems like a cold and swift liquidity pull with subsequent cover-up of traces. #UkrainianContent #Hacked
The situation with the Echo Protocol ($ECHO ) on the Monad network looks pretty grim. According to on-chain analysis, the attacker initially gained control of about 1,000 eBTC (~$76.6 million), and then used part of the funds in Curvance: they deposited 45 eBTC and withdrew 11.3 $WBTC . From there, it followed a classic playbook — moving assets to Ethereum, exchanging for 385 ETH, and sending through Tornado Cash.
The market reacted instantly: ECHO has already dipped about 11%, and this seems like just the first wave of risk reevaluation. The worst part of these stories isn't just the exploit itself, but the loss of trust. In DeFi, liquidity isn’t just maintained by TVL or flashy numbers on a dashboard; it relies on users' confidence that the protocol mechanics won't collapse in an instant.
Personally, what worries me the most is the route of the funds. It doesn't look like a 'white hat' move or an attempt to negotiate with the team through a bug bounty. On the contrary — it all seems like a cold and swift liquidity pull with subsequent cover-up of traces.

#UkrainianContent #Hacked
Log in to explore more content
Join global crypto users on Binance Square
⚡️ Get latest and useful information about crypto.
💬 Trusted by the world’s largest crypto exchange.
👍 Discover real insights from verified creators.
Email / Phone number