#hacked
hacked
512,418 views
302 Discussing
Hot
Latest
A strong single bearish candlestick coming very soon at $HOME 🚨🚨🚨
#Binance #BTC #BinanceSquareFamily #Ethereum #Hacked
🔴 Open a short position at $HOME
From here now
#Binance #BTC #BinanceSquareFamily #Ethereum #Hacked
🔴 Open a short position at $HOME
From here now
The situation with the Echo Protocol ($ECHO ) on the Monad network looks pretty grim. According to on-chain analysis, the attacker initially gained control of about 1,000 eBTC (~$76.6 million), and then used part of the funds in Curvance: they deposited 45 eBTC and withdrew 11.3 $WBTC . From there, it followed a classic playbook — moving assets to Ethereum, exchanging for 385 ETH, and sending through Tornado Cash.
The market reacted instantly: ECHO has already dipped about 11%, and this seems like just the first wave of risk reevaluation. The worst part of these stories isn't just the exploit itself, but the loss of trust. In DeFi, liquidity isn’t just maintained by TVL or flashy numbers on a dashboard; it relies on users' confidence that the protocol mechanics won't collapse in an instant.
Personally, what worries me the most is the route of the funds. It doesn't look like a 'white hat' move or an attempt to negotiate with the team through a bug bounty. On the contrary — it all seems like a cold and swift liquidity pull with subsequent cover-up of traces.
#UkrainianContent #Hacked
The market reacted instantly: ECHO has already dipped about 11%, and this seems like just the first wave of risk reevaluation. The worst part of these stories isn't just the exploit itself, but the loss of trust. In DeFi, liquidity isn’t just maintained by TVL or flashy numbers on a dashboard; it relies on users' confidence that the protocol mechanics won't collapse in an instant.
Personally, what worries me the most is the route of the funds. It doesn't look like a 'white hat' move or an attempt to negotiate with the team through a bug bounty. On the contrary — it all seems like a cold and swift liquidity pull with subsequent cover-up of traces.
#UkrainianContent #Hacked
#Hacked
🚨 $6.7 million heist: TrustedVolumes hacker starts laundering money
The cybercriminal who hacked liquidity provider TrustedVolumes on May 7 has moved into the active phase of legalizing the stolen assets. According to PeckShield, the first $278,000 has already passed through mixers and cross-chain protocols.
How is the money moving?
• Tornado Cash: the first 10.2 $ETH were sent there.
• THORChain: 110 ETH ($250,000) were converted to $BTC via this protocol.
• Railgun: a deposit was attempted, but the hacker changed his mind and returned 0.5 ETH to the wallet.
Why did this happen?
The hack was possible due to a critical error in the RFQ (request for quotation) system. The hacker was able to bypass three layers of protection at once: signature authentication, order replay protection, and token source verification.
The TrustedVolumes protocol itself calls on the hacker to engage in dialogue and offers a bug bounty in exchange for the return of the remaining funds ($6.4 million is still in known wallets).
🚨 $6.7 million heist: TrustedVolumes hacker starts laundering money
The cybercriminal who hacked liquidity provider TrustedVolumes on May 7 has moved into the active phase of legalizing the stolen assets. According to PeckShield, the first $278,000 has already passed through mixers and cross-chain protocols.
How is the money moving?
• Tornado Cash: the first 10.2 $ETH were sent there.
• THORChain: 110 ETH ($250,000) were converted to $BTC via this protocol.
• Railgun: a deposit was attempted, but the hacker changed his mind and returned 0.5 ETH to the wallet.
Why did this happen?
The hack was possible due to a critical error in the RFQ (request for quotation) system. The hacker was able to bypass three layers of protection at once: signature authentication, order replay protection, and token source verification.
The TrustedVolumes protocol itself calls on the hacker to engage in dialogue and offers a bug bounty in exchange for the return of the remaining funds ($6.4 million is still in known wallets).
DefiLlama data shows that over the past decade, the crypto industry has experienced 518 attacks, resulting in total losses exceeding 17 billion USD.
This 17 billion is essentially the industry's painful tuition fee, but this data has been thrown out, and not even a ripple has been seen in the market. Today's players have become completely desensitized to hacker news; this 'security aesthetic fatigue' is actually a typical emotional turning point.
From a chip perspective, a large portion of the stolen coins have become a black hole that can never be recovered, effectively completing a forced deflation. When such negative news can no longer trigger panic selling and is even regarded as old news, it indicates that the resilience of the market bottom has already been forged. Instead of worrying about code vulnerabilities, people might as well be concerned that their wallets haven't yet seen a hundredfold dog.
After so many years, have you contributed 'tuition fees' to hackers? #Security #DeFi #Hacked $BTC $ETH
This 17 billion is essentially the industry's painful tuition fee, but this data has been thrown out, and not even a ripple has been seen in the market. Today's players have become completely desensitized to hacker news; this 'security aesthetic fatigue' is actually a typical emotional turning point.
From a chip perspective, a large portion of the stolen coins have become a black hole that can never be recovered, effectively completing a forced deflation. When such negative news can no longer trigger panic selling and is even regarded as old news, it indicates that the resilience of the market bottom has already been forged. Instead of worrying about code vulnerabilities, people might as well be concerned that their wallets haven't yet seen a hundredfold dog.
After so many years, have you contributed 'tuition fees' to hackers? #Security #DeFi #Hacked $BTC $ETH
Tell me I'm not the only one who feels like the $WLD got lost! 🥹
Will it ever come out of the blockage???
#Worldcoin #Hacked
Will it ever come out of the blockage???
#Worldcoin #Hacked
☠️ Wasabi Protocol got hacked for $5 million across Ethereum, Base, Berachain and Blast
Not a day without a hack 😫
#Hacked $ETH $BERA
Not a day without a hack 😫
#Hacked $ETH $BERA
🚨 BINANCE SQUARE POST
$606,000,000 stolen in 18 days. April 2026 is already the worst month for crypto hacks since the $1.4B Bybit breach.
Two attacks. Both Lazarus Group. Both devastating:
→ $285M — Drift Protocol (April 1)
→ $292M — KelpDAO (April 18)
The KelpDAO exploit alone triggered $10B+ in Aave outflows and sent shockwaves across 20+ connected protocols.
And it's not slowing down. DeFi attack frequency is up 68% year-on-year. Smart contract audits alone are no longer enough — attackers have shifted to private keys, bridge infrastructure, and AI-driven social engineering.
😫Most retail traders only think about fees and leverage when choosing an exchange. Security should be the first filter.
What actually matters when vetting an exchange:
✅ Proof of reserves (independently verified)
✅ Cold storage ratio
✅ Track record after a breach — did they compensate users?
✅ MiCA / regulated status in your jurisdiction
✅ Insurance funds
We review every exchange on these criteria before anything else.
🔗 Full exchange rankings: https://trading365.org/reviews
Don't let the next hack be your exit from crypto.
#Hacked #StolenFunds
$606,000,000 stolen in 18 days. April 2026 is already the worst month for crypto hacks since the $1.4B Bybit breach.
Two attacks. Both Lazarus Group. Both devastating:
→ $285M — Drift Protocol (April 1)
→ $292M — KelpDAO (April 18)
The KelpDAO exploit alone triggered $10B+ in Aave outflows and sent shockwaves across 20+ connected protocols.
And it's not slowing down. DeFi attack frequency is up 68% year-on-year. Smart contract audits alone are no longer enough — attackers have shifted to private keys, bridge infrastructure, and AI-driven social engineering.
😫Most retail traders only think about fees and leverage when choosing an exchange. Security should be the first filter.
What actually matters when vetting an exchange:
✅ Proof of reserves (independently verified)
✅ Cold storage ratio
✅ Track record after a breach — did they compensate users?
✅ MiCA / regulated status in your jurisdiction
✅ Insurance funds
We review every exchange on these criteria before anything else.
🔗 Full exchange rankings: https://trading365.org/reviews
Don't let the next hack be your exit from crypto.
#Hacked #StolenFunds
Bearish sentiment around $AAVE after the #KelpDAO rsETH exploit.
Around $290M in rsETH was reportedly drained, then used on Aave as collateral to borrow WETH, creating potential bad debt inside #Aave pools.
Important Aave itself was not #hacked but it is now exposed to fallout from worthless collateral.
Short term outlook remains bearish until
Exact bad debt is confirmed
Aave announces recovery measures
Market confidence returns
For investors. waiting may be safer than rushing to buy. If you believe in Aave long term, scaling in slowly could be smarter than going all in.
Fear is high, but if Aave handles this well, recovery is still possible.
#KelpDAOFacesAttack
Around $290M in rsETH was reportedly drained, then used on Aave as collateral to borrow WETH, creating potential bad debt inside #Aave pools.
Important Aave itself was not #hacked but it is now exposed to fallout from worthless collateral.
Short term outlook remains bearish until
Exact bad debt is confirmed
Aave announces recovery measures
Market confidence returns
For investors. waiting may be safer than rushing to buy. If you believe in Aave long term, scaling in slowly could be smarter than going all in.
Fear is high, but if Aave handles this well, recovery is still possible.
#KelpDAOFacesAttack
Kelp DAO, a liquid restaking protocol connected to EigenLayer, was exploited on April 18, 2026. Around $292 million worth of $RSETH was drained through its LayerZero cross-chain bridge.
The attacker forged a cross-chain message that the system accepted as valid, even though no real deposit happened on the source chain. This allowed them to mint or unlock about 116,500 rsETH without any actual ETH backing it.
The stolen rsETH was then sent to Aave, a major DeFi lending protocol, where it was used as collateral to borrow large amounts of real ETH and wrapped ETH. By the time protocols responded, much of the borrowed ETH had already moved.
A second attack was nearly executed that could have drained another $100M, but a rapid blacklist response stopped it just before it went through.
Kelp DAO paused rsETH contracts across mainnet and several Layer-2 chains. Aave froze the $RSETH markets. Compound, Euler Labs, and Venus Protocol also reviewed and adjusted their exposure.
The failure is reported to have happened in the Decentralized Verifier Network layer, which is responsible for confirming cross-chain messages, not in the core smart contracts themselves. This points to a configuration weakness in how external validation was trusted.
The exploit was first reported by the blockchain investigator ZachCBT and is now considered one of the largest DeFi incidents of 2026, showing how a single bridge failure can spread risk across the entire DeFi ecosystem within minutes.
#KelpDAO #security #Hack #Hacked #exploit
The attacker forged a cross-chain message that the system accepted as valid, even though no real deposit happened on the source chain. This allowed them to mint or unlock about 116,500 rsETH without any actual ETH backing it.
The stolen rsETH was then sent to Aave, a major DeFi lending protocol, where it was used as collateral to borrow large amounts of real ETH and wrapped ETH. By the time protocols responded, much of the borrowed ETH had already moved.
A second attack was nearly executed that could have drained another $100M, but a rapid blacklist response stopped it just before it went through.
Kelp DAO paused rsETH contracts across mainnet and several Layer-2 chains. Aave froze the $RSETH markets. Compound, Euler Labs, and Venus Protocol also reviewed and adjusted their exposure.
The failure is reported to have happened in the Decentralized Verifier Network layer, which is responsible for confirming cross-chain messages, not in the core smart contracts themselves. This points to a configuration weakness in how external validation was trusted.
The exploit was first reported by the blockchain investigator ZachCBT and is now considered one of the largest DeFi incidents of 2026, showing how a single bridge failure can spread risk across the entire DeFi ecosystem within minutes.
#KelpDAO #security #Hack #Hacked #exploit
Cybersecurity in Crypto
Ways to safeguard your assets from hacks. Solve interactive challenges to uncover vulnerabilities in your account.
#HotTrends
#Hacked
$BTC
$XRP
$USDC
Ways to safeguard your assets from hacks. Solve interactive challenges to uncover vulnerabilities in your account.
#HotTrends
#Hacked
$BTC
$XRP
$USDC
🚨 THE $17,000,000,000 WAKE-UP CALL 🚨
In just 10 years, hackers have drained $17B across 518 major incidents. The transition from DeFi exploits to CeFi targets in 2026 shows no one is safe without a plan.
The Reality Check:
Total Stolen: $17 Billion 💸
Total Hacks: 518 ⚔️
Biggest Lesson: Greed kills, but bad security buries you.
Stay SAFU by using 2FA (Non-SMS) and verifying every link.
What is the one security tool you can't live without? Let’s help each other stay safe! 👇
#CryptoSecurity #Hacked
In just 10 years, hackers have drained $17B across 518 major incidents. The transition from DeFi exploits to CeFi targets in 2026 shows no one is safe without a plan.
The Reality Check:
Total Stolen: $17 Billion 💸
Total Hacks: 518 ⚔️
Biggest Lesson: Greed kills, but bad security buries you.
Stay SAFU by using 2FA (Non-SMS) and verifying every link.
What is the one security tool you can't live without? Let’s help each other stay safe! 👇
#CryptoSecurity #Hacked
Android Hackers Target 800 Banking, Crypto and Social Media Apps With ‘Near-Zero Detection Rates’: Zimperium
Android hackers are now targeting more than 800 applications across banking, cryptocurrency and social media sectors.
The cybersecurity firm Zimperium says its researchers have identified four active malware families that use advanced command-and-control infrastructure to steal credentials, conduct unauthorized financial transactions and exfiltrate data at scale.
“Collectively, these campaigns target over 800 applications across the banking, cryptocurrency, and social media sectors.
By employing advanced anti-analysis techniques and structural APK tampering, these families often maintain near-zero detection rates against traditional signature-based security mechanisms.”
The names of the malware families are RecruitRat, SaferRat, Astrinox and Massiv.
Attackers commonly rely on phishing websites, fraudulent job offers, fake software updates, text-message scams and promotional lures to convince victims to install malicious Android apps.
Once installed, the malware can request Accessibility permissions, hide app icons, block uninstall attempts, steal PINs and passwords through fake lock screens, capture one-time passcodes, stream live device screens and overlay counterfeit login pages on legitimate banking or crypto apps.
“Overlay attacks remain the cornerstone of the credential-harvesting lifecycle. Using Accessibility Services to monitor the foreground, the malware detects the exact moment a victim launches a financial application. The malware then fetches a malicious HTML payload and overlays it onto the legitimate application’s user interface, creating a highly convincing, deceptive facade.”
The company said the campaigns use HTTPS and WebSocket communications to blend malicious traffic with normal app activity, while some variants add extra encryption layers to evade detection.
More news — subscribe
#hacked
Android hackers are now targeting more than 800 applications across banking, cryptocurrency and social media sectors.
The cybersecurity firm Zimperium says its researchers have identified four active malware families that use advanced command-and-control infrastructure to steal credentials, conduct unauthorized financial transactions and exfiltrate data at scale.
“Collectively, these campaigns target over 800 applications across the banking, cryptocurrency, and social media sectors.
By employing advanced anti-analysis techniques and structural APK tampering, these families often maintain near-zero detection rates against traditional signature-based security mechanisms.”
The names of the malware families are RecruitRat, SaferRat, Astrinox and Massiv.
Attackers commonly rely on phishing websites, fraudulent job offers, fake software updates, text-message scams and promotional lures to convince victims to install malicious Android apps.
Once installed, the malware can request Accessibility permissions, hide app icons, block uninstall attempts, steal PINs and passwords through fake lock screens, capture one-time passcodes, stream live device screens and overlay counterfeit login pages on legitimate banking or crypto apps.
“Overlay attacks remain the cornerstone of the credential-harvesting lifecycle. Using Accessibility Services to monitor the foreground, the malware detects the exact moment a victim launches a financial application. The malware then fetches a malicious HTML payload and overlays it onto the legitimate application’s user interface, creating a highly convincing, deceptive facade.”
The company said the campaigns use HTTPS and WebSocket communications to blend malicious traffic with normal app activity, while some variants add extra encryption layers to evade detection.
More news — subscribe
#hacked
Login to explore more contents