Premia Labs vaults on Arbitrum lost $437,000 in collateral to an exploit. The stolen funds were routed through the protocol's own options pools, then cashed out as liquidity, security firm Blockaid found.
The Ethereum Foundation pushed back the Hoodi testnet launch of its Glamsterdam update, saying auditor ChainSecurity had flagged a gas-accounting change that could weaken protection for 13 live smart contracts.
Developers of the modular blockchain Initia halted the network and its rollups on Friday after an attacker exploited a bug to mint unbacked tokens, co-founder Ezaan Mangalji said.
Blockchain security firm Hacken tallied crypto's third-quarter losses: 107 incidents and $1.18 billion stolen, up 55% from the prior quarter. Most of the money disappeared through gaps no audit ever checked.
XRP Ledger developers rushed out a patch for a bug that sat in the code for almost a decade and could have let someone mint tokens past the network's hard cap of 100 billion. No sign it was ever exploited.
A New York jury found the Uranium Finance hacker guilty: he stole $55 million from the DeFi exchange in 2021 and spent part of it on rare Pokémon cards and ancient coins.
Igloo Inc., the company behind Pudgy Penguins, will shut down its Abstract blockchain on December 15 after 18 months of funding and tens of millions in losses. Users must move their assets before the deadline.
Paradigm-backed Ethereum layer-2 Blast is winding down as costs outpaced revenue. TVL collapsed from $2.2 billion to $32 million, its token lost nearly all its value, and users have three weeks to withdraw.
The SEC says buying back tokens or upgrading a live blockchain doesn't automatically make an asset a security. The guidance follows the Senate's failure to pass the Clarity Act.
KelpDAO accuses LayerZero of endorsing a risky bridge security setup and hiding the danger — after the $292 million hack, users pulled $650 million out of the protocol.
The CFTC expanded March's one-off relief for wallet maker Phantom into an industry rule: makers of non-custodial wallets and DeFi front-ends can now link users to regulated derivatives without broker registration.
Balancer, one of DeFi's oldest AMM protocols, is winding down. Revenue never recovered after a $128M exploit last November, and its treasury council now plans to return remaining funds to BAL holders.
Senate Republicans released a revised 630-page CLARITY Act and set a procedural vote for September 15 — but no Democrat has backed it, and the bill is still several votes short of the 60 it needs.
Liquid Network, Blockstream's Bitcoin sidechain, lost nearly all its reserves — about 4,000 BTC — to a software bug, not a stolen key. Most of the money came back within a day, but not all of it.
A single order on a thin Korean pre-market feed crashed a crypto perpetual on SK Hynix shares by 19% in minutes, wiping out nearly $60 million in positions. Trade.xyz is voluntarily covering the losses.
Blockaid tracked 212 hacks in the first half of 2026 — a record for a single half-year. North Korean hackers accounted for over half the losses, going after employees and passwords rather than code bugs.
After $650 million in bridge hacks, crypto projects moved over $7 billion onto Chainlink's CCIP protocol — and Fidelity and State Street are now building on the same rails.
Attackers turned a single signature for 3,000 tokens into authorization to drain 203 million — Wanchain's bridge concatenated data without delimiters. NIGHT, the token of Cardano's privacy network Midnight, took the hit.
An attacker hijacked Ostium's price oracle and traded on quotes from the future, draining between $18 million and $24 million from the Arbitrum DeFi exchange in about five minutes.
An attacker bought $4M in BONK tokens, reached quorum with just seven wallets, and drained $20 million from BonkDAO's treasury. The token fell 8.5%; Upbit froze deposits.
