Sep 8, 2026 ✦ Take ▶ 4 clipsLiquid Gets 3,400 BTC Back ay two resolves the mechanism: validation-cache bug conjured L-BTC (door two — break-in); Blockstream patched, 3,400 BTC returned, ~598.5 BTC (~$47–48M, ~15%) kept as self-set "whitehat fee"; Map row now creatable with confirmed figures
Sep 7, 2026 ✦ Take Liquid's Federation Drained ~4,000 BTC (reports: 3,998–4,200; ~$318–320M) peg-out drains nearly all of Liquid's federation wallet; sidechain paused; on-chain "whitehat" claim disputed by Ledger's CTO; stale functionary codebase cited in commentary — attribution and recovery open
Ostium Relaunches After $24M Exploit Ostium reopens trading on July 23 following the $23.75M oracle-price exploit, with recovery plan for liquidity providers advancing
Ostium Oracle Exploit: $23.75M Ostium confirms total exploit losses at $23.75M via false oracle price manipulation, announces 24-hour notice before trading restart
Ostium $18M Oracle Exploit Ostium perp DEX loses $18M in oracle private-key compromise, halting trading and extending oracle-attack pattern
Supra Oracle Exploit Spreads Reporting reveals Supra patched oracle vulnerabilities on 11 other chains before the $9M Hedera exploit was publicly disclosed
$9M Drained via Hedera Oracle Exploit Bonzo Lend loses $9M as oracle price-feed manipulation extends exploit wave to Hedera ecosystem
$6M Lazy Summer Vault Exploit Detailed Post-mortem reveals Lazy Summer Protocol's $6M vault exploit involved months of attacker preparation
ETH Leverage Loops and MEV Risks Flagged Lido stETH leverage loops expose hidden liquidation risk as trader loses $2M in single-block backrun
Summer Finance $6M Vault Exploit Summer Finance loses $6M in vault exploit, suspends all protocol vaults
North Korea Steals $643M in Crypto North Korea-linked hackers steal $643M in crypto in H1 2026, emerging as a dominant contributor to record losses
BackedFi Loses $204K in Exploit BackedFi loses ~$204K in Ethereum exploit, continuing the post-Q2 DeFi attack streak into July
$121K Exploit Hits AIDC on BSC AIDC token on BSC loses ~$121K in exploit, adding another BSC incident to the mounting Q2 tally
Etherlink Bridge Halted After Attack Etherlink suspends cross-chain bridge operations following an attack attempt
Q2 2026 Breaks Crypto Hack Records Q2 2026 is confirmed as the worst quarter on record for crypto hacks by total losses
THORChain Resumes Trading, Plans Monero Swaps THORChain returns to trading after $10.7M exploit and unveils Monero swap roadmap
DLMC Token Exploited for $222K DLMC token on BSC suffers $222,600 exploit, extending DeFi attack wave to smaller BSC targets
THORChain Restarts After $10.7M Exploit THORChain resumes trading following $10.7M exploit and month-long halt
Taiko Bridge Exploit Costs $1.7M Taiko Chain's proof-of-state mechanism is compromised, losing $1.7M in bridge exploit
Stolen MEV Funds Flow to Tornado Cash Attacker who executed the MEV bot reversal attack on jaredfromsubway.eth transferred a portion of the $7.5M exploit proceeds into Tornado Cash.
Namada Bridge Drained of 228K ATOM Namada privacy chain loses 228,000 ATOM via cross-chain bridge exploit
Axelar Kills Bridge After $4.67M Hack Axelar disables Secret Network bridge after $4.67M exploit affects IBC-linked assets
Aztec Hit by Second Exploit in a Week SlowMist confirmed Aztec suffered a second exploit of approximately $2.1M within less than a week of the first $2.19M exploit, both attributed to deprecated contract vulnerabilities.
Aztec Network Loses $2.15M to Exploit Aztec Network suffered a $2.15M exploit with root cause confirmed as a ZK proof–L1 settlement mismatch, consistent with prior warnings about legacy DeFi contract risk.
AI Accelerates DeFi Exploit Discovery A new report highlights AI systems actively accelerating the identification of DeFi attack vectors, adding a systematic threat dimension to the isolated exploit incidents reported previously.
DeFi Hacks Drain $36M+ in Days Crypto hackers drained over $36 million from protocols using unverified contracts across multiple incidents. A separate governance takeover attack resulted in the minting of 10 billion TOP tokens and the draining of $1.58 million from a Balancer pool. A NovaBox rewards pool was also exploited for 56.73 ETH through a vulnerability in its distribution mechanism.
