Cryptocurrency
SEC Form 8-K
Vector: Smart contract exploit / hack
Bitcoin ATM operator Bitcoin Depot has disclosed a March 23 hack in which attackers stole 50.903 BTC (~$3.67 million) from company wallets. According to the company's disclosure …
Cryptocurrency 1086 incidents
Cryptocurrency, DeFi, and Web3 security incidents including exchange hacks, bridge exploits, and smart contract vulnerabilities
Cryptocurrency
"Drift says $280M exploit tied to 'sophisticated' admin takeover; ZachXBT criticizes Circle over USDC handling"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The Solana-based Drift defi perpetual futures exchange was exploited for $285 million. The project alerted the community on social media, writing: "Drift Protocol is experiencing …
Cryptocurrency
"On the Future of Balancer: Shutting Down Balancer Labs, Supporting the Path Forward"
Vector: Protocol collapse / insolvency
After a November 2025 exploit in which $110 million was drained from the Balancer defi protocol, the company behind the project has announced it will shut down. Besides the massive …
Cryptocurrency
"Venus Protocol left with roughly $2M in bad debt after exploit manipulates Thena's THE token price"
Vector: Smart contract exploit / hack
The BNB Chain's Venus Protocol lending protocol accumulated $2.15 million in bad debt after an exploiter manipulated the price of the Thena protocol's THE token. THE had very low …
Cryptocurrency
Tweet by Solv Protocol
Vector: Smart contract exploit / hack
The Solv Protocol bitcoin defi lending and staking platform disclosed an exploit that they said affected fewer than ten users, but nevertheless netted the attacker 38 SolvBTC (a …
Cryptocurrency
Tweet by Step Finance
Vector: Protocol collapse / insolvency
Step Finance announced that, following a $30 million theft in late January, the project would be shutting down. Along with it, they will shut down SolanaFloor — a Solana-focused …
Cryptocurrency
"IoTeX hit by private key exploit draining around $2 million from bridge contracts, per co-founder"
Vector: Private key compromise
IoTeX, a platform to connect IoT devices to blockchain networks, lost around $2 million after a private key compromise enabled an attacker to drain funds from the project's token …
Cryptocurrency
"Prosecutors recover $22 million worth of lost Bitcoin"
Vector: Phishing attack
Staff members working for South Korean prosecutors, for some reason, decided to use a "wallet checking tool" during an August 2025 audit of seized crypto assets. The tool they …
Cryptocurrency
"South Korean crypto firm accidentally sends $44 billion in bitcoins to users"
The South Korean cryptocurrency exchange Bithumb disclosed that it had accidentally given its customers more than 620,000 BTC (~$44 billion) in a promotional event gone wrong. …
Cryptocurrency
"CrossCurve Threatens Legal Action After $3M Cross-Chain Bridge Exploit"
Vector: Smart contract vulnerability exploit
Hackers exploited a bug in smart contracts deployed by the defi protocol CrossCurve to steal an estimated $3 million across multiple blockchains. The thief was able to spoof …
Cryptocurrency
Tweet by CertiK
Vector: Smart contract exploit / hack
The Solana-based defi portfolio tracker Step Finance lost 261,854 SOL (~$28.7 million) when a thief gained access to treasury and fee wallets. It's not yet clear how the attacker …
Cryptocurrency
Tweet thread by Aperture Finance
Vector: Smart contract exploit / hack
An attacker exploited a bug in an Aperture Finance smart contract to steal at least $3.4 million from users who had enabled "instant liquidity management" features. Aperture …
Cryptocurrency
"SwapNet Incident Post Mortem"
Vector: Smart contract exploit / hack
Some users of Matcha Meta, a decentralized exchange aggregator on the Base blockchain, suffered losses after a thief exploited a vulnerability in its SwapNet integration. SwapNet …
Cryptocurrency
Tweet by Saga
Vector: Private key compromise
The Saga project halted its blockchain after acknowledging that $7 million had been stolen. An attacker was evidently able to mint a large quantity of Saga Dollar tokens, though …
Cryptocurrency
Tweet by RuneCrypto_
Vector: Exit scam / rug pull
Shortly after losing his campaign for re-election as mayor of New York City, Eric Adams announced he would be launching "NYC Token". He's pitched the project as a fundraising tool …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
A crypto holder has lost $282 million in bitcoin and litecoin after a scammer impersonating a customer support employee for the Trezor hardware wallet manufacturer successfully …
Cryptocurrency
Tweet by Truebit
Vector: Smart contract exploit / hack
A bug in a smart contract belonging to the Ethereum-based Truebit project allowed an attacker to steal 8,535 ETH (~$26.4 million). The thief targeted one of the project's older …
Cryptocurrency
"Flow blockchain probes security incident as FLOW token plunges over 40%"
Vector: Smart contract exploit / hack
The Flow blockchain suffered an exploit in which an attacker was able to mint a large number of wrapped FLOW tokens, which they then swapped to tokens on other blockchains. …
Cryptocurrency
Tweet by PeckShield
Vector: Flash loan attack on smart contract
Only weeks after losing $6.6 million to an infinite mint exploit, a Yearn Finance smart contract has again been exploited, allowing an attacker to make off with around 103 ETH …
Cryptocurrency
Tweet by Aevo (fka Ribbon Finance)
Vector: Smart contract exploit / hack
Ribbon Finance, which has partially rebranded to Aevo, has lost $2.7 million after attackers exploited a vulnerability in the smart contract for legacy Ribbon vaults that enabled …
Cryptocurrency
"Binance post confirming insider trading sends 'year of the yellow fruit' meme token even higher"
Binance has announced that the company has suspended an employee who used the platform's official Twitter accounts to promote a memecoin they had launched. The token, called "year …
Cryptocurrency
"Fusaka Mainnet Prysm Incident"
Vector: Software bug / unintentional loss
Ethereum validators running the Prysm consensus client lost around 382 ETH ($1.18 million) after a bug resulted in delays that caused validators to miss blocks and attestations. …
Cryptocurrency
"yETH Pool Exploit: Technical Incident Report and Math Reconstruction"
Vector: Smart contract exploit / hack
Yearn Finance, a defi yield protocol, has suffered another hack. The exploiter took advantage of bugs in the project's smart contract to drain assets from several of its pools by …
Cryptocurrency
"Upbit Reveals 5.9B-Won Corporate Loss in Latest Hack, Fully Reimburses Users"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The Korean cryptocurrency exchange Upbit suffered a loss of around $30 million in various Solana-based assets due to a hack. Some entities have suggested that Lazarus, a North …
Cryptocurrency
"Top DEXs Aerodrome, Velodrome hit with front-end compromise, urge users to avoid main domains"
Vector: DNS hijacking / domain takeover (front-end compromise)
Attackers redirected users intending to visit the websites for the decentralized exchanges Aerodrome and Velodrome to their own fraudulent versions using DNS hijacking, after …
Cryptocurrency
Tweet thread by Homer J
Vector: AI-assisted attack or AI-generated exploit
On November 21, the Cardano blockchain suffered a major chainsplit after someone created a transaction that exploited an old bug in Cardano node software, causing the chain to …
Cryptocurrency
Telegram post by zachxbt
Vector: On-chain theft (attributed by zachxbt)
An attacker stole approximately $3.1 million from the BNB chain-based GANA Payment project. The thief laundered about $1 million of the stolen funds through Tornado Cash shortly …
Cryptocurrency
"'Fat-Finger' Fail? Cardano Whale Torches $6M After Hitting Illiquid USDA Pool"
Vector: User error / fat-finger trade
A holder of around 14.4 million ADA (~$6.9 million), the token for the Cardano network, made an expensive error when attempting to swap the tokens for a stablecoin. Because the …
Cryptocurrency
Tweet thread by Elixir
Vector: Protocol collapse / insolvency
After the defi yield platform Stream Finance announced a $93 million loss, Elixir announced it would be discontinuing its deUSD synthetic stablecoin. Stream Finance owes $68 …
Cryptocurrency
wrsETH Oracle Malfunction 11/4/25
Vector: Oracle price manipulation
The Moonwell lending protocol, built on the Base Ethereum L2, wound up with $3.7 million in bad debt after an attacker took advantage of an oracle malfunction that caused the price …
Cryptocurrency
"Balancer Hit by Apparent Exploit as $110M in Crypto Moves to New Wallets"
Vector: Smart contract access control vulnerability
The defi protocol Balancer suffered a major exploit that drained over $110 million across several blockchains, including Ethereum, Polygon, Base, and Sonic. Attackers exploited …
Cryptocurrency
"DeFi karma: Garden hacked for $11M after bridging Lazarus’ loot "
Vector: On-chain theft (attributed by zachxbt)
The Garden bitcoin bridge suffered a roughly $11 million loss after one of its solvers was compromised. These solvers essentially act as market makers for the protocol. Some …
Cryptocurrency
Tweet by Whale Alert
Vector: Software bug / unintentional loss
Paxos, the issuer of PayPal's PYUSD stablecoin, accidentally minted 300 trillion of the supposedly dollar-pegged token. For context, this is approximately 2.5x the global GDP, and …
Cryptocurrency
"Hyperliquid User Loses $21 Million Due to Private Key Compromise, Experts Say"
Vector: Smart contract exploit / hack
An attacker apparently obtained access to a victim's private key, enabling them to drain $21 million in various crypto assets. The attacker quickly bridged the stolen funds to ETH, …
Cryptocurrency
"Abracadabra loses $1.8 million in protocol's third major DeFi hack since 2024"
Vector: Smart contract exploit / hack
In their third major hack in two years, the Abracadabra defi lending project lost $1.8 million of their Magic Internet Money stablecoin. An attacker took advantage of a bug in the …
Cryptocurrency
"Hyperliquid-based Hyperdrive loses $782,000 after smart contract exploit"
Vector: Smart contract exploit / hack
Exploiters drained $782,000 in crypto assets from two markets on the Hyperdrive lending protocol, which is built on the Hyperliquid layer-1 blockchain. The attacker apparently took …
Cryptocurrency
"$3.6M Drained From Hyperliquid DeFi Platform Hypervault in ‘Abnormal Withdrawal’"
Only days after the Hypervault yield farming platform announced on Twitter that they'd surpassed $5 million in total value locked, the platform suddenly shut down its website and …
Cryptocurrency
Tweet by Meta Alchemist
Vector: Smart contract exploit / hack
An attacker exploited bridges for SFUND, the token issued by the Seedify launchpad and incubator. It appears the exploiter has profited around $1.7 million from the theft. Seedify …
Cryptocurrency
Tweet by Yala
The YU bitcoin-backed stablecoin lost its intended dollar peg after what they described as "an attempted attack", later writing that there was an "unauthorized transfer of funds". …
Cryptocurrency
"SwissBorg hacked for $41M SOL after third-party API compromise"
Vector: Smart contract exploit / hack
Thieves stole 192,600 SOL (~$41.5 million) from a wallet belonging to the Swiss cryptocurrency exchange SwissBorg. The attack is being blamed on a vulnerability in the API of Kiln, …
Cryptocurrency
"Sui-based Nemo Protocol exploited for $2.4 million"
Vector: Oracle price manipulation
The Nemo Protocol on the Sui blockchain suffered a $2.4 million exploit. The defi yield infrastructure protocol acknowledged the theft shortly after, explaining they had paused the …
Cryptocurrency
"Decentralized exchange Bunni loses an estimated $8.4 million in smart contract exploit"
Vector: Smart contract exploit / hack
The Bunni decentralized exchange was exploited for approximately $8.4 million across the Unichain Ethereum layer 2 network and the Ethereum mainnet. Bunni acknowledged the theft …
Cryptocurrency
"Venus Protocol pauses after user loses funds in suspected phishing attack"
Vector: Smart contract exploit / hack
A user of the Venus Protocol borrowing and lending platform was successfully phished by an attacker who gained access to their account and drained $13.5 million in stablecoins and …
Cryptocurrency
"Closing up (the) Shop"
Three years after launching "Collectible Avatars", the NFT project they didn't want to call "NFTs" because they were already becoming kind of cringe, Reddit has decided to pull the …
Cryptocurrency
Tweet by zachxbt
Vector: Social engineering attack
A bitcoin holder reportedly fell for a social engineering attack after receiving communications from scammers posing as customer support for a crypto exchange and hardware wallet …
Cryptocurrency
"Qubic Claims Majority Control of Monero Hashrate, Raising 51% Attack Fears"
Vector: 51% attack / network takeover
Monero, a privacy-focused blockchain network, has been undergoing an attempted 51% attack — an existential threat to any blockchain. In the case of a successful 51% attack, where a …
Cryptocurrency
Tweet by BobBodily
Vector: Smart contract exploit / hack
Odin.fun, a bitcoin-based memecoin launchpad sort of like the popular pump.fun, was exploited for 58.2 BTC (~$7 million). The attacker had apparently manipulated the price of …
Cryptocurrency
"Solana lender Credix pledges full reimbursement after $4.5 million DeFi exploit"
Vector: Exit scam / rug pull
The defi lending protocol Credix lost $4.5 million to an exploit after a hacker gained control of an admin wallet and used it to mint tokens and drain liquidity pools.Credix …
Cryptocurrency
Tweet by CyversAlerts
Vector: Smart contract exploit / hack
A hacker stole RARE tokens priced at around $731,000 after exploiting a vulnerability in a staking contract for the SuperRare NFT platform. The attacker funded the exploiter wallet …
Cryptocurrency
Tweet thread by CertiK
Vector: Smart contract exploit / hack
The Arcadia Finance defi margin protocol was exploited for $3.5 million after an attacker found a vulnerability in a project smart contract. The attacker quickly swapped the stolen …
Cryptocurrency
Tweet by Ramon | Kinto
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The price of Kinto's $K token suddenly crashed 90%, sparking accusations of a rug pull. A tranche of investor tokens had just been unlocked recently, leading some to speculate that …
Cryptocurrency
Tweet by PeckShield
Vector: Smart contract exploit / hack
The decentralized perpetual exchange GMX has been exploited for $42 million. The exploit involved a vulnerability in one version of the exchange's price calculation smart contract. …
Cryptocurrency
Tweet by Texture
Vector: Smart contract exploit / hack
An attacker exploited the Solana-based lending protocol Texture, stealing $2.2 million in user funds from one of the project's vaults.Shortly after the attack, Texture sent a …
Cryptocurrency
Tweet thread by deeberiroz
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
On July 9, security researchers at VennBuild and other firms disclosed a "critical backdoor" affecting thousands of smart contracts, which one of the researchers said left "over …
Cryptocurrency
"Meta Pool, a Liquid Staking Protocol, Suffers $27M Exploit"
Vector: Smart contract exploit / hack
An attacker exploited a vulnerability in the staking contract for Meta Pool, which is a liquid staking project. This allowed them to mint 9,700 mpETH, the project's liquid staking …
Cryptocurrency
"DeFi Platform Cork Protocol Suffers $12M Smart Contract Exploit"
Vector: Smart contract exploit / hack
Cork Protocol, a defi project aimed at "tokenizing the risk of depeg events for stablecoins and liquid (re)staking tokens", suffered a $12 million loss after an attacker exploited …
Cryptocurrency
Tweet by Cetus
Vector: Smart contract exploit / hack
An attacker stole $223 million from the Sui-based Cetus Protocol. The project announced shortly after that $163 million of the funds had been frozen, leaving around $60 million …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
3,250 BTC (~$330 million) were apparently stolen from a bitcoin holder and then quickly moved through multiple exchanges and swapped for the Monero privacycoin. Such a massive swap …
Cryptocurrency
"Solana DeFi protocol Loopscale hit with $5.8 million exploit two weeks after launch"
Vector: Smart contract exploit / hack
A new Solana-based defi protocol called Loopscale, backed by Coinbase Ventures and Solana Labs, suffered a $5.8 million exploit only two weeks after its launch. The stolen funds …
Cryptocurrency
Tweet by Term Labs
Vector: Software bug / unintentional loss
The Ethereum-based lending project Term Finance lost $1.6 million when an oracle misconfiguration resulted in unintended liquidations. The team later announced that they had …
Cryptocurrency
"ZKsync discloses $5 million attack from compromised airdrop admin account, triggering 20% price drop"
Vector: Smart contract exploit / hack
An attacker compromised an admin account belonging to the ZKsync Ethereum layer-2 project, which is built by Matter Labs. By doing so, they were able to steal approximately $5 …
Cryptocurrency
Tweet by KiloEx
Vector: Oracle price manipulation
KiloEx, a decentralized perpetual futures exchange, was exploited for $7.5 million. An attacker executed an oracle manipulation attack on KiloEx's pricing smart contracts to steal …
Cryptocurrency
On-chain messages
Vector: Phishing attack
The zkLend lending platform was hoping they could secure the return of stolen funds from the attacker who stole 3,667 ETH (~$9.5 million at the time) from the platform in …
Cryptocurrency
"ICERAID: Report Immigrants, Get Paid In Crypto"
A project called "ICERAID" has emerged, promising to reward "intelligence gathering" on "suspicious activities" by photographing supposedly criminal behavior by undocumented …
Cryptocurrency
Telegram post
Vector: On-chain theft (attributed by zachxbt)
A Coinbase customer reportedly lost 400 BTC (~$35 million) in a scam identified by blockchain sleuth zachxbt. While investigating the massive theft from the single customer, he …
Cryptocurrency
"Hyperliquid delists JELLYJELLY memecoin amid whale manipulation fiasco"
HyperLiquid's Hyperliquidity Provider market making vault suffered a $13.5 million loss after an alleged market manipulation incident involving a memecoin called JELLYJELLY. A …
Cryptocurrency
"Hacker steals $13 million in Abracadabra's 'Magic Internet Money' seemingly using a flash loan attack"
Vector: Flash loan attack on smart contract
An attacker using a flash loan attack stole $13 million in the Magic Internet Money token from the Abracadabra project. The attack was enabled by a bug in the platform's smart …
Cryptocurrency
"Binance memecoin platform Four Meme exploited again — this time for $130K"
Vector: Smart contract exploit / hack
After suffering an $183,000 loss to an attack in February, the BNB-based Four.Meme memecoin launchpad has been hacked again, this time for around $130,000. Four.Meme aims to be …
Cryptocurrency
Tweet by 1inch
Vector: Smart contract exploit / hack
An attacker exploited a smart contract belonging to the 1inch DEX aggregator, stealing $5 million in the USDC stablecoin and wETH. According to the platform, the vulnerability …
Cryptocurrency
Complaint
Vector: Phishing attack
A plaintiff named Mandar Mirashi has filed a lawsuit against an unknown defendant accused of stealing around $40 million in bitcoin through a sophisticated phishing attack and/or …
Cryptocurrency
Tweet by Suji Yan
Vector: Private key compromise
Suji Yan, the founder of the Mask Network, suffered the loss of more than $4 million in various cryptocurrency assets to an apparent wallet hack. According to Yan, the theft …
Cryptocurrency
"0xInfini Incident Analysis"
Vector: Smart contract exploit / hack
Around $49.5 million in the USDC stablecoin was stolen from the Infini crypto-focused "stablecoin neobank", a fintech company that promises "financial freedom" by "democratizing …
Cryptocurrency
Tweet by Ben Zhou
Vector: Phishing attack
In what is looking like largest ever theft from a cryptocurrency exchange, attackers took control of a hot wallet belonging to the Bybit cryptocurrency exchange and moved a massive …
Cryptocurrency
Tweet by 0xCygaar
Vector: Smart contract exploit / hack
Around $400,000 in ETH was stolen from around 9,000 wallets on the Abstract layer-2 network, which is built by the same company that makes the Pudgy Penguins NFTs. It appears that …
Cryptocurrency
Tweet by Lookonchain
A tweet from Argentina's president Javier Milei promoted a memecoin called Libra, which he described as a "private project [that] will [be] dedicated to encouraging the growth of …
Cryptocurrency
Tweet by Four.Meme
Vector: Smart contract exploit / hack
A BNB Chain memecoin platform, Four.Meme, announced on Twitter that they were "currently experiencing a malicious attack". The team briefly paused a portion of the service while …
Cryptocurrency
"AlleyCat - The Gambling Deployer!"
Vector: Exit scam / rug pull
The creator of the AlleyCat Solana-based cryptocurrency project has reportedly taken about 600 SOL (~$130,000) raised during the project's presale and transferred it to gambling …
Cryptocurrency
"Solana Meme Coin Dogwifhat Has No Deal With Las Vegas Sphere, Venue Says"
In late January, the creator of the "dogwifhat" memecoin announced "Officially confirmed. Viva hat vegas." in a tweet accompanied by a photo overlaying the dog meme with the Las …
Cryptocurrency
"Poetic Justice"
Vector: Exit scam / rug pull
A suite of software tools called DogWifTools was popular among memecoin creators looking to rug pull unsuspecting traders. By helping token creators mask supply control and fake …
Cryptocurrency
Tweet by Ether Strategy
A Ethereum-based project promising to duplicate the bitcoin leveraged investment strategy used by MicroStrategy has announced that, prior to even launching, 165 ETH (~$535,850) was …
Cryptocurrency
Tweet thread by Arkham
Vector: MEV / sandwich attack
Ross Ulbricht, the founder of the Silk Road darknet market place, earned a presidential pardon on January 21 as an apparent thank you by President Trump to the Libertarian Party. …
Cryptocurrency
Tweet by SlowMist
Vector: Smart contract exploit / hack
A Twitter account called @TrumpDailyPosts has more than 1.3 million followers on Twitter. While the account does automatically crosspost to Twitter any posts Donald Trump makes on …
Cryptocurrency
"‘Forgive him Satoshi’ — Trump’s pastor ripped for memecoin that crashed 93% after launch"
Reverand Lorenzo Sewell, a pastor and vocal Trump supporter who delivered the benediction at Donald Trump's inauguration, followed in his hero's footsteps by trying to shill a …
Cryptocurrency
Tweet by Melania Trump
Before people had a chance to process the fact that the incoming president of the United States had just launched his own transparent crypto cash-grab, the soon-to-be First Lady …
Cryptocurrency
Tweet by Donald Trump
In what is likely a preview of the levels of grift about to come — levels previously not thought possible — Trump has launched a Solana memecoin two days before his inauguration. …
Cryptocurrency
"Traders seethe after Sony freezes memecoins on its new blockchain"
Only hours after Sony launched its "Soneium" layer-2 Ethereum blockchain, the company was accused of "rugging" people who had purchased various memecoins launched on Soneium when …
Cryptocurrency
"The Idols NFT"
Vector: Smart contract exploit / hack
An attacker noticed a vulnerability in a smart contract for The Idols, an NFT project that also incorporates ETH staking functionality. They discovered that a function used to …
Cryptocurrency
"Almost 10,000 images of tennis balls plunge up to 90% in value as Australian Open appears to ditch NFTs"
Holders of any of the several thousand "AO ArtBall" NFTs may be disappointed as the Australian Open appears to have abandoned the project aimed at tennis fans. The first NFTs …
Cryptocurrency
Tweet by SlowMist
Vector: AI-assisted attack or AI-generated exploit
The UniLend project, which advertises itself as a "unified platform for all things AI and defi", was exploited for almost $200,000. An attacker was able to take advantage of a bug …
Cryptocurrency
"Moby Post-Mortem Report / Growth Plan"
Vector: Smart contract exploit / hack
The Moby Trade defi options protocol suffered a $1 million loss, narrowly avoiding the loss of another nearly $1.5 million. The project team stated that a hacker had "identified …
Cryptocurrency
Tweet by Orange Finance
Vector: Smart contract exploit / hack
The Arbitrum-based liquidity management project Orange Finance suffered at least $840,000 in losses after hackers compromised the project's admin address, then used it to upgrade …
Cryptocurrency
Telegram post
Vector: On-chain theft (attributed by zachxbt)
After crypto sleuth zachxbt noticed an apparent theft from the NoOnes peer-to-peer crypto trading platform on January 1, CEO Ray Youssef was forced to acknowledge the theft. He …
Cryptocurrency
"FEG token holders in despair after third hack causes 99% dump"
Vector: Flash loan attack on smart contract
The "Feed Every Gorilla" project has once again been hacked, after suffering a pair of flash loan attacks in May 2022 amounting to $1.9 million in losses. The protocol also …
Cryptocurrency
“Tai Mo Shan to Pay $123 Million for Negligently Misleading Investors About Stability of Terra USD”
Vector: Regulatory / legal action
The SEC has levied a $123 million fine against Jump Crypto subsidiary Tai Mo Shan, which was part of a secret deal with Terraform Labs to help prop up the floundering Terra …
Cryptocurrency
Indictment
Vector: Exit scam / rug pull
Gabriel Hay and Gavin Mayo, two LA-based NFT creators, have been charged for defrauding investors of more than $22.4 million through a series of NFT rug pulls and other crypto …
Cryptocurrency
Tweet by Anchor Drops
Vector: Seed phrase / wallet compromise
A crypto holder tweeted at the Ledger hardware wallet manufacturer to report that 10 BTC (~$1 million) and "~1.5m of NFTs" had been stolen from a Ledger wallet they were using. …
Cryptocurrency
"Clober Dex Incident Analysis"
Vector: Smart contract exploit / hack
Clober, a DEX built on Coinbase's Base Ethereum layer-2, suffered an exploit only about a week after its launch. A re-entrancy bug in the project allowed an attacker to siphon …
Cryptocurrency
"False prophet"
Vector: Software bug / unintentional loss
Users of the Alpaca Finance lending protocol suffered losses when the protocol's sloppy oracle implementation finally resulted in consequences. Although many had warned the project …
Cryptocurrency
"Hawk Tuah memecoin dumps 90% amid backlash over controversial launch"
Who could have guessed that buying up a token based around the long-past-its-expiration-date hawk tuah meme might turn out to be an unwise investment? Haliey Welch, the originator …
Cryptocurrency
[SC]
"Solana Web3.js library backdoored to steal secret, private keys"
Vector: Software supply chain attack
An attacker was able to compromise an account that had publish access for the official Solana web3.js library, which is widely used by dApps to read and write from the Solana …
Cryptocurrency
Tweet by Clipper DEX
Vector: Private key compromise
The Clipper decentralized exchange suffered a $450,000 exploit across two Ethereum layer-2 chains. Although some speculated that the issue may have been a private key leak, Clipper …
Cryptocurrency
"This Child Made $30K Rugging a Solana Meme Coin—Then Crypto Degens Got Revenge"
Vector: Exit scam / rug pull
A 13-year-old known as the "Gen Z Quant kid," created a token called QUANT and executed a rug pull, making $30,000. In retaliation, various people in the cryptocurrency world …
Cryptocurrency
"Crypto lender Polter Finance halts operations after $12M hack"
Vector: Flash loan attack on smart contract
The Fantom-based Polter Finance defi project was exploited for $7 million when an attacker was able to perform an oracle manipulation attack. By artificially increasing the price …
Cryptocurrency
Tweet by DeltaPrime
Vector: Smart contract exploit / hack
The DeltaPrime defi protocol was hacked for the second time in two months, losing $4.8 million in Arbitrum and Avalanche tokens. The attacker appeared to have exploited a flaw in …
Cryptocurrency
"Trader who lost $26M to copy-paste error says it’s been ‘max pain’"
After apparently exhausting all his other options, a trader has put out a call to "all skilled hackers and white hats out there" to help him recover 7,912 Renzo staked ETH (ezETH) …
Cryptocurrency
Tweet by CyversAlerts
Vector: Smart contract exploit / hack
Crypto-powered poker website CoinPoker was apparently exploited for around $2 million when an attacker was able to compromise a hot wallet controlled by the platform. The attacker …
Cryptocurrency
"Security Update"
Vector: Smart contract exploit / hack
The UAE-based M2 cryptocurrency exchange was hacked for $13.7 million in bitcoin, ether, and Solana tokens. The exploiter compromised several of the exchange's hot wallets to take …
Cryptocurrency
"Bitcoin scammers impersonate police, Sunray Finance $2.7M drain: Crypto-Sec"
Vector: Smart contract exploit / hack
A perpetuals trading platform called Sunray Finance was hacked on October 30 by an attacker who was able to upgrade a smart contract used by the protocol. They then were able to …
Cryptocurrency
"US Government Crypto Wallet Drained of $20 Million in Suspicious Transfers"
Vector: Smart contract exploit / hack
More than $20 million in stablecoins and Ethereum were transferred from a wallet identified as belonging to the US government, and holding funds connected to the 2016 hack of the …
Cryptocurrency
"Solana Meme Coin Sharpei Plunges 96% in Seconds in Epic Rug Pull"
A dog-themed memecoin project called Sharpei abruptly cashed out $3.4 million, tanking the token price by more than 96% in seconds. The project had been promoted by crypto …
Cryptocurrency
Tweet by Tapioca DAO
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The defi lending protocol Tapioca DAO was exploited after an attacker reportedly socially engineered the DAO's co-founder and gain access to their private key. The attacker then …
Cryptocurrency
"Radiant Capital Loses $50M to Second Blockchain Exploit This Year"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The cryptocurrency lending project Radiant Capital was hacked for the second time in under a year, this time for more than $50 million in the USDC stablecoin, wBNB, ETH, and other …
Cryptocurrency
"On the LSM Module"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Cosmos creator Jae Kwon has raised concerns about a portion of the Cosmos protocol called the "Liquid Staking Module" after learning it was developed by North Korean agents. …
Cryptocurrency
Tweet by Scam Sniffer
Vector: Phishing attack
An attacker using the permit phishing technique stole $1.39 million in tokens from an unsuspecting holder. The victim unknowingly signed a "Permit2" signature — a function intended …
Cryptocurrency
"EigenLayer Says Unauthorized Selling Was an 'Isolated Incident', But Critics Still Have Concerns"
Vector: Smart contract exploit / hack
Around 1.67 million EIGEN tokens belonging to an investor in the popular Ethereum-based EigenLayer project were stolen after the investor was tricked into transferring the tokens …
Cryptocurrency
"Staking Protocol Bug Let Users Swap One Bitcoin for One Ethereum"
Vector: Software bug / unintentional loss
A staking platform called Bedrock lost around $2 million after exploiters discovered a bug that allowed them to swap 1 ETH for 1 BTC despite the more than $63,000 difference in …
Cryptocurrency
"Onyx protocol exploited a second time for $3.8M via known bug"
Vector: Smart contract exploit / hack
The Onyx protocol was hacked for a second time by attackers taking advantage of known bugs in forks of the Compound Finance project. Projects regularly fail to patch these bugs, …
Cryptocurrency
"Telegram bot Banana Gun’s users drained of over $1.9M"
Vector: Smart contract exploit / hack
Some people use a Telegram-based crypto trading bot called "Banana Gun" to "snipe" crypto trades, copytrade, and perform other activities. On September 19, at least 11 victims lost …
Cryptocurrency
"Police Arrest Two People Related to $243M Crypto Heist Targeting Genesis Creditor"
Vector: Phishing attack
Two people have been arrested in relation to a phishing scam that successfully stole more than 4,000 BTC priced at around $243 million from a single individual. The victim was …
Cryptocurrency
"Ethena domain registrar hacked, Ethena Labs warns users to stay away"
Vector: DNS hijacking / domain takeover (front-end compromise)
The website for the Ethena protocol was compromised by attackers who gained control of the project's domain registration. The protocol issued warnings to their users to urge them …
Cryptocurrency
"Delta Prime attacker stole $6M by minting massive number of tokens"
Vector: Private key compromise
The DeltaPrime defi protocol suffered a $6 million loss after a private key was leaked. Access to the private key allowed the attacker to mint 1.1×1069 DPUSDC, which are tokens …
Cryptocurrency
"CryptoPunks NFT Worth $1.5 Million Just Sold for $23,000—Here's How"
A rare CryptoPunk NFT recently sold for only 10 ETH (~$25,300), despite a market value that's likely around 600 ETH (~$1.5 million). The sale went through thanks to lingering smart …
Cryptocurrency
Tweet thread by CertiK
Vector: Flash loan attack on smart contract
An attacker exploited a bug in the smart contract for a BSC-based token called CUT, draining a PancakeSwap liquidity pool of almost $1.45 million in the BSC-USD stablecoin. Total …
Cryptocurrency
"Friend.tech creators walk off with $44m as project shuts down"
Vector: Exit scam / rug pull
The development team behind friend.tech has officially ditched the crypto-based social media project, which was (very) briefly hailed as a potential platform for influencers to …
Cryptocurrency
"Lacoste Quietly Shuts Down NFT Project UNDW3, Community Alleges 'Soft Rug Pull'"
Vector: Exit scam / rug pull
Lacoste abruptly shutdown the website, Discord, and Twitter account belonging to "UNDW3", its NFT project. Lacoste launched its original collection of NFTs in June 2022, selling …
Cryptocurrency
"Penpie Post-Mortem Report"
Vector: Smart contract vulnerability exploit
The defi protocol Penpie was exploited for 11,113.6 ETH (~$27.3 million) by an attacker who exploited a flaw allowing them to withdraw unearned "rewards". Although the protocol …
Cryptocurrency
"Hackers breach social media accounts of Lara and Tiffany Trump"
Vector: Smart contract exploit / hack
The Twitter accounts belonging to Lara and Tiffany Trump were compromised and used to announce a fake launch of the (unfortunately real) World Liberty Financial project that their …
Cryptocurrency
"Aave hacked via periphery contract — $56K stolen from 'tip jar'"
Vector: Smart contract vulnerability exploit
The popular defi lending platform, Aave, suffered a smart contract exploit that allowed an attacker to steal around $56,000. A smart contract outside of the core Aave protocol, …
Cryptocurrency
"Bitcoin miner Rhodium files for bankruptcy in Texas court"
Vector: Protocol collapse / insolvency
The Texas-based Rhodium Enterprises bitcoin mining company has filed for bankruptcy, disclosing debts between $50 and $100 million and total assets between $100 and $500 million. …
Cryptocurrency
Tweet by ValidatorK
Vector: Smart contract exploit / hack
Some fans of the Polygon blockchain, or those looking for help with using it, suffered losses after hackers successfully compromised the project's Discord server. Discord hacks …
Cryptocurrency
"McRugged: Hackers Take Over McDonald’s Instagram, Make $700K on Fake Grimace Token"
Vector: Exit scam / rug pull
McDonald's Instagram account, as well as the Twitter account of a McDonald's marketing director, began promoting a memecoin called $GRIMACE (named for the restaurant chain's blobby …
Cryptocurrency
Tweet by Lookonchain
Vector: Phishing attack
Someone holding almost $55.5 million in the DAI stablecoin was apparently phished, signing a transaction to reassign ownership of their DAI stash to a phishing address. The victim …
Cryptocurrency
"Judge Fines Ripple $125M, Bans Future Securities Law Violations in Long-Running SEC Case"
Vector: Regulatory / legal action
A judgment has been issued in the long-running case against Ripple by the SEC, and the company has been fined $125 million for violations of securities laws in its institutional …
Cryptocurrency
"New Ronin Bridge hack down to dodgy upgrade, team banks on 'white hat' op"
Vector: MEV / sandwich attack
The Ronin bridge, which bridges crypto assets to the Ronin Network used by Axie Infinity and other gaming projects, has once again suffered a breach — though a considerably smaller …
Cryptocurrency
"No one surprised as DJT token has finally rugged"
Surprising just about no one, a wallet holding around 20% of the supply of the $DJT Trump-themed memecoin suddenly dumped its holdings, crashing the token price by around 90%. The …
Cryptocurrency
"Kujira Foundation's Tokens Stung by Its Own Leveraged Positions as Bets Backfire"
The team behind the Kujira project wound up with around $2 million in bad debt after taking some of their operational funds and using it to make leveraged bets on their own …
Cryptocurrency
"Community Update on the Future of Reignmakers"
Vector: Regulatory / legal action
American sports gambling behemoth DraftKings announced the shutdown of its Reignmakers NFT game and NFT marketplace, effective immediately. Reignmakers was a fantasy sports game …
Cryptocurrency
"Compound DAO asleep at the wheel as $25M governance 'attack' passes"
Vector: Governance attack / malicious on-chain proposal
A controversial proposal in front of the Compound Finance DAO has narrowly passed, granting 499,000 COMP (~$24 million, and amounting to 5% of the project's treasury) to an outside …
Cryptocurrency
ETHTrustFund
Vector: Exit scam / rug pull
The operators of a project called ETHTrustFund on Coinbase's Base layer-2 Ethereum blockchain have apparently rug-pulled the project. The ETHTrustFund project was a fork of the …
Cryptocurrency
Tweet by zachxbt
Vector: MEV / sandwich attack
An apparent misconfiguration by the RHO Markets lending protocol allowed operators of an MEV bot to take $7.6 million from the project's users across multiple chains.In a stroke of …
Cryptocurrency
"India’s WazirX confirms security breach following a $230M ‘suspicious transfer’"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
After a $230 million "suspicious transfer", Indian cryptocurrency exchange WazirX has paused withdrawals and acknowledged that one of their multisignature wallets was compromised. …
Cryptocurrency
Tweet by Trekki
Travel company Trip.com has some perturbed crypto holders on its hands, after shutting down the "Trekki" NFT project it launched in June 2023. The company's dolphin-themed NFTs had …
Cryptocurrency
Tweet by LI.FI
Vector: Smart contract exploit / hack
Users of the cross-chain swapping API LI.FI Protocol, and of projects that build on top of it, suffered wallet drains amounting to at least $10 million (and counting). An attacker …
Cryptocurrency
Tweet by Chaofan Shou
Vector: Flash loan attack on smart contract
An attacker stole $1.4 million from the defi lending project Minterest. Using a flash loan attack, they manipulated the exchange rate calculated by the project, allowing them to …
Cryptocurrency
"Dough Finance loses $1.8M in flash loan attack"
Vector: Flash loan attack on smart contract
Defi platform Dough Finance was hacked for 608 ETH ($1.8 million) by a hacker using a flash loan attack funded through the Railgun privacy service.Dough Finance sent an on-chain …
Cryptocurrency
"American rapper Doja Cat’s X account was hacked to promote a now-collapsed token"
Vector: Smart contract exploit / hack
The Twitter account belonging to rapper Doja Cat was compromised on July 8, tweeting to her 5.6 million followers that they should "buy $DOJA or else", and various other messages …
Cryptocurrency
"SEC Charges Consensys Software for Unregistered Offers and Sales of Securities Through Its MetaMask Staking Service"
Vector: Regulatory / legal action
As expected, the SEC has filed a lawsuit against Consensys, the maker of the popular MetaMask cryptocurrency wallet. Although Consensys had recently gloated about the SEC …
Cryptocurrency
Tweet thread by Scam Sniffer
Vector: Phishing attack
A victim lost $11 million in Aave Ethereum (aEthMK) and Pendle USDe tokens after signing several permit phishing signatures. Permit phishing is a technique in which scammers …
Cryptocurrency
Tweet by CertiKAlert
Vector: Smart contract vulnerability exploit
The token for the Farcana blockchain shooting game plummeted in value by around 60%. First, the project team announced that one of the project wallets had been compromised. …
Cryptocurrency
Instagram post by 50 Cent
Vector: Smart contract exploit / hack
50 Cent has claimed his Twitter account and website were hacked to promote a memecoin called $GUNIT. "I have no association with this crypto," the rapper wrote on Instagram.50 Cent …
Cryptocurrency
Telegram message
Vector: Smart contract exploit / hack
It appears that the online crypto sports betting platform Sportsbet.io suffered a theft of around $3.5 million in USDT and Tron's TRX tokens. The theft was observed by crypto …
Cryptocurrency
Twitter thread by CertiK
Vector: Smart contract exploit / hack
Prominent blockchain security firm CertiK has accused American cryptocurrency exchange Kraken of threatening them after they reported a bug. According to CertiK, they discovered a …
Cryptocurrency
"Pharma Bro's Trump Card"
Vector: On-chain theft (attributed by zachxbt)
After Arkham Intelligence announced a $150,000 bounty for anyone who could prove the identity of the person behind a Donald Trump memecoin called $DJT, blockchain sleuth zachxbt …
Cryptocurrency
"HLG Down Over 60% as Exploiter Mints 1 Billion New Tokens"
Vector: Smart contract exploit / hack
The Holograph tokenization project was exploited on June 13 after they took advantage of a flaw in a smart contract that allowed them to mint 1 billion HLG tokens. Notionally worth …
Cryptocurrency
Tweet by Cyvers
Vector: Smart contract exploit / hack
After suffering a $20 million loss in a June 10 hack, the UwU Lend defi lending protocol has now seen another $3.7 million in suspicious outflows only days later. Although UwU Lend …
Cryptocurrency
"Do Kwon's Crypto Firm Agrees to Pay $4.5 Billion Penalty to SEC"
Vector: Regulatory / legal action
Terraform Labs and its former CEO Do Kwon have agreed to settle the SEC's civil action against them with a $4.5 billion payment of disgorgement, interest, and penalties. Kwon and …
Cryptocurrency
Tweet by UwU Lend
Vector: Flash loan attack on smart contract
The defi lending protocol UwU Lend was hacked for around $20 million. After various blockchain security firms observed suspicious outflows of funds, the protocol acknowledged there …
Cryptocurrency
"Loopring suffers $5 million hack after 'Guardian' two-factor authentication service is compromised"
Vector: Smart contract exploit / hack
Although Loopring markets its wallet application as "Ethereum's most secure wallet", that's evidently a pretty low bar. They disclosed that they had suffered a breach in their …
Cryptocurrency
Tweet by br1an.eth
Vector: Smart contract exploit / hack
A blockchain developer posted on Twitter that he had lost almost $50,000 after his cryptocurrency wallet was drained. He explained that he had been working on a software project on …
Cryptocurrency
"Velocore Incident Post-Mortem"
Vector: Flash loan attack on smart contract
The Velocore DEX, built on the Linea Ethereum layer-2 blockchain, was exploited for around $6.8 million in ETH. The hacker was able to take advantage of a bug in the project's …
Cryptocurrency
"Japan's DMM Bitcoin says over $300 mln of cryptocurrency lost"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
A Japanese cryptocurrency exchange called DMM Bitcoin has announced that they suffered an "unauthorized leak" of 4,502.9 bitcoin (~$308 million) from a company wallet. They've …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
According to crypto sleuth zachxbt, the team behind the Solana-based $CAT memecoin hacked the Twitter account of "Gigantic-Cassocked-Rebirth" (@GCRClassic) crypto influencer.First, …
Cryptocurrency
"Caitlyn Jenner Meme Coin Sows Confusion as Observers Question Its Provenance"
Vector: Exit scam / rug pull
Olympic athlete-turned-Trumpworld media personality Caitlyn Jenner has confused many by apparently launching a memecoin on pump.fun and heavily promoting it on her Twitter account …
Cryptocurrency
"Normie Incident Analysis"
Vector: Flash loan attack on smart contract
An attacker perpetrated a flash loan attack on the "Normie" memecoin on the Base layer-2 blockchain to drain millions of NORMIE tokens. The vulnerability was evidently discovered …
Cryptocurrency
Thief wallet
Vector: Smart contract exploit / hack
Someone was able to mint 5 billion $GALA tokens, the native token of the Gala Games blockchain gaming project. The tokens would be notionally worth around $200 million based on …
Cryptocurrency
"Pump.fun Attacker Says He Wanted to 'Kill' Solana Meme Coin Launcher"
Vector: Smart contract exploit / hack
Pump.fun is a Solana-based memecoin generator that soared to popularity recently amid a resurgence in memecoin trading. On May 16, the project suffered a $2 million exploit by an …
Cryptocurrency
"Two Brothers Arrested for Attacking Ethereum Blockchain and Stealing $25M in Cryptocurrency"
Vector: MEV / sandwich attack
Two brothers, Anton and James Peraire-Bueno, were indicted for a theft involving MEV — maximal extractable value. MEV involves previewing upcoming transactions on a blockchain and …
Cryptocurrency
"Alex Bridge Incident Anlaysis"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
An attacker tried to pull off what could have been a ~$12 million heist from ALEX Lab's XLink bridge after a private key was compromised. However, the sloppy work by the attacker …
Cryptocurrency
Tweet by CyversAlert
Vector: Smart contract exploit / hack
The Sonne Finance lending protocol was exploited for at least $20 million as an attacker was able to exploit a vulnerability in some of their smart contracts. Sonne is a fork of …
Cryptocurrency
"Public statement"
Vector: Smart contract exploit / hack
After the founder of the Solana-based Cypher futures trading protocol publicly accused a core contributor of stealing funds, the contributor — publicly known only as "hoak" — has …
Cryptocurrency
Tweet by Cyvers Alerts
Vector: AI-assisted attack or AI-generated exploit
An exploiter was able to create a fake version of the $GNUS token on the Fantom blockchain, then bridge the tokens to Ethereum and Polygon where they were then sold as though they …
Cryptocurrency
Tweet by Cyvers Alerts
Vector: Address poisoning attack
An Ethereum wallet was apparently drained of 1,155 wrapped bitcoin (~$72.7 million) when they transferred it to a malicious address that had been operating an address poisoning …
Cryptocurrency
"Post-Mortem Report: Pike USDC Withdrawal Vulnerability"
Vector: Smart contract exploit / hack
Pike Finance, a cross-chain lending protocol, was exploited twice in four days as attackers discovered vulnerabilities in the project's smart contracts.The first attack, on April …
Cryptocurrency
"Early Bitcoin Investor Charged with Tax Fraud"
Vector: Regulatory / legal action
Roger Ver, an early bitcoin investor who later became an outspoken evangelist for the fork Bitcoin Cash, has been arrested on tax fraud charges. According to the Department of …
Cryptocurrency
Telegram post by zachxbt
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Bahrain-based cryptocurrency exchange Rain was exploited for around $16.13 million dollars on April 29. The exchange did not publicly disclose the hack until the suspicious …
Cryptocurrency
"Founders And CEO Of Cryptocurrency Mixing Service Arrested And Charged With Money Laundering And Unlicensed Money Transmitting Offenses"
Vector: Regulatory / legal action
Keonne Rodriguez and William Lonergan Hill, founders of the Samourai Wallet, were arrested and charged with conspiracy to commit money laundering and conspiracy to operate an …
Cryptocurrency
"ZKasino Users Plead for Refunds as $33M of Bridged Ether Sent to Lido"
Vector: On-chain theft (attributed by zachxbt)
A project promising to build a decentralized casino managed to raise $33 million, despite an anonymous team that had exhibited several instances of shady behavior throughout …
Cryptocurrency
Tweet by Hedgey Finance
Vector: Flash loan attack on smart contract
Hedgey Finance, a platform used to manage token claims, lockups, and vesting, was hit with a flash loan attack that drained $44.7 million of customer funds from the platform.The …
Cryptocurrency
Tweet thread by CertikAlert
Vector: Exit scam / rug pull
Grand Base, a real world assets platform built on the Base layer-2 blockchain, has seen $2 million exit the platform in a hack or rug pull.The team behind the project claimed that …
Cryptocurrency
"Former Security Engineer Sentenced To Three Years In Prison For Hacking Two Decentralized Cryptocurrency Exchanges"
Vector: Regulatory / legal action
Shakeeb Ahmed, the hacker who stole a combined $12 million from Crema Finance and Nirvana Finance in July 2022, has been sentenced to three years in prison. Ahmed had previously …
Cryptocurrency
"$26 million in 'unnecessary liquidations' hit Blast-based lender Pac Finance"
Vector: Software bug / unintentional loss
Pac Finance, a fork of the Aave lending protocol deployed on the Blast blockchain, surprised some of its users as an unannounced and unexpected code change lowered the liquidation …
Cryptocurrency
"Solana Project Marginfi Withdrawals Top $214 Million After CEO's Resignation"
The MarginFi decentralized lending project on Solana has been at the epicenter of some major drama recently, amid concerns around oracle problems, withdrawal failures, and …
Cryptocurrency
"Decrypting MuskSwap: A web of Scams and Tracking Funds Through Tornado Cash"
Vector: Exit scam / rug pull
A person or group have raised funds for various crypto projects only to abandon them, empty the project wallets, and launder the funds through Tornado Cash. The largest of the …
Cryptocurrency
Tweet by Long Beach County
Vector: Protocol collapse / insolvency
It's hard to believe that the hamburger joint themed around the owner's Bored Ape NFT failed to take off. Although there was novelty value in the themed restaurant, which for a …
Cryptocurrency
"Terraform Labs and founder Do Kwon found liable in US civil fraud trial"
Vector: Regulatory / legal action
After hearing arguments that Terraform Labs was "built on lies" during a two-week-long trial, the jury in the civil case against the company and its founder Do Kwon found that both …
Cryptocurrency
Web3 Is Going Great
Vector: Exit scam / rug pull
A project describing itself as "The world's first memecoin pre-announced as a rugpull" was explicit in its marketing: "do not buy this coin, as it will go to zero."Despite that, …
Cryptocurrency
Tweet by FixedFloat
Vector: Smart contract exploit / hack
The FixedFloat cryptocurrency exchange was exploited again, this time for around $2.8 million. This follows shortly after a February 18 hack in which attackers made off with $26 …
Cryptocurrency
Tweet by Solareum Project
Vector: Smart contract exploit / hack
The Solana ecosystem is grappling with a spate of drained wallets. A cause has yet to be definitively determined, but some of the thefts were linked to the use of trading bots like …
Cryptocurrency
On-chain messages
Vector: Smart contract exploit / hack
The defi protocol Prisma Finance was hacked for 3,257 ETH ($11.5 million). An attacker was able to take advantage of a flaw in the project's smart contracts, allowing them to …
Cryptocurrency
"Unexplained transfers on LENX protocol spark rug pull concerns"
Vector: Exit scam / rug pull
The LENX cross-chain bitcoin liquidity protocol has recently been accused of a $10 million rug pull after community members observed massive withdrawals of treasury funds which …
Cryptocurrency
"Crypto game ‘Munchables’ on Blast exploited for $63M"
Vector: On-chain theft (attributed by zachxbt)
The "Munchables" crypto game explains: "Schnibbles grow on every realm across the Munchable's world. Each realm has their own unique and distinctive schniblet, and the Munchables …
Cryptocurrency
"Hacker mints 1B tokens in $16M Curio smart contract exploit"
Vector: Smart contract exploit / hack
Curio, a crypto project that creates tokens based on "real-world assets" (RWAs) like cars, watches, wine, and other goods, has suffered an attack that saw around $16 million …
Cryptocurrency
Tweet by CertiK
Vector: Exit scam / rug pull
The astrology-based Lucky Star Currency project rug-pulled for $1.1 million in October 2023. You'd think that might be the end of it, but on March 22, 2024, ownership of the …
Cryptocurrency
Web3 Is Going Great
Solana memecoin trading has been booming lately, with people making money by speculating on tokens themed around various memes and jokes. Amid an explosion in trading …
Cryptocurrency
On-chain message
Vector: Smart contract vulnerability exploit
Super Sushi Samurai, a new blockchain game on the Blast layer-2 blockchain was exploited for $4.6 million when an attacker discovered a vulnerability in its smart contract. A bug …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
A developer brought on to run a presale for the $TICKER token stole $900,000 from the project. 15% of the token supply was sent to the developer to distribute via an airdrop, but …
Cryptocurrency
"Old Dolomite exchange contract suffers $1.8M loss from approval exploit"
Vector: Reentrancy attack on smart contract
The Dolomite DEX suffered a $1.8 million theft as an exploiter was able to take advantage of a vulnerability in a smart contract that had been deployed in 2019. Although most …
Cryptocurrency
"SEC probing crypto companies in Ethereum investigation as hopes for ETF dim"
Vector: Regulatory / legal action
Fortune reported that the U.S. Securities and Exchange Commission has targeted the Swiss-based Ethereum Foundation for investigation, apparently in an effort to classify its ETH …
Cryptocurrency
"Exchange Investigates Flash Crash That Sent Bitcoin to $8,900"
A "very small number of accounts" were able to crash the bitcoin price on the BitMEX exchange from its roughly $66,000 price to as low as $8,900. BitMEX attributed the incident to …
Cryptocurrency
Tweet thread by Slerf
People have gotten really into memecoin trading on Solana recently. Like really into it. Someone decided they'd hop on the bandwagon with "Slerf", a sloth-themed memecoin they said …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Someone impersonating Ansem, an influential crypto trader, was able to scam people out of more than $2.6 million simply by replying to the real Ansem's tweets. Using an account …
Cryptocurrency
Tweet by Dumpster DAO
Vector: Smart contract exploit / hack
"Charlotte Fang", the leader of the controversial Remilia project (known for its Milady NFTs), claimed he was hacked and drained of ETH and NFTs potentially worth several million …
Cryptocurrency
"March' Major Private Key Compromises"
Vector: AI-assisted attack or AI-generated exploit
Wilder World is a blockchain-based racing game that uses all the buzzwords: blockchains, artificial intelligence, and metaverse. On March 16, someone with access to the project …
Cryptocurrency
Tweet by CertiK Alert
Vector: AI-assisted attack or AI-generated exploit
The "AI-optimized" defi project Mozaic Fi was exploited by an attacker who drained around $2 million in funds from the project.According to MozaicFi, the theft had been perpetrated …
Cryptocurrency
Tweet thread by ScamSniffer
Vector: Phishing attack
An Ethereum holder who had been staking their ETH through a liquid restaking protocol called Ether.fi suffered a 501 ETH (~$2.025 million) loss when they fell victim to a phishing …
Cryptocurrency
Incognito Darknet Market Mass-Extorts Buyers, Sellers
Vector: Exit scam / rug pull
Since March 5, those who used the Incognito Market darkweb narcotics marketplace have found themselves unable to withdraw the Bitcoin and Monero they had on the platform. It …
Cryptocurrency
"The untold story of Kickstarter’s crypto Hail Mary—and the secret $100 million a16z-led investment to save its fading brand"
Web3: a technology so promising you can't even pay a company $100 million to use it.Crowdfunding website Kickstarter surprised and dismayed many of its users in December 2021 when …
Cryptocurrency
Crypto4Winners Telegram announcement
Vector: Smart contract exploit / hack
A investment firm called Crypto4Winners announced in their Telegram channel that "Our investigations lead us to suspect an individual of committing fraudulent acts that may have …
Cryptocurrency
Tweet by SlowMist
Vector: Smart contract exploit / hack
The Unizen defi platform lost around $2.1 million in the Tether stablecoin in an attack that took advantage of a vulnerability an external call from the project smart contract.The …
Cryptocurrency
Woofi
Vector: Flash loan attack on smart contract
An attacker was able to use a flash loan attack to manipulate an oracle on the WooFi DEX implementation on the Arbitrum network. By manipulating the price of $WOO, they were able …
Cryptocurrency
Tweet by zachxbt
Vector: AI-assisted attack or AI-generated exploit
Someone who held over 111.6 million ALI tokens from a project called The AI Protocol was phished by someone using a wallet drainer service using a permit phishing technique. The …
Cryptocurrency
Tweet by Spreekaway
Vector: Smart contract exploit / hack
A bug in Seneca Protocol's smart contract has allowed attackers to steal funds from users who had approved the contract. So far, around $3 million has been stolen across the …
Cryptocurrency
"Late Friends star Matthew Perry’s X account hacked by crypto scammers"
Vector: Smart contract exploit / hack
There are evidently no lows to which crypto scammers will not sink.Some scammers were able to compromise the Twitter account belonging to the Friends star Matthew Perry, who passed …
Cryptocurrency
Tweet
Vector: On-chain theft (attributed by zachxbt)
Serenity Shield, a project aiming to solve "crypto inheritence", has been hacked. Although the project prominently claims to help "ensur[e] your financial and personal security", …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
The user experience in crypto is apparently so bad that platforms can't even keep their own tokens straight. A web3 messaging project, Dechat, announced with some fanfare that the …
Cryptocurrency
"Hackers exploit MicroStrategy social media to orchestrate $440,000 phishing heist"
Vector: On-chain theft (attributed by zachxbt)
MicroStrategy, the company founded and chaired by Bitcoin maximalist Michael Saylor, suffered a Twitter account compromise on February 26. Although MicroStrategy ostensibly …
Cryptocurrency
"$100mn in crypto payments traced to Myanmar-based 'scammers'"
Vector: Smart contract exploit / hack
A pig-butchering operation in Myanmar has scammed victims of more than $100 million in Tether in less than two years, according to a report from Chainalysis and the anti-human …
Cryptocurrency
"Blast Ecosystem Sees First Apparent Scam as 'RiskOnBlast' Rug Pulls $1.3M Ether"
Vector: Exit scam / rug pull
RiskOnBlast, a gambling and trading platform on the new ethereum layer-2 Blast blockchain, appears to have performed the blockchain's first major rug pull — before the blockchain …
Cryptocurrency
Tweet by CertiK
Vector: MEV / sandwich attack
The Blueberry defi leverage project had a bug in their lending contract, where improper decimal handling allowed for an exploit. An attacker tried to exploit the vulnerability, but …
Cryptocurrency
Tweet by Jihoz
Vector: Smart contract exploit / hack
Jeff "Jihoz" Zirlin, a co-founder of the Axie Infinity blockchain game, lost around $9.5 million as two of his crypto wallets were compromised. The thief stole 3,248 ETH ($9.5 …
Cryptocurrency
"FixedFloat confirms $26M exploit in Bitcoin, Ether"
Vector: Smart contract exploit / hack
The FixedFloat cryptocurrency exchange was exploited for around 409 BTC (~$21.17 million) and 1,728 ETH (~$4.85 million) for a total loss of just over $26 million. FixedFloat is a …
Cryptocurrency
"NFT Insider Trading? Moonbirds Sales Spiked Before Yuga Deal Was Official"
On February 16, the NFT giant Yuga Labs announced it would be acquiring the Moonbirds NFT project. This adds to list of blue-chip NFT collections controlled by Yuga Labs, which …
Cryptocurrency
"Farcaster"
One of the promises made by proponents of crypto-focused decentralized social networks like Farcaster is that you can't be de-platformed by centralized companies, and you maintain …
Cryptocurrency
Tweet thread by HashBastardsNFT
Pablo Stanley, an artist who created the "Robotos" generative NFT collection, posted two final messages from the Robotos Twitter account. First, "it was a good run! thank u, all!", …
Cryptocurrency
Tweet by CertiK Alert
Vector: Private key compromise
The Duelbits crypto casino and sports betting website was drained of around $4.6 million on both the Ethereum and BNB Chain blockchains. The funds were quickly bridged or exchanged …
Cryptocurrency
"PlayDapp exploit continues into 4th day, with losses reaching $290M"
Vector: Smart contract exploit / hack
The South Korean blockchain gaming platform PlayDapp was hacked on February 9, and an attacker minted 200 million $PLA tokens. These were notionally priced at around $36.5 million, …
Cryptocurrency
"Yuga Botched Another NFT Mint—Will the Bored Ape Maker Ditch Ethereum?"
Some fans of Yuga Labs (the company behind Bored Apes and the much-anticipated Otherside metaverse gaming project) are questioning how much progress the company can really have …
Cryptocurrency
"Solana Blockchain Suffers 5-Hour Outage"
They were doing so well! After suffering a slew of outages during 2022, Solana had seemed to get their act together in 2023 with only one major outage. Now, however, Solana has …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Blockchain sleuth zachxbt noticed the strange movement of around 213 million XRP, the native token for the Ripple project. These tokens were priced at around $112.5 million at the …
Cryptocurrency
"Abracadabra's $6.49M loss leads to MIM stablecoin destabilization"
Vector: Smart contract exploit / hack
Well that sure is a headline I just had to write.The Magic Internet Money ($MIM) stablecoin has lost its dollar peg again, dipping all the way below $0.77 in a flash crash before …
Cryptocurrency
Tweet by CertiK
Vector: Flash loan attack on smart contract
Goledo Finance, an Aave-based lending protocol, was exploited through a flash loan attack. The attacker stole assets estimated by CertiK at around $1.7 million.Goledo Finance …
Cryptocurrency
"Defendant pleads guilty in dark web narcotics case involving largest cryptocurrency seizure of $150 million in drug proceeds"
Vector: Regulatory / legal action
The US government is cementing its status as one of the largest BTC holders by adding another 8,100 BTC (priced at almost $350 million today) to its stash. The tokens were …
Cryptocurrency
WSM exploiter wallets
Vector: Smart contract exploit / hack
Hackers were able to exploit a vulnerability in the staking contract for WallStreetMemes ($WSM), a memecoin and online casino project targeted at the "meme warriors" who frequent …
Cryptocurrency
"Animoca Brands' Gamee Token Plunges 60% After Exploit"
Vector: Smart contract exploit / hack
An attacker was able to gain access to the Gamee (GMEE) token's source code repository, then exploit a vulnerability in the code to transfer 600 million GMEE tokens to their own …
Cryptocurrency
Tweet by ConcentricFi
Vector: Social engineering attack
The Concentric Finance yield aggregator project issued a statement that the protocol had been exploited after a social engineering attack on a team member that had access to the …
Cryptocurrency
Chapter 11 petition
Vector: Regulatory / legal action
Terraform Labs, the company behind the Terra blockchain, has filed for bankruptcy. Its flagship product, the Terra stablecoin and associated LUNA token, failed spectacularly in May …
Cryptocurrency
"Air Ball: NBA Star Dwight Howard's Avalanche NFTs Are a Huge Miss"
NBA star Dwight Howard is clearly at least a year (probably two) late to the time when celebrities and star athletes could drop some low-effort NFTs and sell out the whole batch …
Cryptocurrency
"Luis Rubiales NFT launch brands alleged sexual assault 'small mistake'"
Apparently, former president of the Royal Spanish Football Federation Luis Rubiales has decided the way to rehabilitate his reputation after forcibly kissing a soccer player and …
Cryptocurrency
"Mysterious $2.7 million withdrawal from Hector Network leaves investors perplexed"
Vector: Smart contract exploit / hack
In July 2023, angry investors in the Hector Network project opted to "rage quit" — an option reserved by some defi projects that allows investors to vote to liquidate a project's …
Cryptocurrency
"Inside the Harmony spat over a bug that created $2.2m in tokens"
Vector: Software bug / unintentional loss
On December 7, the Harmony blockchain began encountering a bug that ultimately caused around 150 million of the project's $ONE token (priced at around $2.2 million) to be …
Cryptocurrency
"Trader Buys $9M of Solana Meme Coin Dogwifhat, But Loses Over 60% to Slippage"
A trader looking to buy $9 million of a recently popular Solana memecoin, dogwifhat (WIF), lost $5.7 million of their funds to slippage as they placed a massive order in a pool …
Cryptocurrency
Tweet by the SEC
Vector: Smart contract exploit / hack
As the crypto industry collectively turns blue holding its breath for a decision on a raft of bitcoin spot ETFs currently in front of the SEC, the SEC Twitter account was hacked. …
Cryptocurrency
Web3 Is Going Great
Vector: Exit scam / rug pull
The creator of a Solana-based NFT project called Undead Apes Society has been charged with money laundering conspiracy and making false statements to investigators after …
Cryptocurrency
"Funds on MangoFarmSOL drained, community alleges rug pull"
A Solana yield farming project called MangoFarmSOL encouraged people to deposit Solana tokens into the protocol to earn airdrops by January 10. However, on January 6, the project …
Cryptocurrency
"XKingdom Incident Analysis"
The xKingdom project promised users a way to "build your kingdom" on Twitter, earning tokens by interacting with tweets and doing "quests". Users had to borrow XKING tokens in …
Cryptocurrency
"Post-Mortem & Remediation Plan"
Vector: Smart contract exploit / hack
The Gamma Strategies defi protocol suffered an exploit when an attacker targeted their vaults on several projects across the Arbitrum layer-2 network. The attacker successfully …
Cryptocurrency
Tweet thread by Bill Lou
Vector: Phishing attack
Bill Lou, the co-founder of a cryptocurrency wallet that claims to "revolutionize wallet security", was scammed out of 52 stETH (~$125,000) when he clicked a link promising an …
Cryptocurrency
Tweet thread by Radiant Capital
Vector: Smart contract exploit / hack
Radiant Capital, a cross-chain lending protocol built on the Arbitrum layer-2 network, was hacked for 1,900 ETH (~$4.5 million). The exploit relied on a flaw in the underlying …
Cryptocurrency
"Orbit Chain Loses $81M in Cross-Chain Bridge Exploit"
Vector: Smart contract exploit / hack
The Orbit Bridge project, a cross-chain bridge for the Orbit Chain project, was exploited on December 31 for around $81 million. The attacker made off with around 26,742 ETH (~$64 …
Cryptocurrency
Memorandum & Opinion
Vector: Regulatory / legal action
The federal judge overseeing the SEC v. Terraform Labs case has determined that Terra's UST stablecoin, LUNA token, and related tokens were securities. "There is no genuine dispute …
Cryptocurrency
"Barry Silbert and Mark Murphy resign from Grayscale's board"
New SEC filings have revealed that Digital Currency Group CEO Barry Silbert and president Mark Murphy have resigned from the board of Grayscale Investments, the organization behind …
Cryptocurrency
"Levana exploit postmortem"
Vector: Smart contract exploit / hack
An attacker successfully manipulated an oracle to drain around 10% of the liquidity pool for the Levana Protocol, an Osmosis-based perpetual futures project. This amounted to …
Cryptocurrency
Tweet by Telcoin
Vector: Smart contract exploit / hack
$TEL, the token associated with the Telcoin remittances project, plunged 40% as an exploiter was able to steal around $1.25 million from the project. The company later disclosed …
Cryptocurrency
Tweet by CertiK
Vector: AI-assisted attack or AI-generated exploit
The Megabot project rug pulled, stealing $742,000 from those who bought in to the project's presale. The majority of the money — around $692,000 — was stolen on the Solana …
Cryptocurrency
"BarnBridge DAO Agrees to Stop Unregistered Offer and Sale of Structured Finance Crypto Product"
Vector: Regulatory / legal action
About six months after the SEC filed a complaint against the BarnBridge DAO, the group has agreed to disgorge almost $1.5 million in proceeds from their "SMART Yield bonds" — which …
Cryptocurrency
"Aurory’s USDC pool drained on Arbitrum’s DEX Camelot"
Vector: Smart contract exploit / hack
The Aurory gaming platform uses a bridge called SyncSpace to move assets between the blockchain and the game's off-chain network. On December 17, the bridge was targeted on …
Cryptocurrency
"NFT Trader hacked, millions of dollars in NFT stolen"
Vector: Smart contract exploit / hack
Attackers exploited old smart contracts from the NFT Trader peer-to-peer NFT trading application to steal pricey NFTs, including at least 37 Bored Apes, 13 Mutant Apes, and NFTs …
Cryptocurrency
"Donald Trump Unveils New 'Mugshot' NFTs, Stirring Up Prices for His Previous NFTs"
The collapse of the NFT bubble hasn't stopped Donald Trump from trying to cash out. Following in the footsteps of his wife, who timed things much better as far as interest in NFTs …
Cryptocurrency
"Important Update From Immortal Game"
After raising $12 million from crypto-focused venture funds, the Immortal Game blockchain chess platform has announced that they would be nixing most of the blockchain part by …
Cryptocurrency
"Incident disclosure - 2023-12-11"
Vector: Software bug / unintentional loss
Periodically, Yearn Finance converts a small quantity of its treasury tokens into stablecoins to spend on operations. However, something went terribly wrong during this process …
Cryptocurrency
"Exclusive: Montenegro Plans to Extradite Fallen Crypto Tycoon Do Kwon to U.S."
Vector: Regulatory / legal action
Do Kwon, founder of the collapsed Terra/Luna project, will be extradited from Montenegro to the United States once he's completed his four-month-long jail sentence for document …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
In April 2021, an attacker stole $50 million from the defi exchange Uranium Finance. Blockchain investigator zachxbt now says that he believes this attacker has been able to cash …
Cryptocurrency
"Bitcoin custodian Nostr Assets pauses deposits after reaching 'maximum capacity'"
The Nostr Assets bitcoin platform has had to ask people to stop depositing into their platform because it's all clogged up. The project uses the bitcoin Lightning Network, which …
Cryptocurrency
"Smart contract security vulnerability 12/4"
Vector: Software bug / unintentional loss
Projects using the suite of pre-built smart contracts from crypto development platform ThirdWeb have been racing to migrate to patched versions as ThirdWeb has disclosed a …
Cryptocurrency
"Polygon Gave DraftKings Multimillion-Dollar Edge in Special Staking Relationship"
In March 2022, Polygon boasted about how "The decision by DraftKings, a NASDAQ-listed company, to take an active role in day-to-day operations of a major network is an important …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Address poisoning attack
An apparent address poisoning attack on the Florence Finance real-world asset lending protocol led to the loss of $1.45 million in the USDC stablecoin.As of December 4, Florence …
Cryptocurrency
"Bitcoin Sender Struck With $3.1M Transaction Fee, Largest in History"
A Bitcoiner making a large transaction ended up spending 83.64 BTC (~$3 million) of the 139.42 BTC (~$5.1 million) transaction on transaction fees, effectively spending $3 million …
Cryptocurrency
"Justin Sun Confirms HTX, Heco Chain Exploited After $100M in Suspicious Transfers"
Vector: Private key compromise
Justin Sun confirmed that HTX (formerly Huobi) and its related Heco Chain protocol were hacked for a combined $115 million. It's been a rough few weeks for Sun, whose Poloniex …
Cryptocurrency
"KyberSwap offers 10% bounty to hacker following $47 million exploit"
Vector: Smart contract exploit / hack
The KyberSwap decentralized exchange was hacked by an attacker who stole large sums of ETH, wETH, and the USDC stablecoin. Altogether, the assets are valued at around $54.7 …
Cryptocurrency
"A DAO is funding a lawsuit against its own founding team"
Vector: Regulatory / legal action
Aragon is a prominent project that creates DAO infrastructure. Ironically, its own DAO-based governance has been fraught, with the group facing a governance crisis in May over …
Cryptocurrency
"dYdX’s insurance fund lost $9 million as a result of 'targeted attack': CEO"
Vector: Smart contract exploit / hack
Around 40% of the "insurance fund", intended to protect dYdX users from having to backstop other traders' losing trades, was drained in what dYdX CEO described as "pretty clearly a …
Cryptocurrency
"Ethereum Gaming NFT Marketplace Aqua Shuts Down Citing Slow Industry Growth"
Vector: Protocol collapse / insolvency
It's not that blockchain gaming was a flop, they were "just too early" (said CEO Sean Ryan). The Aqua gaming NFT marketplace announced their shutdown, attributing it to "challenges …
Cryptocurrency
"Randstorm: You Can’t Patch a House of Cards"
Vector: Software bug / unintentional loss
While trying to help a Bitcoin holder who lost their password, researchers at Unciphered discovered a major flaw in the way early Bitcoin wallets had been created. Thanks to a flaw …
Cryptocurrency
"Wallet Drainers Starts Using Create2 Bypass Wallet Security Alert"
Vector: Smart contract exploit / hack
A wallet drainer service has facilitated the theft of more than $60 million in various assets from almost 100,000 victims since May 2023. According to research group ScamSniffer, …
Cryptocurrency
"Raft Suffers $3.3M Exploit That Drove Down Stablecoin 50%, but Hacker Likely Lost Money on Attack"
Vector: Smart contract exploit / hack
An attacker exploited the Raft defi project after finding a vulnerability that allowed them to mint 6.7 million of Raft's R stablecoin without any backing.The attacker then went to …
Cryptocurrency
"Justin Sun-Owned Exchange Poloniex Hacked for At Least $126 Million"
Vector: Smart contract exploit / hack
Assets including Bitcoin, Ethereum, and Tron's TRX token, priced at more than $126 million, were stolen from Justin Sun's Poloniex cryptocurrency exchange. Researchers are still …
Cryptocurrency
Tweet by CyversAlerts
Vector: Smart contract exploit / hack
The treasury of the Samudai DAO was apparently drained as an attacker compromised the project's multisignature wallets and the wallet belonging to the project's founder, Kushagra …
Cryptocurrency
Tweet by CyversAlerts
Vector: On-chain theft (attributed by zachxbt)
The Australian cryptocurrency exchange CoinSpot appears to have been hacked for around 1,283 ETH (~$2.4 million). In two separate transactions, the ETH was transferred out of …
Cryptocurrency
Tweet thread by CertiK Alert
Vector: Flash loan attack on smart contract
An MEV bot was exploited after an attacker discovered a vulnerability in its code that allowed anyone to call one of its functions that sold wBTC for wETH. Using a flash loan to …
Cryptocurrency
"Wintermute claims Near backed out of $11M stablecoin redemption deal"
"Public service announcement or 'how we are not really friends with Near Foundation and Aurora Labs going forward'", wrote Wintermute CEO Evgeny Gaevoy on Twitter. He launched into …
Cryptocurrency
Tweet by NGBxShpend
One might think that a social media lead might have a grasp on his own social media accounts, and might have scrubbed damning tweets made only shortly before they began their …
Cryptocurrency
Tweet by Bored Ape Yacht Club
Bored Ape collectors attending an ApeFest party in Hong Kong have now been subjected to the kind of eye pain the rest of us have felt for years having to look at their hideous, …
Cryptocurrency
CCS Wallet Incident
Vector: Seed phrase / wallet compromise
Monero's Community Crowdfunding System (CCS) funds projects that aim to improve the ecosystem of Monero, a privacycoin. The CCS is funded by donations, and up until September 1, …
Cryptocurrency
"Onyx Protocol Hack Explained: A Deeper Dive Into $2.1M Exploit"
Vector: Smart contract exploit / hack
The Onyx Protocol was hacked for 1,164 ETH (~$2.1 million) after an exploiter took advantage of a known vulnerability affecting forks of Compound Finance. The bug allows attackers …
Cryptocurrency
"Founders and Executives of Digital-Asset Company Charged in Multi-Million Dollar International Fraud Scheme"
Vector: Exit scam / rug pull
An indictment charging SafeMoon executives with defrauding investors via their SafeMoon token was unsealed in the Eastern District of New York. Three defendants were charged with …
Cryptocurrency
Findings of Fact & Conclusions of Law
Vector: Regulatory / legal action
A judge has ordered Ryder Ripps and his co-defendant Jeremy Cahen to pay almost $1.6 million in disgorgement and damages after they created a collection of identical NFTs to the …
Cryptocurrency
"Ethereum DeFi protocol Hope Lend drained after exploit"
Vector: Smart contract exploit / hack
A small defi protocol called Hope Lend was drained of nearly all its assets when attackers stole around 526 ETH (~$825,000). Hilariously, the project claims the hacker was frontrun …
Cryptocurrency
"Fantom Foundation confirms $550K loss in broader $7M attack"
Vector: Smart contract exploit / hack
An attack targeting the Fantom Foundation and its employees siphoned $7 million from wallets under their control. Of that, around $550,000 were funds belonging to the Fantom …
Cryptocurrency
Reddit announcement
Vector: Exit scam / rug pull
Reddit's attempt to blockchainify their signature Reddit karma has come to an end as the company has decided to pull the plug on the feature. The idea was that users could "own a …
Cryptocurrency
"Clarification on sharing false spot Bitcoin ETF news"
A post falsely announcing that the SEC had approved a spot Bitcoin ETF caused $100 million in liquidations as the market briefly surged on the news. $81 million in short positions …
Cryptocurrency
"Sui token struggles to regain despite denial of ‘unfounded’ allegations"
A lawmaker in South Korea has alleged that the Sui Foundation has engaged in market manipulation to enrich themselves. The South Korean Financial Supervisory Service reportedly …
Cryptocurrency
Tweet thread by ChainArgos
Vector: Private key compromise
A new, Euro-pegged stablecoin called $TEURO emerged on October 13, with an initial supply of around €70 million. However, TrueUSD subsequently tweeted that "we have zero …
Cryptocurrency
"'EtherHiding' — Hiding Web2 Malicious Code in Web3 Smart Contracts"
Vector: Malicious code injection / supply chain
An otherwise very "web2" hack has taken on a web3 twist as hackers have started to store malicious code on the blockchain. Attackers first compromise WordPress websites, then show …
Cryptocurrency
"Platypus DeFi loses $2.2M in another flash loan exploit"
Vector: Flash loan attack on smart contract
At this point, they should probably just have a form email ready to go. Platypus Finance has suffered a cumulative $2.23 million in losses thanks to several attacks on the platform …
Cryptocurrency
Tweet thread by PeckShield
Vector: Exit scam / rug pull
The Black Hole Token project suffered a $1.28 million apparent exploit, according to security firm PeckShield, though it's hard not to wonder if it might have been a rug pull.Black …
Cryptocurrency
"Lucky Star Currency, FSL"
Vector: Exit scam / rug pull
The BNB Chain-based FSL token rug pulled within 24 hours of launching, with developers draining $1.68 million of liquidity they had amassed. Total loss estimated at $1,680,000.
Cryptocurrency
"Bitcoin ASIC manufacturer Bitmain pauses employee salary payments: Report"
Vector: Protocol collapse / insolvency
Bitmain, the manufacturer of popular Bitcoin mining equipment (known as ASICs), is apparently in such dire financial straits that it can no longer pay employee salaries. Local …
Cryptocurrency
"Astrology NFT project Lucky Star Currency rugged for over $1M — CertiK"
Vector: Smart contract exploit / hack
Lucky Star Currency was an NFT-focused project released by a group claiming to be made up of astrologists. The group was heavily promoted on Chinese news and Q&A platforms. …
Cryptocurrency
"Avalanche Social App Stars Arena Drained of $3M in AVAX After Hack"
Vector: Smart contract exploit / hack
Stars Arena, an Avalanche-based dupe of the popular Friend.Tech project, suffered a serious exploit in which an attacker drained tokens priced at around $3 million.Avalanche …
Cryptocurrency
"Bored Ape Yacht Club NFT Creator Yuga Labs Confirms Layoffs"
Even the best known NFT brand can't escape the effects of a collapsing industry. Yuga Labs, the company behind the blue-chip Bored Apes NFTs and related collections, and the …
Cryptocurrency
"How FTX hacker's $131m 'laundering' spree caused DeFi exchange to shut off"
Vector: Smart contract exploit / hack
The THORSwap decentralized exchange has put its web interface into "maintenance mode" in hopes of thwarting the thief who stole over $400 million from the FTX exchange as it was …
Cryptocurrency
Tweet by BigWhale
Vector: Private key compromise
The defi staking and lending project BigWhale announced that the private key to one of their crypto wallets had been leaked, and 7,200 BNB (~$1.5 million) had been stolen.In a long …
Cryptocurrency
Tweet thread by Justin Sun
Vector: Smart contract exploit / hack
Justin Sun confirmed on September 25 that his crypto exchange Huobi (recently rebranded to "HTX") had been hacked for 5,000 ETH ($8 million) the prior day. He reassured customers …
Cryptocurrency
Tweet by Balancer
Vector: DNS hijacking / domain takeover (front-end compromise)
Balancer issued an urgent warning to stop using its web interface, as it was evidently compromised by malicious actors who redirected the funds to themselves. Within 30 minutes of …
Cryptocurrency
"Ethereum Holesky testnet launch flops, relaunch is expected in coming weeks"
Vector: Software bug / unintentional loss
Ethereum prepared to launch a new test network, called "Holesky", which was supposed to be massive compared to the mainnet in order to work on scaling problems. The launch was …
Cryptocurrency
"Nouns Fork: Disgruntled NFT Holders Exit With $27 Million From Treasury"
Nouns DAO, one of the most prominent Ethereum DAOs, has split into two projects after holders of around 56% of the Nouns NFTs in circulation voted to "ragequit". This means that …
Cryptocurrency
"Latest Updates on Recent Security Incident On Remitano"
Vector: Smart contract exploit / hack
Crypto exchange Remitano suffered a hack in which $2.7 million in Tether (USDT), USDC, and Ankr was drained from the exchange's hot wallets across three blockchains. Luckily for …
Cryptocurrency
SEC order
Vector: Regulatory / legal action
In a rather amusing press release, the SEC announced they had charged "Stoner Cats 2 LLC" with conducting an unregistered securities offering when they raised $8.2 million selling …
Cryptocurrency
Tweet by Banana Gun
Vector: Exit scam / rug pull
The team behind Banana Gun, a Telegram bot to help "snipe" token launches, launched a token associated with the project on September 11. Only hours later, they announced in a tweet …
Cryptocurrency
Tweet by Charlotte Fang
Vector: Smart contract exploit / hack
A developer working on an NFT project spearheaded by Remilia, the DAO behind the Milady NFT project, stole around $1 million from the group by diverting fees generated by their new …
Cryptocurrency
Bitcoin transaction
Vector: Software bug / unintentional loss
A wallet on the Bitcoin blockchain paid a 19.82 BTC ($499,171) fee to transfer 0.074 BTC ($1,865). Put another way, they spent 270x the transaction value to pay the fee. Bitcoin …
Cryptocurrency
Attacker wallet
Vector: Smart contract exploit / hack
The Twitter account belonging to Vitalik Buterin, inventor and effective leader of the Ethereum project, was hacked to promote a crypto scam. A tweet posted to his compromised …
Cryptocurrency
"NFT Video Startup Glass Falls to Crypto Bear Market"
Vector: Protocol collapse / insolvency
The NFT startup Glass was operating under the assumption that YouTubers and others who post video content for fans online might want to mint those videos as NFTs, which their fans …
Cryptocurrency
"11,196 Years Jail Sentence for Faruk Özer, CEO of Collapsed Turkish Crypto Exchange Thodex"
Vector: Exit scam / rug pull
As of writing, the April 2021 $2 billion Thodex exit scam is the second largest exit scam recorded in the Web3 is Going Great leaderboard. Thodex was one of the largest crypto …
Cryptocurrency
Tweet thread by ScamSniffer
Vector: Phishing attack
A crypto phisher hit it big today when they lured in a victim with a massive wallet balance. The victim wallet was drained of 4,851 rETH and 9,579 stETH, both wrapped versions of …
Cryptocurrency
Tweets by PeckShield
Vector: Smart contract exploit / hack
The brand new Arbitrum-based defi casino GMBL.COMPUTER was exploited for around 471 ETH (~$770,000). The project, which promises to "generate yield from casino games", had …
Cryptocurrency
Tweet by zachxbt
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Attackers managed to make transactions from hot wallets operated by the Stake betting platform, stealing approximately $15.7 million from their Ethereum wallet and around $25.6 …
Cryptocurrency
"Brazilian crypto streamer loses money by accidentally exposing private key"
Vector: Seed phrase / wallet compromise
Brazilian blockchain gaming streamer Fraternidade Crypto says he lost his life savings after accidentally exposing his crypto wallet seed phrase during a livestream pertaining to …
Cryptocurrency
"SEC Charges LA-Based Media and Entertainment Co. Impact Theory for Unregistered Offering of NFTs"
Vector: Regulatory / legal action
Entertainment company Impact Theory has agreed to a $6.1 million payment to settle charges from the SEC that its sales of its "Founder's Keys" NFTs constituted an unregistered …
Cryptocurrency
Tweet by Balancer
Vector: Smart contract exploit / hack
After warning users several days prior that a critical vulnerability had been discovered in their protocol, the Balancer defi project has been drained of around more than $2.1 …
Cryptocurrency
Tweet thread by Nick Garfield
Vector: Protocol collapse / insolvency
A year after raising $4 million in a seed round joined by Multicoin Capital, Solana Ventures, and Asymmetric, Clockwork co-founder Nick Garfield announced that the Solana-based …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Magnate Finance, a lending protocol built on the new Base layer-2 blockchain, rug pulled within hours of a warning from crypto sleuth zachxbt. Zachxbt had discovered that a wallet …
Cryptocurrency
Tweet thread by SOLBigBrain
Vector: Phishing attack
The NFT collector SOL Big Brain lost around $1.5 million in ETH, stablecoins, and the Gearbox token after being targeted in a phishing scam. The attacker apparently compromised a …
Cryptocurrency
"PEPE Plummets 17% as Team Transfers Millions to Exchanges"
Vector: Exit scam / rug pull
Holders of the $PEPE memecoin sold en masse after the PEPE multisig wallet transferred more than 16 trillion $PEPE (~$16.9 million) to crypto exchanges. Although the multisig …
Cryptocurrency
"The DEA Accidentally Sent $50,000 Of Seized Cryptocurrency To A Scammer"
Vector: Address poisoning attack
After seizing a little more than $500,000 in the Tether stablecoin from two accounts it believed were involved in illegal narcotics sales, the DEA mistakenly sent $50,000 of the …
Cryptocurrency
"Balancer Depositors Pull Nearly $100M in Crypto After Vulnerability Warning"
Vector: Software bug / unintentional loss
Balancer, a popular Ethereum-based defi protocol, has warned users that they should withdraw funds from vulnerable pools on the project after receiving a report of a critical …
Cryptocurrency
Tweet thread by ScamSniffer
Vector: Phishing attack
Google Ad phishing is the practice of taking out a Google advertisement to promote a malicious website impersonating a legitimate project. By taking out the ad, the result is …
Cryptocurrency
"Optimism-Based Exactly Protocol Hacked: Over $12M in Ether Drained"
Vector: Smart contract exploit / hack
The Exactly Protocol, an attempt to "decentralize the credit market" built on the Optimism layer-2 network, was exploited. The protocol announced a pause to investigate a security …
Cryptocurrency
"Terra Website Compromised; Developers Warn Against Phishing Scam"
Vector: DNS hijacking / domain takeover (front-end compromise)
Despite the catastrophic Terra/Luna collapse in May 2022, the Terra blockchain is still up and running. On August 19, the official Twitter account for the Terra project tweeted …
Cryptocurrency
"SHIB Plunges 9% on Apparent Shibarium Bridge Issues"
Vector: Software bug / unintentional loss
People were very excited when the Shiba Inu-focused "Shibarium" layer-2 Ethereum blockchain went live on August 16. The dog-themed network is part of a push to make Shiba Inu a …
Cryptocurrency
Tweet thread by PeckShield
Despite the fact that Coinbase's Base blockchain was only officially launched a week ago, and a relatively small amount of funds are locked on the chain, it's already racking up …
Cryptocurrency
Tweet by PeckShield
Vector: Smart contract exploit / hack
Exploiters stole around 471 ETH (~$857,000) from the RocketSwap project on the Base Ethereum layer-2 blockchain. According to RocketSwap, the project had stored private keys on a …
Cryptocurrency
"Zunami Protocol Loses Over $2.1 Million in Price Manipulation Hack"
Vector: Flash loan attack on smart contract
The Zunami Protocol stablecoin-focused yield farming aggregator was exploited for more than $2.1 million when an attacker was able to perform a price manipulation attack on the …
Cryptocurrency
Tweet by Hayden Adams
Vector: Exit scam / rug pull
After pulling off a rug pull that only netted 14 ETH (~$25,900), Allen Lin (known as AzFlin) lost his day job for the company that maintains the Uniswap DEX. Hope it was worth …
Cryptocurrency
"April 2023 Exploit Response Vote"
Vector: Protocol collapse / insolvency
Hundred Finance is a lending protocol that was exploited in April 2023 for around $7 million, and in March for over $6 million. Since then, they've worked with law enforcement and …
Cryptocurrency
Tweet by FTM Ecologist
Vector: Protocol collapse / insolvency
SpiritSwap announced on its Discord that the project will be shutting down on September 1 unless they can find a new team to take over the project by that time. SpiritSwap lost …
Cryptocurrency
Tweet by Pau Bonet
Vector: On-chain theft (attributed by zachxbt)
Scammers are constantly coming up with creative new ways to pull off their scams, and the latest seems to be targeting web3-interested individuals via dedicated web3 jobs portals. …
Cryptocurrency
"Cypher Protocol freezes smart contract after an estimated $1M exploit"
Vector: Smart contract exploit / hack
The Solana-based Cypher protocol, a decentralized futures exchange, froze its smart contract after an attacker stole a little more than $1 million in Solana tokens and the USDC …
Cryptocurrency
Tweet by Spreek
Vector: Private key compromise
"NOTICE: Steadefi has been exploited and all funds are currently at risk," wrote Steadefi on Twitter after an attacker was able to change the contract owner to their own address — …
Cryptocurrency
"Nifty News: Trader nabs 800 ETH by baiting a bot, NFT thefts slow and more"
After noticing someone set up a bot to copy his bids, NFT trader Hanwe Chang tricked the bot into purchasing multiple NFTs at hugely inflated prices. Chang purchased a large number …
Cryptocurrency
Tweet by PeckShield
Vector: Flash loan attack on smart contract
Uwerx is a nascent project intending to build a blockchain-based freelancer marketplace, because what better concepts to combine than blockchains and the gig economy? Sadly for …
Cryptocurrency
"Despite Name Brand NFT Deals, Nifty's Shuts Down"
Vector: Protocol collapse / insolvency
Nifty's was a web3 business backed by the likes of Mark Cuban, Joey Lubin, Coinbase, and Dapper Labs. In 2021, they raised a $10 million seed round, and launched as an NFT-focused …
Cryptocurrency
"Tether Freezes $20 Million Linked To Phishing Scammer"
Vector: Address poisoning attack
A zero-transfer attack, also called an address poisoning attack, occurs when a phisher creates a blockchain address very similar to that of a target victim's wallet, and sends …
Cryptocurrency
Tweet thread by SlowMist
Vector: Smart contract exploit / hack
Although Coinbase's Base blockchain is at this stage intended for testing only, people have begun bridging substantial assets to the platform and using various services in …
Cryptocurrency
"BALD Meme Coin on Coinbase Layer-2 Goes to Zero as Dev Pulls Liquidity"
Vector: Exit scam / rug pull
A memecoin called $BALD, built on the Coinbase Base test network, appears to have rug pulled for at least $25.6 million. Although the Base network is meant to be used for developer …
Cryptocurrency
Tweet by Chaofan Shou
Vector: Smart contract exploit / hack
Some types of Curve factory pools, including one operated by AlchemixFi and one by JPEG'd, were exploited. The attack stemmed from an issue in the Vyper language, a smart contract …
Cryptocurrency
"Kannagi Finance's TVL drops to $0.17 in apparent rug pull"
Vector: Exit scam / rug pull
The defi yield aggregator project Kannagi Finance rug pulled on July 29 as its creators drained the $2.13 million total value locked. Kannagi Finance deleted its website and social …
Cryptocurrency
"DeFiLabs"
Vector: Exit scam / rug pull
A defi project called DeFiLabs was able to rug pull for $1.6 million thanks to a backdoor written into the smart contract. After traders bought into the project, its creator was …
Cryptocurrency
Tweet by Jameson Lopp
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The CoinsPaid crypto payment platform, which provides payment services to various online casinos, reportedly suspended withdrawals under mysterious circumstances. The company later …
Cryptocurrency
Tweet thread by EraLend
Vector: Smart contract exploit / hack
The EraLend crypto lending platform was exploited for around $3.4 million after an attacker took advantage of a re-entrancy vulnerability to manipulate token prices and drain funds …
Cryptocurrency
"Alphapo hot wallets drained for $23 million, HypeDrop disables withdrawals"
Vector: Smart contract exploit / hack
The crypto payment processor Alphapo suffered a hot wallet hack on July 22 in which at least $60 million in Ethereum, Tron, and Bitcoin was stolen. Alphapo processes payments for …
Cryptocurrency
"Beware of Covert Rug Pulls, Exit Scams Driven by Contract Storage Manipulation"
Vector: Exit scam / rug pull
The IEGT token was created on Binance Smart Chain on July 13. However, its creators "covertly minted a large amount of tokens, primed for a rug pull", as blockchain security firm …
Cryptocurrency
Tweet thread by Conic Finance
Vector: Smart contract exploit / hack
A re-entrancy vulnerability in the Conic Finance defi project enabled an attacker to steal 1,700 ETH (~$3.22 million) from the project's ETH pool.Conic Finance announced that they …
Cryptocurrency
"Melania Trump Has Released an Apollo 11-Themed NFT That May Violate NASA’s Merchandising Policy"
Melania Trump doesn't seem willing to let the flop of her first NFT project, which ended with her allegedly buying the NFT herself, slow her down. She's just announced a line of …
Cryptocurrency
Tweet thread by Beosin Alert
The GMETA project on BNB Chain saw its price plummet to near zero as the project creators drained the funds from the project. The contract creator was able to transfer large …
Cryptocurrency
"Hector Network Votes to Liquidate $16M Treasury Following Multichain, Fantom Losses"
Vector: Protocol collapse / insolvency
Hector DAO, the governing body behind the Hector Network, voted to liquidate the project's $16 million treasury and distribute it to tokenholders, effectively putting an end to the …
Cryptocurrency
"Neopets Metaverse Transition: A Message from The Neopets Team"
After announcing a Neopets Metaverse project — complete with NFT collections and two different crypto tokens — in 2021, Neopets has announced they will be "transition[ing] away …
Cryptocurrency
Tweet thread by Geist Finance
Vector: Protocol collapse / insolvency
Defi lending project Geist Finance announced they would be shutting down after more than $200 million was drained from the Multichain project in two separate events in early July. …
Cryptocurrency
"OptyFi Project Update"
Vector: AI-assisted attack or AI-generated exploit
OptyFi, a so-called "AI-powered defi" project, announced it would be shutting down for a variety of reasons. First, they blamed their recent failed token sale, in which they had …
Cryptocurrency
Tweet by PeckShield
Vector: Flash loan attack on smart contract
Platypus Finance paused their pools after they were alerted to what they described as "suspicious activities". Security firm PeckShield was apparently the first to notice the …
Cryptocurrency
"Latest attack on Arbitrum network costs Rodeo Finance $885k in ETH"
Vector: Oracle price manipulation
An attacker manipulated a price oracle to drain 472 ETH (~$884,000) from Rodeo Finance, a new Arbitrum-based leveraged yield protocol. The thief then used Tornado Cash to tumble …
Cryptocurrency
"Press release: Defendant Charged With Theft Of Cryptocurrency And NFTs Through Spoofing Of OpenSea Marketplace"
Vector: Smart contract exploit / hack
The U.S. Attorney's Office of the Southern District of New York announced the unsealing of charges against Soufiane Oulahyane, who they allege created a lookalike OpenSea website …
Cryptocurrency
"Arcadia Finance says exploiter contacted after $450K hack"
Vector: Flash loan attack on smart contract
Arcadia Finance is a defi margin trading protocol that launched on Ethereum and the Optimism Ethereum layer 2 protocol in March 2023. On July 9, an attacker used a flash loan to …
Cryptocurrency
"Gutter Cat Gang Twitter Hacked, At Least $750K Worth of NFTs Swiped"
Vector: Phishing attack
An attacker successfully compromised the Twitter account belonging to the popular Gutter Cat Gang NFT project, as well as the one belonging to the project co-founder, and used them …
Cryptocurrency
Tweet by BarnBridge
Vector: Regulatory / legal action
A small and rather unknown project called BarnBridge aimed to build a variety of defi yield projects. BarnBridge claimed to be decentralized and governed by a DAO. On July 6, an …
Cryptocurrency
Tweet by nftperp.xyz
A project called NFTPerp was, as the name suggests, a perpetual futures exchange for NFTs, allowing people to take long or short positions against NFTs. It relied on a vAMM — …
Cryptocurrency
"Angry Azuki Elementals Holders Unite to Demand $39 Million Refund, Lose Thousands More in Subsequent Hack"
Vector: Smart contract vulnerability exploit
After paying nearly $40 million for a new set of Azuki NFTs, the Azuki community is pissed that they were "dilutive" near-copies of the original Azuki collection. To fight back …
Cryptocurrency
Tweet thread by LoveMake.eth
Vector: Phishing attack
Crypto personality LoveMake.eth wrote a Twitter thread about how they fell victim to a phishing scam in which an account appearing to belong to the cofounder of the popular Doodles …
Cryptocurrency
"Encryption AI Token Plummets 99% As Developer Rug Pulls $2M for Gambling Addiction"
Vector: AI-assisted attack or AI-generated exploit
A project called "Encryption AI" promised a Telegram bot that would provide a "secure and efficient way to launch tokens". People poured in around $2 million before the developer …
Cryptocurrency
Tweet thread by Cardinal Labs
Vector: Protocol collapse / insolvency
A little less than a year after raising $4.4 million in seed funding to build a Solana NFT protocol that allowed for NFT rentals and other such things, Cardinal Labs has announced …
Cryptocurrency
"Chibi Finance Rug Pulls Users for $1M, CHIBI Falls 98%"
Chibi Finance was a defi project built on the Arbitrum Ethereum layer 2 network. Its Twitter bio described the project as "ChibiVerse For Chads, by Chibis. Compound dem yields!" …
Cryptocurrency
Tweet by PeckShield
Vector: Flash loan attack on smart contract
Themis Protocol is a lending platform that has had somewhat of an excruciating rollout, with users waiting ever longer for the platform to finally go live as they endured …
Cryptocurrency
"Disgraced NRL star Hayne allegedly loses $780k in prison Bitcoin scam"
Vector: Ponzi / pyramid scheme
Quick tip: if you're in jail and a fellow inmate who is serving twelve years for running a Ponzi scheme asks you to invest in a Bitcoin scheme, don't do it. Then again, on the list …
Cryptocurrency
"Eco-travel company We Are Bamboo lost millions in customer funds in cryptocurrency trading"
New Zealand-based We Are Bamboo may have been an ethical travel company, but they certainly weren't an ethical handler of customer funds. In late October 2022, the company abruptly …
Cryptocurrency
"$1.25M Stolen Due to NFT Airdrop Phishing On Polygon"
Vector: Phishing attack
A phishing scam in which scammers airdropped fake NFTs impersonating real projects has landed the scammers around $1.25 million in the last two months. The scammers have created …
Cryptocurrency
Tweet by Elena
Web3 influencer Elena announced she would be launching an NFT collection titled "Atomic Ordinals", which would be inscribed on the Bitcoin blockchain. She claimed that the 200 …
Cryptocurrency
"Latest round of DeFi exploits display its wide range of vulnerabilities"
Vector: Governance attack / malicious on-chain proposal
Although developers abandoned the Atlantis Loans defi lending project in early April due to "financial difficulties", as a self-executing defi protocol it has continued to chug …
Cryptocurrency
"Opaque DeFi protocol Venus braces for $150M BNB liquidation"
Vector: Cross-chain bridge exploit
After the massive BNB Chain bridge hack in October 2022, the hacker was able to take out a massive position with the Venus Protocol defi lending project. They borrowed $150 million …
Cryptocurrency
"Attacker drains $800K from DeFi protocol Sturdy Finance"
Vector: Oracle price manipulation
The Sturdy Finance defi lending protocol was exploited, with hackers taking advantage of an oracle manipulation vulnerability to make off with 442 ETH (~$775,000). They …
Cryptocurrency
"Robinhood to delist tokens for Solana, Cardano, and Polygon after SEC suits name them as securities"
Vector: Regulatory / legal action
Robinhood announced that its crypto exchange will delist the tokens for Solana (SOL), Cardano (ADA), and Polygon (MATIC) after they were described as unregistered securities in …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Adding insult to injury in Binance's tough couple of days, someone has managed to hijack the Discord vanity URL used by BNB Chain, the blockchain project associated with Binance. …
Cryptocurrency
<i>SEC v. Binance</i>
Vector: Regulatory / legal action
The SEC has filed a complaint against Binance, various related companies, and Binance CEO Changpeng "CZ" Zhao. They allege that the company has been acting with "blatant disregard" …
Cryptocurrency
Tweet by unshETH
Vector: Smart contract exploit / hack
After a developer leaked private keys to GitHub, someone used them to drain $375,000 from the unshETH defi project. The project emergency paused withdrawals of unshETH ether to …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
A person claiming to be battling cancer created a "charity NFT project" ostensibly to help with her treatment. She convinced some crypto influencers to promote the project, …
Cryptocurrency
Tweet thread by PeckShield
Vector: Smart contract exploit / hack
The new Arbitrum-based El Dorado Exchange (EDE) was exploited for around $580,000. In an interesting twist, the attacker claimed to be a whitehat who was exposing that the …
Cryptocurrency
"Jimbos Protocol exploited for $7.5 million three days after V2 launch"
Vector: Flash loan attack on smart contract
Three days after the launch of its v2 protocol, the Arbitrum-based Jimbos Protocol was exploited for 4,090 ETH (~$7.5 million). The project had not properly controlled for …
Cryptocurrency
Tweet thread by Arkham
Vector: MEV / sandwich attack
Some traders hoping to snipe new tokens launched by Poo Finance (yes, really) decided to try to use a MEV bot to snag priority ordering compared to other pending blockchain …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Twitter account compromises remain a lucrative way to scam crypto enthusiasts. Someone was able to compromise the Twitter account belonging to electronic musician and crypto …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Flash loan attack on smart contract
An attacker exploited the brand new $CS token for almost $700,000 using a flash loan exploit. They then swapped the funds into around 383 ETH ($689,400) and laundered them through …
Cryptocurrency
Etherscan transactions
Vector: Smart contract exploit / hack
A proposal ostensibly to penalize cheating network participants in the Tornado Cash crypto tumbler project successfully passed by DAO vote. However, the proposer had added an extra …
Cryptocurrency
"$5.9 Million Stolen By Scam as a Service Provider Called Inferno Drainer"
Vector: Phishing attack
A scam-as-a-service company identified by ScamSniffer and dubbed "Inferno Drainer" has stolen assets nominally worth around $5.9 million since mid-February. The vendor sells …
Cryptocurrency
"Aave Users Unable to Access Over $100M in Assets Due to Bug"
Vector: Software bug / unintentional loss
Recently, the Aave protocol deployed a contract upgrade on the Polygon version of their v2 project that was not compatible with Polygon. The bug has resulted in around $110 million …
Cryptocurrency
"DeFi protocol WDZD Swap exploited for $1.1M: CertiK"
Vector: Smart contract exploit / hack
On May 19, an attacker successfully exploited the BNB Chain-based defi project WDZD Swap, making off with 609 Binance-Pegged ETH (~$1.1 million). The attack was apparently executed …
Cryptocurrency
"Attorney General James Secures $4.3 Million from Cryptocurrency Company for Defrauding Investors"
Vector: Regulatory / legal action
Cryptocurrency trading platform Coin Cafe will pay $4.3 million in restitution to customers who were charged high fees after signing up for a "free" crypto custody service. The …
Cryptocurrency
Grumpy Cat cease and desist NFT
A Grumpy Cat Coin memecoin emerged in May, with a website using illustrations of the late real-life Grumpy Cat to promote the coin. Crypto influencers, including the "SlumDoge …
Cryptocurrency
"Another CertiK Audited Project Rugs as $3M Disappears From Arbitrum DeFi Exchange"
Vector: Exit scam / rug pull
Decentralized exchange Swaprum, a project on the Arbitrum layer-2 network, suddenly disappeared with around 1,628 ETH (~$2.96 million) in an apparent rug pull. The thieves then …
Cryptocurrency
"Sam Altman’s Worldcoin rolls out fresh measures to combat black market for iris scans"
"Show me the incentive and I will show you the outcome."Sam Altman's Worldcoin project, a dystopian effort to use chrome orbs to scan the irises of people (often in developing …
Cryptocurrency
<i>United States of America v. Nevin Shetty</i>
Vector: Regulatory / legal action
Nevin Shetty, the former chief financial officer of the Fabric e-commerce platform, was federally indicted for wire fraud after allegedly misappropriating $35 million from Fabric …
Cryptocurrency
Tweet thread by MistTrack
Vector: Phishing attack
Blockchain security firm SlowMist has reported that a phishing website appearing to be the real cryptocurrency exchange HitBTC has stolen more than $15 million worth of Bitcoin, …
Cryptocurrency
"MechaFightClub NFT Game 'Paused Indefinitely' Due to US 'Regulatory Limbo'"
Vector: AI-assisted attack or AI-generated exploit
A year ago, Andreessen Horowitz general partner Arianna Simpson wrote about the firm's investment into Irreverent Labs. Simpson had joined their first $5 million funding round, and …
Cryptocurrency
Tweet thread by Andy Chorlian
If you've found yourself thinking "man, I wish I could buy a hundredth of an NFT", you now have one fewer options. Andy Chorlian, co-founder and CEO of fractional NFT platform …
Cryptocurrency
Tweet by Aragon
Vector: Social engineering attack
As the Aragon Association took steps to "progressively decentralize" their centralized project by assigning more control to the Aragon DAO, they encountered some challenges. …
Cryptocurrency
Tweet by Whale Alert
A recent surge in memecoin popularity has caused Ethereum transaction fees to skyrocket. One trader paid the price, eating a 64 ETH ($118,000) transaction fee just to perform a …
Cryptocurrency
"DEUS Finance loses $6M following stablecoin hack"
Vector: Smart contract exploit / hack
Deus Finance suffered yet another hack as around $7 million was taken from the protocol. This was not the first time the platform had been targeted, suffering a $3 million exploit …
Cryptocurrency
"Binance’s smart contract miracle: Xirtam $3M scam victims rejoice"
Vector: Exit scam / rug pull
A project called Xirtam, built on the Arbitrum blockchain, raised 1,909 ETH (~$3.2 million) in several fundraising rounds in April 2023. Then, on May 4, the project rug pulled. …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
WallStreetBets is a subreddit that became popular during the pandemic-fueled everyone-should-become-a-daytrader era, and is known for its memestocks and its users who often make …
Cryptocurrency
Tweet by CZ
"Binance LaunchPool are meant as air drops for our retail users, not just for a few whales," tweeted Changpeng "CZ" Zhao, the CEO of Binance, after seeing an alert showing that …
Cryptocurrency
Tweet by Level Finance
Vector: Smart contract exploit / hack
The Level Finance decentralized perpetual exchange was exploited after an attacker discovered a vulnerability in one of the project's smart contracts. They were able to drain …
Cryptocurrency
Tweets about "permit phishing" by ScamSniffer
Vector: Smart contract exploit / hack
Between March and April 2023, the Scam Sniffer organization has identified at least $7.7 million stolen by so-called "permit phishers". These attackers convince their victims to …
Cryptocurrency
"DeFi Protocol 0VIX Loses Nearly $2M in Flash-Loan Exploit"
Vector: Flash loan attack on smart contract
The 0VIX defi protocol on the Polygon blockchain was exploited for around $2 million. This was a substantial portion of the project's roughly $6.4 million TVL around the time of …
Cryptocurrency
"Russian Bitcoin Wallets Allegedly Exposed by Apparent Hacker"
Vector: Smart contract exploit / hack
A thief has identified nearly 1,000 Bitcoin addresses they believe to have been used in connection with Russian hacking activity. This is partly backed by analysis from the …
Cryptocurrency
"Federal Court Orders South African CEO to Pay Over $3.4 Billion for Forex Fraud"
Vector: Regulatory / legal action
After finding that the South African businessman Cornelius Johannes Steynberg had run Mirror Trading International as a multi-level marketing scheme, in which he accepted 29,421 …
Cryptocurrency
Tweet by TheMerlinDEX
Vector: Exit scam / rug pull
The brand new Merlin DEX had only just launched on the zkSync Ethereum layer-2, with a public token sale beginning on April 25. The following day, they suddenly asked users to …
Cryptocurrency
Tweet by CertiKAlert
Ordinals Finance was a short-lived project, emerging in late February with promises to help build out a defi ecosystem on the Bitcoin blockchain.On April 24, the project developer …
Cryptocurrency
"Bitcoin Ordinals extension UniSat Wallet hit by 'large number' of double-spend attacks"
Vector: Smart contract exploit / hack
Over on the Bitcoin blockchain, people are abuzz over the launch of "BRC-20": a similar concept to the ERC-20 token on Ethereum that allows people to create their own tokens. The …
Cryptocurrency
Tweet thread by 0xQuit
Vector: Software bug / unintentional loss
The Blur NFT marketplace appeared to become vulnerable to a bug in which old, canceled bids could still be accepted. This meant that people who had placed bids on NFTs when they …
Cryptocurrency
"Money Disappearing from Major Charity to Help Ukraine – Is there a Scam?"
Ukraine DAO is a project that emerged shortly after the Russian invasion of Ukraine, aiming to raise cryptocurrency funds to support Ukrainians. Despite the name, it is not a DAO …
Cryptocurrency
<i>Krzysztof Gagacki v. Edmond Truong</i>
Vector: Regulatory / legal action
Krzysztof Gagacki and Edmond Truong are co-founders of Rebase.gg, some sort of augmented reality app where people go hunting for NFTs. They're best known for helping to create a …
Cryptocurrency
Tweet thread by CertiKAlert
Vector: Flash loan attack on smart contract
An attacker was able to manipulate the exchange rate between tokens and their interest-bearing equivalents on the Hundred Finance system on the Optimism layer-2 network, ultimately …
Cryptocurrency
Post
Vector: Smart contract exploit / hack
The Singapore-based Bitrue crypto exchange suffered a hack on April 14 in which attackers siphoned tokens including Ethereum, Shiba Inu, and MATIC (the token for the Polygon …
Cryptocurrency
Tweet by franklinisbored
Vector: Exit scam / rug pull
Franklin, aka franklinisbored, has come to be known as one of the most prolific collectors of Bored Apes. At times, he's held more than fifty of the NFTs, and he can often be …
Cryptocurrency
Tweet thread by NicoleBehnam
New passive voice Hall of Fame contender just dropped: "There were mistakes made in a wallet that I controlled." You would think someone who got their start as a writer might know …
Cryptocurrency
"FTX Will Receive All of Ren Protocol's Pegged Assets, Including Bitcoin and Dogecoin"
In February 2021, the Ren project announced that it had been acquired by Alameda Research so that Alameda could "[help] accelerate the decentralisation" of the project.Now, the Ren …
Cryptocurrency
"Goblintown Creator Trashes NFT Artwork, Disables Trading in Royalties Stand"
There has been an ongoing controversy in the NFT world over creator royalties. Although NFTs are often talked up as being good for artists because they enable royalties to be paid …
Cryptocurrency
Trading Post shutdown announcement
Niantic, the creator of the popular Ingress and Pokémon Go augmented reality games, announced it will be shutting down its "Trading Post" product for NFT trading cards that it had …
Cryptocurrency
"Terra DeFi project Terraport suffers $2M hack days after launch"
Vector: Smart contract exploit / hack
Terraport Finance is a defi project built on, believe it or not, the Terra blockchain. Yes, the same Terra blockchain on which the Terra/Luna projects were built. Despite the …
Cryptocurrency
Tweet by PeckShieldAlert
The former owner of Bored Ape #7810 presumably intended to agree to sell the ape to another buyer for 70 ETH (~$130,900). However, it's unlikely they intended for that buyer to …
Cryptocurrency
Tweet thread by PeckShield
Vector: Smart contract exploit / hack
0xSifu, also known as Michael Patryn, also known as Omar Dahani, is the once-pseudonymous chief developer of the Wonderland protocol. His identity was discovered by zachxbt in …
Cryptocurrency
dez.eth
Vector: Smart contract exploit / hack
The latest ape escape has affected Dez Bryant, a former NFL player now turned "web3 innovator". Bryant was the proud owner of Bored Ape #2902, an ape with leopard print skin …
Cryptocurrency
<i>Sphere 3D Corp. v. Gryphon Digital Mining, Inc.</i>
Vector: Smart contract exploit / hack
Bitcoin mining firm Sphere 3D has filed a biting lawsuit against its partner, Gryphon Digital Mining. According to Sphere 3D, Gryphon's CEO was fooled by multiple spoofing attacks …
Cryptocurrency
Tweet by Eden Au
The Gemholic project raised 921 ETH (~$1.7 million) in a token sale only to discover there was no way for them to transfer those funds out of the smart contract. The project is …
Cryptocurrency
"NFT trader accidentally bids 100 eth on a freely minted NFT"
OpenSea launched a collection of "Gemesis" NFTs to celebrate the launch of their Pro platform and their acquisition of Gem, a rival NFT platform. Anyone who bought NFTs from the …
Cryptocurrency
"Peer-to-Peer Bitcoin Exchange Paxful to Suspend Operations"
Vector: Protocol collapse / insolvency
Paxful, a peer-to-peer marketplace where people could trade Bitcoin, Tether (USDT), and USDC, suddenly announced on April 4 that they would be immediately suspending the …
Cryptocurrency
Tweet thread by Spreek
Vector: Smart contract exploit / hack
The Sentiment liquidity protocol on the Arbitrum blockchain was attacked on April 4 for almost $1 million in various tokens, including wrapped Bitcoin and Ether, and several …
Cryptocurrency
"Binance's BNB, Bitcoin Tumble After Crypto Twitter Personality Cobie's Wild Guess"
Crypto influencer Cobie made a wild guess on April 3 that an Interpol red notice might be issued for Changpeng "CZ" Zhao, the CEO of Binance. Binance has recently been hit with a …
Cryptocurrency
"Ethereum Bot Gets Attacked for $20M as Validator Strikes Back"
Vector: MEV / sandwich attack
It's a dog-eat dog-world in the crypto universe, where everyone's trying to steal money from everyone else.MEV bots are a phenomenon that became popular in recent times: bots that …
Cryptocurrency
"Arbitrum Foundation Sold ARB Tokens Ahead of 'Ratification' Vote on Governance, Budget"
After a bumpy start to the airdrop that distributed governance tokens to Arbitrum users, the first use of those governance tokens arguably went even worse. Arbitrum submitted a …
Cryptocurrency
Tweet by PeckShield
Vector: Smart contract exploit / hack
The Allbridge cross-chain bridge project was exploited for around 283,000 BUSD and 291,000 USDT (~$574,000). The thief was able to manipulate a vulnerability in the project's smart …
Cryptocurrency
"Arbitrum Shows Just How Messy (and Tricky) Crypto Airdrops Can Be"
Vector: Phishing attack
A token airdrop from the popular Arbitrum Ethereum L2 illustrated many of the challenges with airdrops: events where tokens are automatically distributed to a group of crypto …
Cryptocurrency
"Safemoon liquidity pair compromised in $8.9 million hack"
Vector: Smart contract exploit / hack
If the pump-and-dump didn't get you, the liquidity pool compromise might have! Holders of the SafeMoon token were informed that the SafeMoon liquidity pool had been compromised, …
Cryptocurrency
"Kokomo Finance"
Vector: Phishing attack
The Kokomo Finance project on the Optimism Ethereum layer-2 network rug pulled for $4.5 million in assets. The project positioned itself as a non-custodial lending platform.After …
Cryptocurrency
Tweet thread by NFTstatistics.eth
The new owner of a CryptoPunk, one of the most popular early NFT projects, accidentally burned the NFT they had only just purchased. After spending 77 ETH ($123,434) on the NFT, …
Cryptocurrency
"Sotheby's 'Oddly Satisfying' NFT auction disappoints, top work lands paltry $54,600"
Despite Sotheby's estimates that the most popular piece in the "Oddly Satisfying" NFT collection would sell for €70,000–€100,000 ($75,500–$108,000), the "Eternity" NFT attained a …
Cryptocurrency
"Do Kwon Now Faces Criminal Fraud Charges From U.S. Prosecutors"
Vector: Regulatory / legal action
Only hours after Do Kwon was arrested in Montenegro, federal prosecutors in New York filed eight criminal charges against him: conspiracy to defraud, conspiracy to defraud and …
Cryptocurrency
"SEC Charges Crypto Entrepreneur Justin Sun and his Companies for Fraud and Other Securities Law Violations"
Vector: Regulatory / legal action
His (former?) Excellency Justin Sun has been charged by the US Securities and Exchange Commission for offering unregistered securities. His businesses, the Tron Foundation and two …
Cryptocurrency
"SEC investigating Coinbase for its Earn product, wallet service and exchange activity"
Vector: Regulatory / legal action
The SEC sent Coinbase a Wells notice, which is basically their way of saying "we're about to file a complaint against you, here's your chance to convince us not to."According to …
Cryptocurrency
"General Bytes Bitcoin ATMs hacked using zero-day, $1.5M stolen"
Vector: Smart contract exploit / hack
The largest manufacturer of Bitcoin ATMs, General Bytes, disclosed that attackers had stolen more than $1.6 million by exploiting a vulnerability in their software. The company …
Cryptocurrency
"BlockSec prevents $5 million from being stolen on Paraspace"
Vector: Smart contract exploit / hack
File this one under "the audacity".On March 17, blockchain security company BlockSec observed an attacker trying to exploit a vulnerability in the NFT lending project Paraspace. …
Cryptocurrency
"Justice Department Investigation Leads to Takedown of Darknet Cryptocurrency Mixer that Processed Over $3 Billion of Unlawful Transactions"
Vector: Regulatory / legal action
Law enforcement from the United States, Germany, and the European Union worked together to take down the ChipMixer cryptocurrency tumbler, which they allege had been used to …
Cryptocurrency
"Euler attack causes locked tokens, losses in 11 DeFi protocols, including Balancer"
Vector: Smart contract exploit / hack
Contagion from the massive exploit of the Euler project has spread to around a dozen defi projects, including Balancer, Angle Protocol, Yearn Finance, InverseFinance, and others. …
Cryptocurrency
"Hackers steal around $200 million from crypto lender Euler Finance"
Vector: Flash loan attack on smart contract
The decentralized lending platform Euler Finance suffered a flash loan attack in which an exploiter stole $197 million from the project. The attacker stole $8.7 million in the Dai …
Cryptocurrency
Thread by PeopleDAO
Vector: Smart contract exploit / hack
PeopleDAO is the successor to ConstitutionDAO, a group that made an ill-fated attempt to buy a copy of the US Constitution in November 2021. When the accounting lead for PeopleDAO …
Cryptocurrency
Tweet by Spreekaway
Vector: MEV / sandwich attack
Someone tried to swap around 2.03 million 3CRV tokens (priced at around $1.97 million) for stablecoins using the KyberSwap decentralized exchange protocol. However, due to an …
Cryptocurrency
Web3 Is Going Great
The major stablecoin USDC lost its peg to the US dollar on March 10. Earlier that day, the collapse of the Silicon Valley Bank sent shockwaves through the financial system, and …
Cryptocurrency
"Blockchain.com to Sunset London-Based Crypto Asset Management Arm"
Vector: Protocol collapse / insolvency
After launching an asset management business less than a year ago, Blockchain.com has announced they will be shuttering it. They blamed the ongoing "crypto winter" as contributing …
Cryptocurrency
"Attorney General James Continues Crackdown on Unregistered Cryptocurrency Platforms"
Vector: Regulatory / legal action
New York Attorney General Letitia James announced a lawsuit against the Seychelles-based KuCoin crypto exchange, after finding that users could trade on the exchange despite it not …
Cryptocurrency
"Togg to sell pre-order rights with NFTs"
Turkish electric vehicle startup Togg announced that interested customers would be able to buy obtain pre-order rights for the limited run of their "100 Year Special Series" cars …
Cryptocurrency
"Lido Price Suffers on Rumors of Wells Notice"
It doesn't take much to tank a token price, particularly lately as fear of SEC action in the Ethereum staking world has run high. Popular podcaster David Hoffman speculated on his …
Cryptocurrency
"BNB Chain hackathon winner accuses Binance of stealing AI-powered NFTs idea"
Vector: AI-assisted attack or AI-generated exploit
If you're thinking about entering into a BNB Chain hackathon, you might want to think again. On March 1, Binance announced a new "Bitcasso" product: a tool for users to create NFTs …
Cryptocurrency
"$700,000 drained from BNB Chain-based DeFi protocol LaunchZone"
Vector: Exit scam / rug pull
Two BNB-based defi projects have been exploited for around $700,000 each in attacks that one of the projects has claimed were perpetrated by the same group. First, an attacker …
Cryptocurrency
Tweets by HideYoApes
Vector: Smart contract exploit / hack
"I still don't quite understand what happened here", wrote hideyoapes.eth after their wallet was drained of around 30 NFTs. They had previously owned several pricey NFTs from the …
Cryptocurrency
"Solana Network Stumbles, On-Chain Trading Slows After 'Forking' Incident"
It's just like mid-2022 again! As transactions slowed to a crawl, developers embarked on a "coordinated restart" — a euphemism for the rather centralized way this supposedly …
Cryptocurrency
Community notice
Vector: Exit scam / rug pull
The Metroverse NFT-based game caught the end of the 2021–22 crypto bull market, minting the Genesis collection in January 2022. The project sold out quickly, netting the project …
Cryptocurrency
Tweet thread by WazirXNFT
Indian cryptocurrency exchange WazirX abruptly closed their NFT marketplace on February 22, giving its users no warning. In an announcement on Twitter, they wrote that they had …
Cryptocurrency
"Friendsies NFT Collection Deletes Twitter After 'Pause' Announcement Spurs Rug Pull Accusations"
Vector: On-chain theft (attributed by zachxbt)
After earning $5.3 million in their initial sale, creators of the Friendsies NFT project suddenly announced they would be "pausing" their project due to "market volatility". The …
Cryptocurrency
Tweet thread by DexibleApp
Vector: Smart contract exploit / hack
Decentralized exchange aggregator Dexible disclosed that they had suffered an exploit of one of their smart contracts, which allowed an attacker to steal funds from customer …
Cryptocurrency
"Loyalist: $4m stolen from over 400 victims"
Vector: On-chain theft (attributed by zachxbt)
Crypto sleuth zachxbt has released research indicating that a cryptocurrency and NFT phishing scammer who goes by Loyalist/Lukas/Shibango has stolen more than $4 million of various …
Cryptocurrency
"USP Stablecoin Loses Dollar Peg as DeFi Protocol Platypus Suffers $8.5M Attack"
Vector: Flash loan attack on smart contract
Platypus USD, a stablecoin issued by the Platypus Finance defi protocol, was exploited only ten days after it first launched. The loss was estimated to be around $8.5 million, …
Cryptocurrency
"SEC Charges Terraform and CEO Do Kwon with Defrauding Investors in Crypto Schemes"
Vector: Regulatory / legal action
The U.S. Securities and Exchange Commission filed charges against Terraform Labs and its CEO, Do Kwon, relating to the May 2022 collapse of the Terra/Luna projects. The complaint …
Cryptocurrency
Inscription 2042
You thought NFTs were dead? Think again. Perhaps longing for the halcyon days when you could mint an NFT on Ethereum and smile in satisfaction at the carbon emissions you just …
Cryptocurrency
"Korean e-commerce exec accused of accepting LUNA for shilling Terra Labs"
Vector: Regulatory / legal action
South Korean authorities have issued an arrest warrant for the former CEO of Tmon, a major Korean e-commerce platform. The allege that he was bribed with Luna tokens, which he …
Cryptocurrency
DForce Network
Vector: Flash loan attack on smart contract
An attacker using flash loans to exploit a common re-entrancy vulnerability siphoned $3.65 million from the dForce defi project on both Arbitrum and Optimism, which are Ethereum …
Cryptocurrency
"Crypto firm Paxos to face SEC charges, ordered to stop minting Binance stablecoin"
Vector: Regulatory / legal action
New York-based crypto company Paxos was ordered by the New York Department of Financial Services to stop minting the Binance USD (BUSD) stablecoin over "several unresolved issues …
Cryptocurrency
LocalBitcoins will discontinue its service
Vector: Protocol collapse / insolvency
LocalBitcoins, a Finnish platform that allows individuals to trade Bitcoins with one another peer-to-peer, will be shutting down. The exchange is one of the longest running …
Cryptocurrency
"DeFi protocol Umami Finance sours as CEO goes rogue and core team quits"
Vector: Smart contract exploit / hack
The Umami Finance defi protocol offered yield products intended for institutional customers. However, on January 31, they announced that they would be halting yields amidst claims …
Cryptocurrency
"Gamers Are Paying Thousands for High Scores in Yuga Labs' Dookey Dash"
Yuga Labs released an endless runner game called "Dookey Dash" (really) where players compete to see how long they can keep their character navigating through a sewer pipe without …
Cryptocurrency
Webaverse theft statement
Vector: Social engineering attack
The metaverse gaming company Webaverse disclosed on February 6 that they had suffered a $4 million theft several months earlier. They outlined what appeared to be a complex scam in …
Cryptocurrency
<i>Holland v. CryptoZoo, Inc.</i>
Vector: Regulatory / legal action
Logan Paul is now facing a class action lawsuit over his CryptoZoo project, a planned NFT game that Paul apparently lost interest in and abandoned — after profiting handsomely, of …
Cryptocurrency
Tweet by PeckShield
Vector: Reentrancy attack on smart contract
The decentralized exchange Orion Protocol suffered a loss of 1,757 ETH (about $2.9 million) from the company treasury funds thanks to a reentrancy attack.Orion Protocol CEO Alexey …
Cryptocurrency
"AllianceBlock Token Plunges 51% After $5M Exploit of Bonq DAO"
Vector: Oracle price manipulation
The Polygon-based defi borrowing protocol Bonq suffered an attack in which 112 million ALBT tokens and around 100 million BEUR tokens were stolen. A flaw in the protocol enabled …
Cryptocurrency
Tweet by LukeDashjr
A recent project called "Ordinals" has the Bitcoin community up in arms. The project is the latest attempt to introduce NFTs to the Bitcoin blockchain, a controversial subject …
Cryptocurrency
Tweet showing email to users
Rally is an Ethereum sidechain built to support "social tokens" — typically, tokens intended for fans of various celebrities or groups.Fans of creators including Felicia Day …
Cryptocurrency
"Tesla records $140M Bitcoin net loss in 2022"
Elon Musk's $1.5 billion Bitcoin bet at Tesla turned out to be a bad deal. He sunk the funds into Bitcoin in January 2021, when Bitcoin was trading between $30,000 and $40,000. …
Cryptocurrency
One of the attacker wallets
Vector: Smart contract exploit / hack
Hackers were able to compromise the Twitter account belonging to the popular Azuki NFT project, which they then used to promote a fake NFT drop to its 334,000 followers. Users who …
Cryptocurrency
Tweet by Kevin Rose
Vector: Smart contract exploit / hack
Kevin Rose, perhaps best known as the founder of Digg, but also a prominent crypto investor and entrepreneur, lost a substantial number of pricey NFTs when he apparently signed a …
Cryptocurrency
"FBI accuses North Korean government hackers of stealing $100M in Harmony bridge theft"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
A June 2022 hack saw cryptocurrency notionally worth $100 million stolen from Harmony's Horizon Bridge. At the time, blockchain research firm Ellipsis concluded that there were …
Cryptocurrency
"Porsche Hits Brakes on NFT Mint After Backlash"
For some reason, Porsche decided they needed to release a set of Porsche 911 NFTs so that customers could buy "the opportunity to co-create Porsche's future in the Web3 universe" …
Cryptocurrency
"Swapping More Than $157M of ETH for stETH and Levering Up, the Wormhole Network Exploiter Is a DeFi Degen"
After the $320 million hack of the Wormhole blockchain bridge in February 2022, much of the funds remained dormant. Now, however, the hacker seems to have returned. On January 23, …
Cryptocurrency
Tweet thread by NFT GOD
Vector: Phishing attack
According to NFT GOD, his computer was infected with malware when he clicked a sponsored link in a Google search when he went to download the streaming software OBS. This is …
Cryptocurrency
"Alameda liquidators get liquidated on Aave as they try to consolidate funds"
As they tried to close an Alameda position on the Aave defi lending project, liquidators in charge of recovering customer funds lost $72,000 due to an error in their approach. The …
Cryptocurrency
"Huobi's HT Token Turbulent as Exchange Confirms 20% Headcount Reduction"
The major cryptocurrency exchange Huobi confirmed they planned to lay off 20% of employees, shortly after Huobi's advisor and somewhat its public face, Justin Sun, denied any …
Cryptocurrency
"Non-Fungible Token (NFT) Developer Charged in Multi-Million Dollar International Fraud Scheme"
Vector: Regulatory / legal action
The U.S. Attorney's Office of the Eastern District of New York announced fraud charges against Aurelien Michel, a 24-year-old French national living in Dubai. Michel, under the …
Cryptocurrency
"NFT influencer falls victim to cyberattack, loses $300K+ CryptoPunks"
Vector: Phishing attack
Crypto influencer CryptoNovo tweeted, "I just got hacked!!! Are you kidding me!?!" with a screenshot of valuable CryptoPunk NFTs being transferred from their account. An attacker …
Cryptocurrency
Tweet by Magic Eden
Vector: Smart contract exploit / hack
Magic Eden, as with many NFT marketplaces, has a verification layer that shows popular projects as "verified" to reduce the chances of people being tricked by NFTs with the same …
Cryptocurrency
"Hackers steal $3.5M worth of digital assets from GMX whale"
Vector: Smart contract exploit / hack
An apparent wallet compromise netted hackers 82,519 GMX tokens from a wallet belonging to a GMX whale. The hackers exchanged these tokens for 2,627 ETH ($3.18 million), then …
Cryptocurrency
"Nike's RTFKT COO Loses His NFTs in Massive Hack"
Vector: Smart contract exploit / hack
An attacker drained the wallet of Nikhil Gopalani, the COO of the Nike-owned crypto organization RTFKT. Most of the stolen NFTs were RTFKT NFTs, and the priciest were the nineteen …
Cryptocurrency
"Bitcoin core developer claims to have lost 200+ BTC in hack"
Vector: Smart contract exploit / hack
One of the original Bitcoin core developers, Luke Dashjr, claimed on Twitter that attackers had managed to compromise multiple wallets — which he described as both hot and cold …
Cryptocurrency
"U.S. charges fraud in Mango crypto manipulation case"
Vector: Regulatory / legal action
In October, an exploiter was able to manipulate collateral prices to extract tokens from the Mango Markets defi project, ultimately resulting in a $116 million loss for the …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Malicious code injection / supply chain
BitKeep, a popular cryptocurrency wallet in Asia, suffered a hack in which at least $8 million in various cryptocurrencies were stolen from user accounts.BitKeep has claimed that …
Cryptocurrency
"Bitcoin mining pool BTC.com reports $3M cyberattack"
Vector: Smart contract exploit / hack
In a press release, BIT Mining reported that their subsidiary BTC.com had experienced a "cyberattack" in which $700,000 of customer assets were stolen. They also reported that $2.3 …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Flash loan attack on smart contract
Defrost Finance, a defi trading platform built on the Avalanche Network, apparently tried and failed to rug pull its users. The project claimed on December 23 that they were "sad …
Cryptocurrency
"Federal court bars Australian company from releasing unsanctioned Pokémon-branded NFTs"
Vector: Regulatory / legal action
Knock-off Pokémon crypto products — including NFTs and blockchain games — have been so prevalent in the past two years that they've earned their own collection on this blog.Now, it …
Cryptocurrency
"Bitcoin Miner Core Scientific Files for Bankruptcy, Expects Support From Some Debt Holders"
Vector: Protocol collapse / insolvency
Core Scientific warned in October that it was teetering on the edge of bankruptcy, so it was no huge surprise when the company filed for bankruptcy protection on December 21. Core …
Cryptocurrency
Tweet by Ray Youssef
Peer-to-peer crypto marketplace Paxful announced that it will be delisting ether, citing "scams that have robbed people of billions".So close. You're almost there.Paxful CEO Ray …
Cryptocurrency
Tweet by Swan Bitcoin
"Convert home equity into Bitcoin", Swan Bitcoin advertises with their new home equity product. Relatively few details are available on the new loan product they're offering, but …
Cryptocurrency
Tweet thread by _sevenseason_
Vector: Smart contract exploit / hack
A scammer spent a month setting up a con in which they stole fourteen Bored Ape NFTs belonging to one individual. Posing as a casting director at a real film production …
Cryptocurrency
"QuadrigaCX Has Had an Improbable Week"
Vector: Exit scam / rug pull
QuadrigaCX was a Canadian crypto exchange that shut down and filed for bankruptcy in early 2019, with hundreds of millions more in liabilities than in assets. It later became …
Cryptocurrency
"Solana-Based Raydium Exchange Victim of 7-Figure Exploit"
Vector: Smart contract exploit / hack
An exploit on the Solana-based Raydium decentralized exchange project resulted in a total loss to the platform of $4.4 to $5.5 million. The attacker's actual spoils were less — …
Cryptocurrency
"Trump’s new NFT collection is already losing value in the secondary market"
It's finally happened. The siren song of NFT grifting proved too much for Donald Trump.Trump supporters got all excited when Trump posted on social media to tease a "major …
Cryptocurrency
"Decentraland will now let you become a virtual landlord"
If the idea of dropping thousands of dollars to "own" a plot of "land" in the Decentraland metaverse doesn't do it for you, have I got news for you: Decentraland has just …
Cryptocurrency
<i>Adonis Real v. Yuga Labs, Inc.</i>
Vector: Regulatory / legal action
A class action lawsuit against the company behind Bored Apes and its executives, those on the board of "Ape DAO", a whole host of celebrity promoters and brands, and the MoonPay …
Cryptocurrency
Tweet thread by OKHotshot
Vector: Exit scam / rug pull
After a stint on Season 2 of Love Island Australia, Vanessa Sierra has made a career as a successful OnlyFans performer. In 2021, she also began offering crypto trading tips in a …
Cryptocurrency
Tweet by jac0xb.sol
After FTX declared bankruptcy, the entire FTX.us domain was redirected to a page providing information on the bankruptcy proceedings.However, NFTs that had been minted on the FTX …
Cryptocurrency
Tweet by Ankr
Vector: Malicious code injection / supply chain
The BNB Chain-based Ankr defi protocol suffered an exploit of their aBNBc token. "We are currently working with exchanges to immediately halt trading," they wrote. However, the …
Cryptocurrency
"How Attackers Made $15M From Staking Platform Helio After Ankr Exploit"
Vector: Oracle price manipulation
Attackers were able to take advantage of an exploit on the Ankr protocol to obtain around 183,000 aBNBc tokens for only 10 BNB (~$2,900). Before the Ankr exploit, which crashed the …
Cryptocurrency
"Crypto Trader Auros Global Misses Payment on DeFi Loan as FTX Contagion Spreads"
Crypto trading firm Auros missed a payment on its 2,400 wETH (~$3 million) loan from the Maple defi lending project. According to M11 Credit, the operator of the credit pool from …
Cryptocurrency
Web3 Is Going Great
A shitcoin project desperate for the kind of pump that sometimes occurs when Elon Musk tweets about a cryptocurrency has gone to new lengths to get his attention. The group spent …
Cryptocurrency
"Iris Energy to cut mining hardware after defaulting on $108M loan"
After announcing earlier in the month that they were close to defaulting on a $100 million+ loan, Iris Energy has defaulted. Unable to pay the $7 million/month in debt obligations …
Cryptocurrency
"New York Enacts 2-Year Ban on Some Crypto-Mining Operations"
Governor Kathy Hochul signed legislation to ban for two years the issuance of permits to new crypto-mining operations at fossil fuel plants. This seeks to cut down on the enormous …
Cryptocurrency
"World’s largest crypto fund swept into FTX storm"
Grayscale Bitcoin Trust (GBTC), the largest publicly traded crypto fund, hit record lows in the wake of the FTX collapse. The fund was trading at nearly a 50% discount on the …
Cryptocurrency
"Coachella NFTs Trapped in FTX Crypto Fallout"
Coachella partnered with FTX to sell a collection of NFTs in February, ultimately raking in around $1.5 million. The NFTs were paired with physical items — Coachella passes, art …
Cryptocurrency
Tweet by PeckShield
Vector: Exit scam / rug pull
Exploits and rug pulls of random tokens on BNB Chain are fairly commonplace, but typically the amount of money lost is fairly minimal. In this case, exploiters or insiders were …
Cryptocurrency
Tweet by jconorgrogan
A Twitter user posted Etherscan screenshots showing a massive flow of crypto from the Crypto.com cryptocurrency exchange to another exchange, Gate.io. "Anyone know why Crypto.com …
Cryptocurrency
Tweet by DeFiAI
Vector: Smart contract exploit / hack
"Our contract has been hacked and has caused a lot of losses," wrote DeFiAI simply in their announcement. That same day, the project had announced the launch of a new website for …
Cryptocurrency
Tweet thread by CertiKAlert
Vector: Flash loan attack on smart contract
An attacker was able to use a flash loan to exploit a vulnerability in the smart contract for DFX Finance, a decentralized forex trading platform. The platform suffered a loss …
Cryptocurrency
"U.S. Attorney Announces Historic $3.36 Billion Cryptocurrency Seizure And Conviction In Connection With Silk Road Dark Web Fraud"
Vector: Smart contract exploit / hack
The U.S. Attorney's Office for the Southern District of New York announced that they had convicted James Zhong with wire fraud pertaining to his 2012 theft of around 50,000 Bitcoin …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
The "Monkey Drainer" NFT phishing scammer first identified by blockchain detective zachxbt has struck again. They successfully emptied 7 CryptoPunks and 20 Otherside NFTs, which …
Cryptocurrency
"Report: GALA token exploit resulted from public leak of private key on GitHub"
There was some brief panic on November 3 as someone minted a huge number of $GALA tokens in what appeared to be an exploit. $GALA is the native token of Gala Games, a platform for …
Cryptocurrency
"Financing and Bitmain Prepayment Update"
Vector: Protocol collapse / insolvency
Iris Energy, an Australian "sustainable Bitcoin mining company", has announced that they are close to defaulting on loans used to purchase $103 million of Bitcoin mining rigs. …
Cryptocurrency
Tweet thread by Rubic
Vector: Smart contract exploit / hack
An attacker was able to compromise the private key of an admin wallet for the Rubic crypto exchange, transferring around 34 million Rubic tokens. The attacker then sold the tokens …
Cryptocurrency
Tweet by Solend
Vector: Oracle price manipulation
Solend announced that an exploiter had manipulated the oracle price of an asset on their platform, allowing them to take out a loan that left the platform with $1.26 million in bad …
Cryptocurrency
"Bitcoin miner Core Scientific issues bankruptcy warning and the stock is down 97% for the year"
Vector: Protocol collapse / insolvency
One of the largest public crypto mining firms in the United States, Core Scientific, filed a notice with the SEC that they would miss upcoming debt payments due in October and …
Cryptocurrency
friesDAO
Vector: Smart contract exploit / hack
friesDAO describes itself as a "a decentralized social experiment where a crypto community builds and governs a fast food franchise empire via wisdom of the crowd". Welcome to the …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
A phishing scammer called "Monkey Drainer" stole around 700 ETH (~$940,000) in 24 hours on October 25, according to blockchain sleuth zachxbt. The scammer used malicious phishing …
Cryptocurrency
Tweet thread by Layer2DAO
Vector: Smart contract exploit / hack
An attacker was able to siphon nearly 50 million L2DAO tokens from a multi-sig wallet on the Optimism protocol. These tokens would nominally have been valued at around $400,000 at …
Cryptocurrency
Tweet thread by PeckShield Inc.
Vector: Oracle price manipulation
Adding to the recent string of oracle manipulation attacks is an attack on the miMATIC ($MAI) market on the QuickSwap decentralized exchange. An exploiter was able to manipulate …
Cryptocurrency
Tweets by Wu Blockchain
Vector: Phishing attack
Several users of the automated trading bot 3Commas reported losing over a million dollars each in a hack or phishing scam affecting users who had connected it to their FTX …
Cryptocurrency
"Hacker drains Olympus DAO's smart contract of $300,000"
Vector: Smart contract exploit / hack
Insufficient validation on an OHM smart contract at Bond Protocol allowed an attacker to drain 30,437 OHM (~$300,000) from the Olympus DAO defi protocol.Olympus DAO wrote in an …
Cryptocurrency
Tweet thread by Lee Bousfield
Vector: Smart contract exploit / hack
A security researcher published a frustrated Twitter thread reporting that "BitBTC's Optimism bridge is trivially vulnerable. Their team has ignored my messages, so I'm going to …
Cryptocurrency
Tweet thread by Moola Market
Vector: Oracle price manipulation
The Celo-based borrowing and lending platform, Moola Market, suffered a major exploit when an attacker manipulated collateral prices to steal a collection of assets notionally …
Cryptocurrency
Tweet by Rusty Bill
If you've ever wished you could put the same amount of thought into buying a $100,000+ home as you do ordering another bag of dog food from your online retailer of choice, you're …
Cryptocurrency
"Why we’re no longer offering .coin"
Unstoppable Domains is in the business of selling "domains" — at least that's what they call them, but they're not the kind of domain that you can plug into your web browser. …
Cryptocurrency
Tweet thread by BitKeep Wallet
Vector: Smart contract exploit / hack
The Swap feature of the BitKeep crypto wallet suffered an exploit that landed a hacker more than $1 million worth of BNB. The project acknowledged the hack, and promised to …
Cryptocurrency
Tweet thread by Syntropy
Vector: Smart contract exploit / hack
The web3 company Syntropy suffered the loss of 15 million of their $NOIA tokens when they attempted to transfer them to a venture capital firm, but instead they ended up with a …
Cryptocurrency
Tweet by MevRefund
Vector: Flash loan attack on smart contract
The defi project Earning.Farm lost 748 ETH (~$971,000) to a hacker using a flash loan attack. The project contract was missing a check that a flash loan was initiated by the …
Cryptocurrency
"Censored Ethereum Blocks Hit the 51% Threshold Over the Past 24 Hours"
On October 14, Ethereum reached a milestone that alarms many who have pushed for blockchains as "censorship-proof" technology. More than 51% of blocks produced in the preceding 24 …
Cryptocurrency
Twitter thread by Cami
Blu3DAO is a DAO that describes itself as "focused on empowering women, non-binary people, and allies to learn, earn, and play in web3 towards financial freedom". The group was the …
Cryptocurrency
Tweet by Vault by CNN
Vector: Exit scam / rug pull
In June 2021, CNN launched "Vault": a project to "make moments from history available for purchase". The project involved minting as NFTs various clips of CNN footage and …
Cryptocurrency
Web3 Is Going Great
A Black woman attending the major Devcon Ethereum community event in Bogotá posted to Twitter a photograph of a man at the conference, writing, "Day 1 of Devcon and a group of us …
Cryptocurrency
Attacker's account
Vector: Oracle price manipulation
Mango Markets, a Solana-based defi project offering borrowing, lending, and leverage trading, was exploited for $116 million. An attacker manipulated the supposed value of their …
Cryptocurrency
"QANX Bridge wallet disclosure analysis [continuously updated]"
Vector: Smart contract exploit / hack
On September 15, a blockchain security firm disclosed a vulnerability affecting Profanity, a tool that allowed people to generate "vanity" crypto wallet addresses: addresses …
Cryptocurrency
Tweet thread by Rabby Wallet
Vector: Smart contract exploit / hack
Rabby Swap, a feature of the Rabby crypto wallet, was exploited a month after it was first rolled out. An attacker discovered an apparent vulnerability in the Rabby Swap smart …
Cryptocurrency
"DeFi Protocol Temple DAO Struck by $2.3M Exploit"
Vector: Smart contract access control vulnerability
A hacker discovered a vulnerability in the smart contract for the STAX project, which is built on the TempleDAO defi protocol. STAX is a liquidity provider for $TEMPLE/$FRAX.Poor …
Cryptocurrency
"Bored-Ape Creator Yuga Labs Faces SEC Probe Over Unregistered Offerings"
Vector: Regulatory / legal action
According to a scoop in Bloomberg, the United States Securities and Exchange Commission has been probing whether NFTs from Yuga Labs should be considered securities regulations, …
Cryptocurrency
Tweet thread by OxQuit
Vector: Phishing attack
In an incredible display of misfortune and perhaps ineptitude, an NFT collector was scammed out of a Bored Ape and then scammed out of six more Bored Apes when he tried to revoke …
Cryptocurrency
"Binance Smart Chain Halts After 'Potential Exploit' Drains Estimated $100M in Crypto"
Vector: Smart contract exploit / hack
Binance Smart Chain, the relatively popular blockchain that Binance is trying to rebrand as "BNB Chain", was halted when an attacker exploited "BSC Token Hub", the bridge between …
Cryptocurrency
"Terraform Labs founder Do Kwon refutes reports about his funds getting frozen"
South Korean prosecutors have reportedly frozen $39.6 million in crypto assets belonging to Do Kwon, the founder of Terraform Labs and creator of the failed Terra blockchain …
Cryptocurrency
"Bitcoin Defi Protocol Sovryn Gets Hacked for Over $1 Million"
Vector: Flash loan attack on smart contract
Bitcoin-based defi protocol, Sovryn, lost $1 million to a price manipulation attack. An exploiter was able to use the project's legacy lend and borrow functionality to maliciously …
Cryptocurrency
Tweet by Laine
In the latest illustration of our marvelous new decentralized, resilient blockchain future, one single Solana node apparently was able to take down the entire Solana network. …
Cryptocurrency
"RIP MEV BOT"
Vector: MEV / sandwich attack
MEV bots are a controversial category of bots who frontrun transactions in ways that are often detrimental to users. One such bot, known as 0xbadc0de, earned a windfall when a …
Cryptocurrency
"A Frida Kahlo Drawing Was Destroyed to Make NFTs"
A businessman has published a video in which he burns a drawing that he claims is an original Frida Kahlo drawing worth more than $10 million — though its value and its …
Cryptocurrency
Tweet thread by Jason Falovitch
Vector: On-chain theft (attributed by zachxbt)
Sports manager turned crypto entrepreneur Jason Falovitch is now perhaps best known for his influence in the NFT space. He co-founded the Leverage Game Media company along with …
Cryptocurrency
"CFTC Penalizes Blockchain Protocol $250K, Files Action Against Successor DAO"
Vector: Regulatory / legal action
The Commodity Futures Trading Commission fined the bZeroX blockchain project and its founders $250,000 for allowing illegal trading of digital assets, engaging in activities only …
Cryptocurrency
Tweet thread by Evgeny Gaevoy
Vector: Smart contract exploit / hack
The algorithmic market maker Wintermute suffered a major hack, according to their CEO. He estimated the loss at around $160 million, also writing that the company is "solvent with …
Cryptocurrency
Tweet by LakeShowTJ
Vector: Smart contract exploit / hack
The owner of Mutant Ape #21080 was approached with an offer to trade their ape for another Mutant Ape (#55) and an extra 0.5 ETH ($675) to sweeten the deal. The trader agreed, and …
Cryptocurrency
Tweet thread by CryptoCondom
Vector: Software bug / unintentional loss
GMX is a decentralized cryptocurrency exchange that boasts zero price impact trades. On most exchanges, users have to contend with slippage: a difference between the price of a …
Cryptocurrency
"Binance Bungles Accounting for Helium Tokens, Overpays Clients Millions"
Vector: Software bug / unintentional loss
Helium has two different tokens: HNT, which is paid out to people who run Helium hotspots, and MOBILE, which is paid to those maintaining the new Helium 5G network. However, …
Cryptocurrency
"Ether’s New ‘Staking’ Model Could Draw SEC Attention"
Vector: Regulatory / legal action
In the early hours of September 15, Ethereum completed "The Merge — the long-awaited transition from its original proof-of-work consensus mechanism to proof-of-stake.Later that …
Cryptocurrency
"A vulnerability disclosed in Profanity, an Ethereum vanity address tool"
Vector: On-chain theft (attributed by zachxbt)
The 1inch Network disclosed a vulnerability that some of their contributors had found in Profanity, a tool used to create "vanity" wallet addresses by Ethereum users. Although most …
Cryptocurrency
"South Korea issues arrest warrant for developer of failed cryptocurrency Luna"
Vector: Regulatory / legal action
A South Korean court has issued a warrant for the arrest of Do Kwon, the founder of the Terra ecosystem, as well as five other people. According to Bloomberg the allegations …
Cryptocurrency
Tweet by Molly White
Vector: Smart contract exploit / hack
If it seems like you've been seeing a lot of Ethereum co-founder and figurehead Vitalik Buterin around Twitter lately, it may be due to the influx of hacked verified Twitter …
Cryptocurrency
"Starbucks Brewing Revolutionary Web3 Experience for its Starbucks Rewards Members"
When Starbucks CEO Howard Schultz first announced at an employee town hall in April that the company was looking to get into NFTs, I assumed he was just hoping for a headline to …
Cryptocurrency
"New Free DAO crashes 99% after $1.25M flash loan attack"
Vector: Flash loan attack on smart contract
A flash loan attack against the New Free DAO project resulted in a $1.25 million loss. The project's token also crashed 99% in the wake of the theft. The hacker quickly sent 1,500 …
Cryptocurrency
"Investors fear millions lost in Pennsylvania’s largest cryptocurrency scandal based in South Philly"
Vector: Ponzi / pyramid scheme
The Philadelphia Inquirer published a report on VBit Technologies, later Advanced Mining Group, a company that promised investors to buy and operate Bitcoin miners on their behalf …
Cryptocurrency
Tweet by CertiKAlert
Vector: Flash loan attack on smart contract
An attacker using the Avalanche blockchain successfully executed a flash loan attack impacting one contract and several other liquidity providers. The attacker made around $370,000 …
Cryptocurrency
Tweet by DavidBowieReal
The latest entry in "group launches NFTs, fans hate it" comes from the David Bowie estate, who decided that "Bowie on the Blockchain" would be a cool idea to raise money for …
Cryptocurrency
'Doctor Bitcoin' Pleads Guilty to Illegal Cash-to-Crypto Scheme
Vector: Regulatory / legal action
Mark Hopkins, also known as "Doctor Bitcoin" or "Rizzn", announced on social media that he would be spending between 6 and 15 months in federal prison "for the crime of selling …
Cryptocurrency
Tweet thread by Rug Pull Finder
Vector: Exit scam / rug pull
The group Rug Pull Finder aims to combat fraud, scams, and hacks in the NFT space, often investigating crypto rug pulls and offering audits for projects and smart contracts. They …
Cryptocurrency
"Hacker Steals Bill Murray’s Crypto After $185K NFT Charity Auction"
Vector: Smart contract exploit / hack
Bill Murray auctioned off an NFT representing the right to drink a beer with him, during which a painter will paint a picture of the scene that the buyer can keep. The auction …
Cryptocurrency
"Notice of Exploit of KyberSwap Frontend — All funds will be reimbursed"
Vector: Malicious code injection / supply chain
An attacker was able to insert malicious code into the frontend of the decentralized exchange KyberSwap and steal $265,000 of user funds. The project used Google Tag Manager to …
Cryptocurrency
Tweet by CertiKAlert
Vector: Smart contract exploit / hack
An attacker discovered that anyone could call the burn function on the liquidity pool contract for the ShadowFi project. They were able to exploit this vulnerability by calling the …
Cryptocurrency
"Babylon Finance is shutting down"
Vector: Protocol collapse / insolvency
In April, an attacker exploited vulnerabilities in the defi lending project Rari Capital to steal $80 million. The asset management project Babylon Finance was a major lending pool …
Cryptocurrency
"HIP 70: Helium Core Team Proposes to Migrate to Solana"
Helium is a network of wireless hotspots that decided to bolt on a cryptocurrency layer a few years after it was created. Through this, they hoped to convince people to spend …
Cryptocurrency
Twitter thread by Belarusian Cyber-Partisans
A hacktivist group calling themselves the Belarusian Cyber Partisans managed to gain access to the entire passport records of Belarus last year. On August 30, they began selling …
Cryptocurrency
"OptiFi Program Incident Report — 08/29/22"
OptiFi, a derivatives defi project, accidentally and permanently shut down the project smart contract, irretrievably locking up $661,000 — the project's entire fund. A developer …
Cryptocurrency
"'Obvious Nonsense': Prominent Blockchain’s Founder Dismisses Smear Campaign Allegation"
Vector: Regulatory / legal action
An anonymous whistleblower website called "CryptoLeaks" has alleged that Ava Labs, the company behind the Avalanche blockchain, paid lawyers to sue competitors and obtain …
Cryptocurrency
"From Fanfaron"
Ragnarok is a metaverse role-playing game that launched its character NFTs in April 2022. The project received $1.75 million in seed funding, plus another $17.5 million from NFT …
Cryptocurrency
Tweet thread by ENS DAO
Vector: Phishing attack
Some people might be familiar with ENS, the "Ethereum Name Service", which seeks to be a web3 equivalent of DNS. If you've seen people with usernames ending in .eth, that's an ENS …
Cryptocurrency
Tweet by CertikAlert
It's not much compared to at least three separate crypto Pokémon ripoffs since February that have each taken millions, but apparently the love of Pokémon still drew people in to …
Cryptocurrency
"Host of 10% of Ethereum nodes prohibits crypto usage, discussing consequences"
The virtual server provider Hetzner posted a clarification that using its service to mine Ethereum — either in its current form or in the promised proof-of-stake version — violates …
Cryptocurrency
"NFT Exchange SudoRare Goes Dark After $820,000 Rug Pull"
Six hours after its launch, the team behind the new SudoRare NFT exchange took the money and ran, deleting the project website and social media. People had already warned about …
Cryptocurrency
"Bank Run at NFT Lender BendDAO Prompts Attempt to Avert Another Liquidity Crisis"
Honestly, who can blame BendDAO for failing to consider that the hype bubble around Bored Apes and other NFT projects might not last forever! "We underestimated how illiquid NFTs …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
In what might be a new record, someone bought a Bored Ape NFT for 70.69 ETH (~$116,000) and had it stolen from them less than two hours later. The scammer quickly flipped the NFT …
Cryptocurrency
Tweet by penguin_curator
Vector: Software bug / unintentional loss
The same issue that led to OpenSea paying out $1.8 million to users who lost their NFTs is apparently still alive and well (despite OpenSea's introduction of an "Inactive listings" …
Cryptocurrency
"Many Bored Ape NFTs Are in Danger of Getting Liquidated as Borrowed Money Comes Back to Bite"
When people started sinking hundreds of thousands of dollars into Bored Ape NFTs, it wasn't long before people came up with the genius idea of using those NFTs as collateral for …
Cryptocurrency
"Hodlnaut Cuts Staff as Terra Exposure Is Revealed"
Vector: Protocol collapse / insolvency
When Terra was collapsing in May, concerned users of the Hodlnaut lending platform asked whether the firm was exposed. CEO JT wrote on Twitter, "Hodlnaut as a firm did not take any …
Cryptocurrency
"Magic Eden Response to Degen Town"
Vector: Exit scam / rug pull
DegenTown, a collection of brightly-colored cel shaded humanoid figures, launched with much promotion from Magic Eden on their Launchpad minting service. Magic Eden aims to provide …
Cryptocurrency
HUSD on CoinMarketCap
HUSD, a stablecoin linked to the Huobi crypto exchange, lost its peg and dropped to around $0.85. HUSD is a cash-backed stablecoin intended to be pegged to the US dollar, but the …
Cryptocurrency
"Court filing in Bored Apes lawsuit revives claims founders built NFT empire on Nazi ideology"
Vector: Regulatory / legal action
In a motion to dismiss a trademark lawsuit filed by Yuga Labs (the company behind the Bored Ape Yacht Club NFT project) against Ryder Ripps and various others, the defendants …
Cryptocurrency
Tweet by zachxbt
Vector: On-chain theft (attributed by zachxbt)
An NFT collector who goes by ASEC_APE lost four Bored Ape Yacht Club NFTs to a phishing attack. The attacker quickly flipped three of the four NFTs for a total of around 200 ETH …
Cryptocurrency
Tweet thread by Philneeds
Vector: Smart contract exploit / hack
A scammer created a fake ApeCoin contract on the NFT Trader service, with tokens that appeared identical to the true ApeCoins but were actually worthless. After "chatt[ing] for a …
Cryptocurrency
Tweet by Velodrome
Vector: Smart contract exploit / hack
On August 4, the team behind the Velodrome exchange and liquidity marketplace noticed that $350,000 had been taken from a team-operated wallet that was normally used for …
Cryptocurrency
Tweet by takenstheorem
The Ethermine mining pool is responsible for over a quarter of all Ethereum mining, making them the largest miner for that blockchain. On August 11, three days after OFAC added the …
Cryptocurrency
"Over $600K Vanishes From DeFi Project Blur Finance; Developers Disappear"
Vector: Exit scam / rug pull
The yield aggregator Blur Finance rug pulled, taking more than $600,000 in assets from the BNB Chain and Polygon-based projects before deleting their website and social media …
Cryptocurrency
Tweet by Curve Finance
Vector: DNS hijacking / domain takeover (front-end compromise)
Curve Finance's frontend at curve.fi was compromised, prompting users to give token approval to a malicious smart contract. Stolen funds were then transferred out to the FixedFloat …
Cryptocurrency
"Scammers In Paris"
Vector: On-chain theft (attributed by zachxbt)
Crypto sleuth zachxbt has uncovered a French scam duo, Mathys and Camille, who he believes were behind the March "turn your BAYC animated" phishing scam in which they stole a …
Cryptocurrency
Riot Blockchain press release
The Bitcoin mining firm Riot Blockchain produced 318 BTC in July, valued at around $6.88 million, from its mining operations located in central Texas. The firm also received $9.5 …
Cryptocurrency
"Polygon-Based Web3 Game Dragoma Supporters Fall Victim to $3.5M Rug Pull: PeckShield"
Vector: Exit scam / rug pull
The Polygon-based Dragoma app promised to be a new move-to-earn game, the term for a category of web3 apps that promise to reward people in tokens when they exercise. This …
Cryptocurrency
Tweet by CertiK Alert
Vector: Exit scam / rug pull
Who could have predicted that the shitcoin named after one of Elon Musk's 16-year-old sons could turn out to be a scam? Well, besides the people who fell for previous rug pulls of …
Cryptocurrency
Tweet thread by Xinjiang Victims Database
The Xinjiang Victims Database is a database that aims to collect records on ethnic minority citizens in China's Xinjiang Uyghur Autonomous Region who have been imprisoned in …
Cryptocurrency
"Once-hacked for $77M, Beanstalk's algo stablecoin protocol relaunches"
Vector: Flash loan attack on smart contract
The algorithmic stablecoin project Beanstalk Farms suffered a devastating hack in April 2022, suffering $182 million in losses from a governance attack and flash loan exploit on …
Cryptocurrency
Tweet by Steven Galanis
Vector: Seed phrase / wallet compromise
A hacker compromised the wallet belonging to Steven Galanis, the CEO of Cameo, an app that allows people to pay various celebrities to record short messages for them. The hacker …
Cryptocurrency
"Uncle Maker: (Time)Stamping Out The Competition in Ethereum"
Researchers from The Hebrew University have identified an attack on the consensus mechanism used by Ethereum which they describe as risk-free and which can used to "obtain …
Cryptocurrency
"Master of Anons: How a Crypto Developer Faked a DeFi Ecosystem"
CoinDesk revealed that eleven developers behind Solana projects including Sunny Aggregator and Cashio were all actually personas created by Ian Macalinao. Macalinao created the …
Cryptocurrency
"MicroStrategy's Bitcoin Maximalist CEO Saylor Hands Job to Deputy, Takes Executive Chairman Role"
Bitcoin maximalist Michael Saylor announced he would be stepping down as CEO of MicroStrategy, which is ostensibly a software company but in recent years appears to be mostly a …
Cryptocurrency
Tweet thread by 0xfoobar
Vector: Smart contract exploit / hack
Nearly 8,000 Solana wallets were drained for at least $6 million worth of assets, including native SOL tokens and SPL tokens like USDC. The attack went on for nearly a day before …
Cryptocurrency
"SEC Charges Eleven Individuals in $300 Million Crypto Pyramid Scheme"
Vector: Ponzi / pyramid scheme
The SEC charged eleven people who helped to create and promote the crypto pyramid and Ponzi scheme Forsage. The scam operated from January 2020 into 2021, despite multiple cease …
Cryptocurrency
"Multi-Strategy Vault Post-Mortem"
Vector: Smart contract exploit / hack
Yield farming project Reaper Farm suffered an exploit that resulted in a $1.7 million loss. The attackers discovered a vulnerability that allowed them to withdraw anyone else's …
Cryptocurrency
"Troubled Crypto Lender Babel Lost Big While Trading Client Funds"
Vector: Protocol collapse / insolvency
Babel Finance, a crypto lender that suspended withdrawals in mid June, sustained "massive losses" thanks to its proprietary trading desk, which was trading with customer funds. …
Cryptocurrency
"Solana DeFi Protocol Nirvana Drained of Liquidity After Flash Loan Exploit"
Vector: Flash loan attack on smart contract
The Solana-based yield farming project, Nirvana Finance, was exploited by an attacker who used flash loans to drain the project of just under $3.5 million. The attacker took out a …
Cryptocurrency
"Australian crypto platform Immutable sacks 6% of staff despite plans to 'hire aggressively'"
The Australian crypto company Immutable fired 17% of staff from its gaming division. Immutable has said this amounted to 18 workers, though the Games Workers Australia union …
Cryptocurrency
"MPF aciona empresa que vende ativos digitais (NFTs) de áreas da Amazônia"
Vector: Regulatory / legal action
Nemus is an NFT project already described in W3IGG for its plans to become "Guardians" of the Amazon rainforest and saviors of its Indigenous populations by selling Ethereum NFTs …
Cryptocurrency
"Meme Coin Teddy Doge 'Soft' Rug Pulls $4.5M Worth of Tokens, PeckShield Says"
Vector: Exit scam / rug pull
The Teddy Doge defi project saw its token price plummet over 99% as 30 billion TEDDY were transferred from the project's deployer and distributed to various wallets, which then …
Cryptocurrency
"Audius Governance Takeover Post-Mortem 7/23/22"
Vector: Governance attack / malicious on-chain proposal
An attacker was able to create and pass a governance proposal to transfer out 18.5 million AUDIO tokens from the community treasury. They then successfully swapped these for 705 …
Cryptocurrency
"Falling Man"
GameStop's brand new NFT platform, which launched on July 12, is off to a less than promising start. Unlike some other NFT platforms like OpenSea, Gamestop does not allow just …
Cryptocurrency
"Prosecutors Raid 7 Korean Exchanges Amid Terra Probe: Report"
Vector: Protocol collapse / insolvency
Prosecutors working on the fraud case around the May Terra/Luna collapse raided seven cryptocurrency exchanges in South Korea including Bithumb, Upbit, and Coinone. They also …
Cryptocurrency
Tweet by franklinisbored
Bored Ape aficionado franklinisbored has apparently found a new source of entertainment by placing high bids on his own ENS domains with amusing names, causing a Twitter bot that …
Cryptocurrency
"Elon Musk’s Tesla Has Sold 75% of Its Bitcoin Holdings"
Tesla announced in their Q2 financial report that they had sold about 75% of the Bitcoin they had been holding. The company first bought $1.5 billion of Bitcoin in January 2021, at …
Cryptocurrency
Tweet by PeckShieldAlert
20.8 million BUSD, a dollar-pegged stablecoin on BNB Chain, was transferred from Raccoon Network and the Freedom Protocol on July 19. Security firm PeckShield identified the …
Cryptocurrency
"Restaurant and private members lounge to be built controversially in San Francisco's 'public' Salesforce Park"
Salesforce Park, a suspended park area underneath the Salesforce Tower, has been described as intentionally unwelcoming to the many unhoused San Franciscans it looms atop. Parts of …
Cryptocurrency
"Notice on Indefinite Suspension of Bexplus Project"
Vector: Protocol collapse / insolvency
The cryptocurrency exchange Bexplus announced that "due to force majeure, Bexplus will stop service from now on". Users were told to close their open positions and withdraw any …
Cryptocurrency
Tweet by 0xQuit
Vector: Smart contract exploit / hack
PREMINT is an NFT service intended to help project creators build access lists for new NFT projects based on various qualifications. The project was compromised on July 17, and …
Cryptocurrency
"Hacker Targets NFT Artist DeeKay’s Twitter, Wipes NFTs Worth $150K"
Vector: Smart contract exploit / hack
On July 16, hackers compromised the Twitter account belonging to the well-known NFT artist DeeKay, who sold an NFT for 310 ETH (then $1 million) to Snoop Dogg in April. The 180,000 …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Crypto sleuth zachxbt has accused the NFT project "Boneheads" of rug pulling only weeks after the project minted in August 2021. Although they promised physical collectibles, more …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Exit scam / rug pull
Citizen Finance, a multichain platform that has something to do with NFTs and blockchain gaming, claimed to have suffered an attack by an outside party who obtained access to a …
Cryptocurrency
Tweet by CZ
Vector: Phishing attack
In a successful, broadly-targeted phishing campaign, more than 70,000 addresses connected to Uniswap were airdropped tokens that baited users into approving transactions that …
Cryptocurrency
"Vauld issues letter to its creditors, disclosing $70 million shortfall"
Vector: Protocol collapse / insolvency
Crypto lending firm Vauld, which suspended withdrawals and announced they were considering restructuring on July 4, have disclosed to their creditors a shortfall of around $70 …
Cryptocurrency
"Post-mortem: BiFi-BTC illegal address registration"
Vector: Smart contract vulnerability exploit
Bifrost is a platform that allows developers to create dApps across multiple blockchains. They run the service BiFi, which is a defi platform built atop Bifrost. On July 10, they …
Cryptocurrency
"Hacker drains $1.4 million worth of ETH from NFT lender Omni"
Vector: Flash loan attack on smart contract
Hackers used a flash loan attack to steal around 1,300 ETH ($1.43 million) from the NFT lending platform Omni. Omni allows users to borrow cryptocurrency against their NFTs.Hackers …
Cryptocurrency
"NZ scientist Ivan Ravlich, of Hypernet Labs, hit with US crypto fraud lawsuit"
Vector: Regulatory / legal action
Ivan Ravlich, founder of the nebulous crypto firm called Hypernet Labs, announced on Twitter that "Hypernet's road has reached an end". "Hypernet was impacted by the same market …
Cryptocurrency
"Reddit will sell ‘Collectible Avatars,’ and yes — they’re NFTs"
Reddit announced that they will be selling "Collectible Avatars", artist variations on the Reddit "Snoo" figure that users can then customize. Amusingly, Reddit's announcement …
Cryptocurrency
"Uprise lost 99% of client funds while shorting LUNA during its price crash: SE Daily"
Vector: Protocol collapse / insolvency
According to Seoul Economic Daily, the Korean cryptocurrency investment fund Uprise lost 99% of its customer funds when they tried to short Luna during its collapse in May. …
Cryptocurrency
Archived copy of the hacked British Army Twitter account
Vector: Smart contract exploit / hack
The 362,000-follower verified Twitter account and 178,000-follower YouTube account for the British Army were simultaneously compromised, and used to shill two different crypto …
Cryptocurrency
Tweet thread by Crema Finance
Vector: Smart contract exploit / hack
Solana liquidity protocol Crema Finance was exploited for around 69,500 SOL (~$2.3 million) and around $6.5 million worth of stablecoins for a total loss of around $8.8 million. …
Cryptocurrency
"Two Polygon, Fantom Front Ends Hit by DNS Attack"
Vector: DNS hijacking / domain takeover (front-end compromise)
The Ankr public RPC gateways (basically an API for dApps and other services to communicate with the blockchain) for Polygon and Fantom were impacted when attackers compromised the …
Cryptocurrency
"Optimism NFT marketplace Quixotic suffers exploit following contract update"
Vector: Smart contract exploit / hack
Quixotic, an NFT marketplace on the Optimism network, was attacked after a hacker was able to exploit a recently updated smart contract. The attacker made off with at least …
Cryptocurrency
"Voyager Digital Provides Market Update"
Vector: Withdrawal halt / insolvency
Voyager Digital announced that they had suspended trading, deposits, withdrawals, and loyalty rewards. This came after it was revealed that Voyager had issued a notice of default …
Cryptocurrency
"Justice Department Announces Enforcement Action Charging Six Individuals with Cryptocurrency Fraud Offenses in Cases Involving Over $100 Million in Intended Losses"
Vector: Ponzi / pyramid scheme
The U.S. Department of Justice announced charges against Le Anh Tuan, who was one of the individuals behind the "Baller Ape" NFT rug pull in October 2021. According to the DoJ, …
Cryptocurrency
Web3 Is Going Great
If it wasn't already nauseating to watch a huge corporation like Coca-Cola use LGBTQ Pride Month to market their products and pay lip service to supporting LGBTQ rights while …
Cryptocurrency
"CFTC Charges South African Bitcoin Club Mirror Trading International With $1.7B Fraud"
Vector: Ponzi / pyramid scheme
Mirror Trading International was a South African Bitcoin pool operator that advertised to investors that it would generate 10% returns a month, with bonuses for referring friends …
Cryptocurrency
"Grayscale Investments Suing SEC After Its Bitcoin ETF Rejected"
Vector: Regulatory / legal action
The U.S. Securities and Exchange Commission rejected a proposal from Grayscale Investing that would turn their Bitcoin trust into an exchange-traded fund (ETF). If accepted, this …
Cryptocurrency
"Compass Mining CEO and CFO Resign Amid 'Setbacks and Disappointments'"
The CEO and CFO of Compass Mining, a Bitcoin mining hosting and brokerage services firm, both resigned suddenly on June 28. The sudden departures followed accusations the previous …
Cryptocurrency
"No One Bought Chevrolet's 2023 Corvette Z06 NFT"
Chevrolet decided to create their first ever NFT, an illustration of a bright green 2023 Corvette Z06. The 1 of 1 edition NFT, titled "Own the Color", also would come with a "free" …
Cryptocurrency
Inside the crypto restaurant after the crypto crash
The LA Times reported that the Bored Ape-themed "Bored & Hungry" restaurant in Long Beach, California had stopped accepting crypto payments. Despite excitedly announcing the first …
Cryptocurrency
Tweet thread by Harmony
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The Horizon Bridge is a blockchain bridge allowing assets to be used across Ethereum, BNB, and Harmony blockchains. The bridge is run by the Harmony blockchain project.On June 23, …
Cryptocurrency
Tweet by Daniel Hong
Vector: Regulatory / legal action
A former employee of Terraform Labs, the company behind the Terra project that collapsed in May, found that he was banned from leaving the country. According to the former …
Cryptocurrency
Tweet by OKHotshot
Vector: Smart contract exploit / hack
So, apparently polo shirts have NFTs now. Fashion brand Lacoste's NFT project is titled "Undw3", which is apparently supposed to be pronounced "underwater" — I guess if you say the …
Cryptocurrency
"SLND1: Mitigate Risk From Whale"
Solend DAO, the DAO behind the Solend lending protocol on Solana, just passed its first ever governance proposal. A whale used their platform to take out an enormous margin …
Cryptocurrency
Tweet thread by PeckShield Inc.
Vector: Flash loan attack on smart contract
A hacker was able to perform an oracle manipulation attack enabled by flash loans to siphon crypto worth around $1.26 million from Inverse Finance. The loss to the protocol was …
Cryptocurrency
"A Billion-Dollar Crypto Gaming Startup Promised Riches and Delivered Disaster"
After playing up how Axie Infinity had "created hundreds of thousands of jobs in the Philippines" and other locations where salaries are low, Axie Infinity has crumbled. Some …
Cryptocurrency
"Binance paused bitcoin withdrawals for several hours Monday due to a 'stuck transaction'"
Vector: Withdrawal halt / insolvency
Binance paused Bitcoin withdrawals for three hours on June 13, explaining that some network maintenance resulted in transactions becoming "stuck and not able to be processed …
Cryptocurrency
"Binance.US Accused of Misleading Investors in Class-Action Lawsuit Over Terra"
Vector: Regulatory / legal action
A group of people who put money into Terra (UST), the stablecoin that collapsed in May, have filed a class action lawsuit against Binance.US. Binance.US is a crypto exchange that …
Cryptocurrency
Tweet by Flip McBot
In October 2021, an NFT collector dropped 300 ETH (then $1.05 million) on CrypToadz #2155, a pixel art image of a blue toad skeleton on a blue background. On June 13, they sold the …
Cryptocurrency
"Tron’s Stablecoin Peg to Dollar Wobbles; Justin Sun Swears to Deploy $2B to Prop Up"
USDD, the algorithmic stablecoin belonging to the Tron network, dipped as low as $0.91 from its $1 peg on June 13 amidst a day of turmoil elsewhere in the crypto ecosystem. …
Cryptocurrency
Tweet thread by SmallCapScience
Lido-staked ETH, a project that offers to allow users to stake ETH for the purposes of securing it after the Ethereum "merge" — that is, the ever-delayed move to proof-of-stake. …
Cryptocurrency
Tweet by NFTherder
Vector: Smart contract exploit / hack
Scammers successfully compromised the Twitter account for El Universal, a Venezuelan newspaper. The account is verified, and has five million followers. The scammers used the …
Cryptocurrency
Tweets by Offline Cash
Some crypto advocates have long promoted crypto as a proper digital equivalent to cash. Physical dollars have a lot of benefits, including that you don't need a bank account to use …
Cryptocurrency
Tweet by ApolloX
Vector: Smart contract exploit / hack
The ApolloX exchange suffered an exploit where an attacker was able to withdraw around 40 million $APX, which they were able to swap for around $1.5 million. This also caused the …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Exit scam / rug pull
The Baby Elon project on BNBChain rug pulled on June 8, with the token price plummeting 98% as the team withdrew 623 BNB (~$179,000) from the project. They quickly moved the funds …
Cryptocurrency
Tweet by PeckShield Inc.
Vector: Software bug / unintentional loss
Attackers stole around $2.1 million from the GYM Network defi project after exploiting a bug in a recently-deployed contract that failed to check the identity of the caller. The …
Cryptocurrency
"Republican Rep. Madison Cawthorn failed to properly disclose 2-dozen more cryptocurrency trades, including 'Let's Go Brandon' coin, bitcoin, and ethereum"
Vector: Regulatory / legal action
Representative Madison Cawthorn (R-NC) is facing an ethics investigation pertaining to his involvement with the Let's Go Brandon coin, which includes allegations of insider trading …
Cryptocurrency
"A Message to the Community from the Optimism Foundation"
Vector: Software bug / unintentional loss
As the Ethereum scaling project Optimism worked to create the $OP token, a token they launched in a move towards decentralizing the project's governance, they decided to obtain a …
Cryptocurrency
"Blockchain, 'Decentralized' Exchange Taken Offline After Hacker Steals Millions"
Vector: Software bug / unintentional loss
The Osmosis chain was halted on June 8 after users discovered a bug where people could deposit money into Osmosis pools and receive 3x the amount when they withdrew. The bug was …
Cryptocurrency
Thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Crypto-sleuth zachxbt reported on June 8 that Players Only, and NFT project created by a group of NBA players including Michael Carter-Williams and Jerami Grant, appears to be a …
Cryptocurrency
Tweet by Yung Ape Squad
Vector: Phishing attack
The June 4 compromise of the Bored Apes Discord was only one of several Discord hacks in a several-day period. All the attacks appeared to involve user accounts of individual …
Cryptocurrency
Thread by CertiK Alert
Vector: Smart contract exploit / hack
Scammers were able to compromise the Discord account of a Bored Apes community manager, then use it to post an announcement of an "exclusive giveaway" to anyone who held a Bored …
Cryptocurrency
Tweet by topshotkief
Vector: Smart contract exploit / hack
An NFT collector hoping to claim NFTs from the Goblintown collection was phished, resulting in ten of their NFTs being stolen from them. The scammers took two Mutant Ape NFTs and …
Cryptocurrency
"New York lawmakers pass a moratorium on Bitcoin mining"
Vector: Regulatory / legal action
The New York state Senate passed a bill putting a two-year halt on issuing new or renewing existing permits for crypto mining at fossil fuel plants — a practice that has been …
Cryptocurrency
"Timechain et ses dirigeants font l’objet d’une enquête"
Vector: Protocol collapse / insolvency
The Canadian firm Timechain claimed that they lost around $4 million to the Terra collapse, a loss they said destroyed the company. Timechain claimed that a stop-loss mechanism …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Animoon is yet another Pokémon rip-off NFT project, with artwork that was ripped directly from Pokémon artwork and recolored. They claim to have a "signed NDA" with Pokémon …
Cryptocurrency
Tweet thread by FedorLinnik
Hoping to riff off the popularity of the recent and weird Goblintown NFT project, some NFT enthusiasts decided to make their own "Goblin Asses" project, which is exactly what it …
Cryptocurrency
"Landlord held my security deposit as bitcoin (Massachusetts)"
A Reddit poster asking for legal advice reported that when they moved out of their apartment, they received only $1600 of the $3000 they provided to their landlord as an initial …
Cryptocurrency
OpenSea transaction history
NFT collector onekiller purchased Bored Ape #7256 for 188 ETH a month ago — at the time worth about $513,000. On June 1, they sold the ape for 0.088 ETH, or $161.It's not quite …
Cryptocurrency
Tweet by CryptoWhale
Solana is one of the more popular proof-of-stake blockchains, and is often trotted out as an alternative to Ethereum when people bring up Ethereum's environmental impact, slowness, …
Cryptocurrency
Tweet by nftmetaman.eth
An NFT collector trying to list their Bored Ape NFT for sale on OpenSea made a typo, and accidentally listed it for sale for 10 ETH (around $19,000) instead of 105 ETH (around …
Cryptocurrency
Tweet thread by FatMan
Vector: Software bug / unintentional loss
Someone has been able to drain more than $2 million from the Mirror Protocol in the Terra ecosystem. It appears they are exploiting an issue with the price oracle for "Luna …
Cryptocurrency
Tweet by RugPull Finder
Vector: Exit scam / rug pull
The Superlative Apes NFTs are a collection of Bored Apes derivative NFTs that feature colorful pastels. The project amassed a large following (including, apparently, the rapper …
Cryptocurrency
Tweet by PINKCATNFT
The Toronto Comic Arts Festival angered artists and fans alike when they invited Saba Moeel, the artist behind the Pink Cat NFT collection, to attend as a featured guest. This was …
Cryptocurrency
Tweet thread by FatMan
All holders of Luna, who saw their holdings crash to nothing in the Terra collapse, received an airdrop of the new Luna tokens with the release of Terra 2.0 (electric boogaloo). …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Exit scam / rug pull
The token associated with yet another crypto Pokémon rip-off, PokeMoney, suddenly crashed in price when around 11,800 BNB ($3.5 million) worth of it was pulled out of the project. …
Cryptocurrency
Thread by FatMan
Vector: Smart contract exploit / hack
A crypto researcher who goes by "FatMan" discovered that the Mirror Protocol in the Terra ecosystem contained a serious vulnerability, that was quietly patched with no announcement …
Cryptocurrency
"Solana's blockchain clock loses track of time, now running 30 minutes behind"
The Solana blockchain clock drifted about 30 minutes behind real-world time on May 26, as a result of slower-than-usual slot times. Solana's status page read that "this has no …
Cryptocurrency
Tweet thread by Terra
Following the dramatic collapse of Terra earlier this month, the Terra ecosystem voted to pass a proposal by Do Kwon to create "Terra 2.0". The project intends to "effectively …
Cryptocurrency
"Adam Neumann's blockchain-based redemption story now sponsored by a16z"
Adam and Rebekah Neumann, the duo behind the WeWork coworking space company that imploded spectacularly in 2019, have re-emerged to start a company called Flowcarbon. The company …
Cryptocurrency
Tweet by CertiK Alert
Vector: Exit scam / rug pull
The creators of the Decentraworld project, and its associated $DEWO token, rug pulled for 3127 BNB, valued at just over $1 million. The project promised an "ecosystem of dapps with …
Cryptocurrency
Tweet by CirrusNFT
Vector: Smart contract exploit / hack
A scammer was able to trick a prolific NFT collector into signing a transaction on a fake trading website, which then allowed them to maliciously transfer 29 pricey Moonbirds NFTs …
Cryptocurrency
Tweet thread by sniko
Vector: Smart contract exploit / hack
Attackers gained control of the Twitter account belonging to Beeple, an artist known for "selling" an NFT for $69 million in March 2021 and for his recent horror-inducing NFT …
Cryptocurrency
Tweet thread by TheJonnyReid
Vector: Phishing attack
Crypto speculator Jonny Reid wrote on May 22 that his crypto wallet had been hacked and drained of approximately $203,000. He wrote that he had never owned a hardware wallet before …
Cryptocurrency
Tweet thread by 0xngmi
The founder of the Remilia Collective and its popular "Milady Maker" NFT project, "Charlotte Fang", was discovered to have been a key player in a white supremacist cult known as …
Cryptocurrency
"又一算稳项目被攻击，bDollar损失约73万美元"
Vector: Smart contract exploit / hack
bDollar was the first algorithmic stablecoin on the BSC blockchain. An attacker was able to manipulate the price of underlying assets to pull 2,381 wBNB out of the protocol, worth …
Cryptocurrency
Reptilian Renegade Twitter account
Vector: Exit scam / rug pull
The serial rug-puller who was behind the Balloonsville rug pull in February and Doodled Dragons rug pull in January has popped up once again, this time with a Solana NFT project …
Cryptocurrency
Tweet thread by FatMan
Vector: Regulatory / legal action
A class action law firm sent a letter to the yield generation project Stablegains, demanding records on customer accounts, marketing and advertising strategies, and communications …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Smart contract exploit / hack
The "Feminist Metaverse" ($FM) token suddenly plunged in value by 99.7% after an attacker stole 1,838 BNB ($533,000). The hacker quickly transferred the stolen funds to the Tornado …
Cryptocurrency
"Terra Co-Founders Face Lawsuit from Korean UST and LUNA Investors"
Vector: Regulatory / legal action
Following the collapse of the Terra ecosystem and its tokens TerraUSD and Luna, affected Korean investors have filed both criminal and civil lawsuits against the project's creator, …
Cryptocurrency
Tweet by Seth Green
Vector: Phishing attack
Actor Seth Green tweeted that he had been targeted with a phishing attack that resulted in the theft of four pricey NFTs: a Bored Ape, two Mutant Apes, and a Doodle. The thief …
Cryptocurrency
"Terraform's Legal Team Quits Amid Terra Stablecoin Fallout"
Vector: Regulatory / legal action
In what seems like a bad sign for Terraform Labs, the developer of the Terra blockchain and the TerraUSD (UST) and Luna cryptocurrencies, the three members of the company's legal …
Cryptocurrency
Tweet thread by CZ
On May 15, Binance CEO Changpeng Zhao (widely known as CZ) created a tweet thread in which he attempted to speak nonchalantly about questions that had "just occurred to [him]" …
Cryptocurrency
"US brings first-of-its-kind criminal charges of Bitcoin-based sanctions-busting"
Vector: Regulatory / legal action
An unidentified US citizen transferred more than $10 million in Bitcoin to a cryptocurrency exchange in a "comprehensively sanctioned" country where they were running a payments …
Cryptocurrency
Tweet thread by Luna Foundation Guard
Many were eagerly awaiting a report from Luna Foundation Guard (LFG) on what happened to the several billion dollars' worth of Bitcoin reserves they once held, which they …
Cryptocurrency
"DeFi lender left with $35 million bad debt after quoting depegged stablecoins at $1"
Vector: Software bug / unintentional loss
The defi lending protocol Scream may have taken the "stable" in "stablecoin" a bit too literally when they hardcoded the prices of the Fantom USD (fUSD) and DEI stablecoins. In the …
Cryptocurrency
"Fantom Stablecoin DEI Becomes Latest to Lose Dollar Peg"
Vector: Flash loan attack on smart contract
Another stablecoin lost its peg as dominoes continued to fall in the declining crypto market. DEI, an algorithmic stablecoin created by Deus Finance on the Fantom network, …
Cryptocurrency
Tweet thread by CertiKAlert
Vector: Flash loan attack on smart contract
A flash loan attack on the "Feed Every Gorilla" (FEG) token swap contracts pulled $1.3 million from the project, also tanking the token price by 80%. The project operates on both …
Cryptocurrency
"Whereabouts of Terra’s Bitcoin Reserve a Mystery After Transfers"
Now that the dust is settling somewhat from the dramatic collapse of Terra, people are beginning to wonder when they'll hear more about what exactly happened to the 80,394 Bitcoin …
Cryptocurrency
"LUNA Trading Incident on Crypto.com App"
Vector: Oracle price manipulation
One of the features of crypto that its proponents sometimes highlight is that transactions can't be reversed. This, of course, is not true when making trades on exchanges like …
Cryptocurrency
"InsurAce says it will pay millions to claimants after Terra’s collapse"
Vector: Smart contract vulnerability exploit
InsurAce is a defi insurance provider (oh yes, they exist) that allows people to buy insurance against events including smart contract vulnerabilities and stablecoin depegs. …
Cryptocurrency
Tweet thread by Spirit Swap
Vector: DNS hijacking / domain takeover (front-end compromise)
In what is beginning to become a pattern, SpiritSwap was the latest project where attackers gained control of their domain and were able to modify the frontend to divert funds to a …
Cryptocurrency
Tweet by Terra
Vector: Governance attack / malicious on-chain proposal
After $LUNA dropped below $0.01, Terra announced that they halted the Terra blockchain. "Terra validators have decided to halt the Terra chain to prevent governance attacks …
Cryptocurrency
"Venus Protocol Official Statement regarding LUNA"
Vector: Smart contract exploit / hack
Earlier today, Terra halted their blockchain after a devastating few days. Subsequently, Chainlink's oracle paused the price feed, causing it to fall out of sync with the apparent …
Cryptocurrency
"UST’s Do Kwon Was Behind Earlier Failed Stablecoin, Ex-Terra Colleagues Say"
In a scoop published shortly after the catastrophes began with TerraUSD and Luna, CoinDesk reported that Terraform Labs CEO Do Kwan had also previously led a different failed …
Cryptocurrency
Luna/USD
Vector: Protocol collapse / insolvency
Terraform Labs develops two cryptocurrencies: TerraUSD ($UST), an algorithmic stablecoin meant to be pegged to the U.S. dollar, and $LUNA, a crypto asset used both for speculation …
Cryptocurrency
"A Builder’s Journey"
Vector: Exit scam / rug pull
In a blog post titled "A Builder's Journey", the founder of the popular Azuki NFT project admitted that he had also been behind the NFT projects CryptoPhunks (note the "h"), …
Cryptocurrency
Tweet by PeckShieldAlert
The G.O.A.T. ("Greatest of all Tokens") project claimed to be "the new standard in cryptocurrency", with vague claims that it would "add value by addressing scalability and risk …
Cryptocurrency
TerraUSD/USD on CoinMarketCap
Vector: Protocol collapse / insolvency
It's been a rough few days for TerraUSD, one of several popular stablecoins pegged to the US dollar. Unlike many stablecoins like Tether or USDC, Terra is an algorithmic …
Cryptocurrency
Archived Cashera website
Cashera was a project claiming to provide a "banking revolution" with its CSR crypto token. The project did many things to try to appear legitimate, including linking to government …
Cryptocurrency
Tweet thread by Jetfuel Finance
Vector: Oracle price manipulation
An attacker was able to steal 1,048 ETH (~$2.65 million) and 400,000 DAI from the Fortress Protocol borrowing and lending platform in what appears to have been an oracle …
Cryptocurrency
Tweet thread by CertiKAlert
Vector: Exit scam / rug pull
Under the pretense of a contract upgrade, the Hunter defi project team drained the liquidity from the project, swapping the tokens for assets worth around $1.2 million. The team …
Cryptocurrency
Tweet by Rug Pull Finder
The Fury of the Fur NFT project was a collection of 3D models that sort of resembled bears. The project advertised that the models were "metaverse and game-ready", and the roadmap …
Cryptocurrency
Thread by CertiKAlert
Vector: Exit scam / rug pull
The token associated with the Day of Defeat project, which describes itself as a "radical social experiment token mathematically designed to give holders 10,000,000X PRICE …
Cryptocurrency
"Ferrari subdomain hijacked to push fake Ferrari NFT collection"
Vector: Smart contract exploit / hack
Someone was able to gain control of a ferrari.com subdomain to create a scam NFT mint. Most scam NFT projects rely on eager NFT collectors not noticing a URL that isn't quite right …
Cryptocurrency
"U.S. Treasury Issues First-Ever Sanctions on a Virtual Currency Mixer, Targets DPRK Cyber Threats"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) announced that they had sanctioned the North Korean cryptocurrency tumbler Blender.io. This was the …
Cryptocurrency
"OpenSea Discord Hacked, NFTs Stolen Using Fake YouTube Site"
Vector: Smart contract exploit / hack
The OpenSea Discord server was compromised, allowing a scammer to post a seemingly-official announcement that OpenSea was partnering with YouTube on a line of NFTs. They urged …
Cryptocurrency
"Fake crypto giveaways steal millions using Elon Musk Ark Invest video"
Vector: Smart contract exploit / hack
Crypto scammers on YouTube rehosted a "live" panel discussion — actually from "The ₿ Word" conference in July 2021 — in which Elon Musk, Jack Dorsey, and Cathie Wood …
Cryptocurrency
Tweet by CertiK Alert
Vector: Exit scam / rug pull
The Pragma defi project on the Fantom blockchain announced that their treasury and project wallets had been drained for around $1.5 million in $FTM.The rug pull appeared to have …
Cryptocurrency
"Typo Moves $36M in Seized JUNO Tokens to Wrong Wallet"
A protracted discussion and two different votes ended with the Juno project deciding to confiscate all but 50,000 of the 3 million $JUNO accumulated by one individual. When the …
Cryptocurrency
Tweet by MM.Finance
Vector: DNS hijacking / domain takeover (front-end compromise)
MM.Finance, a group of crypto projects based on the Cronos blockchain, suffered an attack that allowed a hacker to redirect more than $2 million worth of crypto assets that were …
Cryptocurrency
"Juno Blockchain Community Officially Votes to Revoke Whale’s Tokens"
The Juno community has officially voted to confiscate over 2.95 million $JUNO owned by one whale who they believe gamed the airdrop to obtain more than his fair share. This follows …
Cryptocurrency
Tweet thread by BlockSec
Vector: Smart contract exploit / hack
A hacker attacked multiple Rari liquidity pools relating to the Fei Protocol, exploiting a known re-entrancy vulnerability that exists on forks of the Compound protocol. The …
Cryptocurrency
Tweet thread by Molly White
The much-awaited Bored Ape Yacht Club "Otherside" metaverse land sale began, and its popularity just about wrecked Ethereum for everyone else. Gas fees, which increase based on …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
In what should surprise nobody, some of the historically phishing-prone fans of the pricey Bored Apes project fell for scams that pretended to be the Bored Apes' new land project, …
Cryptocurrency
Tweet thread by PeckShield
Vector: Flash loan attack on smart contract
An exploiter used a flash loan attack to pull 3,933 ETH (~$11 million) from the "decentralized automated market maker" Saddle Finance. Shortly after the attack, the hacker began …
Cryptocurrency
Tweet thread by Solana Status
On April 30, NFT minting bots began flooding the Solana network with 4 million transactions per second, causing the network to lose consensus. The project tweeted that "Engineers …
Cryptocurrency
Tweet by OxQuit
Vector: Exit scam / rug pull
A project to create Teenage Mutant Ninja Turtles NFTs stirred up a lot of excitement, garnering more than 100,000 Twitter followers on a verified Twitter account that described …
Cryptocurrency
Tweet thread by PeckShield Inc.
Vector: Flash loan attack on smart contract
The defi project Deus Finance was hit with a flash loan attack that netted the hacker $13.4 million. The loss to the protocol was likely larger than what the hacker was able to …
Cryptocurrency
"Bitcoin becomes official currency in Central African Republic"
Vector: Regulatory / legal action
The Central African Republic became the second country to adopt Bitcoin as legal tender, after El Salvador did the same in September 2021. It's a strange move, in a country where …
Cryptocurrency
Twitter thread by JennieCuteCat
Vector: Smart contract exploit / hack
Scammers created a project on OpenSea with Louis Vuitton branding, which invited individuals to visit an external site to mint exclusive NFTs. They placed a blue checkmark on the …
Cryptocurrency
"Fidelity Investments Unveils a Crypto Option for 401(k) Plans"
Financial services company Fidelity announced its intentions to allow people to put some of their retirement savings into Bitcoin in the near future, despite the Department of …
Cryptocurrency
Tweet by Bored Ape Yacht Club
Vector: Smart contract exploit / hack
The Bored Ape Yacht Club's Instagram account was compromised and used to advertised a fake airdrop for metaverse land. This was particularly believable, as the much-anticipated …
Cryptocurrency
"TikTok-Famous Doctors Are Getting Into NFTs And It's A Mess"
Buy the $570 NFT and you'll get access to "celebrity doctors" who have amassed followings on apps like TikTok. Promising to "provide access quality doctors without all the usual …
Cryptocurrency
Tweet thread by 0xfoobar
Vector: Software bug / unintentional loss
Micah Johnson, an artist and former professional baseball player, launched an astronaut-themed NFT project called AkuDreams. The auction was based around a Dutch auction, with the …
Cryptocurrency
"Special Report: How crypto giant Binance built ties to a Russian FSB-linked agency"
Binance, the largest cryptocurrency exchange, shared customer data with the Russian government according to a Reuters special report. Reuters detailed how Binance provided the …
Cryptocurrency
Tweet thread by Molly White
Bob Byrne and Tim Collins, two prolific contributors to the far-right Epoch Times, have expanded their grift to crypto. A twenty-page-long "newspaper" titled Wall Street Today …
Cryptocurrency
"Hacker bungles DeFi exploit: Leaves stolen $1M in contract set to self destruct"
Vector: Flash loan attack on smart contract
An attacker targeted the ZEED defi projects, successfully using a flash loan attack to pull just over $1 million from the project. With the funds transferred to the attack …
Cryptocurrency
Web3 Is Going Great
Binance, the world's largest crypto exchange, used Twitter's branded hashtag feature to add a custom emoji to Twitter when people use the hashtags #Binance or #BNB. The hashtag …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
The Rogue Society NFT project launched in September, with an ambitious roadmap that included a theme song, comic book series, 3D figurines, an augmented reality app, and an …
Cryptocurrency
Tweet thread by SlowMist
Vector: Seed phrase / wallet compromise
Scammers ran Google ads for popular search queries relating to the Terra ecosystem. When users searched for things like "Anchor protocol" or "Astroport", the first result was …
Cryptocurrency
Tweet thread by 0x_fxnction
Vector: Smart contract exploit / hack
NFT influencer 0x_fxnction reported that his wallet had been compromised, and 2349 SOL (~$240,000) had been stolen. The money had primarily been profit from the DeGods project, he …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
Crypto sleuth zachxbt researched the Rich Bulls Club, an NFT project that launched in December with NFTs priced at 0.3 ETH (~$1,350) a pop. The project included a clause where …
Cryptocurrency
Tweet by CertiKAlert
Vector: Flash loan attack on smart contract
Redemption provides the liquidity pools for 2omb, a Fantom-based algorithmic stablecoin project with big promises: "What if you could invest in a golden goose? Something you can …
Cryptocurrency
"Atari Announces Planned Creation of New Token and Termination of Joint Venture"
A press release from Atari announced that the company would be cutting ties with ICICB Group. In addition to Atari granting ICICB hotel and casino licenses, the original deal had …
Cryptocurrency
Tweet thread by Domenic Iacovone
Vector: Phishing attack
Some MetaMask users using iOS were shocked to discover that their MetaMask credentials were automatically being stored to iCloud today, after MetaMask acknowledged this was the …
Cryptocurrency
"Palisade identifies Wormable Cross-Site Scripting Vulnerability affecting Rarible’s NFT Marketplace"
Vector: Malicious code injection / supply chain
Security researchers at Palisade publicly disclosed a wormable cross-site scripting (XSS) vulnerability and WAF bypass they had discovered and responsibly disclosed to Rarible …
Cryptocurrency
Tweet thread by CertiK Alert
Vector: Flash loan attack on smart contract
All my magic beans gone. An attacker successfully used a flash loan attack to exploit a flaw in Beanstalk Farms' stablecoin protocol, which allowed them to make off with 24,830 ETH …
Cryptocurrency
"How An Alleged Rapist And Former Twitch Streamer Helped Build An NFT Startup By Hiding Behind A Pseudonym"
A pseudonymous co-founder of the NFT startup Gem, who was previously known only as "Neso", has been revealed to be Josh Thompson. Using the handles "Joshpriest" and "MethodJosh", …
Cryptocurrency
Tweet thread by zachxbt
The NFT project "Moonbirds" generated so much hype that they implemented a raffle system for the many people who hoped to get on the project's allowlist, hoping to make it more …
Cryptocurrency
Tweet by PeckShield
Vector: Smart contract exploit / hack
Rikkei Finance, which describes itself as a metaverse defi project, was apparently exploited. 2,571 BNB, priced at around $1.07 million, was transferred out of the protocol and …
Cryptocurrency
Announcement tweet
Archie Comics announced they would be launching an NFT project called "Archieverse", which centers around their spooky "Madam Satan" character and invites people to "unlock the …
Cryptocurrency
" 'The Monerun' scheduled for April 18th, Monero's 8th birthday"
Monero is a privacycoin that attempts to address some of the privacy issues with more popular currencies (like Bitcoin or Ethereum) — namely, that anyone can see that wallet A sent …
Cryptocurrency
Tweet thread by zachxbt
Vector: Exit scam / rug pull
Influencer, conservationist, and exotic animal whisperer "The Real Tarzann" (a.k.a. Mike Holston) announced in October 2021 his plans for an NFT project called "Tribes of Ogun". …
Cryptocurrency
Tweet thread by TheBreadMakerr
Vector: Exit scam / rug pull
Unicorn Nodes claimed to be a "defi-as-a-service" project. It launched its $RNBW token on April 14, despite warnings from "TheBreadmaker", who rates various protocols. Only hours …
Cryptocurrency
Tweet by Tim Beiko
For years now, Ethereum has been talking about a transition from its energy-intensive, expensive proof-of-work consensus model to a proof-of-stake consensus model, which sports a …
Cryptocurrency
Tweet thread by Tanner Woodworth
Vector: Smart contract exploit / hack
A scammer recreated the Twitter account for SkyVerse, a much-anticipated NFT land project due to launch in "mid-April". More than 250 NFT collectors eager to get in on a mint that …
Cryptocurrency
" 'Jack Dorsey's First Tweet' NFT Went on Sale for $48M. It Ended With a Top Bid of Just $280"
After Jack Dorsey made an NFT out of his first-ever tweet, then-cryptocurrency executive Sina Estavi won the auction in March 2021 with a 1,630 ETH bid (then around $2.9 million). …
Cryptocurrency
"What Happens in The Metaverse Does Not Stay In The Metaverse Texas Securities Commissioner Stops Metaverse Casino Securities Scheme"
Vector: Regulatory / legal action
Securities Commissioner Travis J. Iles issued an emergency cease and desist order to stop "Sand Vegas Casino Club", a project that writes on its website "THE HOUSE ALWAYS WINS. And …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Flash loan attack on smart contract
A person was able to use a flash loan attack to drain the Elephant Money project, crashing the token price to 0 while cashing out 27,416 BNB ($11 million). Losses to the project …
Cryptocurrency
Tweet by Casper
Vector: Smart contract exploit / hack
NFT collector "Casper" discovered their wallet had been compromised, and an attacker had stolen around 114 NFTs worth around $600,000. The collector took to Twitter to urge people …
Cryptocurrency
Tweet by PeckShield
Vector: Smart contract exploit / hack
An attacker stole about $1.9 million after exploiting a bug in the smart contract for the Creat Future token. The contract's transfer function was defined as public, with no …
Cryptocurrency
Instagram video of $APE transaction
A restaurateur opened "Bored & Hungry", a Bored Ape-themed restaurant in Long Beach, California that offers a simple menu of hamburgers or plant-based burgers (with or without …
Cryptocurrency
"NFTs Are Here to Ruin D&D"
Because, really, what is even the point of playing Dungeons & Dragons if you're not buying a premade character from a limited set of options, playing premade adventures with …
Cryptocurrency
Tweet thread by CertiK Alert
Vector: Smart contract exploit / hack
Starstream, a defi project built on the Andromeda layer 2 Ethereum protocol, had its treasury drained. Blockchain security company CertiK reported that the treasury appeared to …
Cryptocurrency
Tweet thread by Kevin Homiak
Vector: On-chain theft (attributed by zachxbt)
Attorney Kevin Homiak tweeted that his firm would be representing several individuals who contributed money to a developer, Tyler Gaye, who promised to be working on an NFT …
Cryptocurrency
"[IMPORTANT] — Community Update: WonderHero BNB Chain Bridging Withdrawal Compromised"
Vector: Smart contract exploit / hack
WonderHero is a mobile play-to-earn turn-based strategy game. Attackers were able to mint 80 million $WND after successfully exploiting the bridge linking the WonderHero …
Cryptocurrency
Scam wallet
Vector: Smart contract exploit / hack
It's not exactly straightforward to revoke wallet permissions once they've been granted, and so many users use a site called revoke.cash to remove permissions in the case of …
Cryptocurrency
"First NFT Collection from Paramount Global and RECUR Partnership to Drop with Star Trek on April 9"
Star Trek announced the creation of "Star Trek Continuum", a part of Paramount's new NFT platform. They state that the project is "accessible to everyone [with $250 to throw …
Cryptocurrency
"OpenSea 'Sitting on Ticking Bomb' as Lawsuits Pile Up Over Stolen Apes"
Vector: Regulatory / legal action
A third "stolen ape" lawsuit was filed against OpenSea, alleging that Opensea's "security vulnerability allowed an outside party to illegally enter through OpenSea's code and …
Cryptocurrency
"Ubisoft is done creating new content for Ghost Recon Breakpoint, even if you bought an NFT"
Ubisoft announced in December that they would be incorporating NFTs in to their Tom Clancy's Ghost Recon Breakpoint title, much to the chagrin of its players and some employees as …
Cryptocurrency
Tweet by cr0ss.eth
AJ Vaynerchuk, brother of prominent NFT personality Gary Vaynerchuk (aka Gary Vee), launched his VaynerSports NFT collection. The popularity of the project resulted in surging gas …
Cryptocurrency
Worldcoin Promised Free Crypto If They Scanned Their Eyeballs With “The Orb.” Now They Feel Robbed.
New reporting from BuzzFeed News and MIT Technology Review described some of the issues that Worldcoin has been encountering on its mission to scan the eyeballs of the world …
Cryptocurrency
"Miami feds seize $34 million of bitcoin in fraud case. It’s one of largest seizures in U.S."
Vector: Regulatory / legal action
A Floridian suspected of selling hacked account information for services including HBO, Netflix, and Uber had $34 million in Bitcoin seized by federal authorities. Prosecutors …
Cryptocurrency
Tweet thread by 0xQuit
Vector: Smart contract exploit / hack
A trader who owned a Bored Ape and two Mutant Ape NFTs apparently reached a deal to trade them for three different Bored Ape NFTs. Because OpenSea doesn't support swapping NFTs …
Cryptocurrency
"I fell victim to the Trezor phishing scam"
Vector: Seed phrase / wallet compromise
A Bitcoin holder using a Trezor hardware wallet fell victim to a phishing scam after attackers stole email lists from a third-party vendor use by Trezor. The user wrote on Reddit …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Oracle price manipulation
An attacker targeting the defi project Inverse Finance was able to manipulate the price oracle of INV/ETH, artificially inflating the apparent price of INV and allowing the …
Cryptocurrency
"Beware: This Fake BAYC Metaverse Land NFT Exploits OpenSea Bug"
Vector: Phishing attack
An apparent scammer was able to create transactions that appeared as though they were coming from the smart contract belonging to the Bored Ape Yacht Club. OpenSea's UI doesn't …
Cryptocurrency
"Taiwanese star Jay Chou says Bored Ape NFT has been stolen by 'phishing website'"
Vector: Phishing attack
Taiwanese singer Jay Chou fell victim to an apparent phishing scam, in which a malicious actor transferred his pricey Bored Ape NFT to their own wallet. The scammer then flipped …
Cryptocurrency
"‘Let’s Go Brandon’ Meme Token Creators, Promoters Hit with Class Action Over Alleged ‘Pump and Dump’ Scheme"
Vector: Regulatory / legal action
A class-action lawsuit filed by Missouri investor Eric De Ford claims that the people behind the pro-Trump "Let's Go Brandon" (LGB) memecoin misled investors about a NASCAR …
Cryptocurrency
Tweet by BoredApeYC
Vector: Smart contract exploit / hack
Another day, another Discord compromise — or in this case, many Discord compromises. Bored Apes wrote on their Twitter account in the early hours of the morning, "STAY SAFE. Do not …
Cryptocurrency
Tweet by Dirty Bubble Media
The former head moderator of the Cosmic Cowgirls NFT project Discord, Esh, wrote on Twitter that that the project team had fired all moderators and scrapped all of their roadmaps. …
Cryptocurrency
"Community Alert: Ronin Validators Compromised"
Vector: Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
One of the most popular play-to-earn games, Axie Infinity, suffered an enormous hack to the Ronin network on which it runs. The project announced that a majority of Ronin validator …
Cryptocurrency
Tweet thread by zachxbt
Vector: Exit scam / rug pull
Many had written off the Bored Bunny NFT project (and its subsequent spin-off NFT collections) as a rug pull. After releasing several new NFT collections that appeared to be little …
Cryptocurrency
Tweet thread by Phillip Lietz
In February, perennial political candidate Andrew Yang announced he had created "Lobby3", a DAO which he says will push for crypto-friendly regulation and "eradicate poverty". The …
Cryptocurrency
"A $350,000 Bored Ape NFT was just sold for only $115"
Vector: Smart contract exploit / hack
NFT trader Calvin Chan recently made some unusual NFT trades. He sold his Bored Ape, which he had bought in August 2021 for 16 ETH (then about $50,000), for 115 DAI ($115 — DAI is …
Cryptocurrency
Tweet by Cameron Moulène
Vector: Smart contract exploit / hack
NFT collector Cameron Moulène was excited to see a link promising a merch drop in the bio of an account with the same branding as Bored Ape Yacht Club, but with the handle …
Cryptocurrency
Web3 Is Going Great
Vector: Smart contract exploit / hack
MkLeo, who is widely considered to be the best Smash Ultimate player in the world, had his 217,000-follower Twitter account hacked and repurposed for NFT shilling. The scammers …
Cryptocurrency
Tweet thread by manifold.xyz
Collectors were excited for a chance to obtain NFTs from the artist Pak's upcoming collection, "Ash Chapter II: Metamorphosis". Pak is an extremely popular digital artist, and his …
Cryptocurrency
"Revest Protocol Exploit Recovery Plan"
Vector: Smart contract exploit / hack
The Revest protocol was targeted with an attack that stole $BLOCKS, $ECO, and $RENA tokens from their vault. The protocol wrote that the attacker used a "highly sophisticated …
Cryptocurrency
Tweet by 0xQuit
Vector: Smart contract exploit / hack
A trader known by taylorRichie.eth agreed to swap their Morie NFT for a Doodle, in a trade they'd coordinated with a user on Discord. Because OpenSea doesn't support trading one …
Cryptocurrency
"Exxon Weighs Taking Gas-to-Bitcoin Pilot to Four Countries"
According to Bloomberg, Exxon Mobil has begun a pilot program to set up Bitcoin miners at an oil well in North Dakota. The project reportedly runs off 18 million ft³ of …
Cryptocurrency
Two Defendants Charged In Non-Fungible Token (“NFT”) Fraud And Money Laundering Scheme
Vector: Exit scam / rug pull
On January 9, an ice cream-themed NFT project called "Frosties" made off with $1.1 million in a rug pull only an hour after the NFTs were launched. Less than three months later, …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Flash loan attack on smart contract
The security firm PeckShield reported that the Pye ecosystem had been targeted with a flash loan attack, which drained around $2.6 million from the protocol. Pye is a group of defi …
Cryptocurrency
"When NFTs came to roller derby, roller derby put up a fight"
After three roller derby stars announced an NFT project called "'Bout Time", the roller derby community was fairly united in its displeasure with the idea. Though the project …
Cryptocurrency
"Twitter Scam Uses Verified Accounts to Steal $1 Million in Fake ApeCoin Airdrop"
Vector: Smart contract exploit / hack
Some scammers obtained hacked verified Twitter accounts, then rebranded them to claim to be founders of the Bored Ape Yacht Club. They then tweeted about how their team's ApeCoin …
Cryptocurrency
"NFT Band Debuts With Singer Kiesza on Ellen Degeneres Show"
In the latest installment of "large television program launders the reputations of NFTs", an "NFT band" performed on Ellen... Well, some animated characters danced on a screen …
Cryptocurrency
"Bored Ape NFT Spinoff Venture Gone Sour Sparks Legal Fight"
Vector: Regulatory / legal action
Two lawsuits were filed nearly simultaneously, each alleging misconduct by the other party with respect to the "Caked Apes" NFT project — a project full of illustrations that were …
Cryptocurrency
"Solana Stablecoin Project Cashio Plummets to Zero After Multi-Million Dollar Hack"
Vector: Infinite mint exploit
A hacker was able to exploit an infinite mint glitch in the protocol of Cashio, a Solana stablecoin project. They were able to pull around $50 million out of the platform, while …
Cryptocurrency
Ronin Network / Axie Infinity Lazarus Group Hack ($625M, Largest Crypto Theft)
Vector: North Korea's Lazarus Group targeted Sky Mavis (Axie Infinity developer) employees with fake LinkedIn job offers; a senior engineer downloaded a malicious PDF 'job offer' that installed macOS spyware; Lazarus used this foothold to compromise 5 of the 9 Ronin validator private keys
On March 23, 2022, the Lazarus Group (North Korea, DPRK Bureau 121) stole 173,600 ETH and 25.5 million USDC ($625 million at the time) from the Ronin Network — the Ethereum …
Cryptocurrency
"G2 Esports files lawsuit against NFT provider Bondly"
Vector: Regulatory / legal action
G2 Esports announced a partnership with NFT provider Bondly in June 2021, through which they planned to release profile picture NFTs that would also provide access to membership …
Cryptocurrency
Tweet by Arthur_0x
Vector: Smart contract exploit / hack
Arthur_0x, a crypto investor and NFT whale, had two of their hot wallets compromised. The attacker stole ETH and transferred some big-ticket NFTs out of the wallets, including at …
Cryptocurrency
Tweet by Zachxbt
Vector: On-chain theft (attributed by zachxbt)
An NFT collector fell for a scam website promising to "turn your BAYC animated". After connecting their wallet, the attacker transferred their three pricey Bored Ape NFTs to their …
Cryptocurrency
"NeoNexus founder pulls the plug on popular metaverse NFT project"
Vector: Exit scam / rug pull
NeoNexus was a metaverse NFT project that raised about 25,000 SOL (worth around $2.2 million today; previously worth $3.5 to $4.5 million). The project had sold various "property …
Cryptocurrency
"New NFT Project Kaiju Kongz Will Burn Your NFT If You List It Too Cheaply"
An NFT project's value is often discussed in terms of its floor price — that is, the lowest price at which any given NFT in a collection is listed for sale. The new NFT project …
Cryptocurrency
"Someone borrowed 5 Bored Apes to claim $1.1 million of APE tokens"
Vector: Flash loan attack on smart contract
The Bored Ape Yacht Club recently created a token called ApeCoin, some of which they announced would be distributed to people who owned various Bored Ape NFTs and NFTs from their …
Cryptocurrency
"Rare Bears Discord phishing attack nabs $800K in NFTs"
Vector: Smart contract exploit / hack
After hackers successfully compromised the account of one of the Rare Bears Discord moderators, they posted an announcement that new NFTs were being minted. Those who tried to …
Cryptocurrency
Winamp Twitter thread
A week after LimeWire emerged from cryostasis to announce it would become an NFT platform, Winamp decided to jump in as well. Winamp was a Windows media player that first launched …
Cryptocurrency
"Deus Finance exploit: Hackers get away with $3M worth of DAI and Ether"
Vector: Flash loan attack on smart contract
Hackers were able to use a flash loan attack to manipulate a price oracle, pulling 200,000 DAI and 1101.8 ETH (totaling almost $3.1 million) out of the Deus Finance defi platform. …
Cryptocurrency
Tweet thread by Tiffany Hutchinson
A project called NFTBOOKS has cropped up, promising to "transform the world of book-readings" by creating an NFT economy of authors, book-lenders, readers, translators, and, of …
Cryptocurrency
"Official Formula 1 'Ethereum NFT Game' Shuts Down"
F1 Delta Time, a crypto car racing game that was officially licensed with F1 racing, shut down in mid-March. The game had previously generated a lot of hype — one of its car NFTs …
Cryptocurrency
Twitter thread by Louis Nel
Vector: Smart contract exploit / hack
Bitcoin wallet addresses look something like bc1qar0srrr7xfkvy5l643lydnw9re59gtzzwf5mdq, and so it's not always obvious at a glance if one string of random characters might have …
Cryptocurrency
[RFC] Allocate Funds for Team / Operational Expenses + Third Option
The Sol Invictus project was an Olympus DAO-like project on the Solana blockchain, much like the Wonderland project that went up in flames recently. Promising absolutely massive …
Cryptocurrency
Twitter thread by SerpentAU
Vector: Smart contract exploit / hack
Wizard Pass is an NFT trading community and package of various software tools that can be joined for a price: a collection of 3,000 NFTs gates access to the community. The NFTs had …
Cryptocurrency
"I made $458,000 in a flash crash buying XRP at 0.00004USDT each, then the exchange reversed the trades and took my profits"
A trader set very low limit order on Ripple's XRP token, and was delighted to see it executed with XRP very briefly plummeted in value in what's known as a flash crash. The price …
Cryptocurrency
Tweet by Rob Freund
Vector: Regulatory / legal action
Matt Furie is the original creator of the Pepe the Frog cartoon that was later co-opted as an alt-right hate symbol, and which has also been popular among crypto enthusiasts and …
Cryptocurrency
"Crypto Scammers Edited 10 Years of Facebook Posts to Appear Legit"
Vector: Smart contract exploit / hack
A Facebook profile impersonating an economist named David Rosenberg was discovered by Snopes to have drawn in around 3.4 Bitcoin in deposits, ostensibly from victims who were …
Cryptocurrency
"An Update on Our NFT..."
Believe me, I was as shocked as you were to discover that the MeUndies underwear brand has a "community". But that community apparently objected to the brand's purchase of a Bored …
Cryptocurrency
"Bitcoin cash machines ordered to shut down in UK"
Vector: Regulatory / legal action
All 81 functional Bitcoin ATMs in the United Kingdom are operating illegally, says the UK's Financial Conduct Authority (FCA). None of the companies operating them have a license …
Cryptocurrency
"Bored Ape Yacht Club creator buys CryptoPunks and Meebits"
Nothing really says "decentralized" like one company controlling the priciest and most popular NFT collections! Yuga Labs, the company behind the popular Bored Apes Yacht Club …
Cryptocurrency
Tweet by dino_dealer
The owner of EtherRock #44 tried to list their NFT for sale for 444 ETH (almost $1.2 million), but erroneously listed it for 444 wei — the fractional unit of ETH typically used for …
Cryptocurrency
"We Can Vote Away Your Money for Free: The Implications of Juno Prop 16"
Vector: 51% attack / network takeover
A blockchain protocol called Juno launched in October 2021, airdropping their $JUNO tokens to members of the Cosmos ecosystem in proportion to how many $ATOM tokens they held. The …
Cryptocurrency
"Binance temporarily halts Polygon deposit and withdrawal to sync nodes"
Vector: Software bug / unintentional loss
After a network upgrade, Polygon went offline for eleven hours while developers scrambled to diagnose and patch an issue preventing its validators from achieving the 2/3 consensus …
Cryptocurrency
Tweet thread by Bored Ape Yacht Club
Yuga Labs, the company behind the Bored Ape Yacht Club (BAYC) project, announced a new project in partnership with blockchain gaming group Animoca Brands. The signup required KYC — …
Cryptocurrency
"John Terry's NFT collection plunges 90% in value"
John Terry, an English football coach and former player, launched an NFT project called "Ape Kids Football Club" on February 2. Several players, including Tammy Abraham, Ashley …
Cryptocurrency
Tweet thread by rifftrader
Something apparently went terribly wrong on the trading platform that Twitter user rifftrader was using (though they didn't say which) when 10 BTC (~$385,000) was erroneously …
Cryptocurrency
Tweet by Fantasm Finance
Vector: Software bug / unintentional loss
An exploiter was able to use a bug in the Fantasm Mint contract to drain more than 1,000 ETH ($2,640,000) from Fantasm Finance. Fantasm urged their users to redeem their tokens …
Cryptocurrency
Tweet thread by BlockSecTeam
Vector: Smart contract exploit / hack
The Pirate X Pirate blockchain gaming platform was exploited, with an attacker selling of more than 9.6 million $PXP. They were able to dump the tokens into the market for a profit …
Cryptocurrency
"Owners and Operators of Online Cryptocurrency Companies Indicted for Defrauding Investors"
Vector: Regulatory / legal action
Four individuals who owned and operated EmpowerCoin, ECoinPlus, and Jet-Coin were indicted on wire fraud, money laundering, and obstruction of justice charges. They allegedly …
Cryptocurrency
"John Barksdale Charged With Cryptocurrency Securities Fraud In Connection With Sale Of Ormeus Coin"
Vector: Regulatory / legal action
John Barksdale, part of the sibling duo behind Ormeus Coin, was charged with conspiracy, securities fraud, and wire fraud for his role in selling the Ormeus Coin token. He …
Cryptocurrency
"Cologne Foundation Challenges Hauser & Wirth Over August Sander Estate"
Vector: Regulatory / legal action
An NFT project called the August Sander 10K Collection launched on February 11, offering NFTs of all 10,700 photographs by German portrait and documentary photographer August …
Cryptocurrency
"Exposing Jake Paul's Scams"
Jake Paul, who is already in hot water after being named in the class-action lawsuit against SafeMoon, has now been implicated by YouTube detective CoffeeZilla in $2.2 million …
Cryptocurrency
Tweet thread by Bacon Protocol
Vector: Reentrancy attack on smart contract
Bacon Protocol, a defi project seeking to provide NFT mortgage liens (yes, really) was hacked. A reentrancy bug in their smart contract enabled attackers to get more lending …
Cryptocurrency
Tweet by danvee.eth
Vector: Exit scam / rug pull
The NFT project BattleCatsArena appears to have rug pulled on March 5, about three weeks after its launch. The project had been announced late last year, with a post from its …
Cryptocurrency
Tweet by Frooxius
NeosVR, a virtual reality project originally released in 2018, introduced "Neos Credits" (NCR) in 2018 with the idea that it could enable in-game transactions. The crypto component …
Cryptocurrency
"Crypto Twitter Outraged By 'Cash-Grab' Tai Lopez NFT Collection"
The entrepreneur and motivational speaker Tai Lopez, of "here in my garage, just bought this new Lamborghini" fame, announced a new NFT project. The NFTs feature staggering list …
Cryptocurrency
"Ethereum Companies Suddenly Ban Users In Certain Countries"
Vector: Regulatory / legal action
Users based in Venezuela suddenly found themselves unable to use the enormously popular crypto wallet, MetaMask, on March 3. MetaMask relies on Infura, a popular API platform for …
Cryptocurrency
Nemus Earth whitepaper
A project called Nemus Earth has emerged, offering to sell you an Ethereum NFT to become a "Guardian" of the Brazilian Amazon rainforest. The project has lofty plans to create a …
Cryptocurrency
"Apparent Ukraine WORLD Airdrop Might Be Spoof"
Vector: Phishing attack
After embracing cryptocurrency donations to help fund its resistance to Russian invasion, the Ukrainian government decided to try to solicit even more donations by announcing they …
Cryptocurrency
"Ukraine Cancels Crypto ‘Airdrop’ Rewards for Donations"
Ukraine canceled its promised cryptocurrency token airdrop on the day it was expected to happen. Government officials had previously announced that anyone who donated by March 3 …
Cryptocurrency
Brian Rose
Conspiracy theorists Brian Rose and David Icke are together known for their April 7, 2020 interview where Icke attempted to draw unsubstantiated links between the rollout of 5G …
Cryptocurrency
Tweet by KeyboardMonkey3
Vector: Software bug / unintentional loss
The Treasure NFT marketplace on Arbitrum (a layer 2 network built atop Ethereum) apparently experienced a bug that allowed someone to "buy" NFTs in transactions where they sent 0 …
Cryptocurrency
"Cybercriminals who breached Nvidia issue one of the most unusual demands ever"
Vector: Smart contract exploit / hack
In late February, the Lapsus$ ransomware group claimed to have breached Nvidia's corporate network and stolen more than a terabyte of data, which they say includes schematics and …
Cryptocurrency
Thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
A developer offering his services on the freelancer marketplace Fiverr was hired by 32 different NFT projects, for which he wrote and deployed the smart contracts. The first …
Cryptocurrency
"Parler Launches NFT Marketplace With New Trump NFTs"
You might think if Parler was going to create an NFT celebrating their hero, they wouldn't include along with their promotional material the example most reminiscent of Milo …
Cryptocurrency
Tweet by Memofrogwell
Vector: Exit scam / rug pull
Elexir Finance promised a platform where users could build passive income via "yield bearing NFTs". They drew in more than $1.3 million in investments since the project's launch on …
Cryptocurrency
"Crypto Exchanges Refuse to Freeze All Russian Accounts"
Vector: Regulatory / legal action
Ukrainian Vice President Mykhailo Fedorov publicly requested major cryptocurrency exchanges to freeze addresses of all Russian and Belarusian users, to increase economic pressure …
Cryptocurrency
GenomesDAO Docs
GenomesDAO has created a platform which they promise will allow people who wish to sell their genetic data to have more control over it. They write that genetic data is "data that …
Cryptocurrency
Armijo v. Ozone Networks, Inc. d/b/a Opensea
Vector: Phishing attack
Robert Armijo is the former owner of three valuable NFTs — one Bored Ape and two Mutant Apes — which he bought for a total of around $300,000 between November 2021 and January …
Cryptocurrency
Thread by HOWLERZNFT
Vector: Smart contract exploit / hack
A heavily-hyped NFT project called "Howlerz" released its project via "secret mint" with no allowlist, and it went very, very poorly. Would-be buyers who were excitedly waiting for …
Cryptocurrency
Tweet thread by MetaMehdee
The Starcatchers NFT project sold NFTs which did not immediately show the image associated with them, but would instead be revealed at a later date. An observant collector noticed …
Cryptocurrency
Tweet by molly0xfff
After the fiasco the previous day in which some group of people at the Associated Press apparently decided turning an image of human suffering into an NFT was a brilliant idea, …
Cryptocurrency
"BitConnect Founder Indicted in Global $2.4 Billion Cryptocurrency Scheme"
Vector: Ponzi / pyramid scheme
BitConnect founder, Satish Kumbhani, founded the Bitconnect "investment program" in 2016, which attracted investors with its impossibly high payouts. From then until its dramatic …
Cryptocurrency
"Nelson Mandela paintings of life in prison to be sold as NFTs"
The Guardian reported that five watercolor paintings created by former South African president Nelson Mandela depicting scenes from his years of incarceration will be sold as NFTs …
Cryptocurrency
Tweet thread by zachxbt
Vector: Smart contract exploit / hack
The Pixelmon project promised an ambitious roadmap including a Pokémon-like game where the pixelized Pokémon could be caught and traded, a land project, and rewards to buyers of …
Cryptocurrency
Archived tweet by the Associated Press
The Associated Press announced they would be dropping a new NFT on the platform they launched in January, which notably doesn't allow users to sell their NFTs off-platform or …
Cryptocurrency
Project contract
Vector: Exit scam / rug pull
Sacramento Kings player De'Aaron Fox announced his "SwipaTheFox" NFT project in mid-December, and the "high utility NFT collection" went live on January 15. The project roadmap …
Cryptocurrency
"Sotheby’s Withdraws Lot of 104 CryptoPunks Minutes Before Expected Auction"
Two weeks prior, collector 0x650d announced that they would be partnering with the Sotheby's auction house to auction a single lot of 104 CryptoPunks. CryptoPunks are some of the …
Cryptocurrency
Space Crypto (SPE) to USD Chart
Space Crypto, a play-to-earn game that launched on February 15, announced on February 23 that users wouldn't be able to withdraw all their reward tokens, as expected. Without …
Cryptocurrency
"Exclusive: Austrian Programmer And Ex Crypto CEO Likely Stole $11 Billion Of Ether"
Vector: Smart contract exploit / hack
"The DAO", one of the first DAOs, was famously hacked in 2016, requiring a hard fork of the Ethereum blockchain to "undo" the breach. (So immutable!) Had Ethereum not forked, …
Cryptocurrency
Tweet by schniggie
Vector: Software bug / unintentional loss
Ocean Protocol is a web3 project promising to help people "publish, discover, and consume data in a secure, privacy-preserving fashion". Recently, they've been promoting the ALGA …
Cryptocurrency
"Avalanche-based protocol reportedly rug-pulled within hours of launch"
Vector: Exit scam / rug pull
Atom Protocol, a project built on the Avalanche blockchain (and not to be confused with the Atom/Cosmos project on Binance), rug pulled within a day of launching. The developers …
Cryptocurrency
"Nagpur: How A Std XII Pass Man's MBA Graduate Niece Helped Him In Rs 40 Crore Crypto Scam"
Vector: Smart contract exploit / hack
Indian authorities arrested at least eleven people accused of running a cryptocurrency scam that drew ₹40 crore (around $5.3 million) from investors. The alleged ringleader, Nishid …
Cryptocurrency
Tweet by Jon_HQ
Vector: Phishing attack
Panic erupted on February 19 as a few users saw their wallets emptied of valuable NFTs without knowing why, and many others feared the same could happen to them. Early explanations …
Cryptocurrency
Tweet thread by dcsilver
Vector: Ponzi / pyramid scheme
An appeals court found that a legal claim could continue to be pursued against some of the major voices that promoted Bitconnect online. Bitconnect was a Ponzi scheme that …
Cryptocurrency
Tweet by NFTCryptoChicks
Polly, a member of the popular Crypto.Chicks NFT team, apologized for "drawing inspiration from" artists and "inadvertently cop[ying]" their work, after it is discovered that she …
Cryptocurrency
"Kickstarter exec on the blockchain controversy: 'We've learned a hell of a lot in the last couple of months.'"
Kickstarter announced back in December that they planned to completely rebuild their product on a blockchain. It was quickly met with resistance from the community, including some …
Cryptocurrency
<i>McKimmy v. OpenSea</i>
Vector: Regulatory / legal action
Businessman Timothy McKimmy is the former owner of Bored Ape #3475, an NFT he purchased in December for 55 ETH (then about $232,000). In a lawsuit against OpenSea, McKimmy alleged …
Cryptocurrency
"Andrew Yang's Web3 Lobbying Group Wants to End Poverty With Vote-Buying"
Vector: Regulatory / legal action
Perennial political candidate Andrew Yang, perhaps in a desperate bid to stay relevant, announced his plans to create "Lobby3". Lobby3 is a DAO which he says will push for …
Cryptocurrency
"Jake Paul, Nick Carter, Soulja Boy, Lil Yachty Facing ‘Pump and Dump’ Class Action Over SafeMoon Tokens"
Vector: Regulatory / legal action
A class action suit was filed against SafeMoon, various executives, and a handful of influencers and celebrities who promoted the token. The plaintiffs allege that promotions …
Cryptocurrency
"An artist blew up a Lamborghini to protest ‘greed’ in crypto culture. The charred remains are now being sold as NFTs"
The person known on Twitter by the name SHL0MS bought a used Lamborghini Huracan, drove it to the desert, and recorded the enormous fireball as they blew up the car. The explosion, …
Cryptocurrency
"Call of Cthulhu Maker Chaosium Suspends NFT Program After Backlash"
Chaosium, a maker of tabletop roleplaying games (TTRPGs; think games like Dungeons & Dragons) including the popular Call of Cthulu game, launched an NFT project in July 2021. …
Cryptocurrency
Tweet from MetaDeckz
Vector: Regulatory / legal action
An artist creating and selling trading cards of various streamers without asking their permission claims he was "just trying to do something cool for the community". He originally …
Cryptocurrency
Tweet by katienotopoulos
"Robness", an NFT artist who is somewhat known for selling a photograph of a trashcan for more than $250,000, apparently took issue with BuzzFeed News journalist Katie Notopoulos, …
Cryptocurrency
Tweet thread by CertiKCommunity
BNB42 was a "100% decentralized investment platform" that promised investors a 20% daily return on their investments. Unsurprisingly, that turned out to be too good to be true when …
Cryptocurrency
Tweet thready by zachxbt
More shadiness emerges around the Jacked Ape Club as it's discovered that the popular NFT influencer account Morgan (aka @helloimmorgan and morgan.eth) failed to disclose being …
Cryptocurrency
The Kiss NFT website
In a Valentine's Day-themed stunt, the otherwise reputable Belvedere Museum in Austria decided to sell Gustav Klimt's The Kiss as NFTs. But making one NFT was apparently not enough …
Cryptocurrency
Tweet by finance_build
Vector: Smart contract exploit / hack
A person managed to submit a proposal to the DAO that governs BuildFinance, a "decentralized venture builder", that would allow them to take over the project contract. The attacker …
Cryptocurrency
"‘Freedom Convoy’ Truckers Struggle to Cash Out Bitcoin Worth $1 Million"
Vector: Seed phrase / wallet compromise
The leaders of the Canadian anti-vaccine trucker protest communicated their plan to distribute the 21 Bitcoin (worth almost $1 million) to the truckers blockading the border. …
Cryptocurrency
"Lonely Ape Dating Club: Meet the first dating app for NFT collectors"
Left in place for posterity's sake, but the inimitible Katie Notopoulos has determined that this "app" was all a well-executed prank in the post-ironic world that is web3.The …
Cryptocurrency
Tweet by Hantao
Vector: Exit scam / rug pull
The team behind Jacked Ape Club, another NFT project featuring computer-generated apes, briefly erupted in chaos, shaking the confidence of many in the project. Several days prior, …
Cryptocurrency
"Concerns grow over Monero mining pool that has 44% of the network's hash rate"
Vector: 51% attack / network takeover
Much of the mining of the Monero privacycoin is done by a single mining pool named MineXMR. The total computing power being used to mine and process Monero transactions (also …
Cryptocurrency
Tweet thread by thomasg.eth
Vector: Smart contract exploit / hack
thomasg.eth is the founder of Arrow, a DAO that is working to create "open-source VTOL [vertical take-off and landing] aircraft and air taxi protocol". In a long Twitter thread, he …
Cryptocurrency
Tweet by JackedApeClub
The Jacked Ape Club launched their public sale on February 10, offering 8,888 NFTs of illustrated apes much like the Bored Apes, but muscular. The following day they tweeted that, …
Cryptocurrency
Tweet by Coffeezilla
Lana Rhoades put her celebrity status behind the "CryptoSis" NFT project, which launched on January 22 and raised about $1.8 million. The project featured a detailed roadmap, …
Cryptocurrency
Tweet thread by mtgDAO
Vector: Regulatory / legal action
The fledgling mtgDAO promised to deliver a "crypto NFT card economy" based around the Magic: The Gathering card game published by Wizards of the Coast. Needless to say, WotC sent …
Cryptocurrency
"Squiggles NFTs Delisted From OpenSea… But The Story Gets Weirder"
Vector: Exit scam / rug pull
A project called Squiggles generated an enormous amount of hype before its launch, with hundreds of thousands of members in its Discord and followers on Twitter. Just before the …
Cryptocurrency
"Baby Musk Meme Coin Drops 100% After Rug Pull"
The Baby Musk Coin memecoin launched in January, promising to "revolutionize the meme industry". The coin enjoyed a $2 million ICO the previous month, despite warnings from …
Cryptocurrency
"Why the Ottawa truckers protest has turned to cryptocurrency for fundraising"
A protest in Canada against COVID-19 vaccine requirements for truckers re-entering the country, known as the "Freedom Convoy" has tried to crowdfund in several ways. A GoFundMe …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Smart contract exploit / hack
Hackers drained more than $10 million from the project Dego Finance. This also plunged the value of the project's $DEGO token by about 78%. Dego claims that the hackers compromised …
Cryptocurrency
"Some locals say a bitcoin mining operation is ruining one of the Finger Lakes. Here's how."
A mostly-dormant coal power plant near Seneca Lake in New York was converted to natural gas in 2017 and began devoting much of its power generation to mining Bitcoin in 2019. The …
Cryptocurrency
"Turn Red Hearts Green at Samsung 837X for Valentine’s Day. Here’s how!"
Samsung launches a "sustainability-themed quest" on their "Samsung 837X" Decentraland metaverse project, where they invite characters to hunt for "recyclable product boxes", plant …
Cryptocurrency
"Feds arrest married couple, seize $3.6 billion in hacked bitcoin funds"
Vector: Smart contract exploit / hack
The U.S. Department of Justice announced that they had arrested a New York couple and seized more than $3.6 billion in Bitcoin that they were allegedly trying to launder. The …
Cryptocurrency
"Ira Financial and Gemini"
Vector: Smart contract exploit / hack
IRA Financial, a platform for managing retirement investments, boasts of being "the first self-directed IRA company to allow their clients to invest in cryptocurrencies, such as …
Cryptocurrency
"Superfluid - REKT"
Vector: Software bug / unintentional loss
A vulnerability in the Superfluid crypto streaming protocol allowed an attacker to drain $8.7 million, affecting projects including Mai Finance, Stacker Ventures, Stake DAO, and …
Cryptocurrency
Tweet from earnhubBSC
Vector: Exit scam / rug pull
EarnHub, a DeFi platform with its own rap song, suddenly saw 660 wBNB (around $284,000) disappear from their project. EarnHub wrote on Twitter that "A hacker was able to exploit …
Cryptocurrency
"LooksRare team cashes out $30M in WETH, faces community backlash"
Vector: Exit scam / rug pull
The team behind LooksRare, an NFT platform known for its enormous proportion of wash trading, cashed out around 10,500 wETH worth around $30 million. They had earned the wETH by …
Cryptocurrency
"Balloonsville goes pop – NFT marketplace Magic Eden promises changes after another rugpull"
Vector: Exit scam / rug pull
On January 9, the team behind an NFT project called Doodled Dragons made off with $30,000 and wrote that the charity to which they'd promised to donate "will instead now be... my …
Cryptocurrency
NFT marketplace shuts, citing 'rampant' fakes, plagiarism problem
Cent, the NFT marketplace which sold Jack Dorsey's NFT of his first tweet for $2.9 million, stopped transactions on February 6. The founder explained that people selling NFTs of …
Cryptocurrency
Tweet by Zilverk
Vector: Smart contract exploit / hack
Mexican VTuber Zilverk created an NFT project called Ratz Club, built on the Solana blockchain. On February 6, the project announced that a developer they had contracted drained …
Cryptocurrency
"Ubisoft Celebrated Its Employees' Hard Work By Giving Them NFTs"
Players are not the only ones questioning Ubisoft's decisions to incorporate NFTs into their games (such as their newest Tom Clancy game), though Ubisoft has done little more than …
Cryptocurrency
Tweet by damedoteth
Brantly Millegan is the director of operations for the Ethereum Name Service, which is basically a blockchain version of DNS, and is also how some people get their wallet to show …
Cryptocurrency
"Blockfi Horrible Loan Experience (FORTUNE Lost)"
A prospective house-buyer wanted to pad their bank account to try to convince their bank to approve them for a mortgage. Their bank didn't consider Bitcoin holdings when evaluating …
Cryptocurrency
"I just lost over $35k to scammers. Beware out there."
Vector: Smart contract exploit / hack
A person using the TraderJoe DeFi platform to yield farm encountered issues when trying to "harvest" their rewards. They tweeted at the platform (@traderjoe_xyz) to get …
Cryptocurrency
"Nike cries foul over virtual shoes, suing retailer that sells sneaker NFTs"
Vector: Regulatory / legal action
Nike filed a lawsuit in New York federal court against StockX, an online reseller that decided to get in on NFTs in January. StockX started selling "NFTs tied to physical …
Cryptocurrency
"MiamiCoin, a currency without sovereignty"
Miami mayor Francis Suarez eagerly hyped "MiamiCoin" ($MIA), a cryptocurrency created by a private company and not actually controlled by Miami. Suarez appeared on CoinDesk TV to …
Cryptocurrency
Tweet by wormholecrypto
Vector: Smart contract exploit / hack
The Wormhole Network is a blockchain bridge between Solana and various other blockchains, allowing assets to be traded across the different and not otherwise interoperable chains. …
Cryptocurrency
Twitter thread about the project from _neptiris_
Artist bayneko created and airdropped NFTs of microscope pictures of SARS-COV-2 (the virus that causes COVID-19) to all 96,186 users of Hic et Nunc (HEN) who hold at least one NFT. …
Cryptocurrency
Tweet by Choke Chain
The industrial band Choke Chain tweeted, "Yo a bunch of industrial scene acts (including me) have NFTs for sale on the site hitpiece.com I did not put it online and I assume you …
Cryptocurrency
"Team17 Nixes 'Environmentally Friendly' Worms NFT Project After Backlash"
Team17, the studio behind the many Worms games, announced their plans for "MetaWorms": NFTs based on the characters from the games. The announcement on January 31 apparently …
Cryptocurrency
"This Famous Livestreamer Stole $500,000 From His Fans"
Paul Denino, also known as "Ice Poseidon", is a livestreamer, Internet personality, and cryptocurrency enthusiast. In July 2021 he launched Cxcoin, a forked project he said was …
Cryptocurrency
"NFT Collector 'ILovePonzi' Loses Valuable Ape NFTs to Hackers, Is Upset"
Vector: Ponzi / pyramid scheme
NFT collecter "iloveponzi", aka Larry Lawliet, apparently authorized what he thought was a legitimate application to access his NFT wallet. Unfortunately for him, he had actually …
Cryptocurrency
"Real Estate Cryptocurrency Takes People’s Money, Then Shuts Down and Vanishes"
On January 31, a cryptocurrency project called Realux launched after fanfare from viral tweets and influencer YouTube videos. The project promised to make "real estate open to …
Cryptocurrency
"The voice of Joel from The Last of Us steps away from NFT project after outcry"
Voice actor Troy Baker faced some backlash in mid-January when he announced that he would be partnering with "voice NFT" project Voiceverse. His antagonistic tweet, that "You can …
Cryptocurrency
WWF NFT website
The UK branch of the World Wildlife Fund (WWF) announced their upcoming "Tokens For Nature" NFT project, which is meant to support endangered species. The WWF was quick to tout …
Cryptocurrency
Twitter thread by Omar Farooq
As the NFT gold rush continues and people attempt to slap price tags on everything in sight, Omar Farooq detailed his plans to sell colors on the blockchain. He said he will then …
Cryptocurrency
Twitter feed of Qubit Finance
Vector: Smart contract exploit / hack
After a bug in their code allowed an attacker to make off with $80 million, Qubit immediately began trying to contact the exploiter and convince them to return the money. First …
Cryptocurrency
"Paris Hilton and Jimmy Fallon showing off their NFTs is the longest 77 seconds ever"
Vector: Smart contract exploit / hack
After Paris Hilton and Jimmy Fallon engaged in a frankly bizarre discussion of their beloved Bored Apes on The Tonight Show, a fake projects imitating the Bored Ape Yacht Club …
Cryptocurrency
"Justin Bieber "bought" an NFT for $1.3 million. But he didn't pay for it."
The media went a bit nuts when Justin Bieber reportedly bought a Bored Ape (for several times what it was "worth", for some reason). This served to generate hype for several NFT …
Cryptocurrency
"Did I just lose half a million dollars by sending WETH to WETH's contract address?"
A trader learned that, in order to exchange Ethereum tokens (ETH) for Wrapped Ethereum (WETH), they should send their ETH to the WETH token contract and receive the WETH in return. …
Cryptocurrency
Tweet thread by smlundberg
Khan Academy, an otherwise excellent non-profit offering online educational tools, announced they would be participating in an NFT charity auction on January 19. The auction …
Cryptocurrency
Tweet thread by NFT Ethics
Lazy Lion Ape Club, an NFT project in somewhat resembling the mega-popular Bored Apes, listed their NFTs on OpenSea on January 26. In addition to the NFTs, the project promised to …
Cryptocurrency
"LooksRare Has Reportedly Generated $8B in Ethereum NFT Wash Trading"
LooksRare, a new NFT marketplace that launched on January 10, has boasted enormous trading volume since day one. It's no secret that wash trading — that is, a user "selling" an NFT …
Cryptocurrency
Tweet by cr0ssETH
Vector: Software bug / unintentional loss
OpenSea began reimbursing users who lost money earlier this month through what some have described as a bug with the platform, but which others argue is just a misunderstanding on …
Cryptocurrency
"OpenSea pulls back its controversial NFT minting limit decision"
On January 27, OpenSea announced a limit of five collections and 50 items per collection, after discovering that "over 80% of the items created with [their free minting tool] tool …
Cryptocurrency
Tweet by Qubit Finance
Vector: Software bug / unintentional loss
An attacker exploited a bug in Qubit Finance, a decentralized lending platform. The bug allowed them to call the "deposit" function without actually depositing any funds. This …
Cryptocurrency
"New Zealand auction house becomes the first to auction NFTs"
New Zealand auction house Webb's is selling the original glass plate negatives of two photographs taken of artist Charles Goldie sometime between 1910 and 1920. The sale also …
Cryptocurrency
"Analyzing the Very Bizarre Sale of Melania Trump’s $170,000 NFT"
Melania Trump launched a new NFT in January, following her December unveiling of the series. The January NFT involved a white hat that Ms. Trump wore during a state visit, as well …
Cryptocurrency
"Mercenary Gold NFT Project Rugpull: Drains out More Than $760k"
Vector: Exit scam / rug pull
Mercenary was a short-lived play-to-earn game that promised "innovative tokenomics, to ensure the stability and longevity of the game's economy". The project had invested heavily …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Exit scam / rug pull
WeGro, a project to allow "everyone to safely participate in the hemp and cannabis industry through the supply chain", saw its token tank in price as the deployer drained 1,000 BNB …
Cryptocurrency
Tweet by NFT Ethics
Vector: Exit scam / rug pull
Blockverse, a project that promised to build a play-to-earn game on top of Minecraft, rug pulled two days after launch. The initial NFT collection sold out in only eight minutes, …
Cryptocurrency
"Unique Beatles and John Lennon Items From Julian Lennon’s Collection Up for NFT Auction"
Julian Lennon maintains a private collection of Beatles memorabilia, including clothing worn by his late father John Lennon, and other items from other members of the band. He …
Cryptocurrency
"Racist 'Meta Slave' NFT Project Rebrands After Being Called Racist"
A project called "Meta Slave" launched, offering NFTs made from photographs of Black people (all apparently algorithmically-generated). Backlash was swift and intense, and the …
Cryptocurrency
Tweet by Nayib Bukele
El Salvadoran president Nayib Bukele gives us Americans a painful reminder of having a president who truly cannot be trusted with the reins of a country, much less a Twitter …
Cryptocurrency
"Hacker abuses OpenSea to buy NFTs at older, cheaper prices"
Vector: Smart contract exploit / hack
A horrified (former) owner of a Bored Ape tweeted that his NFT had just unexpectedly sold for a measly 0.77 ETH (about $1,700) and that "I cant financially afford that loss". The …
Cryptocurrency
Tweet thread by NFTethics
The enormously popular Cryptopunks project, created by the LarvaLabs group, is actually on its second version. A bug in the original smart contract allowed users to retrieve their …
Cryptocurrency
"Exploit Radar: Solfire Finance Burns Victims with a Rug Pull"
The Solana-based asset management protocol Solfire attracted users with its promises of over 500% APY. Partnerships and mentions from other prominent Solana projects helped the …
Cryptocurrency
"French Surgeon Tries To Sell Bataclan Victim X-ray As Digital Artwork"
French surgeon Emmanuel Masmejean minted an NFT of an x-ray image of a bullet embedded in the fractured forearm of a person who was shot in the November 2015 Paris Bataclan …
Cryptocurrency
Tweet by GeorgeBTurner
Conservationist and wildlife photographer George Benjamin tweeted about his new project, "The NFT Conservation Fund". "Over the last decade I've seen first-hand the devastation …
Cryptocurrency
"Ozzy Osbourne's NFT project shared a scam link, and followers lost thousands of dollars"
Vector: Phishing attack
Ozzy Osbourne's NFT project, CryptoBatz, changed to a slightly different Discord URL ("cryptobatz" rather than "cryptobatznft") some time after the new year. However, they forgot …
Cryptocurrency
"Latest Solana Clog Causes Liquidation Bloodbath"
Solana was so overloaded with bot transactions that users couldn't transact. As the cryptocurrency market in general continued to tank, users rushed to top up the collateral they …
Cryptocurrency
"People Can’t See Some NFTs on Twitter, Crypto Wallets After OpenSea Goes Down"
Popular NFT marketplace OpenSea suffered an outage that had ripple effects throughout several major services using their APIs, including the browser extension crypto wallet …
Cryptocurrency
Tweet from PeckShieldAlert
Vector: Exit scam / rug pull
Kingfund Finance suddenly drained more than 300 WBNB (about $141,000) from their project. This happened a few days after users began to report being blocked by the project's …
Cryptocurrency
PeckShieldAlert tweet
Vector: Exit scam / rug pull
The BNB Heroes play-to-earn game apparently rug pulled after a period of inactivity from the development team. The developer drained almost $200,000 from the token pool, plummeting …
Cryptocurrency
Tweet from MastercardNews
Apparently the real issue with crypto grifts all along has been that it's just too dang hard to put your money into them. Mastercard has shown up to fix that, announcing a new …
Cryptocurrency
PeckShield tweet
Vector: Flash loan attack on smart contract
The value of the $BURG token associated with the CryptoBurgers game suddenly plummeted after being hacked shortly after launching earlier that day. The game allowed users to earn …
Cryptocurrency
Tweet by Pranksy
Vector: Exit scam / rug pull
Enthusiasts rushed to buy NFTs from a project called NotASecretNFT after seeing NFT mega-whale Pranksy buy in, even though the OpenSea description was simply, "1000 secrets, …
Cryptocurrency
Christie's auction listing for the storyboard
Somehow, SpiceDAO managed to raise €2.66 million (about $3 million) to buy the storyboard for Alejandro Jodorowsky's never-made Dune adaptation. In a celebratory tweet the group …
Cryptocurrency
"Troy Baker Is Working With NFTs, but Fans Are Unimpressed"
Troy Baker, the voice actor behind video game characters in The Last of Us, Far Cry, and various Batman games, announced he would be partnering with "voice NFT" company Voiceverse. …
Cryptocurrency
"Viral 'WTF' Crypto Coin Launch Immediately Devolves Into Chaos, Pain"
fees.wtf, a platform allowing people to see how much money a given cryptocurrency wallet has spent in gas fees, decided it was time to release their own token, and promised to …
Cryptocurrency
Tweet by codenamehugs
Global Game Jam, an annual event where people collaborate to make video games, proudly plugged The Sandbox as their "primary headline sponsor" on Twitter. The Sandbox is a platform …
Cryptocurrency
Tweet thread by SolRarity_
Vector: Exit scam / rug pull
The creators of "Big Daddy Ape Club" rug pulled shortly after mint, deleting their social media and website and making off with around $1.2 million. The project's creators were …
Cryptocurrency
Tweet thread by questauthority
I can safely describe most NFT marketplaces as bizarre, but the AP is really trying to top the bunch. The marketplace will provide a place for trading the NFTs they plan to create …
Cryptocurrency
"Crypto Investors Buy 40 Acres of Land in Wyoming to Build Blockchain City"
Vector: Social engineering attack
Crypto investors who bought 40 acres of land in Wyoming in hopes of "building a city on the Ethereum blockchain" lost more than $92,000 to a Discord hack. Some clever social …
Cryptocurrency
"Animoca Brands’ Lympo NFT platform hacked for $18.7 million"
Vector: Smart contract exploit / hack
Animoca Brands' subsidiary Lympo, an NFT platform specifically for sports, experienced a breach of several hot wallets. This allowed an attacker to pull 165.2 LMT tokens from the …
Cryptocurrency
Tweet by CoinersTakingLs
A SolSea-verified NFT project on the Solana blockchain, Doodled Dragons, touted that they would distribute all profits "straight to charities protecting animals on the brink of …
Cryptocurrency
"Frosties NFT investors rug pulled, loses over $1 million"
An hour after releasing their ice cream-themed NFTs, developers of the Frosties NFT project closed their social media accounts and disappeared with $1.1 million, plunging the token …
Cryptocurrency
Tweet thread by zachxbt
Vector: On-chain theft (attributed by zachxbt)
The Rich Dwarves Tribe was an NFT project announced in December 2021, which minted in January 2022. The project had been heavily promoted by musicians including NeYo, Jason Derulo, …
Cryptocurrency
"LCX loses $6.8M in a hot wallet compromise over Ethereum blockchain"
Vector: Smart contract exploit / hack
The Liechtenstein-based cryptocurrency exchange LCX suffered a $6.8 million loss when one of its hot wallets was compromised. Assets including ETH, USDC, EURe, and LCX were moved …
Cryptocurrency
"The world's first 'NFT restaurant' is a members only club that has raised $14 million"
Gary Vaynerchuk announced plans for his New York City "NFT restaurant", Flyfish Club. The cheapest NFT, giving access to only parts of the restaurant, was listed at 2.5 ETH (at the …
Cryptocurrency
<i>SEC v. Crowd Machine, Inc.</i>
Vector: Regulatory / legal action
The SEC alleged that Craig Sproule, founder of companies CrowdMachine and Metavine, ran a fraudulent and unregistered ICO when he launched "Crowd Machine Compute Tokens" (CMCTs). …
Cryptocurrency
"Kazakhstan internet shutdown sheds light on a big Bitcoin mining mystery"
Fuel shortages and spiking electricity costs in Kazakhstan have contributed to protests and a governmental crisis in the country. The electricity issue is partially thanks to …
Cryptocurrency
Tweet thread by 9x9x9
Pudgy Penguins, a popular NFT project that somehow warranted a full-length New York Times article by Kevin Roose, apparently is trying something pretty shady. This was revealed by …
Cryptocurrency
"The Counterfeit NFT Problem is Only Getting Worse"
Artist Aja Trier was shocked to discover that her artwork depicting dogs painted in the style of Van Gogh's Starry Night has been stolen and turned into an NFT collection with …
Cryptocurrency
"90 Day Fiance star who made £38,000 a week selling farts in a jar hospitalised: 'I thought it was a stroke'"
Stephanie Matto, who starred on season 6 of the reality show 90 Day Fiancé, has turned to some weird moneymaking schemes following her TV career. For a time, she claims she was …
Cryptocurrency
Tweet thread by ElectionDayMad1
Vector: Exit scam / rug pull
NFT collector and influencer Franklin posted a tweet thread about how he had hyped a project that later rugpulled. He was paid about 18 ETH (about $63,000) to promote the …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Exit scam / rug pull
Yield farming platform ArbixFinance was drained of at least $10 million, with some reporting amounts up to $32 million. Some optimistic users hoped it was a glitch, but the fact …
Cryptocurrency
"Ethereum Betting Site Polymarket Hit With $1.4M Fine: CFTC"
Although Polymarket was nominally "decentralized", it wasn't so decentralized that the CFTC couldn't fine its New York-based parent company for operating an unregistered market and …
Cryptocurrency
"Explainer: How/Why SFF has brought the Polygon Network to its' knees, and how to use Polygon during an essential DDoS "
Sunflower Farm, a play-to-earn farming game on the Polygon network, contributed to massive slowdowns and a spike in gas fees on the Polygon blockchain. Heavy bot usage and a game …
Cryptocurrency
"CryptoBike showing signs of scam"
A Vietnamese play-to-earn game called CryptoBike became popular shortly after its December 25 launch, soaring to around $41.6 million in daily trading volume. However, on January …
Cryptocurrency
"Bitcoin Historic Sustainability Performance"
Digiconomist released numbers for 2021, showing that during 2021, Bitcoin consumed 134 TWh in total — comparable to the energy consumption of Argentina. The report also claims that …
Cryptocurrency
"Airdrop culture could pose integral threat to DeFi industry"
A token called $YEAR invited people to connect their crypto wallets and see a "year in review"-style summary of their 2021 crypto and NFT transactions, with an airdropped token …
Cryptocurrency
"Bored Ape NFT Collector Loses $2.2M in Phishing Scam"
Vector: Phishing attack
Todd Kramer, an NFT collector who had acquired Bored Ape and other pricey NFTs, clicked on a phishing contract that appeared to be a legitimate NFT trader link. Sixteen NFTs from …
Cryptocurrency
Tweet by NFTtheft
Vector: Smart contract exploit / hack
A clone of Solana's popular "Baby Ape Social Club" project popped up on OpenSea, using the Polygon blockchain. The project enjoyed 14.3 ETH in trading volume (about $52,000) before …
Cryptocurrency
"Fake MetaMask Governance Token Soars 2600% and Gets Rug-Pulled"
Vector: Smart contract exploit / hack
Scammers took advantage of rumors that MetaMask, a popular Ethereum wallet, would be airdropping governance tokens. The scammers created a fake MetaMask token, $MASK, and managed …
Cryptocurrency
Tweet from WakaFlocka
Vector: Smart contract exploit / hack
Waka Flocka Flame posted to Twitter: "@opensea One of me wallets was hacked wtf man". In a video, he showed NFTs in his OpenSea wallet, saying "This is fake, this is fake, this is …
Cryptocurrency
"MetaDAO Makes Off With $3.2M in Rug Pull"
Vector: Smart contract exploit / hack
A project that promised to be "the DAO of DAOs" managed to accumulate and then make off with 800 ETH, which was worth around $3.2 million at the time of the scam. The project …
Cryptocurrency
"Metaswap Gas incommunicado as experts link MGAS price drop to rug pull"
1,100 BNB, or around $600,000, were transferred out of the MetaSwap token MGAS, dropping the price of the token nearly 50%. The funds went to a Tornado Cash account, a popular …
Cryptocurrency
Tweet by jilliancyork
The "Cipher Punks" NFT project tried to sell NFTs with illustrations of various cypherpunks, or at least the ones that were listed on Wikipedia. The project said that it intended …
Cryptocurrency
"OpenSea freezes $2.2M of stolen Bored Apes"
Vector: Smart contract exploit / hack
bergpay.eth checked his MetaMask wallet on the day after Christmas only to discover that all his NFTs had been stolen, including five from the popular "Jungle Freaks" collection …
Cryptocurrency
"DAO aims to raise $5M to resurrect Blockbuster Video"
A group called "BlockbusterDAO" emerged, with the stated goal of "liberat[ing] Blockbuster and form[ing] a DAO to collectively govern the brand as we turn Blockbuster into the …
Cryptocurrency
Terra's Mirror protocol warns community against governance attack
Vector: Smart contract exploit / hack
A scammer created a public poll on Mirror's official website, proposing to "Freeze the community pool in case of scam". However, if the poll passed, it would send 25 MIR to the …
Cryptocurrency
Tweet by Fr0zenBuffal0
Vector: Smart contract exploit / hack
An NFT collector lost his Bored Ape NFT to a scammer impersonating the well-known NFT collector Jeffrey Huang, aka "Machi Big Brother". The real Huang did eventually buy the NFT …
Cryptocurrency
Tweet thread by Kris Nóva
Some prominent open source advocates and contributors were surprised to find that their likenesses were turned into NFTs by an artist who photographed them in 2018. Kris Nóva …
Cryptocurrency
"Bob Ross Died Fighting Profit-Driven Vultures Only For Them To Turn Him Into A Funko Pop NFT"
Because apparently the vinyl figurines known as Funko Pops aren't a sufficiently useless collectible, Funko decided to get in on the NFT craze by releasing a Bob Ross "Digital …
Cryptocurrency
"A hacker scammed Fractal's Discord and stole $150,000"
Vector: Smart contract exploit / hack
Another Discord scam netted its perpetrators around 800 SOL, or about $150,000, from 373 individuals. The scammer posted a fake minting link in the official Discord of Fractal, the …
Cryptocurrency
Tweet by commenstar
Vector: Phishing attack
An NFT trader hoping to get in on the "Monkey Kingdom" NFT collection was duped by a scam link in the project's official Discord channel, and sent 650 SOL (about $116,000) to a …
Cryptocurrency
"$8.2M Lost as Visor Finance Suffers Latest DeFi Hack"
Vector: Reentrancy attack on smart contract
A reentrancy exploit in the Ethereum-based Visor Finance DeFi protocol allowed hackers to pull 8.8 million VISR tokens out of the network, equivalent to about $8.2 million. The …
Cryptocurrency
Tweet thread by _elcomisionado_
A Twitter thread showed dozens of people reporting amounts from hundreds to tens of thousands of dollars disappearing from their Chivo Wallets, the Bitcoin wallet backed by El …
Cryptocurrency
"Grim Finance Hacked for $30 Million in Fantom Tokens"
Vector: Reentrancy attack on smart contract
Grim Finance, the "compounding yield optimizer" DeFi platform, was hacked. According to them, attackers exploited a bug in the platform to perform a reentrancy attack that netted …
Cryptocurrency
"Investor Purchases 330 Adidas NFTs Using Smart Contract - 328 More Than the Cap"
Anticipating that buyers would try to hoard items from a big-name NFT drop, Adidas decided to try to limit their NFT drop to two per buyer. They apparently didn't realize that …
Cryptocurrency
Tweet from NFTtheft
Artists going through the greuling process of reporting individual NFTs created without permission from their work reported tickets being automatically rejected. Artists were also …
Cryptocurrency
Tweet by Molly White
The apparent owner of Bored Ape #5262, of which this site header is a derivative work, contacted me on Twitter to say "I believe you are using my ape on your website without my …
Cryptocurrency
"Melania Trump Pitches NFT Plans; ‘Cobalt Blue Eyes’ Captivate Crypto Twitter"
Lest it be mistaken for a grift, the press release was quick to say that Mrs. Trump had promised to donate a portion of the proceeds to children leaving foster care. The NFT …
Cryptocurrency
"Read the S.T.A.L.K.E.R. 2 developer’s deleted explanation for why you’re getting NFTs"
Pushback from fans led S.T.A.L.K.E.R. 2 creators to quickly reverse their decision to add NFTs to the game. The studio announced their NFT plans on December 15, which involved …
Cryptocurrency
"Twitter user releases video showcasing mining factory with NVIDIA GeForce RTX 3070 Founder’s Edition GPUs sold on the 'back end'"
Crypto miner Jaxson Davidson posted a video showing one of four buildings in his crypto mining farm, showing racks of thousands of GPUs — GPUs that gamers and other consumer buyers …
Cryptocurrency
Tweet from NFT_Shady
A misplaced decimal point caused an NFT trader to sell their "beloved" Doodle NFT for 0.37 ETH (about $1,500) instead of their intended 3.7 ETH (about $15,000). The trader tried …
Cryptocurrency
"$45,000 AWS Crypto-Mining Hack Generates $800 of Monero"
Vector: Smart contract exploit / hack
A hacker gained access to someone's Amazon Web Services account and used it to spin up servers to run Monero miners, ultimately netting 6 Monero (XMR) worth a total of about $800 …
Cryptocurrency
Tweet thread by zachxbt
Laurent Correia, a French influencer and the creator of "Billionaire Tips" sports betting app, launched an NFT project called "Billionaire Dogs" in December. Promising perks …
Cryptocurrency
"Stan Lee Fans Are Outraged Over His Twitter Account Being Used to Sell NFTs"
Stan Lee fans were outraged when the Twitter account belonging to Lee, who died in 2018, posted a message to promote an upcoming NFT based on one of his characters. Fans fairly …
Cryptocurrency
"Bored Ape NFT accidentally sells for $3,000 instead of $300,000"
An NFT trader made a typing error when entering a listing price, accidentally listing his Bored Ape NFT for 0.75 ETH (about $3,000) instead of 75 ETH (about $300,000). The NFT was …
Cryptocurrency
"The latest horrible NFT project co-opts George Floyd’s image"
Someone released a collection of poorly-made pixel art NFTs depicting the late George Floyd, whose murder by a police officer in May 2020 set off protests around the world. There …
Cryptocurrency
Tweet thread by Loish
Digital artist Loish discovered more than one hundred instances where people had created NFTs from her art without her permission, and had to spend hours reporting each individual …
Cryptocurrency
"Kraken to release NFTs, drawing questions about true commitment to environment"
The Seattle Kraken announced that they would be releasing a set of NFTs. Although several sports groups have released NFTs, people were particularly surprised to see it coming from …
Cryptocurrency
"McDonald’s McRib NFT Project Links to Racial Slur Recorded on Blockchain"
McDonalds tried to make a splash with a McRib-themed NFT project, but that was quickly outshined by the discovery that an early transaction to the Ethereum address associated with …
Cryptocurrency
"Peter Molyneux’s NFT Game Will Make Being Nice Cost Real Money"
Peter Molyneux announced a new game, Legacy, a business management simulator (fun!) where you join by buying an NFT called "Land", and compete to increase your "LegacyCoin" bank …
Cryptocurrency
"Amazon's Server Outage Took Down a 'Decentralized' Crypto Exchange"
During a widespread AWS outage, supposedly-decentralized DeFi platform dYdX went down. dYdX is an Ethereum exchange that touts itself as the "world's leading decentralized …
Cryptocurrency
"Kickstarter plans to move its crowdfunding platform to the blockchain"
Kickstarter announced they have decided to create a decentralized version of their platform, and to create it on the Celo blockchain. This was not entirely well-received, and some …
Cryptocurrency
"Ubisoft's NFT Announcement Has Been Intensely Disliked"
Ubisoft announced that it would be adding NFTs to its Tom Clancy's Ghost Recon Breakpoint title, allowing players to buy "Digits": artificially scarce in-game weapons, vehicles, …
Cryptocurrency
"WildWorks, maker of Animal Jam and Feral, angers fans with embrace of crypto gaming"
WildWorks, a game company with a reputation for eco-friendliness, angered many of its fans when it announced it would be reusing the technology and assets from its …
Cryptocurrency
"'Critical' Polygon bug put $24 billion in tokens at risk until recent hard fork"
Vector: Software bug / unintentional loss
Polygon lost a bit over $2 million after a hacker exploited a bug involving a lack of balance/allowance check in their MRC20 contract. Polygon had been in the process of releasing …
Cryptocurrency
"Jimmy Wales Is Auctioning the 'Birth of Wikipedia' as an NFT"
Wales announced he would be auctioning an NFT of a website representing the first edit to Wikipedia. This was not taken well by some in the Wikimedia communities — some felt he was …
Cryptocurrency
Tweet by @BadWritingTakes
A platform called "CODEX" announced that they intend to "upgrade the digital book market industry to Web3". This, apparently, involves artificially limiting the number of copies of …
Cryptocurrency
"This Bored Ape Yacht Club Member's Wallet Was Hacked"
Vector: Smart contract exploit / hack
Although friesframe had transferred some of his valuable NFTs to cold storage (a crypto wallet not connected to the Internet), he had been waiting for gas fees to come down before …
Cryptocurrency
"Really stupid “smart contract” bug let hackers steal $31 million in digital coin"
Vector: Software bug / unintentional loss
A hacker stole $31 million from the liquidity pool provider MonoX by exploiting a bug in their smart contract software that allowed them to exchange a token for itself and …
Cryptocurrency
"Avalanche’s first memecoin SDOG ends in a $30M possible rugpull"
Vector: Exit scam / rug pull
SnowdogDAO creators say they didn't rugpull, but that the coin plummeting over 90% was a "game-theory experiment" that went wrong. The project was intended to only last for eight …
Cryptocurrency
"How a VR startup took the money and ran to the metaverse"
Dedric Reid has repeatedly stolen art and promotional material, passing off other projects' work as his own, to promote his "MetaWorld" project — a concept he's been promising (and …
Cryptocurrency
"SEC Charges Promoter with Conducting Cryptocurrency Investment Scams"
Vector: Regulatory / legal action
The SEC filed charges against Ryan Ginster related to two online platforms that he ran, MyMicroProfits.com and Social Profitmatic. He promised investors what the SEC described as …
Cryptocurrency
"Art by Anish Kapoor and David Bailey for sale as NFTs without their consent"
An art curator created NFTs from photographs of Stormtrooper helmet artwork, but failed to actually ask permission from the artists. The NFTs sold for a collective $7.5 million …
Cryptocurrency
"Wolf Game Highlights the Challenges of NFT Game Development"
Vector: Software bug / unintentional loss
Because Wolf Game put their entire source code into the blockchain, they were unable to patch an exploit once it was discovered. They had to completely recreate the game, reissuing …
Cryptocurrency
"Crypto collective raises $40 million to buy rare copy of U.S. Constitution"
ConstitutionDAO emerged out of a Twitter joke, but ultimately raised more than $40 million to bid on an auction for a rare first printing of the U.S. Constitution. After being …
Cryptocurrency
"NFT Collector Sells People's Fursonas for $100K In Right-Click Mindset War"
In an apparent "fuck you" to members of the furry community who have been critical of NFTs, and to those who have pointed out that you can right-click and save files that people …
Cryptocurrency
Cryptoland pitch video
Signs unfortunately point to this being an actual, real project rather than satire, but the video purporting to advertise it dunks on cryptobros harder than most satirists have …
Cryptocurrency
Tweet from Becerra announcing the theft
Vector: Social engineering attack
NFT collector Calvin Becerra fell for some social engineering on Discord: "Guys posing as buyers in Discord were helping me troubleshoot a problem we thought was happening... They …
Cryptocurrency
"Beware of sophisticated scams and rug pulls, as thugs target crypto users"
Miss Universe and its models, the @nft Instagram, and Steve Harvey all got in on the advertisements for the Miss Universe NFT project, which Miss Universe presenter Paula Shugart …
Cryptocurrency
"Check Point Software Prevents Theft of Crypto Wallets on OpenSea, the World’s Largest NFT Marketplace"
Vector: Software bug / unintentional loss
Bug bounty hunters helped OpenSea patch a cross-site scripting (XSS) vulnerability in their platform that previously allowed attackers to create an NFT from an SVG image, which …
Cryptocurrency
"'A Huge Scam': Fans Who Bought Tekashi 6ix9ine-Backed NFTs Are Pissed"
$100,000 to charity, governance power over the project funds, a boxing game, and weekly competitions and raffles were all promised as a part of the Tekashi 6ix9ine-backed Trollz …
Cryptocurrency
"Tech Startup Wants To Gamify Suing People Using Crypto Tokens"
Tech startup "Ryval", which is formally launching in 2022, announced its plans to allow "everyday Americans" to bet on the outcomes of civil lawsuits, potentially raising funds for …
Cryptocurrency
"Inside the Realms of Ruin"
Six popular young-adult fiction writers attempted to launch an NFT project where they created a base universe, and participants would contribute their own stories (which they would …
Cryptocurrency
"Young NFT hacker returns 86ETH he stole from CreatureToadz"
Vector: Phishing attack
A 17-year-old hacker was able to use a phishing webhook to make himself an admin in the CreatureToadz Discord server. Users who minted NFTs unknowingly sent cash to him, netting …
Cryptocurrency
"After 'Stealing' $16M, This Teen Hacker Seems Intent on Testing 'Code Is Law' in the Courts"
Vector: Flash loan attack on smart contract
A hacker drained $16 million from Indexed Finance, a defi protocol built on the Ethereum blockchain. The stolen funds represented nearly half of the total value locked on the …
Cryptocurrency
"4 NFT Projects Took Investors' Money and Disappeared in One Day"
Developers behind Solana Towers, an NFT project allowing investors to buy rooms in a metaverse virtual condo as NFTs, disappeared with around $280,000 a day after the project's …
Cryptocurrency
"Investors Spent Millions on 'Evolved Apes' NFTs. Then They Got Scammed."
A week after the launch of the "Evolved Apes" NFT project, which consisted of 10,000 NFTs and a promised fighting game, the anonymous developer behind the project disappeared after …
Cryptocurrency
"Relying On Data Analytics Can Help You Avoid Rug Pulls And Scams"
Vector: Exit scam / rug pull
A blatant clone of the extremely popular Bored Ape Yacht Club project, called "Baller Ape Club" and on the Solana blockchain, went live after much anticipation. Shortly afterwards, …
Cryptocurrency
"Supposed 17-year-old artist sells $138,000 worth of fake NFTs and disappears"
NFT collectors eagerly bought thousands of presales of an NFT project called "Iconics" after viewing sample artwork from a supposedly 17-year-old 3D artist. When they viewed their …
Cryptocurrency
"Avalanche DeFi Platform Vee Finance Suffers $35M Hack"
Vector: Smart contract exploit / hack
The Vee Finance decentralized finance platform was hacked for $35 million worth of Ethereum and Bitcoin. The platform suspended trading after the hack was discovered, and also …
Cryptocurrency
"Cross-Chain Protocol PNetwork Loses $12M in Hack"
Vector: Software bug / unintentional loss
A hacker stole $12 million from the DeFi platform pNetwork after exploiting a bug in the codebase. The network offered a $1.5 million bounty to the attacker to return the funds. …
Cryptocurrency
[SC]
"Inside the Hunt for the Jay Pegs Auto Mart Thief and 865 ETH"
Vector: Software supply chain attack
SushiSwap's token platform, Miso, was hit with a supply chain attack that landed the attacker more than $3 million worth of Ethereum. Malicious code was injected into the …
Cryptocurrency
"OpenSea product chief accused of flipping NFTs using insider information"
A Twitter sleuth discovers that OpenSea's Head of Product, Nate Chastain, had apparently been engaging in a form of insider trading by buying NFTs that he knew would later be …
Cryptocurrency
"No, Walmart will not be accepting Litecoin. Here's how people were duped."
A press release distributed via GlobeNewswire claimed Walmart was announcing a partnership with Litecoin to begin accepting the cryptocurrency as a payment method. The value of …
Cryptocurrency
"SEC Charges Issuers and CEO for $18 Million Illegal Securities Offering"
Vector: Regulatory / legal action
The SEC charged Rivetz Corp. and related entities with running an illegal ICO when they launched their "RvT tokens". They raised $18 million through the ICO, which they never …
Cryptocurrency
"El Salvador Just Became The First Country To Accept Bitcoin As Legal Tender"
Nayib Bukele unexpectedly announced that El Salvador would be adopting Bitcoin as legal tender, and the policy went into effect on September 7, 2021. With the benefit of hindsight, …
Cryptocurrency
Tweet by PeckShieldAlert
Vector: Smart contract exploit / hack
The DAO Maker project (not to be confused with the well-known MakerDAO) is a launchpad that claims to be "building the future of venture capital". Its website boasts that users who …
Cryptocurrency
"Crypto platform hit by $600 million heist asks hacker to become its chief security advisor"
Vector: Smart contract exploit / hack
Hackers stole approximately $611 million from the decentralized finance platform Poly Network in the largest cryptocurrency theft against a single platform to date. In a bizarre …
Cryptocurrency
This $1.5 million 'women-led' NFT project was actually run by Russian dudes"
The "Fame Lady Squad" NFT project touted itself as a woman-designed and -developed project that would give back to women in the space, drawing support from high-profile individuals …
Cryptocurrency
"DeviantArt Protect: Helping Safeguard Your Art"
DeviantArt releases software to automatically scan the NFT platform OpenSea for NFTs that use stolen artwork from DeviantArt. While it's awesome that DeviantArt created this tool …
Cryptocurrency
"The Biggest Threat to Trust in Cryptocurrency: Rug Pulls Put 2021 Scam Revenue Close to All-time Highs"
Vector: Ponzi / pyramid scheme
Finiko, a Russian operation that turned out to be a Ponzi scheme, collapsed in July 2021 after defrauding approximately $95 million from people. Investors, facing difficult …
Cryptocurrency
"StableMagnet and Others Rugpull $22M in Stablecoin Through Unverified Swap Code"
Vector: Exit scam / rug pull
StableMagnet creators rugpulled about $27 million from users by swapping out linked library code. Users who had StableMagnet linked to their cryptocurrency wallets saw their …
Cryptocurrency
"Belt Finance loses millions in latest BSC-based DeFi exploit"
Vector: Flash loan attack on smart contract
Belt Finance fell victim to a flash loan attack which netted an attacker $6.3 million. This was yet another exploit targeting a protocol built on the Binance Smart Chain protocol, …
Cryptocurrency
"Missing line of code leads to $7.2 million exploit of DEX BurgerSwap"
Vector: Flash loan attack on smart contract
A missing line of code made it "trivally" easy for an attacker to use a flash loan attack to pull $7.2 million from the DeFi platform BurgerSwap. BurgerSwap said it would "strive …
Cryptocurrency
" SEC Charges U.S. Promoters of $2 Billion Global Crypto Lending Securities Offering"
Vector: Regulatory / legal action
The SEC filed an action against five individuals that they alleged promoted unregistered securities in a $2 billion investment scheme, which they described as a "lending program". …
Cryptocurrency
"Binance Smart Chain-based DeFi platform suffers $3M flash loan attack"
Vector: Smart contract exploit / hack
Attackers exploited a flaw in the smart contract of Bogged Finance's BOG token to drain half the liquidity pool, equivalent about $3 million. This resulted in the BOG token tanking …
Cryptocurrency
"People Behind Crypto Protocol DeFi100 May Have Absconded With $32M in Investor Funds"
DeFi100, a Binance-based DeFi protocol, suddenly replaced its website with a statement: "We scammed you guys and you can't do shit about it". One crypto analyst estimated a scam …
Cryptocurrency
"Binance Smart Chain's PancakeBunny protocol exploited, $45 million drained"
Vector: Flash loan attack on smart contract
A hacker used flash loans to manipulate the price of other token pools, to then exploit a bug in PancakeBunny logic that calculates how many tokens should be minted. They were able …
Cryptocurrency
"DeFi tool FinNexus (FNX) plunges by 90% after hack—some allege an inside job"
Vector: Exit scam / rug pull
A decentralized finance project called FinNexus was reportedly hacked for $7.6 million, in what was widely speculated to actually be a rug pull by the project's developers.The …
Cryptocurrency
"DeFi platform ‘bEarn Fi’ promises 105% compensation after $10 million hack, but is it the right thing?"
Vector: Smart contract exploit / hack
An attacker pulled $10.85 million in funds out of one of bEarn Fi's vaults by exploiting a bug that allowed them to withdraw more funds than they deposited. bEarn promised to …
Cryptocurrency
"Rari Capital Reports Exploit in ETH Pool; $15M Taken"
Vector: Smart contract exploit / hack
An attacker exploited a Rari Capital ETH pool, stealing ETH worth around $15 million. The theft caused the price of Rari's governance token to plummet by around 50%. Total loss …
Cryptocurrency
"Spartan Protocol exploit results in loss of $30M"
Vector: Software bug / unintentional loss
A flawed calculation pertaining to the liquidity pool of Spartan Protocol allowed an attacker to drain $30 million from the project. Total loss estimated at $30,000,000.
Cryptocurrency
NFTs trip up Uniregistry's top level domain auctions
Frank Schilling, founder of the Uni Naming & Registry (UNR) held an auction for 23 TLDs (the bit at the end of the domain, like .com or .org). These included .link, .help, .game, …
Cryptocurrency
"Binance Chain DeFi Exchange Uranium Finance Loses $50M in Exploit"
Vector: Smart contract exploit / hack
A bug in Uranium Finance, a DeFi exchange based on Binance Smart Chain, allowed an attacker to drain the liquidity pools for multiple token pairs. Uranium had just commissioned an …
Cryptocurrency
"Into the ether: How a German museum accidentally lost access to two highly valuable NFTs"
An employee of the ZKM Centre for Art and Media in Karlsruhe accidentally sent two of their four Cryptopunk NFTs back to its smart contract address. This is referred to as …
Cryptocurrency
"Thodex CEO Denies Rug-Pull, Discloses Cyberattacks, Says 'Funds Are Safe'"
Vector: Withdrawal halt / insolvency
Turkish Bitcoin exchange Thodex halted trading and limited customers' access to their investments, claiming it was to investigate suspicious activity and swearing it was not an …
Cryptocurrency
"Africrypt brothers deny involvement in Bitcoin 'heist' "
Vector: Regulatory / legal action
The two founders of a South Africa-based crypto investment firm called Africrypt claimed they had been hacked, and all assets had been stolen. The duo disappeared as legal action …
Cryptocurrency
"Binance Smart Chain's TurtleDex rug-pulls shortly after launch"
24 hours after pre-sale, the team behind Turtledex drained $2.5 million from the liquidity pool and disappeared. Turtledex's smart contract had been audited shortly before the …
Cryptocurrency
"Social Money Platform Roll Hacked For $5.7M as Social Tokens Dump"
Vector: Private key compromise
Private keys for hot wallets on the Roll network were compromised, allowing the theft of around $5.7 million from various "social tokens". "Friends With Benefits", an a16z-backed …
Cryptocurrency
"Metakovan, the mystery Beeple art buyer, and his NFT/DeFi scheme"
Vignesh Sundaresan's $69 million purchase of an NFT by artist Beeple made headlines. However, Amy Castor outlined a few days later that Sundaresan is a business partner of …
Cryptocurrency
"Game Artists Not Happy That Developer Is Selling Their Nearly Decade-Old Work As NFTs"
Jason Rohrer, developer of the 2014 indie game The Castle Doctrine announced his plan to auction 155 of the digital paintings that he had commissioned for the game as NFTs on the …
Cryptocurrency
"OpenSea collector 'pulls the rug' on NFTs to highlight arbitrary value"
Vector: Exit scam / rug pull
NFT artist "neitherconfirm" created a collection of 26 NFTs of stained glass-style computer-generated art. After release, they changed the art for each NFT to a picture of a rug, …
Cryptocurrency
"Crypto project PAID exploited, attacker gains over 2,000 ETH after minting nearly $160M in tokens"
Vector: Software bug / unintentional loss
A contract exploit allowed a hacker to mint almost 60 million PAID tokens (priced at around $160 million based on the value before the attack) on the PAID Network. The hacker then …
Cryptocurrency
"Binance Smart Chain 'copykat' project loses $31 million in possible rugpull"
The team behind the Meerkat DeFi protocol claimed they had been victims of a hack, but subsequently disappeared from the web after the equivalent of $31 million in Binance Coin …
Cryptocurrency
"What Are Liquidity Siphon Rugpulls on BNB Chain?"
Vector: Smart contract exploit / hack
PopcornSwap launched on BNB Chain and then immediately drained its liquidity pool, making off with tokens priced at around $2 million.Binance stated that they had been able to …
Cryptocurrency
"Saddle Finance"
Vector: Smart contract exploit / hack
The Saddle Finance defi project, a fork of the Curve Finance project, launched on January 20. It promised it would "eliminate slippage".The project was exploited only hours later, …