Namada's $600K Exploit Exposes a Deeper Crisis in the Cosmos Ecosystem
Namada's $600K exploit drained its privacy pool to $598 TVL in one day, part of a troubling wave of Cosmos ecosystem hacks totaling millions.
Confirmed hacks, exploits, incident response, fund recovery, and postmortems.
32 articles
Namada's $600K exploit drained its privacy pool to $598 TVL in one day, part of a troubling wave of Cosmos ecosystem hacks totaling millions.
Crypto crashes trigger panic trades in the first 30 minutes; a five-step plan covering verification, security, and documentation can prevent costly.
Microsoft's new clipboard malware swaps your crypto wallet address mid-paste, stealing funds before you notice; verify every full address before sending.
A three-year-old smart contract bug let attackers mint $4.67M in fake tokens and drain real reserves through the Axelar bridge exploit on June 10.
Bridge exploits and smart contract bugs, not reserve shortfalls, are stablecoins' biggest security threat, with attacks stealing nearly $2.9 billion in.
Aztec Network was hacked twice in one week, losing over $2 million and exposing why DeFi security audits cannot guarantee safety.
A Zcash cryptographic bug hid undetected for four years and could have enabled unlimited counterfeit ZEC creation with no visible trace.
A deprecated DeFi contract drained three years after shutdown shows that immutable smart contracts never truly die, even when no one is watching.
Hackers stole $328.6 million from cross-chain bridges in just five months of 2026, even as new ISO standards aim to secure blockchain interoperability.
Cybercriminals are targeting OnlyFans creators' X accounts with phishing attacks, demanding thousands in cryptocurrency while using stolen profiles to.
Hackers exploited $36.7M from hidden smart contracts in six months as AI tools make code obscurity obsolete for DeFi security.
An attacker drained $1.34 million from Raydium by exploiting deprecated code that was never removed, exposing DeFi's forgotten contract problem.
Four major crypto security firms disagree by $1.26 billion on 2025 hack losses, exposing a fundamental counting crisis in Web3 governance.
Address poisoning attacks are surging as crypto scammers create look-alike wallet addresses to trick users who only check the first and last characters.
Syscoin recovers 5 billion exploited tokens from bridge hack, marking a rare DeFi recovery that shifts focus from containment to verification.
Hackers stole $700K by hijacking McDonald's Instagram to promote a fake Grimace crypto token, exploiting brand trust for a devastating rug pull.
Anthropic's Claude Fable 5 brings AI vulnerability-finding power to the public with safeguards, prompting crypto teams to strengthen defenses rapidly.
AI vulnerability-finding rumors sparked mass crypto wallet cleanups as DeFi users revoked 23,000+ outdated approvals, fearing faster exploit discovery.
Yuga Labs rescued $570K worth of NFTs from Floor Protocol exploit, highlighting security vulnerabilities plaguing Ethereum's struggling market.
Humanity Protocol's H token plunged 88% after hackers exploited compromised private keys to drain over $30 million from user wallets.
TAC Protocol's $2.8M bridge exploit became a recovery template after hackers returned 90% of stolen funds through white-hat negotiations.
Attackers drained $815,000 from Alephium Bridge in 64 seconds using fake validator signatures, though 96.4% of fraudulent tokens were later recovered.
Gnosis blockchain faces an active exploit prompting urgent fund withdrawals, highlighting security risks that could impact broader crypto markets.
TesseraDAO's 99% crash exposes how attackers minted 99 million unauthorized tokens and drained $2.4 million, revealing critical token security flaws.
North Korean hackers laundered 99.2% of $220M stolen from Kelp DAO through privacy mixers, leaving only $1.7M traceable in a sophisticated DeFi exploit.
AI-powered scams and smart contract exploits drained $1.3 billion from crypto users in five months, with deepfakes and romance schemes leading attacks.
Crypto hacking losses plummeted 90% to $68.3 million in May, but security experts warn the drop reflects fewer large attacks, not better defenses.
Fluid Protocol's compromised key allowed attackers to drain $125K in tokens, exposing how off-chain infrastructure creates new DeFi attack surfaces.
Gravity Bridge lost $5.4M after attackers compromised a critical contract key, draining USDC and WETH from the cross-chain bridge's pools.
North Korea's Lazarus Group stole $577 million in crypto through six months of social engineering, marking a shift from code exploits to spy operations.
OpenZeppelin co-founder warns all DeFi is unsafe as AI tools now discover vulnerabilities faster than defenders can patch them.
DeFi hackers now negotiate publicly and return stolen funds instead of vanishing, driven by blockchain transparency and ego-driven reputation management.