Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident

Topics · 45 articles

Security incidents

Exploits, bridge drains, key theft and post-mortems. Every entry is tied to a source, and unverified events are never presented as confirmed.

Aave founder says V3 unaffected after third-party adapter exploit drains $305K

Aave founder Stani Kulechov said Aave v3 was unaffected after an attacker exploited a third-party adapter to drain about $305,000 from two Safe multisig wallets.

Oct 2, 2026 · DeFi Tools Guide Editorial Team

Aave v3 exploit drains up to $310K after Safe module attack

The exploit highlights the critical need for rigorous security audits of third-party modules in DeFi, as vulnerabilities can lead to significant financial losses.

Oct 2, 2026 · DeFi Tools Guide Editorial Team

NEAR Intents says its identified the hacker, gives 48-hour ultimatum

“We have identified you, sir,” NEAR Intents general manager Alex Shevchenko said on Friday after the protocol was hacked for $3.8 million.

Oct 2, 2026 · DeFi Tools Guide Editorial Team

Morning Minute: NEAR Intents Hacked for $3.8M - Was It A Bullish Hack?

Hacks are never good, but a rapid response, user compensation and 1-hour bug fixing seems to top the spectrum of team reactions.

Oct 2, 2026 · DeFi Tools Guide Editorial Team

Crypto hacks top $768M in September, worst month of 2026

The $388 million Bitget breach and $320 million Liquid Network exploit accounted for most of September’s losses, though more than $270 million from the latter was later returned.

Oct 1, 2026 · DeFi Tools Guide Editorial Team

Is Your MetaMask Wallet Safe After the Security Incident?

A MetaMask security incident hits part of its infrastructure. Find out what it means for your wallet and staked ETH.

Oct 1, 2026 · DeFi Tools Guide Editorial Team

Sentora’s Morpho vaults face outflows after MetaMask security incident

The incident highlights the interconnectedness of DeFi platforms, where security issues can trigger widespread financial instability and depositor anxiety.

Oct 1, 2026 · DeFi Tools Guide Editorial Team

MetaMask exits Ethereum validators amid undisclosed security incident

MetaMask said it is investigating the threat internally and said it has found no immediate threat to its wallets.

Oct 1, 2026 · DeFi Tools Guide Editorial Team

MetaMask Exits Lido Validators Amid Infrastructure ‘Security Incident’

The wallet says it has found no immediate threat to user wallets, but the ETH it is pulling out of Lido could take 45 days to return.

Oct 1, 2026 · DeFi Tools Guide Editorial Team

Bitget Hacker Turns to Zcash Privacy Pool After Near Rejects $50M in Swaps

The attacker behind the $387.5 million Bitget heist has started hiding about $3.8 million in ZEC inside Zcash's Ironwood pool, after Near Intents turned their swaps away.

Sep 30, 2026 · DeFi Tools Guide Editorial Team

SlowMist traces Bitget hack activity to Aug. 31 zero-day exploit

SlowMist identified malicious activity weeks before the Bitget theft, involving a zero-day vulnerability, two security products and a custom withdrawal tool.

Sep 30, 2026 · DeFi Tools Guide Editorial Team

NEAR Intents says it blocked $50M tied to Bitget hackers

The cross-chain protocol said it actively prevents stolen funds from being laundered, drawing a contrast with THORChain’s position that it does not selectively censor transactions.

Sep 29, 2026 · DeFi Tools Guide Editorial Team

After AI Agent Hacked Its Government, Australia Calls Altman and Amodei to Testify

Senator Sarah Hanson-Young has invited the OpenAI and Anthropic CEOs to a Canberra hearing on October 1, after an OpenAI agent quietly accessed Australia's Medicare data and nobody said a word for months.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Investigator Finds $387M Bitget Hack Suspects Asking for Help in Public Chats

ZachXBT says Bitget hack launderers asked for help in public Discord and Telegram chats. One is tied to the Kelp DAO hack.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Bitget CEO says $388M hack exploited third-party security vulnerability

Some stolen assets have been frozen, but Bitget has yet to disclose how much has been recovered as investigators continue to assess a possible North Korea link.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Scammers steal $2M in ETH as fake GIWA network fools DYORSWAP

DYORSWAP said it paid more than 200 ETH in compensation, while Upbit operator Dunamu’s GIWA warned that its mainnet had not launched.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Bitget starts phased withdrawal resumption following $388 million exploit

The exchange said it has patched the vulnerability, and losses from the incident will be fully covered by a user protection fund.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Bitget reveals attack path behind $387.5M breach as Bitcoin withdrawals restart

Bitget resumed Bitcoin withdrawals after its $387.5M hack as CEO Gracy Chen revealed attackers stole internal credentials through a third-party flaw.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

THORChain rejects Bitget request to block hacker as $6 million moves to bitcoin

CoinDesk found 27 successful swaps moving about 2,390 ETH into 75.2 BTC, even as Bitget urged THORChain to stop serving addresses tied to the $387.5 million theft.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Bitget resumes BTC withdrawals after $388M hack

Bitget has reopened BTC withdrawals after its USD 388 million hack, with ETH, USDT and other services scheduled to return through Oct. 2.

Sep 28, 2026 · DeFi Tools Guide Editorial Team

Bitget Hack Losses Climb to $387M: Here’s What Happened, and Why North Korea Is a Suspect

An attacker faked internal transfer requests to drain $387.5 million from Bitget's hot and warm wallets, and the exchange's CEO says the fingerprints look like Pyongyang's.

Sep 25, 2026 · DeFi Tools Guide Editorial Team

Bitget Hack Timeline: How Its Own System Approved a $387 Million Theft

Bitget says hackers used its own system to approve a $387.5 million theft. Here’s the timeline and the evidence behind suspected North Korean links. The post Bitget Hack Timeline: How Its Own System Approved a $387 Milli

Sep 25, 2026 · DeFi Tools Guide Editorial Team

Magic Eden legacy approvals leave $5.7 million in NFTs exposed to exploit before rescue

Magic Eden legacy approvals exposed $5.7 million in NFTs to an exploit before whitehats rescued 23,155 tokens.

Sep 25, 2026 · DeFi Tools Guide Editorial Team

KelpDAO Developer Sues LayerZero Over $292M Bridge Exploit

Evercrest says LayerZero approved the single-verifier configuration in writing multiple times, then warned a different developer about it.

Sep 25, 2026 · DeFi Tools Guide Editorial Team

North Korean Hackers “Very Likely” Drained $350 Million From Bitget, CEO Says

Bitget CEO Gracy Chen said North Korea was “very likely” behind the $350 million Bitget hack. The attackers breached a backend system and never obtained private keys, she added. Withdrawals remain suspended after the Sep

Sep 25, 2026 · DeFi Tools Guide Editorial Team

Bitget CEO suspects North Korea behind $352M hack, citing IP clues

Bitget CEO Gracy Chen said a preliminary investigation found IP addresses matching VPN choices associated with a DPRK hacking group.

Sep 25, 2026 · DeFi Tools Guide Editorial Team

Bitget CEO Confirms Security Breach Affecting $351.6 Million

Bitget CEO confirms a significant security breach affecting $351.6M. Here's what traders need to know. The post Bitget CEO Confirms Security Breach Affecting $351.6 Million appeared first on Coinfomania .

Sep 24, 2026 · DeFi Tools Guide Editorial Team

Bitget confirms over $350M breach and temporarily pauses withdrawals

Bitget confirmed a $351.6 million wallet breach and paused withdrawals, while CEO Gracy Chen said customer funds remain protected. The post Bitget confirms over $350M breach and temporarily pauses withdrawals appeared fi

Sep 24, 2026 · DeFi Tools Guide Editorial Team

Bitget Hacked as $350 Million Vanishes From Crypto Exchange Wallets

A newly created wallet drained hot and cold reserves labeled as belonging to Bitget across multiple blockchains in under an hour.

Sep 24, 2026 · DeFi Tools Guide Editorial Team

Payy Network halts operations after $1.92M USDC exploit drains Ethereum rollup

The Payy Network exploit highlights the ongoing vulnerabilities in DeFi infrastructure, raising concerns about security and user trust in digital finance. The post Payy Network halts operations after $1.92M USDC exploit

Sep 24, 2026 · DeFi Tools Guide Editorial Team

An AI Agent Just Hacked a Government Website for the First Time, Australia PM Says

Anthony Albanese said the agent accessed public and non-public files on a Medicare statistics portal in June, calling OpenAI's three-month delay in disclosing the breach "unacceptable."

Sep 23, 2026 · DeFi Tools Guide Editorial Team

Former Hack VC partner Hsin-Ju Chuang found dead at 37

The crypto executive and Dystopia Labs founder previously held senior roles at Stellar and Solana before joining venture capital firm Hack VC.

Sep 23, 2026 · DeFi Tools Guide Editorial Team

$20 Million in XRP Stolen From Thousands of Hardware Wallets

Attackers drained roughly 11.7 million XRP from thousands of D’CENT App Wallet users. The theft, worth close to $20 million, unfolded between September 15 and 20. XRPL.to published the on-chain forensic timeline. The ope

Sep 23, 2026 · DeFi Tools Guide Editorial Team

Whitehats move 52 bitcoin from the Coldcard hack to a recovery trust

According to Galaxy Digital, the good guys have moved 52 BTC to an address carrying an OP_RETURN message reading "claim:cryptorecoverytrust dot com."

Sep 22, 2026 · DeFi Tools Guide Editorial Team

Google Confirms Gemini Hacked 3 Real Companies in May Safety Test

Four frontier AI labs have now confirmed that their models reached the open internet and then accessed the systems of real companies. Google joined that list on Friday, roughly four months after its own incidents happene

Sep 19, 2026 · DeFi Tools Guide Editorial Team

Researchers Earn $6,500 After Hacking OpenAI With Anthropic's Claude

A rival’s own AI model ended up doing the heavy lifting in a breach against OpenAI. Researchers at Hacktron AI used Anthropic’s Claude to write working exploit code. The entire intrusion took under 72 hours. OpenAI ultim

Sep 18, 2026 · DeFi Tools Guide Editorial Team

Hackers infectan 30,000 dispositivos y roban $11 millones de wallets de criptomonedas

Hackers vinculados a Corea del Norte infectaron 30,000 dispositivos y drenaron $10.7 millones de wallets de criptomonedas mediante ofertas de trabajo falsas. El post Hackers infectan 30,000 dispositivos y roban $11 millo

Sep 18, 2026 · DeFi Tools Guide Editorial Team

Revolut Hackers Demand $3M Monero Ransom, Threaten to Sell Customer Data: Report

The group says it chose whom to target by scanning the blockchain for Revolut accounts holding significant crypto.

Sep 17, 2026 · DeFi Tools Guide Editorial Team

Revolut says no direct contact after $3 million public ransom demand

Revolut says it received no direct contact despite separate ransom demands for $3 million in Monero and 10,000 Bitcoin from competing breach claimants.

Sep 17, 2026 · DeFi Tools Guide Editorial Team

Revolut hackers demand $3 million in Monero, threaten to sell customer data

The group gave Revolut 24 hours to pay and said it targeted customers with significant crypto holdings.

Sep 16, 2026 · DeFi Tools Guide Editorial Team

Hackers Hijack HBO Max’s Reddit Account to Spread Crypto-Stealing Malware

Attackers ran 108 malicious ads through the streaming service’s verified account, directing users to fake software downloads.

Sep 16, 2026 · DeFi Tools Guide Editorial Team

0x calls Uniswap v4 hooks a mistake after finding 54% are malicious, Hayden Adams pushes back

The debate highlights the ongoing challenge in DeFi of balancing innovation with security, emphasizing the need for robust verification systems. The post 0x calls Uniswap v4 hooks a mistake after finding 54% are maliciou

Sep 15, 2026 · DeFi Tools Guide Editorial Team

Symbiosis says it recovered 15 BTC after Bitcoin bridge exploit, offers attacker 20% bounty

Blockchain security firm Blockaid said roughly 46.1 billion syBTC were minted but the attacker realized only about $336,000 in proceeds.

Sep 13, 2026 · DeFi Tools Guide Editorial Team

Cronos Erased Two Hours of Transactions to Reverse $111 Million DeFi Exploit - Decrypt

Cronos Erased Two Hours of Transactions to Reverse $111 Million DeFi Exploit    Decrypt

Sep 8, 2026 · DeFi Tools Guide Editorial Team

How to Build a DeFi Incident Checklist

A calm response sequence for suspicious approvals, unexpected transfers and compromised interfaces.

Aug 18, 2026 · DeFi Tools Guide Editorial Team