Archive

$3.3M stolen across 4 incidents. Harmony and Ravencoin consensus failure. Multiple PII leaks expose crypto users.

$15M stolen across 14 incidents. Bitcoin under attack. Who is winning the AI race?

Lessons and attack patterns shaping blockchain security

$90.5M stolen across 8 incidents. Your keys, their bugs.

$59.7M stolen across 10 incidents. Two DPRK operations using familiar tactics. An early warning for the next $100M+ security event.

$35.3M stolen across 21 incidents. Infinite minting blockchains, subverted governance, bridge hacks, and the clearest signal yet of where defense is heading.

$36.3M stolen across 4 incidents. Carpe diem.

$1.2M stolen across 3 incidents. A peaceful week with new intel on DPRK backdoors, social engineering tactics, and security research.

$7.2M stolen across 14 incidents. Signature Verification bugs on the rise.

$20M stolen across 13 incidents. Jared Got Sandwiched. DPRK is back at it.

$42.4M stolen across 15 incidents as attackers return to old code, exposed keys and deprecated protocols still holding value.

Two attack vectors drove the biggest losses. The next major exploit may not start with a stolen key.

$3.6M stolen across 14 incidents and a reminder that even the hardest bugs are no longer staying buried for long.

$19M stolen across 14 incidents. It’s always darkest before the dawn.

Another bloody week with 11 incidents and $7.7M stolen. Three attack vectors auditors should be hunting and defenders managing before attackers do.

Bloody April, exploited trust, and the Breaking Point of Ethical Security Research

$29M stolen across 13 incidents, multiple supply chain compromises, and three bridge hacks in a single week show what happens when attacker incentives keep rising while defensives fall behind.

$8.8M stolen across 13 incidents. The biggest warning signs were not the hacks, but two emerging threat signals pointing toward the next $100M+ incident.

$15M stolen across 16 incidents as exploit volume keeps accelerating.

Litecoin and the anatomy of a botched patch, multiple private key compromises, a surprise spike in oracle misconfiguration and signature validation exploits, latest in phishing and supply chain attacks, security research and tooling.

KelpDAO suffers the biggest hack of the year, Hyperbridge gets caught by its own joke. 17 incidents, $329M in losses, and many harsh lessons for bridges, node operators, and DeFi teams still relying on broken trust models.

Only a few minor DeFi incidents this week. A rare chance for defenders to sharpen the saw and focus on the threats brewing in the background.

DPRK plays the long game, multiple supply chain attacks, DNS hijackings, DeFi hacker arrested, money printing vulnerabilities patched

Lessons and attack patterns shaping blockchain security

Someone is wreaking havoc across the supply chain, low liquidity governance is under attack, and too many teams still lack basic security discipline.

Web2 threats are spilling into Web3 once again. Secondary effects are often worse than the hack itself, single points of failure, hard coded values, and other design mistakes turn one hack into many.

Defenses that become liabilities, patient attackers beating onchain monitoring, attackers vs. audit scopes, comparing top AI auditing tools and more

Battle tested code keeps on getting hacked, bug hunting is accelerating. The edge now belongs to teams that use AI defensively to prevent vulnerabilities, not just find them later.

AI is accelerating both defenders and attackers, surfacing rare bugs and amplifying the cost of simple mistakes, with clear action items for teams.

Another week of chain killer vulnerabilities, actively exploited ZK mistakes, supply chain compromises, phishing campaigns, and the strange case of rug pullers getting hacked.

Rare critical infrastructure bugs surfaced, AI powered exploit tools and active exploitation, supply chain attack quietly spreading through DeFi