BlockThreat - Week 29, 2026

$35.3M stolen across 21 incidents. Infinite minting blockchains, subverted governance, bridge hacks, and the clearest signal yet of where defense is heading.

BlockThreat - Week 29, 2026

There was a bit of a slowdown in exploits over the past two weeks. A familiar lull that always seems to end with a week just like this one with 21 incidents and more than $35M stolen. There is a lesson here for nearly every type of DeFi operator from dealing with money-printing exploits on blockchains and multiple bridge compromises to subverted DAO governance and attacks on oracle infrastructure. It is hard to pick just one incident to focus on this week, so you will simply have to work your way through the massive Hacks section below.

CTA Image

If a BlockThreat subscription would meaningfully support your learning, research, protocol, or public goods work, you may be eligible for a community-sponsored account.

Apply Here

However, one incident beyond the usual weekly DeFi grind deserves closer attention because it offers the clearest signal yet of where defense is heading and the controls teams need to start building now.