BlockThreat - Week 35, 2026
$145.3M stolen across 15 incidents. Two mass-exploitation campaigns remain active. $120M+ stolen using an almost forgotten attack vector.
It's blood on the streets again. This week I’m tracking two mass exploitation campaigns across Cosmos and Solana. The quieter story is the attack vector that just came back and claimed combined $120M+ in just a few days. The issue includes details of how all of these campaigns unfolded, why the forgotten attack vector belongs on every audit and ops checklist now, and the lessons auditors and defenders should adopt immediately. This week's edition includes latest case studies, vulnerability reports, research, tooling, and write ups for all 15 incidents.
Let’s dive into the news!