Exploit
Coverage of Exploit in the Nexus archive.
- Taiko reopens bridge after $1.7M exploit, says users made whole
Taiko restored bridge transfers after replenishing asset backing and completing security fixes following an 11-day network disruption caused by a $1.7M exploit. The company stated that users were made whole as a result of the incident.
- Aztec Connect’s abandoned smart contract exploited for $2.1M
Aztec Connect’s abandoned smart contract was exploited for $2.1 million in crypto assets. The platform was deprecated in March 2023, but the immutable smart contract retained over $2 million.
- Raydium DEX says $1.34 million exploit hit retired AMM program, treasury to cover losses
Raydium DEX reported a $1.34 million exploit affecting five inactive liquidity pools in its retired AMM program. The treasury will cover losses for impacted users.
- Morning Minute: Massive ZCash Exploit Found by Claude, Extent Unknown
The ZCash team hired a hacker named Claude to identify an exploit in the ZCash protocol. He discovered a glitch that has been present for four years, though the extent of the issue remains unknown.
- Unable to recover from roughly $50 million hack, Radiant Capital is winding down
Radiant Capital has been unable to recover from a roughly $50 million hack and is now winding down operations. The company has not recovered a meaningful amount of funds or raised new capital since the 2024 exploit.
- Gnosis Pay exploit hits delay module as team pledges refunds
Gnosis Pay is experiencing an exploit in its delay module. Co-founder Martin Köppelmann initially advised users to withdraw funds but later reversed his warning and committed to repaying affected users.
- ‘Gnosis will cover all user losses’ amid exploit related to Gnosis Pay, co-founder Koppelmann says
Gnosis co-founder Martin Koppelmann stated that all user losses will be covered following an exploit related to Gnosis Pay. Containment efforts are ongoing.
- Polymarket team says user funds safe as exploit losses climb above $600K
Polymarket experienced a security exploit resulting in losses exceeding $600,000, attributed to a suspected private key compromise in their top-up operations. The platform assured users that their funds and market resolution mechanisms remain secure despite the incident.
- Syndicate Labs to wind down operations after five years, citing rollup market slump
Syndicate Labs is winding down operations after five years, primarily due to a slump in the rollup market. The company clarified that a $330,000 exploit that occurred last month did not influence their decision to cease operations.
- PSA: Bisq 1 Trade protocol exploit discovered, investigations ongoing
A trade protocol exploit in Bisq 1 has been discovered, prompting ongoing investigations. The security vulnerability raises concerns about the platform's integrity and user safety.
- Aave Leads DeFi United Coalition After $292 Million KelpDAO Exploit
Aave has taken a leadership role in the DeFi United Coalition following a $292 million exploit targeting KelpDAO, a decentralized autonomous organization. The security breach highlights vulnerabilities in DeFi protocols, prompting collaborative efforts to address systemic risks.
- Lido proposes allocating up to $5.8 million in staked ETH to back Kelp exploit shortfall
Lido has proposed allocating up to $5.8 million in staked ETH to address the shortfall caused by a $292-million exploit on Kelp DAO’s rsETH bridge. The move aims to mitigate financial losses from the recent security breach.
- The Protocol: Kelp DAO exploited for $292 million
Kelp DAO was exploited in a security breach, resulting in a $292 million loss. The incident highlights vulnerabilities in decentralized finance protocols.
- Another DeFi protocol hacked as Sui-based Volo hit by $3.5M exploit
Volo Protocol, a Sui-based DeFi protocol, confirmed a $3.5 million exploit affecting select vaults. The protocol has frozen assets and initiated fund recovery efforts as investigations continue.
- Volo Protocol loses $3.5 million in exploit days after KelpDAO's breach
Volo Protocol suffered a $3.5 million exploit shortly after KelpDAO's recent breach, highlighting ongoing cybersecurity vulnerabilities in decentralized finance platforms.
- Certik Analyst: KelpDAO Exploit Reveals High-Stakes Shift in Cross-Chain Cybercrime
A Certik analyst warns that the KelpDAO exploit highlights a significant shift in cross-chain cybercrime, emphasizing heightened risks in decentralized finance (DeFi) security. The incident underscores vulnerabilities in blockchain ecosystems as attackers target cross-chain protocols.
- Kelp DAO hits back at LayerZero for trying to shift the blame after a massive exploit
Kelp DAO is accusing LayerZero of attempting to deflect responsibility following a significant security exploit. The incident has sparked debate within the blockchain community regarding accountability in decentralized finance protocols.
- LayerZero blames Kelp's setup for $290 million exploit, attributes it to North Korea's Lazarus
LayerZero attributed a $290 million exploit to a misconfigured Kelp Finance setup, claiming the attack was carried out by North Korea's Lazarus hacking group. The incident highlights vulnerabilities in blockchain infrastructure and state-sponsored cyber threats.
- Morning Minute: DeFi's Future in Question After $292M KelpDAO Exploit
DeFi's future is under scrutiny following a $292M exploit of KelpDAO, causing a $13B decline in Total Value Locked (TVL). Vercel's CEO attributed the attack to 'highly sophisticated' actors leveraging AI.
- A $300 million borrowing spike on Aave signals liquidity crunch after exploit
A $300 million borrowing spike on Aave, a DeFi lending platform, indicates a liquidity crunch following a recent exploit. The surge in borrowing reflects panic among users withdrawing funds amid security concerns, signaling instability in the platform's operations.
- Rhea Finance post-mortem puts exploit losses at $18.4 million, more than double initial estimates
Rhea Finance's post-mortem report revealed exploit losses of $18.4 million, more than double initial estimates. The attacker used a 'deliberately constructed swap route' to open numerous margin trading positions.
- Claude Opus wrote a Chrome exploit for $2,283
A model called Claude Opus was used to create a Chrome exploit for $2,283, while Anthropic withheld its Mythos model due to security concerns about potential attackers exploiting software vulnerabilities.