Exploit
Coverage of Exploit in the Nexus archive.
- Another Bitcoin infrastructure exploit hits, this time draining Lightning payment servers
An exploit has targeted the Bitcoin infrastructure, specifically draining funds from Lightning payment servers.
- Coldcard urges users to move bitcoin as exploit is still in progress
Coldcard is urging users to move their Bitcoin due to an ongoing exploit. The exploit is still in progress, prompting the security advisory.
- Taiko reopens bridge after $1.7M exploit, says users made whole
Taiko restored bridge transfers after replenishing asset backing and completing security fixes following an 11-day network disruption caused by a $1.7M exploit. The company stated that users were made whole as a result of the incident.
- Aztec Connect’s abandoned smart contract exploited for $2.1M
Aztec Connect’s abandoned smart contract was exploited for $2.1 million in crypto assets. The platform was deprecated in March 2023, but the immutable smart contract retained over $2 million.
- Raydium DEX says $1.34 million exploit hit retired AMM program, treasury to cover losses
Raydium DEX reported a $1.34 million exploit affecting five inactive liquidity pools in its retired AMM program. The treasury will cover losses for impacted users.
- Morning Minute: Massive ZCash Exploit Found by Claude, Extent Unknown
The ZCash team hired a hacker named Claude to identify an exploit in the ZCash protocol. He discovered a glitch that has been present for four years, though the extent of the issue remains unknown.
- Unable to recover from roughly $50 million hack, Radiant Capital is winding down
Radiant Capital has been unable to recover from a roughly $50 million hack and is now winding down operations. The company has not recovered a meaningful amount of funds or raised new capital since the 2024 exploit.
- Gnosis Pay exploit hits delay module as team pledges refunds
Gnosis Pay is experiencing an exploit in its delay module. Co-founder Martin Köppelmann initially advised users to withdraw funds but later reversed his warning and committed to repaying affected users.
- ‘Gnosis will cover all user losses’ amid exploit related to Gnosis Pay, co-founder Koppelmann says
Gnosis co-founder Martin Koppelmann stated that all user losses will be covered following an exploit related to Gnosis Pay. Containment efforts are ongoing.
- Polymarket team says user funds safe as exploit losses climb above $600K
Polymarket experienced a security exploit resulting in losses exceeding $600,000, attributed to a suspected private key compromise in their top-up operations. The platform assured users that their funds and market resolution mechanisms remain secure despite the incident.
- Syndicate Labs to wind down operations after five years, citing rollup market slump
Syndicate Labs is winding down operations after five years, primarily due to a slump in the rollup market. The company clarified that a $330,000 exploit that occurred last month did not influence their decision to cease operations.
- PSA: Bisq 1 Trade protocol exploit discovered, investigations ongoing
A trade protocol exploit in Bisq 1 has been discovered, prompting ongoing investigations. The security vulnerability raises concerns about the platform's integrity and user safety.
- Aave Leads DeFi United Coalition After $292 Million KelpDAO Exploit
Aave has taken a leadership role in the DeFi United Coalition following a $292 million exploit targeting KelpDAO, a decentralized autonomous organization. The security breach highlights vulnerabilities in DeFi protocols, prompting collaborative efforts to address systemic risks.
- Lido proposes allocating up to $5.8 million in staked ETH to back Kelp exploit shortfall
Lido has proposed allocating up to $5.8 million in staked ETH to address the shortfall caused by a $292-million exploit on Kelp DAO’s rsETH bridge. The move aims to mitigate financial losses from the recent security breach.
- The Protocol: Kelp DAO exploited for $292 million
Kelp DAO was exploited in a security breach, resulting in a $292 million loss. The incident highlights vulnerabilities in decentralized finance protocols.
- Another DeFi protocol hacked as Sui-based Volo hit by $3.5M exploit
Volo Protocol, a Sui-based DeFi protocol, confirmed a $3.5 million exploit affecting select vaults. The protocol has frozen assets and initiated fund recovery efforts as investigations continue.
- Volo Protocol loses $3.5 million in exploit days after KelpDAO's breach
Volo Protocol suffered a $3.5 million exploit shortly after KelpDAO's recent breach, highlighting ongoing cybersecurity vulnerabilities in decentralized finance platforms.
- Certik Analyst: KelpDAO Exploit Reveals High-Stakes Shift in Cross-Chain Cybercrime
A Certik analyst warns that the KelpDAO exploit highlights a significant shift in cross-chain cybercrime, emphasizing heightened risks in decentralized finance (DeFi) security. The incident underscores vulnerabilities in blockchain ecosystems as attackers target cross-chain protocols.
- Kelp DAO hits back at LayerZero for trying to shift the blame after a massive exploit
Kelp DAO is accusing LayerZero of attempting to deflect responsibility following a significant security exploit. The incident has sparked debate within the blockchain community regarding accountability in decentralized finance protocols.
- LayerZero blames Kelp's setup for $290 million exploit, attributes it to North Korea's Lazarus
LayerZero attributed a $290 million exploit to a misconfigured Kelp Finance setup, claiming the attack was carried out by North Korea's Lazarus hacking group. The incident highlights vulnerabilities in blockchain infrastructure and state-sponsored cyber threats.
- Morning Minute: DeFi's Future in Question After $292M KelpDAO Exploit
DeFi's future is under scrutiny following a $292M exploit of KelpDAO, causing a $13B decline in Total Value Locked (TVL). Vercel's CEO attributed the attack to 'highly sophisticated' actors leveraging AI.
- A $300 million borrowing spike on Aave signals liquidity crunch after exploit
A $300 million borrowing spike on Aave, a DeFi lending platform, indicates a liquidity crunch following a recent exploit. The surge in borrowing reflects panic among users withdrawing funds amid security concerns, signaling instability in the platform's operations.
- Rhea Finance post-mortem puts exploit losses at $18.4 million, more than double initial estimates
Rhea Finance's post-mortem report revealed exploit losses of $18.4 million, more than double initial estimates. The attacker used a 'deliberately constructed swap route' to open numerous margin trading positions.
- Claude Opus wrote a Chrome exploit for $2,283
A model called Claude Opus was used to create a Chrome exploit for $2,283, while Anthropic withheld its Mythos model due to security concerns about potential attackers exploiting software vulnerabilities.