Cetus lost over $220 million after an attacker exploited a flaw in a smart contract math library. The attacker used spoof tokens and overflow bugs to trick the system into giving away real assets.

Venus Protocol got hit by a suspected flash-loan exploit that targeted the low-liquidity token of the DeFi project THENA. Tens of millions of THE tokens were used as collateral, and began being ...

Echo Protocol, the popular Bitcoin liquidity aggregation and yield infrastructure layer, has suffered an exploit that cost the protocol $76 million. The exploit happened just as Echo Protocol was ...

Unleash Protocol lost about $3.9 million in a security breach, according to blockchain security firm PeckShield. The breach is attributed to a governance failure at Unleash, leading to unauthorized ...

$19.3 million was siphoned out of Uwu Lend before the exploiter converted the tokens on Uniswap. Uwu Lend has not responded to the exploit. Lending and liquidity protocol UwU Lend has suffered an ...

The contagion from the Kelp exploit could have been contained, but at the cost of capital efficiency, according to the founder of Curve Finance. The exploit of the Kelp liquid restaking protocol shows ...

DeFi however is facing growing pressure with major incidents and exploits becoming larger in terms of losses despite ...

Rhea Finance and the Russia-linked Grinex exchange were hacked for a combined $21 million over the past two days. At least 12 DeFi protocols and crypto businesses have been attacked in just over two ...

Solana-based perpetual futures exchange Drift Protocol fell victim to a large-scale security breach on April 1, 2026. On-chain monitoring firms reported that attackers siphoned roughly $285 million in ...

Balancer, which is a decentralized finance (DeFi) protocol focused on automated market making (AMM), was exploited early Monday morning in an attack that may have led to $120 million or more in losses ...

The Echo Protocol exploit on Monad minted 1,000 fake eBTC worth $76.7M — no code was broken, just one stolen admin key. The attacker borrowed real WBTC against the fake collateral, routed $822K ...