UNCX's Vesting V2 contracts lost about $1.49 million across four chains, Blockaid said, after a release function left a stale share counter. Immunefi's head of security says the contract never enforced a rule keeping the global share total consistent across functions.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap−5
- Incentives50
- Confidence70
An attacker took about $86,000 from UNCX's shared Ethereum vesting pool on Oct. 14, according to security firm Blockaid. About $3.25 million was still in the contract when Blockaid flagged the attack as ongoing.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence58
Agentic accounts cover about 0.5% of Robinhood's users against a forecast of agents as the norm by 2028
Robinhood says more than 150,000 customers had opened agentic accounts by late September, out of roughly 29 million users. Fortune attributes the count to the company, and it is the main evidence that agents will shape exchange order flow.
Reality
- Evidence35
- Adoption5
- Hype gap+45
- Incentives55
- Confidence40
Security firms traced about 1,783 wstETH, worth more than $6 million, out of a Base vault on Oct. 4 whose owner is an anonymous 3-of-7 Safe. With Base and Aave's core contracts not blamed, the loss lands on a custody setup whose seven signers no one has publicly identified.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence58
Bitget says spoofed backend data drained $351.6 million from its hot and warm wallets
Bitget lost about $351.6 million from its hot and warm wallets after attackers spoofed transaction data in a backend system, the exchange said. Cold storage held and a $464 million fund covers the loss, while about 45% of the haul is native XRP that no one can freeze.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+15
- Incentives65
- Confidence58
One valid signature emptied Fetch.ai's token converter of 8.7 million FET
Roughly $2 million left Fetch.ai and NuNet on a valid signature, with the token contracts themselves unbroken. The split between the FET drained and the NTX minted decides how much of it the attacker can collect.
Reality
- Evidence64
- Adoption58
- Hype gap+24
- Incentives60
- Confidence58
A Gnosis Safe lost $7.73M in rsETH on September 15 through an automation module its own owner had whitelisted, an MEV bot took the proceeds in the same block, and Kelp DAO froze the destination address for 24 hours.
Reality
- Evidence55
- Adoption48
- Hype gap+35
- Incentives62
- Confidence52
A BridgeV2 flaw let an attacker mint about 2^62 unbacked syBTC, of which 4.39 WBTC got sold before Blockaid flagged it. Symbiosis has halted BTC routing and recovered 15 BTC into a multisig wallet.
Reality
- Evidence58
- Adoption62
- Hype gap+38
- Incentives66
- Confidence61
An attacker burned $3.8M in MAMO slippage to borrow $10M of Moonwell depositors' assets
Estimates of the loss run from $4M to $9M against the $72.77M locked in Moonwell, and the remedy was a borrow cap set to 1 wei, which is the tell that this was an underwriting choice rather than a bug.
Reality
- Evidence55
- Adoption52
- Hype gap+15
- Incentives58
- Confidence44