Topic
Attacks on decentralized finance protocols that exploit smart-contract bugs or logic flaws to drain funds, often triggering halts or recovery efforts.
An attacker with one share unit withdrew about 14,838 DAI from a Polygon Uniswap V4 vault on October 9, Panda Security found. The zero-liquidity fallback paid out the whole balance, so every fallback needs the main path's proportional-payout check.
Reality
Manhattan federal jurors convicted Jonathan Spalletta of computer fraud and money laundering over the $53.3 million Uranium Finance exploit of 2021. Where the roughly $31 million in crypto seized in February 2025 ends up now turns on restitution and forfeiture rulings still to come.
Perspective Coverage
10 publishersReality
NEAR Protocol rose about 6% to $5.50 and passed Stellar's $6.97 billion market value to rank 20th on CoinGecko, crypto.news reported. NEAR's own seven-day gain was 0.6%, so most of the swap in rank came from XLM's 12.8% weekly slide.
Reality
Drift's DFX recovery token opened at about 0.0104 USDT per dollar lost in the $295.4 million April exploit, roughly one cent on the dollar. Paying every capped pledge in full would lift that to about 50 cents, and the other half depends on Velocity's revenue and on funds recovered from the attacker.
Perspective Coverage
5 publishersReality
NEAR Intents got back all $3.8 million drained through a bug between its Omni deposit-and-withdrawal layer and its contract, after encrypted talks. Whether that layer is safe now rests on the patch, since every user who lets the protocol choose a bridge depends on it.
Perspective Coverage
4 publishersReality
Near Intents halted its cross-chain swap service after a bug in its Omni deposit layer let an attacker take about $3.8 million. Crypto balances carry no deposit insurance, so affected users are relying on the operator's promise to repay them in full.
Perspective Coverage
5 publishersReality
Ostium is rebuilding its trading stack around Gateway, three months after an attacker holding legitimate oracle-signer credentials drained $23.75 million. The new system has to keep execution fast enough for institutional hedging and also show that stolen credentials can no longer push a false price through.
Reality
A forum proposal would cancel the buyback BAL holders approved in April and let them burn tokens instead for a pro-rata share of a treasury estimated at least $9 million, with the first payout held until veBAL locks expire at the end of May 2027.
Perspective Coverage
3 publishersReality
Cosmos Hub validators moved 1,227,121 ATOM, about $2.1 million, from the Neutron exploiter's wallet at restart with no signature from its owner. Anyone treating a Hub balance as settled now relies on the validators as well as the key.
Reality
Astroport and Drop contracts lost about $9.4 million on September 22 after an attacker won a Neutron governance vote that reassigned their admins. GoPlus Security values the staked NTRN behind that vote at about $113,000, far below the assets it could hand over.
Reality
Four security firms classified the $3.5 million Nostra Finance loss as oracle price manipulation. The remedies the write-up lists are listing-policy parameters: a borrow cap below free float, an isolation flag, a deviation bound.
Reality
Symbiosis halted BTC routing on September 11 after its BridgeV2 processed a bad message and generated more than 2^62 unbacked syBTC. The attacker realized about $336,000, roughly 1.5 times the average hack TRM counted this year.
Reality
A cross-chain firm that never earned enough to fund itself is closing on September 30, and the 303m tokens it will destroy return no cash to holders or to the $4.1mn of 2021 venture money behind it.
Reality
The attacker needed no trading capital, only signing authority: at the posted price, less than half a token of nominal collateral backed a 4.94 million VUSD mint. Three of the four halted networks show no confirmed loss at all.
Reality