DeFi Exploit

Evercrest Technologies, the legal entity behind KelpDAO, has filed a civil claim in British Columbia against LayerZero and co-founder Bryan Pellegrino over the April 18 rsETH bridge exploit that resulted in approximately $292 million in losses. Kelp says the defendants failed to adequately disclose risks in LayerZero’s technology and failed to prevent attackers from compromising infrastructure used to verify cross-chain transactions. The claim also alleges LayerZero had reviewed and approved Kelp’s bridge deployment and configuration in writing before the attack.…

A Notional Finance escrow contract appears to have been exploited for roughly $1.7 million, with the stolen stablecoins converted into Ether and deposited into Tornado Cash within hours of the drain. The affected assets included approximately 69,242 DAI and 1.658 million USDC, putting the combined loss near $1.73 million. Two addresses tied to the theft were identified as 0xC954...De69 and 0xDaCC...Ce38. Stablecoins Converted Into 689 ETH The stolen DAI and USDC were consolidated and swapped into approximately 689 ETH before…

A vulnerability in Ankr’s ankrFLOW liquid-staking contract allowed an attacker to create millions of unbacked tokens and use them as collateral to drain roughly $410,000 from the WFLOW reserve on MORE Markets. The exploit began at approximately 06:18 UTC on August 31, when the attacker created about 8.6 million unbacked ankrFLOW through a vulnerable Ankr Solidity contract. The tokens were then deposited as collateral on MORE Markets, enabling the attacker to withdraw approximately 15.5 million WFLOW. Unbacked ankrFLOW Used as…

Moonwell was hit by an estimated $9 million oracle manipulation attack on Base after exploiters inflated the price of thinly traded MAMO collateral and used the artificial valuation to borrow higher-value assets from the lending protocol. The attack pushed MAMO from around $0.01 to nearly $0.47 through low-liquidity markets before the elevated price reached Moonwell's collateral calculations. Early transactions extracted cbBTC, USDC, wstETH and ETH-backed assets from shared lending pools. At least 50.6 cbBTC worth more than $4 million was…

Summer.fi is winding down its Labs company and retiring its user interface after the July 6 exploit left the business without enough financial runway to rebuild. The Summer.fi wind-down ends five years of independent operation following its June 2021 spinout from the Maker Foundation. The team spent another two years building inside Maker before launching independently under the Oasis.app brand and later rebranding to Summer.fi. The platform served more than 50,000 users across leveraged Maker positions, automated vault management and…

Summer.fi was hit by an active Ethereum exploit that drained about $6 million, primarily in DAI, after an attacker used a large flashloan to distort liquidity conditions across DeFi vault and pool interactions. Blockaid’s Summer.fi exploit alert identified the ongoing drain against the DeFi yield platform, which operates the Lazy Summer Protocol and automated vault products for users seeking managed exposure to lending and yield markets. The attacker used roughly $65.4 million in USDC and USDT through a flashloan, then…

A BNB Chain liquidity route involving OLPC and LABUBU was drained for 1,115,903 USDT on June 20 after an attacker exploited a reserve mismatch in a PancakeSwap pair, ExVulSec reported. The security alert traced the attack to the OLPC-LABUBU pair at 0xedb7dcb4cdfec957f8df5cbf5e94229a6cc9f365. The attacker address was identified as 0x18d6c39ae9e537f948aa2212d44d8c23944fc188. The route began with a small OLPC transfer of about 10 tokens through the attacker contract. That transaction coincided with roughly 51.9 million OLPC and 124,000 LABUBU moving from the pair…

mySwap’s concentrated liquidity pools on Starknet were drained for roughly $305,000 after an attacker deployed a fake token and used it to manipulate pool accounting. The mySwap exploit involved a fake token named EVIL, which was used to distort the accounting path tied to the protocol’s CL pools and shared vault. The drained assets were listed as 137.96 ETH, 45,000 USDC, 19,900 USDT and 230,000 STRK. The attack was not framed as a private-key compromise or an admin-level failure. It…

LittleBoyPlus has been exploited on BNB Chain, with security monitors estimating losses at about $377,000, or roughly 610 BNB. The attack was flagged by F12sec, which identified the attacker address as 0x5449ded887576f43fc339851e942ebc1e6f8118b. Onchain activity shows the attacker used flash-loan liquidity during the transaction sequence before cashing out through BNB Chain trading pools. The incident adds another loss to a week already dominated by contract-level exploits. Aztec’s old Private Rollup Bridge also lost 1,158 ETH in a separate drain, showing how…