Breaking security news on exploits, bridge hacks, protocol vulnerabilities, and lost funds. Stay informed on Web3 security threats.
49 articles in Web3 Watch
Web3 WatchShipMonk's Metabase breach exposed 13,689 Trezor customers' data, and CZ Binance is using it to pitch software wallets over hardware ones.
Web3 WatchRISEx lost $673,011 in USDC.e to an access control bug on August 3. Eight days later, the attacker's wallet on Ethereum still has not moved a cent.
Web3 WatchSwan Treasury lost $625,000 to a hardcoded signer key and a forged discount signature. Ten days later, the team still hasn't named the exploit.
Web3 WatchA stale LP dividend snapshot let one attacker claim MOKE's BNB rewards 65 times through 100 delegated wallets, draining $907,700 from the BNB Chain token.
Web3 WatchA flash loan pushed LoopsDAO's collateral price roughly 71x higher, faked a deposit, and drained $696,000 from a BNB Chain protocol that had been live for three weeks. No named security firm has covered it yet; independent researchers and CryptoNewsLive's own BscScan verification pieced together what happened.
Web3 WatchA 2021 code migration silently swapped COLDCARD's hardware RNG for a predictable software fallback. Coinkite says it took roughly five years and an estimated $115 million in drained Bitcoin for anyone to notice — and believes an attacker's AI found it before its own did.
Web3 WatchOne wallet received 515 million NIGHT from an exploited Wanchain bridge and kept selling for hours afterward, on-chain data shows, as NIGHT fell 26.8% today.
Web3 WatchA zero-value transfer exploit drained 377,642 USDT from LittleBoyPlus on BNB Chain. SlowMist flagged the flaw in the LBPHashrate contract while ZachXBT called for the entire team to be investigated. The project has not responded.
Web3 WatchCertiK flagged a suspicious drain of $2.19M from Aztec Connect on Ethereum. The contract was deprecated three years ago and cannot be paused or upgraded by anyone.