Breaking security news on exploits, bridge hacks, protocol vulnerabilities, and lost funds. Stay informed on Web3 security threats.
49 articles in Web3 Watch
Web3 WatchA forged LayerZero lzReceive call drained 116,500 rsETH from KelpDAO on April 18. The attacker converted stolen tokens into Aave collateral, triggering $280M in bad debt, 100% ETH utilization, and a $6.28B TVL collapse across DeFi.
Web3 WatchCoW Swap, Kraken, Hyperbridge, Zerion and seven more protocols hit in one week. Here is every attack, every loss, and every method used.
Web3 WatchNew details from Drift Protocol's ongoing investigation show the April 1 attack was staged over six months through face-to-face meetings at crypto conferences, third-party front operatives, and a silent code execution flaw in VSCode.
Web3 WatchOn-chain investigator ZachXBT says Circle watched $230M+ in stolen USDC move through its own bridge for six hours without intervention, as Drift Protocol confirmed a $285M exploit tied to a pre-planned multisig takeover.