Breaking security news on exploits, bridge hacks, protocol vulnerabilities, and lost funds. Stay informed on Web3 security threats.
49 articles in Web3 Watch
Web3 WatchAftermath Finance's perpetuals protocol was drained of $1.14M via a negative fee flaw on Sui. The attacker routed stolen funds to KuCoin. Mysten Labs and the Sui Foundation confirmed full user recovery.
Web3 WatchA Discord phishing link from 2023 drained a wallet in 2026. Sweeper bots sit dormant for years, then strike the moment deposits hit a threshold. Here's how.
Web3 WatchScallop lost 150K SUI to an attacker who bypassed active code and hit a forgotten V2 contract from 2023. The bug sat undetected for 17 months on Sui.
Web3 WatchPurrlend's TVL collapsed from $1.53M to $443 after an exploit on HyperEVM and MegaETH. Community voices call it a rug. Funds haven't moved yet.
Web3 WatchA zero-day bug in Litecoin's MWEB layer hit major mining pools April 25, forcing a 13-block reorg after attackers exploited unpatched nodes to target DEXs.
Web3 WatchFrance logged 41 crypto kidnappings in 3.5 months of 2026. Durov links the surge to state data leaks and warns Telegram may exit the French market entirely.
Web3 WatchVolo Protocol lost $3.5M on Sui after a private key compromise bypassed three audits. $2M is now frozen and the team pledges full user reimbursement.
Web3 WatchAave depositors on Base and Arbitrum are fighting in governance to avoid a 73% haircut as the KelpDAO blame war escalates and Arbitrum freezes $71M in recovered exploit funds.
Web3 WatchKenyan Binance users report accounts frozen for over two months on DCI requests, with no charges, no court orders, and no timeline from the exchange.