Loading articles...
All Articles
14 articles
Web3 WatchStake DAO Exploited on Arbitrum: 5.4 Trillion Tokens Minted in Private Key Attack
Stake DAO suffers active exploit on Arbitrum after deployer key compromise. Attacker mints 5.4T vsdCRV, swaps for ETH. Curve warns LlamaLend users to exit now.
May 27, 20264 min
#Arbitrum hack#DeFi security#exploits
Web3 WatchBrussels Community Lost €110K After a Former Member's Keys Were Never Removed
CommonHub Brussels lost its entire €110,000 community treasury on May 25 after attackers drained its SAFE multisig wallet — exploiting signing keys that should have been removed months earlier.
May 26, 20265 min
#crypto treasury hack#DAO security#exploits
Web3 WatchAttacker Built a Rigged Uniswap Pool Because $3M Had No Other Way Out
86 Gnosis Safe wallets lost $3.2M in under two hours on May 25. The attacker couldn't just transfer funds. The module's permissions only allowed Uniswap V3 swaps, so they engineered a fake pool to drain instead.
May 26, 20264 min
#Blockaid#DeFi hack 2026#exploits
Web3 WatchEcho Protocol Loses $816K After Admin Key Breach Unlocks Fake eBTC Mint
A compromised admin key on Echo Protocol's Monad deployment led to $816K in confirmed losses after an attacker minted 1,000 unbacked eBTC, borrowed against them on Curvance, and laundered the proceeds through Tornado Cash.
May 19, 20265 min
#crypto bridge security#DeFi exploit#eBTC hack
Web3 WatchTHORChain's GG20 Hack Exposes a Cryptography Flaw That Could Hit Other Protocols
THORChain confirmed a $10.7M exploit tied to a flaw in GG20 threshold signature cryptography. The attacker rebuilt the vault's private key from the inside. Here's what that means for the rest of DeFi.
May 16, 20265 min
#cross-chain bridge security#DeFi security 2026#exploits
Web3 WatchLayerZero Admits Comms Failure as Lazarus Attack Detail Stays Unanswered
LayerZero admits comms failure after Lazarus Group's $290M RPC attack. New OneSig multisig and DVN overhaul announced, but the RPC entry vector stays unexplained.
May 11, 20265 min
#Cross-Chain Hacks#DVN Security#KelpDAO
Web3 WatchLayerZero Multisig Keys Used for Memecoin Trading While Securing Billions
LayerZero Labs' production multisig keys securing $3B+ were used to trade memecoins, exposing users to supply chain attacks, security researchers reveal.
May 8, 20264 min
#crypto opsec#DeFi security#LayerZero
Web3 WatchClipboard Malware Stole $1,200 From a Bybit User Mid-Transfer
A compromised device, one paste, and $1,200 gone to a hacker's wallet. Clipboard hijacking malware is quietly draining crypto wallets worldwide, and most victims only find out after the transaction confirms.
May 6, 20264 min
#Bybit scam#clipboard hijacking#clipboard malware
Web3 WatchArbitrum Moves to Return Stolen KelpDAO ETH. North Korea Got in the Way.
A Snapshot vote backed by 16.9 million ARB tokens moved to return $71M in frozen KelpDAO exploit funds. Then lawyers for DPRK kidnapping victims obtained a federal restraining order that put the entire plan on hold.
May 3, 20268 min
#Arbitrum#DeFi United#exploits