Web3 Daily Exploits — 07 Sep 2026: Liquid $320M Whitehat Peg-Out + Cozy $170K

Liquid Network sees ~4,000 BTC (~$320M) unauthorized peg-out claimed as whitehat; Cozy Finance loses ~$170k on Optimism via UMA oracle abuse; Secured Finance ~$104k price-manipulation drain on Ethereum; Rocket $287k update.

Web3 Daily Exploits — 06 Sep 2026: Reddio ~9.25 ETH Vault Double-Count + Autonolas Gov Attempt

A quiet window produced one confirmed low-value vault exploit and one blocked governance attempt. Reddio’s RedSonic Vault lost approximately 9.25 ETH to a cross-vault double-counting flaw; a malicious Autonolas proposal targeting ~40 ETH remains unexecuted.

Web3 Daily Exploits — 05 Sep 2026: Notional $1.7M Overflow + Dream Health $72k Logic Drain

Notional Finance lost ~$1.73M on Ethereum via an unsafe uint128 downcast in free-collateral checks. A separate ~$72k logic flaw drained Dream Health Chain awards on BSC.

Web3 Daily Exploits — 04 Sep 2026: Notional $1.7M integer overflow drain

Notional Finance lost ~$1.7M on Ethereum via an unsafe uint128 downcast in free-collateral checks. Attacker minted extreme fCash pairs and drained escrow before mixing via Tornado Cash.

Web3 Daily Exploits — 03 Sep 2026: Quiet window with governance alert and small drain

No major new exploits confirmed in the last 24 hours. Smaller alerts include a Yam Finance governance takeover attempt and a ~6 ETH GebProxyActions drain on Ethereum.

Web3 Daily Exploits — 2 Sep 2026: Yam governor grab, Geb 5.94 ETH drain

Yam Finance faces an active Timelock takeover vote with about $337K still at risk. SlowMist confirmed a GebProxyActions drain of ~5.94 ETH; no new eight-figure protocol hacks landed in-window.

Web3 Daily Exploits — 1 Sep 2026: Injective drain, Aquifer emptied, Tectonic rollback

Injective halted nearly four hours after a likely binary-options settlement bug; bridged proceeds near $4.9 million in ETH have not moved. Aquifer on Solana was emptied for about $2.47 million, and Cronos finished rolling back the August 30 Tectonic attack.

Web3 Daily Exploits — 31 Aug 2026: Cronos halted after Tectonic drain

Cronos remains halted after Tectonic's TONIC manipulation attack. Firms cite about $75M; a reconstruction puts the hole nearer $119M, with smaller drains at More Markets, Balancer V1, and Float.

Web3 Daily Exploits — 30 Aug 2026: Fogo halts mainnet after 400M-token foundation compromise

Fogo paused its SVM Layer-1 after a foundation compromise moved 400 million FOGO, worth about $3 million. On Ethereum, Ajna confirmed a ~$775,000 liquidation-accounting exploit, while Rain said Avici and Tria cardholders have been repaid after Friday’s Solana card-contract drain.

Web3 Daily Exploits — 29 Aug 2026: Rain card stack drained; Ajna v2 hit for $775K

Rain’s legacy Solana card contract was abused across Avici and Tria prepaid balances, while Ajna v2 lost about $775K to liquidation accounting manipulation on Ethereum.

Web3 Daily Exploits — 28 Aug 2026: Moonwell’s $8.7M MAMO hit; CCC pair drained on BNB

Moonwell on Base is still the window’s largest confirmed loss after an illiquid-collateral price attack; a separate CashCowCoin drain on BNB Chain took about $117K.

Web3 Daily Exploits — 27 Aug 2026: Moonwell on Base left with ~$9M bad debt after MAMO collateral attack

Moonwell Base Core markets were drained via manipulated MAMO collateral; about $8.7M DAI now sits on Ethereum while protocol-side bad debt is tracking near $9.15M.

See all