Back to Blog

Defi

4 articles on this topic.

Web3 & Exchange Security10 August 2026

Coinsbuy's $8M Cross-Chain Drain: When Wallets Refill, the Keys Weren't the Problem

An attacker emptied eleven Coinsbuy wallets across Tron and Ethereum in under an hour, then laundered the proceeds through an instant-swap service before the exchange quietly topped the wallets back up — a strong signal the breach sat in withdrawal logic, not key custody.

web3-securityexchange-securitycross-chain
4 min readRead
Web3 & Smart Contract Security22 July 2026

Wanchain Bridge Exploit Drains $9M in NIGHT Tokens: A Signature-Reuse Lesson

A flawed message-encoding scheme in Wanchain's Cardano–BNB bridge let an attacker reuse a legitimate signature to drain 515 million NIGHT tokens — a reminder that bridge validators, not the chains they connect, remain the weakest link.

bridge securityweb3cardano
4 min readRead
Web3 & Bridge Security20 July 2026

Across Protocol's Solana Bridge Hit for $3.35M — Relayer, Not Users, Took the Loss

A July 17 attack on Across Protocol's Solana deployment drained roughly $3.35 million from the project's own relayer, not from bridge users — a result that says as much about bridge architecture as it does about the exploit itself.

web3bridge-securitysolana
4 min readRead
DeFi Security29 June 2026

Counter-MEV Honeypot Drains jaredfromsubway.eth of $7.5 Million

Ethereum's most-active sandwich-attack bot was beaten at its own game — tricked by 66 fake token contracts into handing over real WETH, USDC, and USDT in a single sweep transaction.

mevdefiethereum
4 min readRead