DeFi & Web3 Security12 September 2026
Cozy Finance Drained Again: $170K Lost to a UMA Oracle Manipulation
A false, unchallenged assertion to Cozy Finance's UMA Optimistic Oracle integration triggered a payout an attacker then drained in minutes — the DeFi insurer's second Optimism loss in just over a year.
defi-securityoracle-manipulationuma-protocol
4 min readRead
DeFi & Smart-Contract Security2 September 2026
Cronos Halts Its Own Chain After $75M Tectonic Oracle Exploit
An attacker pumped a thinly-traded governance token 100x in 20 minutes and used it as inflated collateral to drain Cronos's largest lending market — forcing validators to freeze the entire chain.
defi-securityoracle-manipulationsmart-contracts
4 min readRead
Web3 & DeFi Security1 September 2026
Cronos Halts Its Entire Chain to Reverse a $75M Tectonic Exploit
An attacker pumped Tectonic's governance token 100x in 20 minutes to borrow against phantom collateral. Cronos validators froze the whole chain and rolled it back to claw the funds back — trading decentralization for recovery.
defiweb3-securitysmart-contracts
4 min readRead