Web3 & Smart Contract Security30 August 2026
Rain Contract Bug Drains $1.1M From 'Self-Custodial' Crypto Cards
An outdated Solana smart contract at payments processor Rain let an attacker seize admin control of card-collateral accounts, draining funds from Avici and Tria customers who believed their crypto stayed under their own control.
web3-securitysmart-contractssolana
4 min readRead
Web3 & Smart-Contract Security15 August 2026
BonkDAO's $20M Governance Attack: The Contracts Worked Exactly as Coded
An attacker spent roughly $4.4M buying BONK to clear a 1% quorum, then pushed a malicious treasury proposal through a near-empty vote — no exploit, no bug, just governance math.
dao-securitygovernance-attackdefi
4 min readRead
Web3 & Bridge Security20 July 2026
Across Protocol's Solana Bridge Hit for $3.35M — Relayer, Not Users, Took the Loss
A July 17 attack on Across Protocol's Solana deployment drained roughly $3.35 million from the project's own relayer, not from bridge users — a result that says as much about bridge architecture as it does about the exploit itself.
web3bridge-securitysolana
4 min readRead