8 Aug 2026, 06:41 UTC380 views1 reactionsread 8 August 2026 🚨 atomic.green - Loss ~$29,984 (2026-08-07)
Network: Arbitrum
Type: Flash Loan / Price Oracle Manipulation
Atomic (non-custodial leveraged trading + isolated "AtomicLending" on Arbitrum) was drained via a flash-loan price manipulation. A fresh EOA (nonce 1) called an exploit contract that took an Aave V3 ARB flash loan, then manipulated the Uniswap V3 ARB/USDC.e pool (0xcda53b...dad8) used to value the protocol's …
❤1
7 Aug 2026, 10:26 UTC653 views1 reactionsread 8 August 2026 Photo
Yesterday we reported a governance attack to PantherProtocol.io which drained 5.12M $ZKP.
Attacker submitted a governance proposal named "zkp-reexploit" to upgrade each ZKP proxy to the drainer impl. Then they posted a "yes" answer with the 0.5 ETH bond. No honest party counter-bonded a "no" within the 12h timeout + 8h cooldown. The answer finalized and the module dutifully executed the drain.
We do our best and al…
❤1
7 Aug 2026, 06:18 UTC601 views4 reactionsread 8 August 2026 Photo
🚨 Arbitrary Call Injection in Unistreet.org on Ethereum - Loss ~$17750
LaunchpadFactoryAuto's launch() forwards attacker-supplied initCalldata/modifyCalldata verbatim into PositionManager.multicall() with the factory as msg.sender and no validation. The factory custodies every launch's Uniswap V4 LP position NFT, so the attacker passed modifyCalldata = setApprovalForAll(exploitContract, true), making the factory gra…
❤4
6 Aug 2026, 11:48 UTC648 views1 reactionsread 8 August 2026 💌 Onchain message:
Hello Whitehat, We've seen that you've exploited an vulnerability in us and rescued the user funds from us. We are looking forward you to send back us the funds for little bounty amount as reward. We've texted you on blockscan with the same address. Please reach out. We are looking to hear from you.
📤 From: 0x753d36150672065ce0025b64cda62be439dabe0d
📥 To: 0x2352a1fca90182509dca9c12b2cad582a38e8b…
❤1
6 Aug 2026, 08:50 UTC684 views3 reactionsread 8 August 2026 💌 Onchain message:
Hi,
I am the victim of the phishing attack (wallet: 0x3a5385D8eB0d05B006edFF978BA4b95c51F70B5c).
You stole approximately 500,000 USDC from me on Base. Attack transaction: 0xd2324b49161b53218651eae2852f8684fa68015cfcada94e5c0ad14030fc62ba
I have identified relevant information and collected on-chain and device-related evidence. A police report has already been filed, and the legal authorities are …
😁3
6 Aug 2026, 08:47 UTC717 viewsread 8 August 2026 💌 Onchain message:
Hi,
I am an ordinary DeFi user. Earlier today, one of my wallets was phished and suffered a loss of approximately 500,000 USDC on Base.
Attack transaction:0xd2324b49161b53218651eae2852f8684fa68015cfcada94e5c0ad14030fc62ba
The attacker swapped all the stolen USDC for only about 67 WETH (resulting in a loss of roughly 370,000 USDC) on a Uniswap V4 WETH/USDC pool due to the absence of slippage prote…
6 Aug 2026, 06:09 UTC628 views3 reactionsread 8 August 2026 Photo
🚨 Governance Takeover of Strongblock.com - Loss $72K
Token: $STRONG
Network: Ethereum
The attacker exploited StrongBlock's abandoned on-chain Governor. Holding a majority of the now near-worthless STRONG vote token, they pushed a proposal calling setPendingAdmin(attacker) on the Governor's Upgrader, voted it through, queued and executed it - seizing admin control of the Governor proxy.
They then upgraded the proxy…
❤3
5 Aug 2026, 05:16 UTC646 viewsread 8 August 2026 🚨 Nereus Finance (Shapeshifters Market) - Loss $23.76K (2026-08-04)
Network: Ethereum
Type: Private Key Compromise (malicious proxy upgrade)
The NereusShapeshiftersMarket NFT marketplace (TransparentUpgradeableProxy 0x6de0…6d73) was drained via a malicious implementation upgrade. The proxy's admin key (0x863b…4076, an EIP-7702-delegated EOA holding ProxyAdmin ownership) was used to call ProxyAdmin.upgradeAndCall, …
4 Aug 2026, 06:06 UTC757 viewsread 8 August 2026 🚨 NEX (on PancakeSwap) - Loss ~$19K (2026-08-03)
Token: $NEX
Network: BNB Chain
Type: Logic Error (double-spend in token _transfer)
The NEX token's _transfer has a fall-through bug: the router branch calls super._transfer(from,to,amount) and then execution continues to a second unconditional super._transfer(from,to,amount), so any transfer to/from the PancakeSwap router moves tokens TWICE. The attacker flash-borro…
3 Aug 2026, 06:00 UTC784 views1 reactionsread 8 August 2026 🚨 LpdFi - Loss ~$690K (2026-08-02)
Token: $LPD
Network: BNB Chain
Type: Oracle / Price Manipulation (flash-loan)
LpdFi's Lpd.price() derives the LPD price straight from the spot reserves of the PancakeSwap LPD/USDC pair, with no TWAP or manipulation guard. The attacker flash-borrowed USDC, skewed the pair reserves (donate + sync), which let an order's uAmount value the "interest" far above what its LPD collateral …
❤1
2 Aug 2026, 10:59 UTC870 viewsread 8 August 2026 💌 Onchain message:
This wallet drained funds on Jul 21, 2026 via a phishing site and its activity is being tracked by blockchain forensics firms and has been reported to FBI IC3, Chainalysis, and every major exchange compliance team. Any attempt to move, swap, or cash out these funds will be flagged and frozen at the exchange or bridge level. You have 48 hours to return 80% of the funds to this address. Keep 20% and…
1 Aug 2026, 08:27 UTC937 views10 reactionsread 8 August 2026 🚨 Private MEV/Arb Bot (0xa317…c170) - Loss ~$31.7K (2026-07-30)
Token: $WETH @ $1904.74
Network: Base
Type: Access Control (unprotected arbitrary-call function)
A Uniswap V3 arbitrage bot (deployed & owned by EOA 0x3862…3f53) exposes function 0x42be3129 with NO access control — it executes a caller-supplied target+calldata and forwards the output to msg.sender. Only 0x23a69e75 is onlyOwner-gated. The attacker depl…
😁10
Showing the 12 most recent of 23 posts we hold for @defimon_alerts. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.