Hacked target: Superchain Eco
Description of the event: According to monitoring by Scam Sniffer, the X account of Superchain Eco (@SuperchainEco) was compromised and used to post phishing links.
Attack method: Account Compromise
HACKED ARCHIVE
Hacked Event Broadcast
Verified blockchain security incidents with original evidence and historical event dates.
Live source archive
Hacked target: FEG
Description of the event: The FEG project suffered an attack resulting in a loss of approximately $1 million. Analysis suggests that the root cause of the incident appears to be a composability issue arising from the integration with the underlying Wormhole cross-chain bridge, which facilitates cross-chain message and token transfers.
Amount of loss: $ 1,000,000Attack method: Security Vulnerability
Hacked target: Standing on Bizness (BIZNESS)
Description of the event: Standing on Bizness (BIZNESS) appears to have been subjected to a reentrancy attack on Base, resulting in an estimated loss of $15,700.
Amount of loss: $ 15,700Attack method: Reentrancy Attack
Hacked target: Yat Siu
Description of the event: Animoca Brands tweeted that @ysiu social media account has been compromised. There is no official token or NFT launch from Animoca Brands. The token launch on Solana as claimed in a post was made by the hacker. Please do not engage with the account and stay vigilant.
Attack method: Account Compromise
Hacked target: Moonhacker
Description of the event: The Moonhacker contract suffered a flash loan attack, resulting in a loss of approximately $320,000.
Amount of loss: $ 320,000Attack method: Flash Loan Attack
Hacked target: zkPass
Description of the event: According to Scam Sniffer's monitoring, the privacy-preserving data verification protocol zkPass's X account was compromised and used to post phishing tweets.
Attack method: Account Compromise
Hacked target: Vivek Ramaswamy
Description of the event: Regarding rumors about the collaboration between DOGE and USUAL, Azoria CEO James Fishback clarified that he had contacted DOGE's head of department, Vivek Ramaswamy, whose account was compromised.
Attack method: Account Compromise
Hacked target: Slurpycoin
Description of the event: Slurpycoin on BSC suffered a flash loan attack. The attacker exploited the buyback mechanism to manipulate the token price and profited ~$3K from sandwich arbitrage.
Amount of loss: $ 3,000Attack method: Flash Loan Attack
Hacked target: HarryPotterObamaSonic10Inu
Description of the event: A series of exploiting transactions on Ethereum targeting the liquidity pool of the HarryPotterObamaSonic10Inu 2.0 token. The attacker profited approximately $243K and deposited the funds into Tornado.
Amount of loss: $ 243,000Attack method: Price Manipulation
Hacked target: Anthropic
Description of the event: The official X account of AI startup Anthropic, backed by Amazon, appears to have been compromised, posting an unknown token contract address related to AI Agents.
Attack method: Account Compromise
Hacked target: GemPad
Description of the event: The lock contract of the DeFi platform GemPad was exploited on the BSC, ETH, Base, and Polygon networks, resulting in a loss of approximately $2 million.
Amount of loss: $ 2,000,000Attack method: Contract Vulnerability
Hacked target: BTC24H (BTC24H)
Description of the event: BTC24H (BTC24H) is suspected to have been attacked on Polygon, with an estimated loss of $85,700.
Amount of loss: $ 85,700Attack method: Contract Vulnerability
Hacked target: Decentralized Finance (DCF)
Description of the event: Decentralized Finance (DCF) was attacked on the BSC chain, resulting in a loss of approximately $8,800.
Amount of loss: $ 8,800Attack method: Flash Loan Attack
Hacked target: Drake
Description of the event: Canadian rapper Drake's X account (with over 39 million followers) was allegedly compromised on Saturday evening, promoting a Solana meme coin based on his cartoon "alter ego" character. The coin's trading volume reached $5 million at one point, but it was later confirmed to be a scam, and the related posts have been deleted.
Attack method: Account Compromise
Hacked target: JHY (JHY)
Description of the event: A suspicious attack involving JHY (JHY) occurred on the BSC chain, resulting in a loss of approximately $11,200.
Amount of loss: $ 11,200Attack method: Contract Vulnerability
Hacked target: bnbs (bnbs)
Description of the event: A suspicious reentrancy attack involving bnbs (bnbs) occurred on the BSC chain, resulting in a loss of approximately $20,300.
Amount of loss: $ 20,300Attack method: Reentrancy Attack
Hacked target: Clober
Description of the event: Clober DEX liquidity vault on Base Network was exploited resulting in a loss of 133.7 ETH (~$501k). The root cause of the attack was a reentrancy vulnerability in the _burn() function of the Rebalancer contract.
Amount of loss: $ 501,000Attack method: Contract Vulnerability
Hacked target: Haven Protocol
Description of the event: The algorithmic stablecoin protocol Haven Protocol has issued a warning about a hack exploiting a vulnerability in "range proof validation." This flaw allows attackers to mint illicit XHV undetected. According to reports from exchanges, the amount of XHV exceeds 500 million tokens, while audit data indicates a current supply of only 263 million tokens. The surplus is likely generated through this exploit. The team found a weakness in the "range proof validation", which was introduced after the Haven 3.2 rebase to Monero and has advised exchanges to halt trading on all pairs.
Attack method: Contract Vulnerability
Hacked target: LABUBU (LABUBU)
Description of the event: A suspicious attack involving LABUBU (LABUBU) occurred on the BSC chain, resulting in a loss of approximately $11,900.
Amount of loss: $ 11,900Attack method: Contract Vulnerability
Hacked target: Cardano Foundation
Description of the event: The Cardano Community posted on X, stating that the Cardano Foundation's X account has been compromised. They are currently addressing the issue and advised users to temporarily ignore all posts from the account.
Attack method: Account Compromise