Rekt

Tectonic - Rekt

Mon, 14 Sep 2026 14:03:13 +0000

An attacker pumped Tectonic's TONIC token roughly 300x and borrowed $120.4 million against the inflated collateral. Cronos rolled back 10,961 blocks to recover $111.2 million; $9.19 million had already left the chain and remains unrecovered.

_{-- Delivered by RssEverything service}

Nesa - Rekt

Fri, 11 Sep 2026 19:13:17 +0000

An attacker bridged 257.7 million NES, roughly $50 million, from Nesa to Ethereum in an incident consistent with the Cosmos EVM bug chain that hit MANTRA, TAC, and KiiChain. Nesa never published the mechanism; Bubblemaps estimated slippage cut net profit to roughly $60k.

_{-- Delivered by RssEverything service}

Kiichain - Rekt

Wed, 02 Sep 2026 17:13:30 +0000

An attacker drained 148.3 million KII, worth roughly $9.7 million at the pre-exploit price, from KiiChain through the Cosmos EVM exploit class that also hit MANTRA and TAC. A halt immobilized 54.4% on-chain, but the rest had already crossed to BNB Chain.

_{-- Delivered by RssEverything service}

TAC - Rekt

Tue, 01 Sep 2026 15:00:07 +0000

An attacker drained 2.985B TAC (~$7.5M) from its bonded-token pool via the Cosmos EVM underflow bug that hit MANTRA. TAC halted four hours too late, funds already bridged out. Cosmos Labs had the bug since April but apparently misjudged its severity.

_{-- Delivered by RssEverything service}

Mantra - Rekt

Mon, 31 Aug 2026 13:37:52 +0000

An attacker drained 720M MANTRA, worth $3.6 million per Mantra’s postmortem, through a confirmed Cosmos EVM underflow bug. The halt came too late for 94.7% of it, which had already reached an exchange. Three more chains fell to the same flaw days later.

_{-- Delivered by RssEverything service}

Term Labs - Rekt

Wed, 26 Aug 2026 14:00:13 +0000

Near-zero voter participation let one wallet seize control of Term Labs’ vaults for minimal cost, bypass the governance delay, and drain approximately $8.5 million. The attack exploited governance, not a core vault-code bug.

_{-- Delivered by RssEverything service}

Total Exposure

Tue, 25 Aug 2026 09:30:09 +0000

France’s tax authority confirmed data was extracted on 678,000 people and professionals. An insider allegedly used similar access to target crypto investors. Now a purported DGFiP dataset has been listed for sale for thousands of euros.

_{-- Delivered by RssEverything service}

Blockchain Intelligence Hunger Games

Thu, 20 Aug 2026 14:57:34 +0000

ICE handed rival TRM Labs a $94.6 million sole-source award, and Chainalysis is suing over it, calling the process rigged. But Chainalysis has taken sole-source ICE deals too. The real fight isn't who builds the tool. It's who watches how it's used.

_{-- Delivered by RssEverything service}

Harmony - Rekt

Tue, 18 Aug 2026 14:56:07 +0000

Estimated $3.2 million lost after unauthenticated proof fields let old cross-shard receipts replay, crediting ONE without a source debit. Harmony confirmed an initial 4 billion ONE mint, its broader reconstruction reached 3.01 trillion. A rollback is planned and exchanges remain unnamed.

_{-- Delivered by RssEverything service}

Coinsbuy - Rekt

Fri, 14 Aug 2026 15:00:48 +0000

$8.07 million lost from Coinsbuy across TRON and Ethereum in under an hour, then refilled ten drained wallets within half a day. One blog post since, no follow-up, Twitter account dormant since 2020. Nobody has said what actually failed.

_{-- Delivered by RssEverything service}

Cold Card - Rekt

Thu, 13 Aug 2026 14:13:28 +0000

A firmware vulnerability silently routed Coldcard's hardware RNG for a guessable software fallback, letting attackers brute-force seeds offline. No phishing, no malware. $130 million reported stolen so far, at least 15 attackers, most funds still untouched, nobody caught.

_{-- Delivered by RssEverything service}

Wrong Attack Surface

Fri, 31 Jul 2026 14:17:21 +0000

The numbers may differ, but the signal holds. The biggest crypto losses of H1 2026 passed every audit. The real attack surface was the keys, signers, and people around the code, not the code itself.

_{-- Delivered by RssEverything service}