Security News

Ostium was exploited in a perp DEX hack that drained about $18M in USDC from Arbitrum. The incident was disclosed after the attacker’s withdrawals were detected.

Bonzo Finance, a decentralized protocol on Hedera, was reportedly hacked for about $9M. The attacker exploited a price oracle vulnerability, inflating prices massively to borrow assets with almost no collateral.

The SEC has dismissed its enforcement case related to MetaMask and Consensys without a final decision. This removes a major regulatory overhang for the company, though the message does not describe any new product action. The development is primarily legal and regulatory in nature.

Summer Finance lost $5.5M in a flash-loan attack. The incident comes as reported cumulative DeFi losses from hacks and exploits have already surpassed $16.69B.

BonkDAO was hit by a malicious governance vote that drained about $20M in $BONK from the treasury. The team says it is working with exchanges, the Solana Foundation, and law enforcement to investigate and recover the funds.

MRKT, Telegram’s gift marketplace, was hacked after a bug allowed users to reuse balances multiple times to buy expensive gifts. The platform’s losses are estimated at about $500,000.

Drift was reportedly hacked. The message points to a security incident affecting the Solana-based project.

Analysts found a possible connection between the hacks of Humanity Protocol and Kelp DAO. The stolen funds were merged in one transaction, suggesting the same attackers may be involved.

Taiko reportedly suffered a security incident after developers accidentally exposed a secret key in a public GitHub repository. An attacker allegedly used it to impersonate a trusted network participant and withdraw about $1.7M.

Taiko confirmed a breach of its network verification mechanism. The team warned users to withdraw funds from bridges as their security can no longer be guaranteed.

Secret Network suffered a smart contract exploit that resulted in about $4.67 million being withdrawn by attackers. The issue came from an ICS-20 contract vulnerability on Secret Network used for cross-chain interaction with Axelar through Cosmos IBC.

Drift is verifying compensation for users affected by a recent hack. The project is checking payouts from its insurance fund and $DFX allocations, with a conversion rate of 1 DFX = $1 in losses based on a snapshot taken on April 1, 2026.