Security News

BaseCabal is being called an official scam after previously promoting a token drop checker and later launching NFTs that allegedly took money from users. The message warns to avoid the project entirely.

Injective experienced a 3 hours 42 minutes outage after an attack involving the insurance fund. The attacker executed more than 7,000 transactions and withdrew about $4.88M in ETH, while the chain was not rolled back.

Mantra was hacked, putting more than 700M OM at risk. The incident is a major security event affecting the project and its token.

Moonwell was reportedly hacked for $8 million, and the team confirmed the incident. The project says it is taking measures in response.

Fogo was hacked, and 400M FOGO were drained, worth about $3M or roughly 10% of circulating supply. Despite the exploit, the blockchain itself continues operating normally.

Tria was mentioned in a Solana-related hack affecting several neobanks, including Avici and Tria. Users were advised to withdraw funds urgently, while the post says Tria has already handled the issue.

Phantom will stop supporting Sui on September 24. Until then, users need to move Sui assets to another wallet or swap them inside Phantom without fees.

MANTRA Chain suffered an exploit that put roughly 720.9M $OM at risk, forcing the network to pause temporarily. The vulnerability in the Cosmos-EVM stack has now been fixed, the chain is producing blocks again, and user funds were not affected.

SafePal was reported as hacked, with an urgent warning to withdraw funds. This is a security-related incident and should be treated as high priority for users following the project.

SafePal disclosed a data breach affecting nearly 40,000 customers. Exposed information includes names, shipping addresses, and contact details, while seed phrases, private keys, passwords, and funds were not impacted.

Blockaid reported a possible USDC bridge exploit on Arbitrum involving compromised validator signatures. The attacker allegedly moved about $24.15M in USDC and sent the funds to Ethereum for laundering.

Allbridge was hacked for a total of $1.65M. The post points to external details about the incident and its impact.

Movement Labs has filed for Chapter 11 bankruptcy in the United States to restructure its business. The filing follows the Web3Port controversy involving 66M MOVE tokens, which were reportedly sold after listing and helped crash the token price.

Ostium suffered another hack. The update signals a security incident and suggests the project is facing repeated vulnerability issues.

Ostium was exploited in a perp DEX hack that drained about $18M in USDC from Arbitrum. The incident was disclosed after the attacker’s withdrawals were detected.

Bonzo Finance, a decentralized protocol on Hedera, was reportedly hacked for about $9M. The attacker exploited a price oracle vulnerability, inflating prices massively to borrow assets with almost no collateral.

The SEC has dismissed its enforcement case related to MetaMask and Consensys without a final decision. This removes a major regulatory overhang for the company, though the message does not describe any new product action. The development is primarily legal and regulatory in nature.

Summer Finance lost $5.5M in a flash-loan attack. The incident comes as reported cumulative DeFi losses from hacks and exploits have already surpassed $16.69B.