The attack targeted a verification flaw in a third-party Supra oracle contract integrated with Bonzo Lend, a lending protocol operating on the Hedera network. By manipulating price data fed through the compromised oracle, the attacker drained roughly $9.05 million from the platform. The incident wiped out about 77%
Security firm Immunefi's latest report highlights a widening gap between the frequency of crypto attacks and the financial damage they cause. During the first half of 2026, the industry recorded 207 hacking incidents, the highest number ever logged for a six-month period. Despite this surge in attack
Layer-2 networks are increasingly capturing the stablecoin transaction flows that could shape the future of crypto payments, according to adjusted June data from Visa. Coinbase's Base network processed roughly $565 billion in stablecoin volume, signaling that dollar-denominated transfers are shifting away from the Ethereum mainnet toward
A governance attack has cost the BONK memecoin project roughly $20 million after an attacker exploited its voting system to seize control of treasury funds. According to reports, the attacker spent about $4 million acquiring enough BONK tokens to unilaterally pass a malicious governance proposal, which directed the group'
DeFi protocol Summer.fi has suspended operations on its Lazy Summer vaults after an exploit drained roughly $6 million from the platform. The pause is intended to contain the damage and prevent further losses while the team investigates how attackers breached the vaults' defenses. News of the incident weighed
A vulnerability in Summer.fi's Lazy Summer Protocol allowed an attacker to manipulate the platform's redemption mechanism, according to security analysts reviewing the incident. The exploiter reportedly borrowed a $65.4 million flash loan and used it to secure a $70.9 million redemption, netting roughly
As yield-bearing stablecoins approach a combined $50 billion market capitalization, Artem Tolkachev, chief RWA officer at Falcon Finance, contends the industry is fixated on the wrong measure of success. Writing in an opinion piece, Tolkachev argues that competitive returns alone will not sustain stablecoin projects over the long term.
Aave, a leading decentralized lending protocol, has expanded its reach onto the Monad blockchain, and the new market has quickly attracted user capital. Just two days after launch, deposits on the Monad deployment surpassed $100 million, signaling strong early demand for lending and borrowing on the network. The momentum coincides
DeFi lending protocol Edel has disclosed a $403,000 exploit that targeted the infrastructure enabling tokenized stocks to serve as on-chain collateral. Rather than relying on price movements in the underlying equities, the attacker manipulated the protocol's oracle layer, exposing a structural weakness in how tokenized assets
Taiko has brought its cross-chain bridge back online through a phased recovery process that included an independent security review, following a $1.7 million exploit ten days earlier. Cross-chain bridges, which move assets between blockchain networks, are frequent targets for attackers due to the large sums they hold
A DeFi lending protocol suffered an oracle-style manipulation after an attacker artificially inflated the price of a tokenized Google share used as collateral, pushing its reported value to roughly 78 times, or about 7,700% above, its real market price. With the collateral overvalued, the attacker borrowed heavily against
Symbiotic has released Core V2, marking a strategic shift toward building shared collateral infrastructure for decentralized finance. The upgrade repositions the protocol beyond its earlier focus, aiming to provide a unified foundation that can underpin a range of financial applications. According to the project, Core V2 is designed to support