DeFi protocol exploit

Aug 31, Float Protocol lost ~10.71 ETH ($28,000) via flash loan manipulation of Uniswap V3 pool, exploiting Hypervisor contracts' lack of TWAP or oracle validation.

avatar

Cronos $CRO @CronosApp Activity in the Last 24H: - price: 0.057ct - trading volume: 5.43M - market cap: 2.72B - transactions: 0 - DEX Volume: 4.7M - perpetual volume: 320K - TVL: 258M +27% 📈 - app fees: 21.7K - app revenue: 3.2K Validators halted Cronos after a Tectonic exploit of 75M that have been affected and 6M got bridged offchain before the halt. The chain was rolled back to block 90,896,189. That is why the dashboard now shows 0 transactions for the last 24h Quick Network insights: This is not a normal activity day. The chain was stopped, rolled back and TVL is restored on DefiLlama. Address counters are effectively zero until normal block production resumes and dashboards catch up.

avatar

Cronos $CRO @CronosNetwork Activity jumps 947% after the network has been halted 📈 No negative energy for Cronos 💠

avatar

I genuinely think $INJ should be sitting in the top 10 right now. Not because of hype. The stack is getting hard to ignore. @injective is building around RWAs, trading, stablecoins and AI agents. → SEC-registered transfer agent → MiCA access in Europe → Native USDC → Tokenized real-world assets with major enterprises → CFTC-regulated $INJ futures → EVM + WASM on one chain → AI agents that can trade, pay and settle on-chain And this isn’t just another L1 collecting TVL and calling it innovation. Injective is trying to build the financial rails. At around a $500M market cap, I honestly think the market is pricing $INJ for what it is today, not what this stack could become. Top 10? Yeah, I said it. Now let the market argue with me GN #Injective $INJ

avatar

INJECTIVE GOT HACKED LAST NIGHT?!? The most important point first: this was not a hack of Injective’s core security. The chain was not breached. What appears to have happened is a bug in the binary-options / insurance-fund settlement path. A ratio that should have been 1:1 was able to resolve closer to 1:2. The actor started with about $9,100 of their own funds and repeated that loop for several hours until the network halted. Funds are still sitting in one ETH address. No mixers. No splitting. That makes recovery or a settlement realistic, and the address has already been flagged. Injective team will most likely disclose the; root cause, who was affected, the size of any shortfall, and how it is being covered. That transparency will settle the community faster than speculation will. The fact that THIS WAS A BUG, not a core-chain breach, still speaks to Injective’s underlying resilience. A professional attacker did not break the infrastructure. A flaw did, and flaws can be patched. Stay calm, ignore fake recovery links, and wait for the official statement. Ninjas don’t panic. We wait for facts and then we build. $INJ

avatar

Good Morning on Taco Tuesday 🌮 Ready to grind? 💪 Sitting here wondering how on earth a 'hacker' was able to steal $75 MILLION from Tectonic in a 'Price Manipulation Attack'!! 😲 🫨 Royally fucking up Cronos in the process!! Well while I wait I'm just going to play Wolfage from Wolfswap and Crooks Empire from @CrooksFinance and keep accumulating $PACK 🔥 #Crofam will prevail 🫂

avatar

When @FlamingoFinance launched in 2020, it hit a TVL of nearly $1.6 billion. On August 29, the remaining $500,000 was mostly drained. It's now been 3 days. Nothing publicly from @Neo_Blockchain. No warnings. No acknowledgment. No plan forward. Nothing. No one has said a word outside a few Discord messages. How did it happen? A user (maybe random, maybe not, who knows?) figured out how to mint trillions of $FLM and drain the platform's LPs. They minted approximately 2.19 TRILLION FLM, using an attack vector between Flamingo's lending and staking contracts. Then swapped it for nearly everything of value. According to the Flamingo Discord server, only about 11k $bNEO and some $FUSD were left behind. That bNEO was left behind because the on-chain OrderBook contract made it technically impossible to imbalance the pools so drastically. And the FUSD? Well, the Flamingo team doesn't know why that was left behind, either. The bigger problem? Earlier this year, the Flamingo Finance maintainers publicly released a letter alleging that Neo Global Development and Neo Foundation failed to deliver promised assets and operational support. For years, the team has publicly called for changes to the Neo code to lower transaction costs. (Worth noting: the Flamingo Finance maintainers do not hold the keys to their own smart contracts, and that contract-upgrade authority rests with NGD and NF.) More recently, the Flamingo team asked for help in resolving: > widespread CEX delistings, > bridge issues from dependency problems, and worse, > disbursements they expected to receive from NGD and NF that never arrived. Those calls fell on deaf ears. Now what? The Neo Council has voted to freeze the attackers wallet. The address is: NcNCXJf2H8GSHp8MYSgJRCjRvPjznasZMy. At this point, I'm not certain how much of the stolen funds have been liquidated or moved out of the Neo ecosystem. Neo is currently embroiled in a battle between the two co-founders who are fighting over a $400 million treasury (as of Q1 2026). Flamingo was the largest activity-driving platform in the ecosystem. Now Neo doesn't even have that.

avatar

A TOKEN TRADING JUST $11K A DAY HELPED BRING DOWN AN ENTIRE BLOCKCHAIN. tectonic:native, the governance token of Tectonic, had only $1.34M in liquidity. Someone pushed its price 100x in just 20 minutes. The oracle accepted that price as real. Suddenly, the attacker’s tectonic:native looked like it was worth $375M. He then used that inflated value as collateral and borrowed $54M USDC, $45M USDT, 95 wrapped BTC and 39M CRO. But the damage didn’t stop there. The fake price triggered liquidations across Tectonic. 752 users lost $8.71M, even though many of their loans were healthy just an hour earlier. Then Cronos itself stopped producing blocks. Transfers, wallets and contracts on the network were frozen. Around $6M escaped to Ethereum, while another $60M remained stuck on a chain that had stopped running. The bigger problem? Tectonic held 46% of all deposits in Cronos DeFi. One thinly traded token, one bad price signal, and a problem at one protocol quickly became a problem for the entire chain.

avatar

You want a marketing plan? Even though technically we already have one 🤫🤣 Let the hackers pay for it. 😂 Every time they attack ICP, they’re spending money and burning ICP in the process — making the network more deflationary.🔥🔥

avatar

Y’all want a marketing plan? How about every time hackers attack your network, they BURN ICP in the process? 🔥 They’re literally spending money to attack the network while making ICP more deflationary. How does that sound? 😂 ICP WILL BECOME THE WORLD COMPUTER. 🌎☁️