🇮🇳 The average Indian spends their life worrying about: • EMIs • Taxes • Fuel prices • Rent Meanwhile, former Reliance Communications executive Amitabh Jhunjhunwala has been arrested by the CBI in a bank fraud case involving numbers most people can't even imagine. According to investigators: • Alleged ₹2,929 crore loss to SBI • ₹19,694 crore exposure across 17 banks • Linked to wider ADAG investigations • Separate ED probes examining alleged frauds exceeding ₹40,000 crore A common person misses a loan payment and the bank starts calling the next day. But when thousands of crores are allegedly diverted, investigations can take years. Who ultimately pays when banks absorb massive losses? The public does.

The bug bounty program has received a high volume of submissions since launch. To give each report the attention it deserves, we're pausing new submissions while we work through the queue. We'll share an update when the program reopens. Thanks to everyone who's engaged so far.

Hee. "Only those who can afford $1M in security measures may remain in the market." > Mythos scanning detected over 20 critical vulnerabilities in Palo Alto Networks’ proprietary source code, consuming over $1 million in tokens.

Bitcoin. No crypto. “The DAO no longer has a viable path forward.” Unable to recover from the cyberattack that cost it approximately $50 million, Radiant Capital is shutting down.

Whitehat recovery: researcher Florent coordinated with the HongCoin team to unlock ~1,003 ETH (~$2M) stuck in a 2016 ICO refund contract due to legacy overflow/refund-logic bugs. #Ethereum #SmartContractSecurity

Reentrancy Decoded - The Smart Contract Bug Still Draining Millions in 2026, and the Checks-Effects-Interactions Pattern That Stops It in Code Reentrancy is not magic. It is an ordering bug: your contract updates its own state AFTER it makes an external call instead of before, and an attacker calls back in during that gap. Fix the order and the bug is gone. The DAO lost about 3.6M ETH (roughly $60M, around 5% of all ETH then in existence) to this exact mistake on June 17, 2016. The fallout split Ethereum into ETH and ETC. Ten years on, it is still draining funds. Solv Protocol lost $2.73M to a reentrancy on March 5, 2026, and roughly $52M was stolen across onchain protocols in May 2026 (DeFiLlama via CryptoTimes, May 31, 2026). The vulnerable pattern: read the balance, send the ETH with a low-level call, THEN set the balance to zero. The attacker's receive() function re-enters withdraw() before that zero ever lands, and loops until the contract is empty. Two fixes, used together: Checks-Effects-Interactions. Validate, update ALL state, then make the external call LAST. Move balances[msg.sender] = 0 above the call and the re-entrant call reads zero and reverts. OpenZeppelin's nonReentrant guard. A storage mutex (NOT_ENTERED to ENTERED) that reverts on re-entry. Use it AND CEI, not one or the other. Two things most developers still get wrong. 1. .transfer() is no longer a shield: the 2300 gas stipend stopped being a safe assumption when EIP-1884 raised SLOAD gas in 2019. Use .call{value:}("") with CEI. 2. read-only reentrancy bypasses a standard guard, because a view function read mid-update returns corrupted state and can poison a price oracle (dForce, $3.64M). For educational purposes only. Not financial advice. Follow for daily insights - where blockchain meets AI, one satisfying swipe at a time. #Solidity #SmartContractSecurity #Web3Security #Ethereum #DeFi #SmartContracts #BlockchainDeveloper #SolidityDev #EVM #OpenZeppelin #Reentrancy #Web3Dev #BlockchainSecurity #DeFiSecurity #SmartContractAudit #CodeSecurity #OnChain #BlockchainEducation

📉 Crypto Exploit Losses Drop 90% in May Amid Fewer Major Hacks Losses from exploits and vulnerabilities in crypto platforms fell sharply in May 2026, totaling $68.3 million, according to CertiK’s latest report. This represents a nearly 90% decline from the $650 million reported in April, making May the third month of the year with losses under $100 million. The largest incident targeted the Verus Protocol cross-chain bridge, with attackers stealing approximately $11.5 million. The second-largest exploit impacted THORChain, resulting in $10.1 million in losses. Cross-chain bridges accounted for 42% of the total stolen, or about $28.6 million. Smart contract vulnerabilities remained the costliest risk vector, representing roughly 66% of all reported losses—around $45 million. CertiK confirmed a total of 29 security incidents during the month, highlighting that risks persist despite the significant reduction in stolen funds. The report also flagged emerging threats from AI-assisted malware targeting developers and technical teams within the blockchain ecosystem. Additionally, about $9.4 million of stolen funds were successfully recovered in May. While attacks on administrative wallets and private keys continue to pose risks, the lack of large-scale hacks significantly eased pressure on the crypto market compared to previous months. Disclaimer: This content is for informational purposes only and does not constitute financial or investment advice.

JUST IN: Crypto Fraud Losses Hit $11B