BNB Chain liquidity pool exploit

PancakeSwap's OLPC/LABUBU pool on BNB Chain was exploited, with attackers stealing $1.1M. Funds were moved to Ethereum and Tornado Cash.

avatar

Another bridge exploit, another reminder that cross chain security remains one of crypto’s biggest challenges. This time @axelar disabled Secret Network bridge routes after a $4.7M exploit linked to a @SecretNetwork contract. Axelar’s core infrastructure wasn't affected, but incidents like this continue to hurt confidence across DeFi. Stay safe and always manage bridge risk!!

avatar

Another chain has been hit—this time, the privacy-focused public blockchain Namada. Namada, built on Cosmos, officially confirmed that its protocol was exploited in a security incident. The team is currently investigating and has reached out to relevant parties to coordinate a response. They’ve also issued a public appeal: if the attacker is a white-hat hacker, please contact the team immediately. At this stage, information is extremely limited—no details have been released regarding the scale of losses, the attack method, or the flow of funds. We must wait for further updates. The appeal to “white-hats to come forward” is standard practice for projects facing breaches—it’s essentially an olive branch offered to attackers: return the funds and negotiate a bounty, rather than risk a full-scale investigation. Whether a善意 response follows often depends on whether the attacker is truly a white-hat. A reminder of an old adage: as soon as such incidents occur, fake “compensation,” “snapshot,” or “claim” links quickly emerge. NAM holders should only trust official channels—don’t fall victim to a second scam fueled by panic.

avatar

It wasn't a display issue—I didn't turn on my computer this morning and only checked on my phone. Considering so many people are loudly complaining about this pool, it seemed off. So, let’s wait for the project team to take action on-chain.

avatar

Ancaman serangan siber terhadap pelaku usaha di Indonesia tunjukkan tren peningkatan, dengan Kebocoran data dan serangan ransomware masih jadi ancaman utama. Serangan siber membayangi berbagai sektor industry domestik, mulai dari perbankan, manufaktur hingga layanan kesehatan

avatar

The Secret post-mortem is out. The real story: the people who modified that bridge didn't understand how its own authentication worked. No outside auditor was ever asked to check it. And for three years, no attacker understood it either. The bridge held until (my bet) an AI finally read the contract and saw what every human had missed. The miss is almost dumb in hindsight. The contract started as an escrow bridge, a coat check: it only ever hands back a coat someone checked in earlier, so "is this deposit real?" was answered for free by the ticket logic. Then it was forked to mint Axelar tokens instead. Minted tokens were never checked in, so the ticket logic didn't fit and got deleted. Whoever did that didn't realize those exact functions were the only thing verifying which chain a deposit came from. The Allow List that replaced them checked which token could be minted, never its source. So the door was open from January 2023. Then someone spun up a fake chain, named a real asset like USDT, and minted $4.67M out of nothing. The lesson isn't really about Secret. For three years, finding this took a human willing to read the whole contract, and nobody did. That barrier is gone. An AI reads all of it, closely, for cents. So if your contract is public and hasn't been through an AI audit, assume the attacker's AI is already reading it. Audit yours first.

avatar

Gm gm frens Another major bridge exploit hit Axelar Secret network losing 4.67 million dollars due to smart contract bug in ICS-20 secret network keeping absolutely nothing secret rn 5M is insane Its crazy that this keeps happening The scary part isn’t the amount, it's that we’ve already seen the same playbook hit Resolv, Verus, IoTeX, and now Secret Over $340M has been drained from bridges this year Crypto keeps building faster and Attackers keep finding the same weak spot Same exploit, different bridge, same result Simple as that

avatar

mySwap, which was part of the Starknet ecosystem from day one, has been liquidated. The total loss so far is $300K. They tried to push forward with incentive programs, but as usage dwindled—reportedly down to just 8 or 9 people on Starknet—they gradually faded away. The remaining 5–10 coins had long since been transferred to Ekubo. They’ll now take their place among the dusty pages of history.