🚨 Edel Finance Suffers $403,000 Exploit Through Collateral Price Manipulation Edel Finance, a decentralized lending protocol focused on tokenized real-world assets, has suffered an exploit that resulted in approximately $403,000 in losses after an attacker manipulated the valuation of collateral within one of its lending pools. The incident was first detected by on-chain monitoring services before the protocol confirmed the exploit. The attack created significant bad debt and drained most of the liquidity available in the affected lending pool. What's Happening? The attacker targeted the pricing mechanism for wGOOGLx, a wrapped token representing tokenized Google equity that could be used as collateral within the protocol. According to Edel Finance, the asset's valuation relied on the share-to-asset exchange rate of an ERC-4626 vault. By combining a flash loan with a rapid sequence of deposits and borrowing transactions, the attacker temporarily manipulated the vault's exchange rate, inflating the reported on-chain value of the collateral to nearly 78 times its actual market price. Using the artificially inflated collateral, the attacker borrowed substantially more assets than normally permitted, initially withdrawing approximately $204,000 in USDC and additional tokenized assets. After accounting for all affected positions, the protocol estimated the total loss at roughly $403,000. The stolen funds were later transferred through a privacy mixer. Key Details • Estimated losses total approximately $403,000. • The exploit targeted the tokenized collateral asset wGOOGLx. • The reported collateral price was inflated by up to 78 times its actual value. • The attacker used flash loans and ERC-4626 exchange-rate manipulation. • Edel Finance has temporarily restricted borrowing and withdrawal functions. Context The protocol confirmed that the exploit stemmed from a combination of oracle and exchange-rate manipulation. As a precautionary measure, Edel Finance has suspended certain lending and withdrawal functions while conducting a full review of the affected smart contracts. The incident highlights the ongoing security challenges facing DeFi lending platforms that accept tokenized real-world assets (RWAs) as collateral, particularly when pricing depends on internal vault mechanics rather than robust external oracle systems. At the time of publication, Edel Finance had not yet released a complete technical post-mortem, and the final reconciliation of losses remains ongoing. Important Notice This information is based on on-chain data and official protocol statements. It does not constitute financial or cybersecurity advice. DeFi protocols involve smart contract, oracle, and liquidity risks. Always conduct your own research and exercise caution before interacting with decentralized lending platforms.

$292,000,000. The biggest DeFi hack of 2026 didn't touch a line of KelpDAO's vault code. It broke one verifier. A thread on why bridges keep getting drained 🧵👇

Looks like INFINIT is probably hacked 🚨 ~$1.8M lost on BSC (~9M $IN tokens minted and dumped). TX: 0x8d4a72ce9e2f6dea1e9cfc9ff5c19e8d45bf6f4033fcea9739e2409efa3264f2 How it happened: LayerZero cross-chain message forgery. A fake message was sent from Ethereum (EID 30101) to BSC, triggering the INFINIT contract to mint ~9M tokens. All tokens were immediately sold. Root cause: Either the Ethereum-side contract was compromised to send malicious LZ messages, or the BSC contract lacks proper cross-chain sender verification

PeckShield: In June 2026, the cryptocurrency industry suffered 40 major cyberattacks, resulting in losses of approximately $75.87 million. According to PeckShield monitoring, 40 major hacking incidents occurred in the cryptocurrency space in June 2026, totaling $75.87 million in losses—a 7.13% decrease compared to $81.7 million in May. The Humanity Protocol attack, which resulted in $31 million in losses, ranked first; Syscoin Bridge and JaredFromSubway.eth MEV bot suffered losses of $10 million and $7.5 million, respectively. Notably, the attackers behind the Humanity Protocol incident are laundering funds across multiple chains, including BTC, Solana, Hyperliquid, and BNB Chain, with funds showing overlap with proceeds from the KelpDAO attack, suggesting a possible connection. Additionally, Aztec Bridge and Aztec Connect were both compromised in the same month, cumulatively losing approximately $4 million.