According to @PeckShieldAlert, roughly 20 major crypto exploits in September 2025 caused total losses of $127.06 million, a 22% decrease from August’s $163 million, source: PeckShieldAlert, Oct 2, 2025. Approximately $13 million drained from a Venus user via a phishing attack has been recovered, source: PeckShieldAlert, Oct 2, 2025. The top incidents were UXLINK at $44.14 million, SwissBorg at $41.5 million, a Venus user at $13.5 million, Yala at $7.64 million, and GriffAI at $3 million, source: PeckShieldAlert, Oct 2, 2025.

According to @PeckShieldAlert, the official @BNBCHAIN X account has been compromised and is posting phishing links, and users are warned not to connect their wallets to any links from that account (source: @PeckShieldAlert on X, Oct 1, 2025). For traders with BNB exposure, avoid interacting with any links or promotions originating from the @BNBCHAIN X handle to prevent wallet-drain risk tied to the compromise described in the alert (source: @PeckShieldAlert on X, Oct 1, 2025). The alert includes a reference link to a post by @cz_binance on X, indicating the warning is being circulated on the platform (source: @PeckShieldAlert on X, Oct 1, 2025).

According to @PeckShieldAlert, the UXLINK exploiter swapped 28.67 WBTC for roughly 778 ETH valued at about $3.27 million; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458. The exploiter has started depositing the acquired ETH into Tornado Cash; source: @PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972917298286739458.

According to @PeckShieldAlert, the Resupply exploiter has deposited 1,607 ETH worth around 6.5 million dollars into Tornado Cash on September 29, 2025, source: @PeckShieldAlert. According to @PeckShieldAlert, the funds are linked to the June 2025 ResupplyFi exploit that caused a 9.6 million dollar loss, source: @PeckShieldAlert. Based on the on-chain alert from @PeckShieldAlert, traders can monitor Tornado Cash outflows and tagged ResupplyFi exploit addresses for potential ETH liquidity shifts across DEX venues, source: @PeckShieldAlert. Given the mixer inflow reported by @PeckShieldAlert, set alerts for fragmentation of the 1,607 ETH and subsequent swaps or bridges to assess short term flow risk around ETH pairs, source: @PeckShieldAlert.

According to @PeckShieldAlert, between Sept. 24–27, kHYPE (Kinetiq staked HYPE) deviated from its peg and bottomed at 0.8802 versus WHYPE (source: @PeckShieldAlert on X, Sep 28, 2025). According to @PeckShieldAlert, the peg has since been restored as of the time of its report (source: @PeckShieldAlert on X, Sep 28, 2025). Using the reported 0.8802 low from @PeckShieldAlert, the implied maximum deviation from parity was approximately 11.98% over a four-day window, offering a concrete volatility reference for the kHYPE–WHYPE pair (source: @PeckShieldAlert on X, Sep 28, 2025).

According to @PeckShieldAlert, kHYPE (Kinetiq Staked HYPE) briefly deviated from its peg between Sept 24–27, bottoming at 0.8802 before the peg was restored (source: @PeckShieldAlert, Sep 28, 2025). According to @PeckShieldAlert, that trough equals roughly an 11.98% drawdown from par, signaling short-term depeg risk that traders should reflect in position sizing and slippage controls (source: @PeckShieldAlert). Based on the data reported by @PeckShieldAlert, traders should monitor the kHYPE/HYPE spread, on-chain liquidity, and redemption flow stability to manage recurrence risk in stressed conditions (source: @PeckShieldAlert).

According to @PeckShieldAlert, the Radiant Capital exploiter swapped approximately 14 million DAI for 3,490.2 ETH, based on a real-time on-chain alert. Source: PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972124721132269835. The same entity then deposited 2,243.2 ETH into TornadoCash, signaling a significant post-swap movement of the proceeds. Source: PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972124721132269835. About 1,247 ETH from the swap remains outside TornadoCash at the time of the alert (3,490.2 minus 2,243.2), which traders may monitor for any subsequent transfers from exploit-linked wallets highlighted by the alert. Source: PeckShieldAlert on X https://twitter.com/PeckShieldAlert/status/1972124721132269835.

According to @PeckShieldAlert, @hyperdrivedefi reported two accounts in the thBILL market were compromised, causing an estimated ~$773,000 loss, with 288.37 BNB bridged to BNB Chain and 123.6 ETH bridged to Ethereum (source: @PeckShieldAlert). The attacker split and bridged the proceeds across BNB Chain and Ethereum, creating concrete on-chain trails in BNB and ETH that traders can track for post-incident flows and execution risk management (source: @PeckShieldAlert). Traders should monitor movements involving the bridged 288.37 BNB and 123.6 ETH, the thBILL market, and Hyperdrive-linked liquidity on BNB Chain and Ethereum to assess exposure and liquidity conditions following the breach (source: @PeckShieldAlert).

According to @PeckShieldAlert, an abnormal withdrawal of approximately $3.6 million in crypto was detected from HyperVaultFi. According to @PeckShieldAlert, the funds were bridged from Hyperliquid to Ethereum, swapped into ETH, and 752 ETH was subsequently deposited into Tornado Cash. According to @PeckShieldAlert, the alert was tagged with Rugpull?, highlighting a high-risk on-chain event tied to HyperVaultFi’s addresses and flows.

According to @PeckShieldAlert, ETH broke below $4,000 and an Aave long position at address 0x7ca2...42b4 was liquidated for 430.32 ETH, worth about $1.73 million, source: @PeckShieldAlert on X, Sep 25, 2025.

According to @PeckShieldAlert, Griffin_AI’s token GAIN suffered abnormal minting and aggressive dumping that drove an approximately 80% price drop, which is directly relevant to traders monitoring GAIN liquidity and price action, source: @PeckShieldAlert. About 5 million GAIN were swapped for 2,955 BNB (around $3 million), the BNB was bridged to Ethereum and swapped for 720 ETH, and 700 ETH was then deposited into TornadoCash, outlining the full on-chain path traders should track, source: @PeckShieldAlert.

According to PeckShieldAlert, Griffin_AI experienced abnormal minting and dumping that drove GAIN down about 80 percent (source: PeckShieldAlert). The same source reports that roughly 5 million GAIN were swapped for 2,955 BNB, valued around 3 million USD, and the proceeds were then bridged and swapped to ETH via deBridge (source: PeckShieldAlert).

According to @PeckShieldAlert, the UXLINK exploiter swapped 1,620 ETH for 6.73 million DAI, source: @PeckShieldAlert. The address currently holds 26.564 million DAI, 40.2 WBTC valued at approximately $4.52 million, and 990.7 ETH valued at approximately $4.13 million, source: @PeckShieldAlert. These on-chain balances define the exploiter’s immediately movable inventory across DAI, WBTC, and ETH for trade execution tracking, source: @PeckShieldAlert.

According to @PeckShieldAlert, one of the UXLINK (UXLINK) exploiters was hit by a phishing attack linked to address Fake_Phishing1309277, resulting in a loss of 542,000,000 UXLINK valued at about 48,000,000 dollars, according to @PeckShieldAlert. Based on those figures, the implied unit value is roughly 0.0886 dollars per UXLINK, according to @PeckShieldAlert. Traders can monitor on-chain flows from the labeled address Fake_Phishing1309277 for any large transfers or exchange deposits to gauge near-term liquidity and volatility, based on the address identification by @PeckShieldAlert.

According to @PeckShieldAlert, on Sep 22, 2025 an on-chain address 0x746c...ee8c was liquidated for 1.74K ETH (about $7.30M) after ETH dropped below $4,200. According to @PeckShieldAlert, the forced unwind was triggered by the $4,200 breach, tying this price level directly to the liquidation event.

According to @PeckShieldAlert, the NGP token from NewGold Protocol was exploited for approximately $2 million. NGP dropped 88% within one hour, @PeckShieldAlert reported. The exploiter deposited 443.8 ETH of the stolen funds into Tornado Cash, @PeckShieldAlert reported. Traders should note the extreme price drawdown and the transfer route to Tornado Cash as reported by @PeckShieldAlert.

According to @PeckShieldAlert, JuCoin's platform token JU fell 67.9% in the last 24 hours, as reported by the source on Sep 17, 2025.

According to @PeckShieldAlert, a THORChain user's personal wallet was exploited for an estimated loss of about $1.2 million. Source: @PeckShieldAlert (X, Sep 12, 2025). The alert specifies the affected entity as a user's personal wallet rather than the THORChain protocol. Source: @PeckShieldAlert (X, Sep 12, 2025). No attacker address, exploit vector, or remediation details were provided in the alert text. Source: @PeckShieldAlert (X, Sep 12, 2025). This incident marks a timestamped security event associated with the THORChain ecosystem that traders tracking RUNE may monitor by size (~$1.2M) and timing. Source: @PeckShieldAlert (X, Sep 12, 2025).

According to @PeckShieldAlert, the incident was a compromise of a user's personal wallet and is not related to the THORChain protocol, indicating no confirmed protocol-level exploit on THORChain at this time (source: x.com/PeckShieldAlert/status/1966409664008233379). For trading, this clarification means the event should be treated as user-side security risk rather than a protocol failure when assessing RUNE exposure and THORChain liquidity risk (source: x.com/PeckShieldAlert/status/1966409664008233379; reference: x.com/PeckShieldAlert/status/1966399712741016051).

According to @PeckShieldAlert, THORChain suffered an exploit with an estimated loss of about $1.2 million. Source: @PeckShieldAlert on X, Sep 12, 2025. The alert did not provide details on the attack vector, affected chains, or mitigation steps, indicating limited public information at this time. Source: @PeckShieldAlert on X, Sep 12, 2025. For trading, the reported exploit creates immediate headline risk for RUNE and THORChain liquidity pools; traders can monitor centralized exchange order books, funding rates, and on-chain swaps for stress potentially linked to the incident. Source: @PeckShieldAlert on X, Sep 12, 2025. Market participants should track official THORChain updates for confirmations, patches, and any service changes that could impact cross-chain routing and LP withdrawals. Source: @PeckShieldAlert on X, Sep 12, 2025.