Taiko lost $1.7M after enclave-key.pem leaked in public GitHub repo, allowing forged SGX attestations and zero-proof withdrawals.

JaredFromSubway MEV bot loses $7.5M after attacker manipulates approvals to drain WETH, USDC and USDT, with funds routed through TornadoCash.

JaredFromSubway MEV bot exploited for over $15M onchain, per Aggr News on June 20 2026. MEV bot exploit analysis shows major crypto security breach.

StakeDAOHQ: 5.4 trillion $vsdCRV minted on Arbitrum. Exploiter swapped portion for 43.781 $ETH ($91.17K) and bridged to Ethereum.

Polymarket contract exploited with 5,000 $POL drained every 30 seconds for $600k stolen so far at $0.09 price amid neutral RSI.

Verus-Ethereum Bridge exploited for $11.5M with attacker swapping to 5,402 ETH; ETH price tests $2115.65 support amid bearish 4h structure.

THORChain's RUNE token drops double digits amid $10M exploit and trading halt, sparking RUNE price prediction concerns in crypto market crash fears.

THORChain suffers $10M exploit, losing 36.75 BTC worth $3M and $7M from BNBChain, Ethereum, Base; funds traced to Bitcoin address.

Aave spearheads 'DeFi United' effort to mitigate $292M KelpDAO exploit, drawing on Ethereum restaking protocol history amid crypto market volatility.

KelpDAO exploiter moves $1,979 BTC from Ethereum to Bitcoin via THORChain, while Balancer exploiter resumes laundering after 5 months.

Drift Protocol suffered a $285 million exploit on Solana; Curve's Michael Egorov notes privileged keys complicate security, amid SOL price prediction volatility.

According to PeckShieldAlert, the Truebitprotocol exploiter deposited 8.5K ETH worth about $26.5 million into Tornado Cash, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, the attacker routed the stolen 8.5K ETH to two addresses 0x2735...cE850a and 0xD12f...031a60 prior to mixing, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, TRU collapsed by 100% following the exploit, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049. According to PeckShieldAlert, the same exploiter also attacked Sparkle about 12 days earlier, stealing 5 ETH and sending it into Tornado Cash, source: PeckShieldAlert on X Jan 11, 2026 https://x.com/PeckShieldAlert/status/2010191512513151049.

According to @PeckShieldAlert, a UXLink exploiter-labeled address swapped 248 WBTC for 23 million DAI within the last hour. According to @PeckShieldAlert, this activity follows the Sept. 22 incident in which the attacker minted billions of unauthorized tokens and drained tens of millions in crypto assets. According to @PeckShieldAlert, the conversion highlights ongoing post-hack fund movement tied to UXLink-labeled addresses.

According to @PeckShieldAlert, a whale’s multisig wallet was drained of approximately $27.3 million following a private key compromise (source: @PeckShieldAlert, Dec 18, 2025). According to @PeckShieldAlert, the drainer has laundered $12.6 million, equal to 4,100 ETH, via Tornado Cash (source: @PeckShieldAlert, Dec 18, 2025). According to @PeckShieldAlert, the drainer still holds around $2 million in liquid assets (source: @PeckShieldAlert, Dec 18, 2025). According to @PeckShieldAlert, the drainer also controls the victim’s multisig, which maintains a leveraged long position (source: @PeckShieldAlert, Dec 18, 2025).

According to @EmberCN, StakeWise executed a contract call to reclaim 5,041 osETH worth about $19.3M from the Balancer exploiter, reducing the stolen tally from $117M to $98M, source: https://x.com/EmberCN/status/1985566230502420678. The exploiter has been swapping LST holdings into ETH and now holds more than half of the stolen assets in ETH, sources: https://x.com/EmberCN/status/1985566230502420678 and https://intel.arkm.com/explorer/entity/a1143094-5699-4e4a-a5ae-bca37094202c. Traders can monitor the listed address set for further ETH flows to assess potential order-book impact, source: https://intel.arkm.com/explorer/entity/a1143094-5699-4e4a-a5ae-bca37094202c.

According to @MistTrack_io, DoodiPals was compromised and the attacker swapped $DOODi for SOL, realizing a profit of 917 SOL. Source: @MistTrack_io on X, Oct 21, 2025. The stolen funds were then transferred to multiple FixedFloat addresses, and MistTrack is monitoring the flow. Source: @MistTrack_io on X, Oct 21, 2025.

According to @PeckShieldAlert, one of the UXLINK (UXLINK) exploiters was hit by a phishing attack linked to address Fake_Phishing1309277, resulting in a loss of 542,000,000 UXLINK valued at about 48,000,000 dollars, according to @PeckShieldAlert. Based on those figures, the implied unit value is roughly 0.0886 dollars per UXLINK, according to @PeckShieldAlert. Traders can monitor on-chain flows from the labeled address Fake_Phishing1309277 for any large transfers or exchange deposits to gauge near-term liquidity and volatility, based on the address identification by @PeckShieldAlert.

According to @AltcoinGordon, after seeing chatter about a new crypto exploit, he checked his accounts and found his wallets had been compromised and used to buy HEX. source: @AltcoinGordon on X, Sep 8, 2025. The post provides no transaction hashes, loss amounts, or confirmations from protocols or exchanges, so it remains a single-user incident report rather than a verified ecosystem exploit at the time of posting. source: @AltcoinGordon on X, Sep 8, 2025. The post indicates a purchase of HEX executed from a compromised wallet but presents no evidence of broader market impact or systemic risk. source: @AltcoinGordon on X, Sep 8, 2025.

According to PeckShieldAlert, an exploiter has returned a significant amount of funds to the GMX protocol, totaling approximately $37.5 million. The returned assets include around 9,000 Ethereum (ETH) and 10.5 million FRAX stablecoins, which were transferred to the GMX Security Committee Multisig address. This fund recovery is a positive development for the GMX ecosystem, potentially restoring investor confidence and positively impacting the GMX token's price by mitigating the financial damage from the exploit.

According to on-chain analyst @zachxbt, Circle, the issuer of the USDC stablecoin, should act independently to freeze 9 million USDC connected to a recent exploit of over $40 million. @zachxbt argues that as a centralized stablecoin issuer, Circle has the capability and responsibility to freeze the illicitly obtained funds without needing government involvement. This situation highlights a critical debate for traders concerning the governance of centralized stablecoins, where the issuer's ability to freeze assets can be a tool against theft but also represents a centralization risk.