Hacked target: Babylon
Description of the event: The official X account of the Babylon was compromised, and the hacker used it to post tweets containing phishing links.
Attack method: Account Compromise
HACKED ARCHIVE
Hacked Event Broadcast
Verified blockchain security incidents with original evidence and historical event dates.
Live source archive
Hacked target: Sorra
Description of the event: Sorra was suspected to have been attacked on ETH, resulting in an approximate loss of $43K.
Attack method: Contract Vulnerability
Hacked target: 0xScope
Description of the event: lmk.fun (formerly Scopescan) issued an alert on the X platform, warning that the X account of the Web3 knowledge graph protocol 0xScope (@ScopeProtocol) has been hacked. Users are advised not to click on any links or trust any content posted by the account. An investigation and recovery are currently in progress.
Attack method: Account Compromise
Hacked target: Centrifuge
Description of the event: The official X account of the RWA lending protocol Centrifuge was compromised, and fake information was posted.
Attack method: Account Compromise
Hacked target: LAURA
Description of the event: LAURA was suspected to have been attacked on ETH, resulting in an approximate loss of $48.2K.
Amount of loss: $ 48,200Attack method: Contract Vulnerability
Hacked target: NoOnes
Description of the event: The peer-to-peer cryptocurrency trading platform NoOnes suffered a major security breach earlier this month. CEO Ray Youssef explained that the breach occurred on January 1st due to an exploit involving their Solana bridge.
Amount of loss: $ 7,900,000Attack method: Security Vulnerability
Hacked target: Superchain Eco
Description of the event: According to monitoring by Scam Sniffer, the X account of Superchain Eco (@SuperchainEco) was compromised and used to post phishing links.
Attack method: Account Compromise
Hacked target: FEG
Description of the event: The FEG project suffered an attack resulting in a loss of approximately $1 million. Analysis suggests that the root cause of the incident appears to be a composability issue arising from the integration with the underlying Wormhole cross-chain bridge, which facilitates cross-chain message and token transfers.
Amount of loss: $ 1,000,000Attack method: Security Vulnerability
Hacked target: Standing on Bizness (BIZNESS)
Description of the event: Standing on Bizness (BIZNESS) appears to have been subjected to a reentrancy attack on Base, resulting in an estimated loss of $15,700.
Amount of loss: $ 15,700Attack method: Reentrancy Attack
Hacked target: Yat Siu
Description of the event: Animoca Brands tweeted that @ysiu social media account has been compromised. There is no official token or NFT launch from Animoca Brands. The token launch on Solana as claimed in a post was made by the hacker. Please do not engage with the account and stay vigilant.
Attack method: Account Compromise
Hacked target: Moonhacker
Description of the event: The Moonhacker contract suffered a flash loan attack, resulting in a loss of approximately $320,000.
Amount of loss: $ 320,000Attack method: Flash Loan Attack
Hacked target: zkPass
Description of the event: According to Scam Sniffer's monitoring, the privacy-preserving data verification protocol zkPass's X account was compromised and used to post phishing tweets.
Attack method: Account Compromise
Hacked target: Vivek Ramaswamy
Description of the event: Regarding rumors about the collaboration between DOGE and USUAL, Azoria CEO James Fishback clarified that he had contacted DOGE's head of department, Vivek Ramaswamy, whose account was compromised.
Attack method: Account Compromise
Hacked target: Slurpycoin
Description of the event: Slurpycoin on BSC suffered a flash loan attack. The attacker exploited the buyback mechanism to manipulate the token price and profited ~$3K from sandwich arbitrage.
Amount of loss: $ 3,000Attack method: Flash Loan Attack
Hacked target: HarryPotterObamaSonic10Inu
Description of the event: A series of exploiting transactions on Ethereum targeting the liquidity pool of the HarryPotterObamaSonic10Inu 2.0 token. The attacker profited approximately $243K and deposited the funds into Tornado.
Amount of loss: $ 243,000Attack method: Price Manipulation
Hacked target: Anthropic
Description of the event: The official X account of AI startup Anthropic, backed by Amazon, appears to have been compromised, posting an unknown token contract address related to AI Agents.
Attack method: Account Compromise
Hacked target: GemPad
Description of the event: The lock contract of the DeFi platform GemPad was exploited on the BSC, ETH, Base, and Polygon networks, resulting in a loss of approximately $2 million.
Amount of loss: $ 2,000,000Attack method: Contract Vulnerability
Hacked target: BTC24H (BTC24H)
Description of the event: BTC24H (BTC24H) is suspected to have been attacked on Polygon, with an estimated loss of $85,700.
Amount of loss: $ 85,700Attack method: Contract Vulnerability
Hacked target: Decentralized Finance (DCF)
Description of the event: Decentralized Finance (DCF) was attacked on the BSC chain, resulting in a loss of approximately $8,800.
Amount of loss: $ 8,800Attack method: Flash Loan Attack
Hacked target: Drake
Description of the event: Canadian rapper Drake's X account (with over 39 million followers) was allegedly compromised on Saturday evening, promoting a Solana meme coin based on his cartoon "alter ego" character. The coin's trading volume reached $5 million at one point, but it was later confirmed to be a scam, and the related posts have been deleted.
Attack method: Account Compromise