Company
PeckShield is a blockchain security firm that audits smart contracts and tracks crypto hacks, exploits, and fund movements across chains.
An attacker minted 19 million unauthorized THEO on Base and swapped it for 700.8 ETH, about $1.76 million, as the token fell 92%. Autheo has not named a root cause, so the case that a bridge minting right failed is still a suspicion.
Reality
Triple-A's July treasury attacker deposited 4,970 ETH, about $12.4 million, into Tornado Cash on Oct. 9, blockchain security firm Salus said. Getting the coins back now depends on tracers tying withdrawals from the mixer to the attacker, as Salus did once with earlier withdrawals.
Reality
Security firms traced about 1,783 wstETH, worth more than $6 million, out of a Base vault on Oct. 4 whose owner is an anonymous 3-of-7 Safe. With Base and Aave's core contracts not blamed, the loss lands on a custody setup whose seven signers no one has publicly identified.
Reality
Bitget lost about $387.5 million to forged withdrawals from its wallet system, more than half of September's $742 million in crypto thefts. Most of Liquid Network's loss was handed back, so what stayed stolen sits mainly with one exchange's withdrawal infrastructure.
Reality
BitMart's court-backed repayment plan blames a 2021 hack it now puts at $319.5 million for the hole facing more than 12 million frozen users. Each user can take a share of liquid assets now or hold tokens that depend on hack recoveries or a reopening.
Reality
Crypto hacks drained $766.49 million in September, a 2026 monthly record, and $387.5 million came from one breach of Bitget's hot wallets. After the money returned from the Liquid Network exploit, that one exchange accounts for about 80% of what stayed stolen.
Reality
An attacker pumped TONIC roughly 100x in twenty minutes and borrowed against it, which is the 2022 Mango playbook run again, and the only reason most of the money stayed reachable is a validator cap of 100.
Perspective Coverage
5 publishersReality
A 20-minute push on TONIC's price bought the attacker $74 million in borrows against it, but only about $6 million reached Ethereum before Cronos stopped producing blocks and rewound its own state.
Perspective Coverage
3 publishersReality
Roughly $2 million left Fetch.ai and NuNet on a valid signature, with the token contracts themselves unbroken. The split between the FET drained and the NTX minted decides how much of it the attacker can collect.
Reality
Four security firms classified the $3.5 million Nostra Finance loss as oracle price manipulation. The remedies the write-up lists are listing-policy parameters: a borrow cap below free float, an isolation flag, a deviation bound.
Reality
An attacker seeded with 2 ETH from Tornado Cash took full voting control of four USDC vaults and 91% of a meta vault, then voted the money out. The contracts held.
Reality