MetaMask's validator key rotation after its Sept. 30 breach sends clients' staked ETH through exit and re-entry queues of about 45 days each. Joseph Lubin says self-custodied wallets were never within the attackers' reach, so the cost of the incident lands on staking clients.
Perspective Coverage
4 publishers
- Builder
- Builder 22%
- Operator
- Operator 44%
- Investor
- Investor 34%
Reality
- Evidence58
- Adoption60
- Hype gap+35
- Incentives50
- Confidence60
Drift's DFX recovery token opened at about 0.0104 USDT per dollar lost in the $295.4 million April exploit, roughly one cent on the dollar. Paying every capped pledge in full would lift that to about 50 cents, and the other half depends on Velocity's revenue and on funds recovered from the attacker.
Perspective Coverage
5 publishers
- Builder
- Builder 19%
- Operator
- Operator 42%
- Investor
- Investor 39%
Reality
- Evidence70
- Adoption8
- Hype gap+25
- Incentives55
- Confidence65
Aztec Labs is bringing back zk.money as a private DAI wallet that caps every transfer at $2,500 and all users' deposits combined at $50,000 a day. Raising either limit means a new contract that each user must opt into. The caps arrive while US law on privacy wallets remains unsettled.
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence62
Suspected North Korean hackers have moved $3.8 million of Bitget's $387.5 million into Zcash's shielded pool, about 1% of the haul. About $24 million of stolen ZEC remains in transparent addresses that exchanges and police can still freeze.
Reality
- Evidence64
- Adoption
- Insufficient
- Hype gap+12
- Incentives50
- Confidence60
MetaMask is pulling its Ethereum validators out of Lido after an infrastructure compromise, putting the stake on a round trip Lido says can take up to 45 days. The stake earns no rewards on the way, and stETH holders share that cost, for an attack whose only documented theft so far is diverted block rewards.
Perspective Coverage
4 publishers
- Builder
- Builder 26%
- Operator
- Operator 41%
- Investor
- Investor 33%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+15
- Incentives65
- Confidence58
Bitget CEO Gracy Chen expects to recover little of the $388 million stolen from the exchange, citing Bybit's 3.5% freeze rate. On that benchmark about $13.6 million is frozen within a year and roughly $374 million stays with whoever carries the loss.
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap+15
- Incentives40
- Confidence50
Crypto hacks drained $766.49 million in September, a 2026 monthly record, and $387.5 million came from one breach of Bitget's hot wallets. After the money returned from the Liquid Network exploit, that one exchange accounts for about 80% of what stayed stolen.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence50
The judge moved the second trial to April 26, 2027, on the defense's own request. The count that would actually settle non-custodial developer liability is still waiting on sentencing.
Perspective Coverage
4 publishers
- Builder
- Builder 47%
- Operator
- Operator 34%
- Investor
- Investor 19%
Reality
- Evidence78
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence74
The Moonwell post-mortem puts externally supplied capital at $1.95m. Recycled through repeated borrowing, that money moved $7.5m of MAMO buying. That ratio, rather than the loss total, sets an attacker's entry price.
Publishers:forum.moonwell.fi
Reality
- Evidence74
- Adoption68
- Hype gap−8
- Incentives76
- Confidence58
The contracts behaved as written. The hole was in the permission model, priced in public: a controlling stake in the vault's governance token was on sale for half an ETH.
Reality
- Evidence40
- Adoption20
- Hype gap+22
- Incentives32
- Confidence38
The attacker bought a controlling stake in four vaults for a few dollars, because voting rights at Term required a manual second step that almost no depositor took.
Reality
- Evidence32
- Adoption28
- Hype gap+18
- Incentives58
- Confidence34
An attacker seeded with 2 ETH from Tornado Cash took full voting control of four USDC vaults and 91% of a meta vault, then voted the money out. The contracts held.
Reality
- Evidence34
- Adoption28
- Hype gap+14
- Incentives58
- Confidence33
The Pando Rings exploiter swapped 3 million DAI for about 1,570 ETH on CoW Protocol, then pushed 800 ETH into Tornado Cash as the protocol entered maintenance mode.
Reality
- Evidence42
- Adoption48
- Hype gap+14
- Incentives58
- Confidence40
Roman Storm says the theory that convicted him would also reach Google and OpenAI. It is a post, not a brief, and the count he was convicted on is the one his analogy fits worst.
Reality
- Evidence24
- Adoption
- Insufficient
- Hype gap+42
- Incentives78
- Confidence38