Skip to content

Topic

DeFi Exploits

Attacks on decentralized finance protocols that exploit smart-contract bugs or logic flaws to drain funds, often triggering halts or recovery efforts.

Current stories

investConfirmed9 publishers

Jury convicts Uranium Finance hacker with $31 million of the $53.3 million take already seized

Manhattan federal jurors convicted Jonathan Spalletta of computer fraud and money laundering over the $53.3 million Uranium Finance exploit of 2021. Where the roughly $31 million in crypto seized in February 2025 ends up now turns on restitution and forfeiture rulings still to come.

Perspective Coverage

10 publishers
Builder
Builder 30%
Operator
Operator 42%
Investor
Investor 28%

Reality

Evidence85
Adoption
Insufficient
Hype gap+8
Incentives40
Confidence78
investConfirmed5 publishers

Drift's capped pledges would lift its DFX recovery rate to about 50 cents at most

Drift's DFX recovery token opened at about 0.0104 USDT per dollar lost in the $295.4 million April exploit, roughly one cent on the dollar. Paying every capped pledge in full would lift that to about 50 cents, and the other half depends on Velocity's revenue and on funds recovered from the attacker.

Perspective Coverage

5 publishers
Builder
Builder 19%
Operator
Operator 42%
Investor
Investor 39%

Reality

Evidence70
Adoption8
Hype gap+25
Incentives55
Confidence65
investConfirmed4 publishers

NEAR Intents recovers all $3.8 million lost to a bug in its deposit-and-withdrawal layer

NEAR Intents got back all $3.8 million drained through a bug between its Omni deposit-and-withdrawal layer and its contract, after encrypted talks. Whether that layer is safe now rests on the patch, since every user who lets the protocol choose a bridge depends on it.

Perspective Coverage

4 publishers
Builder
Builder 31%
Operator
Operator 45%
Investor
Investor 24%

Reality

Evidence74
Adoption55
Hype gap+15
Incentives60
Confidence72
investConfirmed5 publishers

Attacker drains $3.8 million from Near Intents via bug in Omni deposit and withdrawal layer

Near Intents halted its cross-chain swap service after a bug in its Omni deposit layer let an attacker take about $3.8 million. Crypto balances carry no deposit insurance, so affected users are relying on the operator's promise to repay them in full.

Perspective Coverage

5 publishers
Builder
Builder 23%
Operator
Operator 44%
Investor
Investor 33%

Reality

Evidence70
Adoption55
Hype gap+15
Incentives60
Confidence65
investOne report1 publisher

After a $23.75 million oracle-credential drain, Ostium rebuilds its trading stack around Gateway

Ostium is rebuilding its trading stack around Gateway, three months after an attacker holding legitimate oracle-signer credentials drained $23.75 million. The new system has to keep execution fast enough for institutional hedging and also show that stolen credentials can no longer push a false price through.

Reality

Evidence55
Adoption
Insufficient
Hype gap+35
Incentives65
Confidence45
investConfirmed3 publishers

Balancer trades its buyback for a burn-to-redeem claim payable in May 2027

A forum proposal would cancel the buyback BAL holders approved in April and let them burn tokens instead for a pro-rata share of a treasury estimated at least $9 million, with the first payout held until veBAL locks expire at the end of May 2027.

Perspective Coverage

3 publishers
Builder
Builder 20%
Operator
Operator 33%
Investor
Investor 47%

Reality

Evidence72
Adoption8
Hype gap+12
Incentives
Insufficient
Confidence70
securityOne report1 publisher

Neutron governance overrode Astroport and Drop multisigs in a $9.4 million theft

Astroport and Drop contracts lost about $9.4 million on September 22 after an attacker won a Neutron governance vote that reassigned their admins. GoPlus Security values the staked NTRN behind that vote at about $113,000, far below the assets it could hand over.

Publishers:en.cryptonomist.ch

Reality

Evidence40
Adoption
Insufficient
Hype gap+15
Incentives
Insufficient
Confidence45