Skip to content

Topic

DeFi Security

Exploits, oracle design failures and post-incident remediation in decentralised finance protocols.

Current stories

invest3 publishers

Attacker drains up to $310K from two Safes through a leverage module the owners switched on

Two Safe multisigs lost up to $310K after an attacker impersonated a Safe to get past FlashLoopAdapter, an Aave leverage add-on the owners had enabled. Aave and Safe's core code held, so the loss fell on owners who let a module move funds without signatures.

Perspective Coverage

3 publishers
Builder
Builder 38%
Operator
Operator 37%
Investor
Investor 25%

Reality

Evidence70
Adoption
Insufficient
Hype gap+12
Incentives35
Confidence72
build1 publisher

Kelp DAO sues LayerZero in British Columbia over the $292M rsETH bridge exploit

Kelp DAO has sued LayerZero Labs and co-founder Bryan Pellegrino for negligence and misrepresentation over April's $292 million rsETH bridge exploit. The forged message cleared a bridge that trusted one LayerZero-run verifier, so the case tests who answers for that setup.

Publishers:dev.to

Reality

Evidence35
Adoption
Insufficient
Hype gap+15
Incentives60
Confidence35