QuillMonitor : Web3 Hacks and Alerts
227 subscribers
1 photo
182 links
Download Telegram
🚨 Hack Alert! @channel
Target: Griffin AI

What happened: On September 24, 2025, Griffin AI experienced an exploit resulting in a loss of approximately $3 million due to a vulnerability in LayerZero.

The attack occurred just hours after the token launch, where an attacker minted 5 billion unauthorized $GAIN tokens, causing a drastic price drop of 87%.

The tweet provides details on the incident, indicating a significant financial impact and naming the exploited project and the method of attack.

πŸ”—Tweet URL: <https://twitter.com/guardrailai/status/1971612441370148923 |View on Twitter>
🚨 Hack Alert! @channel

Target: HyperDrive DeFi

What happened: An exploit has occurred on HyperDrive DeFi.

The attacker exploited an arbitrary call in the router, leading to the theft of users' funds totaling 672,934 USDT and 110,244 thBILL, amounting to approximately $782,000.

This incident highlights the vulnerabilities present in the protocol.

Users are advised to stay vigilant.

For more details, refer to the provided link.

Tweet URL: <https://twitter.com/CertiKAlert/status/1972117426893738341|View on Twitter>
🚨 Hack Alert! @channel
Target: RadiantCapital

What happened: The tweet reports a specific security incident involving Radiant Capital.

The incident details include the exploiter who swapped approximately $14 million in DAI for 3,490.2 ETH. Additionally, they deposited 2,243.2 ETH into Tornado Cash, indicating potential money laundering or attempts to obfuscate the funds.

This incident highlights a specific action taken by an exploiter affecting the Radiant Capital project.

πŸ”—Tweet URL: <https://twitter.com/PeckShieldAlert/status/1972124721132269835 |View on Twitter>
🚨 Hack Alert! @channel

Target: ResupplyFi

What happened: The #Resupply exploiter has deposited 1,607 $ETH, approximately valued at $6.5M, into #TornadoCash.

These funds trace back to an exploit on June 2025 involving @ResupplyFi, which resulted in a significant loss of $9.6M.

This incident highlights the ongoing exploitation of funds within the crypto ecosystem.

Tweet URL: <https://twitter.com/PeckShieldAlert/status/1972492625556222188|View on Twitter>
🚨 Hack Alert! @channel

Target: UXLINK

What happened: A significant security incident has been reported involving the #UXLINK exploiter. The exploiter swapped 28.67 $WBTC for approximately 778 $ETH, valued at around $3.27 million. Following this, the exploiter has initiated deposits into #TornadoCash, which raises concerns about the laundering of the funds.

This incident highlights the ongoing issues with exploits in the Web3 space and the need for vigilance against illicit transactions.



Tweet URL: <https://twitter.com/PeckShieldAlert/status/1972917298286739458|View on Twitter>
🚨 Hack Alert!

Target: hyperdrivedefi

What happened: On September 27, 2025, a recent exploit occurred on @hyperdrivedefi, a DeFi yield protocol on Hyperliquid.

Hackers drained approximately $773,000 from the platform through a vulnerability in its router contract.

The incident affected two user positions in the Treasury Bill market, which involved 673K USDT0 and 110K thBILL.

The attacker utilized arbitrary calls to siphon funds, subsequently bridging them to BNB Chain and Ethereum for laundering.

Tweet URL: https://twitter.com/guardrailai/status/1973377059297587231
🚨 Hack Alert!
Target: THORChain

What happened: DPRK-linked actors bridged $7 million from Ethereum to Bitcoin following the WooX hack. This occurred via @THORChain, just weeks after THORChain’s founder was phished.

The reported funds highlight the ongoing threats associated with hacks and the potential exploitation of protocols.

πŸ”—Tweet URL: https://twitter.com/hackenclub/status/1973428947778957318
🚨 Hack Alert!

Target: Scam Sniffer

What happened: In September 2025, total losses attributed to phishing scams amounted to $11.78 million, affecting 15,513 victims.

The data indicates a decrease of 3.2% in losses compared to August, but an increase of 1.9% in the number of victims.

A key insight highlighted is the prevalence of "Permit" signature phishing schemes, which have proven to be the most dominant threat in this area. A notable incident included the largest single loss, where an address (0x0d18…D7e3) lost approximately $6.5 million after signing multiple phishing permits.

Tweet URL: https://twitter.com/realScamSniffer/status/1975186034771292303
🚨 Hack Alert!
Target: mooCurveUSDC-USDf

What happened: A victim lost $163,112 worth of mooCurveUSDC-USDf after signing a malicious "increaseAllowance" signature.

This incident highlights the risks involved with signing transactions that may appear legitimate but are actually malicious.

The specific amount lost is detailed, providing a clear understanding of the financial impact involved in this security breach.

πŸ”—Tweet URL: https://twitter.com/realScamSniffer/status/1975352731100717278
Please open Telegram to view this post
VIEW IN TELEGRAM
🚨 Hack Alert!

Target: OracleBNB

What happened: A rug pull incident has been reported involving the project @OracleBNB on the BNB Chain.

The project has allegedly rugged, leading to significant concerns among its users.

Additionally, it has been noted that @OracleBNB has already deleted its social media platform, indicating an effort to distance themselves from the incident.

No specific amounts regarding the financial impact have been detailed in this alert.

Tweet URL: https://twitter.com/PeckShieldAlert/status/1976560418832404617
🚨 Hack Alert!
Target: Hyperliquid

What happened: A victim lost approximately $21 million worth of cryptocurrencies on Hyperliquid due to a private key leak.

The hacker has bridged the stolen funds to Ethereum, which includes 17.75 million DAI and 3.11 million MSYRUPUSDP.

Forensic details reveal the impacted victim address is 0x0cdC...E955 and the tweet originates from PeckShieldAlert.

πŸ”—Tweet URL: https://twitter.com/PeckShieldAlert/status/1976577386469839269
😒1
🚨 Hack Alert!
Target: Venus

What happened: #PeckShieldAlert reported a specific incident involving the address 0x5636...2008, which had previously been associated with a phishing attempt that resulted in a loss of $13M on the Venus protocol. Although that amount was later recovered by the protocol, the address has now been liquidated for a total of $3.44M in $vBNB and $vUSDT. This indicates a significant financial impact related to the prior phishing incident, showcasing ongoing risks in the ecosystem.

The details provided specify the amounts involved and the specific address tied to these incidents, making it a concrete security report.

πŸ”—Tweet URL: https://twitter.com/PeckShieldAlert/status/1976834660010541176
❀1
🚨 Hack Alert!
Target: ASTER

What happened: A victim lost $72,572 worth of $ASTER due to a malicious "permit" signature. This incident highlights the risks associated with signing unknown or suspicious transaction requests, leading to a significant financial loss for the user.

πŸ”—Tweet URL: https://twitter.com/realScamSniffer/status/1977018875729653927
🚨 Hack Alert!

Target: WBTC, tBTC

What happened: A victim experienced a loss of $209,816, which was comprised of $WBTC and $tBTC. This incident occurred after the victim signed malicious signatures related to "permit" and "increaseApproval".

The details reveal a specific exploit involving the deceptive use of contract permissions to siphon funds from the victim.

The tweet provides a direct link to the incident for further information.

Tweet URL: https://twitter.com/realScamSniffer/status/1977940011170615369
🚨 Hack Alert!

Target: LuBian

What happened: A LuBian-labeled address has been active after 3 years of dormancy, transferring 9,757 BTC, which is valued at approximately $1.1 billion, to two new wallets. This transfer occurs against the backdrop of the U.S. government preparing to forfeit 127,271 BTC, valued at around $14.3 billion, which was stolen from LuBian in December 2020.

The involvement of the dormant address and the significant transfer could indicate movements related to previously stolen funds.

Further implications may arise for the LuBian incident as these actions unfold.

Tweet URL: https://twitter.com/PeckShieldAlert/status/1978379955571732572
🚨 Hack Alert!
Target: Bittensor

What happened: An investigation concerning the $28 million Bittensor hack from 2024 has been detailed. The investigation identified one of the suspects involved by tracing anime NFT wash trades linked to a former employee.

The efforts also led to the investigator earning a whitehat bounty for their contributions to the case.

πŸ”—Tweet URL: https://twitter.com/zachxbt/status/1978465677578301723
🚨 Hack Alert!

Target: Ellipal

What happened: A video has gone viral detailing a significant theft involving a US-based victim who lost $3.05 million, equivalent to 1.2 million XRP from their Ellipal wallet.

The incident includes tracing of the stolen funds, providing insights into the theft and consequences for future similar incidents.

Key takeaways are shared for preventing similar thefts in the future.

Tweet URL: https://twitter.com/zachxbt/status/1979899767212699910
🚨 Hack Alert!

Target: SwissBorg

What happened: In the SwissBorg exploit, $41 million was stolen in a matter of minutes.

The incident involved a malicious payload concealed within a standard transaction, which allowed the attacker to gain full control of the funds. Blind signing is highlighted as a significant vulnerability that needs to be addressed, particularly when large sums of money are involved.

Hypernative Guardian aims to mitigate such incidents by simulating and inspecting every transaction prior to execution, which makes any hidden changes visible and enables automated enforcement flows.

Tweet URL: https://twitter.com/HypernativeLabs/status/1980257782994510127
🚨 Hack Alert!
Target: SparkDex

What happened: On August 7, a would-be hacker attempted to drain $1.5 million from SparkDex. However, the hacker lost $85,000 of their own funds instead.

The incident was detected by Hypernative, which identified the malicious contracts immediately after deployment. As a response, SparkDEX paused the perpetuals market.

The attacker's $85,000 deposit was subsequently trapped, which prevented what could have been $1.5 million in losses.

This situation may represent the first documented case in decentralized finance (DeFi) where an attacker incurred a loss while trying to exploit a project. It underscores the importance of real-time detection and rapid response in maintaining security within the Web3 space.

πŸ”—Tweet URL: https://twitter.com/HypernativeLabs/status/1980621582281142373
🚨 Hack Alert!

Target: Radiant Capital

What happened: Radiant Capital faced a significant security breach on 16 October 2024, resulting in the draining of their lending pool on BSC and ARB, leading to a loss of approximately $53 million.

The attacker exploited the multi-sig wallet by compromising three out of eleven signers, which enabled them to replace the implementation contracts for the Radiant Lending Pool.

Subsequently, 2834.6 ETH (around $10.8 million) was deposited into Tornado Cash, with part of this amount (2213.8 ETH) being bridged from Arbitrum. The extra ETH was acquired through swapping to DAI and back.

This incident underscores the need for enhanced security measures in handling multi-sig wallets and managing user access.

Tweet URL: https://twitter.com/CertiKAlert/status/1981215744361996338