🚨 Hack Alert!
Target: WBTC
What happened: The tweet discusses address poisoning, a method where users are deceived by look-alike malicious addresses. It references a real-world incident where a WBTC whale lost $71 million to such a scam. This specific example indicates a significant hack resulting in financial loss.
The tweet encourages viewers to watch a webinar where further information about this incident and its implications on wallet security is provided.
"Address poisoning -- the spamming of your transaction history with look-alike malicious addresses -- sounds too simple to work. And yet it routinely tricks a broad spectrum of crypto users.
In The Security Blindspot for Wallets, Hypernative's CTO Dan Caspi looks at a real-world example of a WBTC whale losing $71M to a scammer."
Tweet URL: https://twitter.com/HypernativeLabs/status/1982734297988546597
Target: WBTC
What happened: The tweet discusses address poisoning, a method where users are deceived by look-alike malicious addresses. It references a real-world incident where a WBTC whale lost $71 million to such a scam. This specific example indicates a significant hack resulting in financial loss.
The tweet encourages viewers to watch a webinar where further information about this incident and its implications on wallet security is provided.
"Address poisoning -- the spamming of your transaction history with look-alike malicious addresses -- sounds too simple to work. And yet it routinely tricks a broad spectrum of crypto users.
In The Security Blindspot for Wallets, Hypernative's CTO Dan Caspi looks at a real-world example of a WBTC whale losing $71M to a scammer."
Tweet URL: https://twitter.com/HypernativeLabs/status/1982734297988546597
🚨 Hack Alert!
Target: 402bridge
What happened: @402bridge has been exploited,
~17K $USDC was stolen.
Users are advised to revoke their allowance to the address 0xed1AFc4DCfb39b9ab9d67f3f7f7d02803cEA9FC5 to mitigate any further risks.
For more details, here’s a link to the alert: https://t.co/G07UxR0vYC
Tweet URL: https://twitter.com/PeckShieldAlert/status/1983029273528283503
Target: 402bridge
What happened: @402bridge has been exploited,
~17K $USDC was stolen.
Users are advised to revoke their allowance to the address 0xed1AFc4DCfb39b9ab9d67f3f7f7d02803cEA9FC5 to mitigate any further risks.
For more details, here’s a link to the alert: https://t.co/G07UxR0vYC
Tweet URL: https://twitter.com/PeckShieldAlert/status/1983029273528283503
🚨 Hack Alert!
Target: Base
What happened: A recent exploit occurred on an unverified contract on the Base network, resulting in the loss of 55 WETH, approximately valued at $220K.
This incident involved a victim who had previously approved the contract.
The vulnerability lies within the contract's public uniswapV3SwapCallback() method, which lacks adequate access control, allowing for arbitrary transfer calls.
The affected address is 0xE143b486ab0413Df0D6DAd2caf6d2f61CAC54730.
Users are advised to revoke any approvals to this address.
Stay vigilant!
Tweet URL: https://twitter.com/CertiKAlert/status/1983742817022439822
Target: Base
What happened: A recent exploit occurred on an unverified contract on the Base network, resulting in the loss of 55 WETH, approximately valued at $220K.
This incident involved a victim who had previously approved the contract.
The vulnerability lies within the contract's public uniswapV3SwapCallback() method, which lacks adequate access control, allowing for arbitrary transfer calls.
The affected address is 0xE143b486ab0413Df0D6DAd2caf6d2f61CAC54730.
Users are advised to revoke any approvals to this address.
Stay vigilant!
Tweet URL: https://twitter.com/CertiKAlert/status/1983742817022439822
🚨 Hack Alert!
Target: SparkDEX
What happened: In March 2024, Flare Networks partnered with Hypernative to implement real-time monitoring across its network, which included protection for key projects like SparkDEX.
On August 7, attackers attempted to exploit SparkDEX, but they faced a coordinated security response from Flare, SparkDEX, and Hypernative.
As a result of this ecosystem-wide security strategy, a $1.5 million exploit attempt was stopped, and the attackers lost $85,000.
This incident demonstrates the value of proactive ecosystem-level defenses, pointing towards a future in Web3 security that emphasizes smarter systems over merely higher walls.
🔗Tweet URL: https://twitter.com/HypernativeLabs/status/1983821366278164775
Target: SparkDEX
What happened: In March 2024, Flare Networks partnered with Hypernative to implement real-time monitoring across its network, which included protection for key projects like SparkDEX.
On August 7, attackers attempted to exploit SparkDEX, but they faced a coordinated security response from Flare, SparkDEX, and Hypernative.
As a result of this ecosystem-wide security strategy, a $1.5 million exploit attempt was stopped, and the attackers lost $85,000.
This incident demonstrates the value of proactive ecosystem-level defenses, pointing towards a future in Web3 security that emphasizes smarter systems over merely higher walls.
🔗Tweet URL: https://twitter.com/HypernativeLabs/status/1983821366278164775
🚨 Hack Alert!
Target: Balancer
What happened: 🚨 Hack Alert 🚨
@Balancer has been drained of ~$70.8M across multiple chains.
Stolen assets include:
6,851.12 $osETH (~$27M)
6,587.44 $WETH (~$24.5M)
4,259.84 $wstETH (~$19.3M)
Stay safu!
Tweet URL: https://twitter.com/getfailsafe/status/1985262450514735410
Target: Balancer
What happened: 🚨 Hack Alert 🚨
@Balancer has been drained of ~$70.8M across multiple chains.
Stolen assets include:
6,851.12 $osETH (~$27M)
6,587.44 $WETH (~$24.5M)
4,259.84 $wstETH (~$19.3M)
Stay safu!
Tweet URL: https://twitter.com/getfailsafe/status/1985262450514735410
🚨 Hack Alert!
Target:
What happened: An ongoing attack has been reported with an estimated loss of approximately $88 million. Multiple chains are involved in this incident, indicating a significant security breach affecting a wide range of assets. Further details about the specific project or method of attack were not mentioned, but the scale of the loss highlights the severity of the situation.
This incident has raised concerns in the Web3 community as it unfolds, with updates expected as the situation develops.
Tweet URL: https://twitter.com/PeckShieldAlert/status/1985263682310611037
Target:
What happened: An ongoing attack has been reported with an estimated loss of approximately $88 million. Multiple chains are involved in this incident, indicating a significant security breach affecting a wide range of assets. Further details about the specific project or method of attack were not mentioned, but the scale of the loss highlights the severity of the situation.
This incident has raised concerns in the Web3 community as it unfolds, with updates expected as the situation develops.
Tweet URL: https://twitter.com/PeckShieldAlert/status/1985263682310611037
🚨 Hack Alert!
Target: Balancer
What happened: Update on the attack involving Balancer and its forks.
The incident has resulted in total losses across multiple chains amounting to approximately $128.64 million.
Details regarding the specific nature of the attack and its implications for the affected projects are still unfolding.
For further updates, please refer to the provided link.
Tweet URL: https://twitter.com/PeckShieldAlert/status/1985281156259201044
Target: Balancer
What happened: Update on the attack involving Balancer and its forks.
The incident has resulted in total losses across multiple chains amounting to approximately $128.64 million.
Details regarding the specific nature of the attack and its implications for the affected projects are still unfolding.
For further updates, please refer to the provided link.
Tweet URL: https://twitter.com/PeckShieldAlert/status/1985281156259201044
🚨 Hack Alert!
Target:
What happened: Our system detected an address poisoning attack earlier today, resulting in a loss of 1.256M $USDT.
The scammer sent 0.001 $USDT to the victim just 4 minutes later. The victim unknowingly transferred 1.2M $USDT to the scammer.
The funds sat untouched for 6 hours before the scammer swapped them 30 mins ago to avoid a freeze.
Stay Safe: Always double-check the full wallet address before sending funds.
🔗Tweet URL: https://twitter.com/CyversAlerts/status/1985301923545632828
Target:
What happened: Our system detected an address poisoning attack earlier today, resulting in a loss of 1.256M $USDT.
The scammer sent 0.001 $USDT to the victim just 4 minutes later. The victim unknowingly transferred 1.2M $USDT to the scammer.
The funds sat untouched for 6 hours before the scammer swapped them 30 mins ago to avoid a freeze.
Stay Safe: Always double-check the full wallet address before sending funds.
🔗Tweet URL: https://twitter.com/CyversAlerts/status/1985301923545632828
🚨 Hack Alert!
Target: Stream
What happened: Stream is investigating the loss of approximately $93 million in Stream fund assets.
This loss has been disclosed by an external fund manager, indicating a significant incident that may involve theft or misappropriation of funds.
The investigation by Stream is ongoing to determine the details and circumstances surrounding the loss.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985563962432503974
Target: Stream
What happened: Stream is investigating the loss of approximately $93 million in Stream fund assets.
This loss has been disclosed by an external fund manager, indicating a significant incident that may involve theft or misappropriation of funds.
The investigation by Stream is ongoing to determine the details and circumstances surrounding the loss.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985563962432503974
🚨 Hack Alert!
Target: MoonwellDeFi
What happened: 🚨 Multiple exploit transactions have been detected on the @MoonwellDeFi lending contract.
The exploiter managed to repeatedly borrow over 20 wstETH with only about ~0.02 wrstETH flashloaned and deposited. This was made possible due to a faulty oracle that incorrectly returned the wrst price of approximately $5.8M.
The financial impact of this exploit resulted in a profit of 295 ETH, which is valued at around $1M.
Stay vigilant!
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985620452992253973
Target: MoonwellDeFi
What happened: 🚨 Multiple exploit transactions have been detected on the @MoonwellDeFi lending contract.
The exploiter managed to repeatedly borrow over 20 wstETH with only about ~0.02 wrstETH flashloaned and deposited. This was made possible due to a faulty oracle that incorrectly returned the wrst price of approximately $5.8M.
The financial impact of this exploit resulted in a profit of 295 ETH, which is valued at around $1M.
Stay vigilant!
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985620452992253973
🚨 Hack Alert!
Target: aBasUSDC
What happened: A victim lost $304,595 worth of $aBasUSDC after signing a malicious "permit" signature.
This incident highlights a specific security breach where funds were successfully stolen through a phishing-style attack.
The total amount lost in this hack is approximately $304,595, underscoring the risks associated with signing malicious transactions.
Tweet URL: https://twitter.com/realScamSniffer/status/1986100818639229193
Target: aBasUSDC
What happened: A victim lost $304,595 worth of $aBasUSDC after signing a malicious "permit" signature.
This incident highlights a specific security breach where funds were successfully stolen through a phishing-style attack.
The total amount lost in this hack is approximately $304,595, underscoring the risks associated with signing malicious transactions.
Tweet URL: https://twitter.com/realScamSniffer/status/1986100818639229193
🚨 Hack Alert!
Target: DIMO Network
What happened: Our alert system has detected suspicious activity relating to DIMO Network.
A Dimo admin wallet was used to upgrade proxy 0x07C64bd1B23b7C9B0ABf80b8613f58e5B00ED5dD and withdraw 30M $DIMO tokens.
These tokens were then sold for approximately $40k.
Tweet URL: https://twitter.com/CertiKAlert/status/1986740107190112715
Target: DIMO Network
What happened: Our alert system has detected suspicious activity relating to DIMO Network.
A Dimo admin wallet was used to upgrade proxy 0x07C64bd1B23b7C9B0ABf80b8613f58e5B00ED5dD and withdraw 30M $DIMO tokens.
These tokens were then sold for approximately $40k.
Tweet URL: https://twitter.com/CertiKAlert/status/1986740107190112715
🚨 Hack Alert!
Target: USDC
What happened: Around 25 minutes ago, a significant incident was reported where someone lost $1.22 million in USDC and aPlaUSDT0 due to signing multiple phishing "permit" signatures. This event highlights the ongoing risks associated with phishing in the Web3 space, where users are tricked into granting unauthorized access to their funds. The specific financial impact of this incident is noteworthy, amounting to a large sum being compromised, which illustrates the effectiveness of phishing tactics being employed.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1986736869594513824
Target: USDC
What happened: Around 25 minutes ago, a significant incident was reported where someone lost $1.22 million in USDC and aPlaUSDT0 due to signing multiple phishing "permit" signatures. This event highlights the ongoing risks associated with phishing in the Web3 space, where users are tricked into granting unauthorized access to their funds. The specific financial impact of this incident is noteworthy, amounting to a large sum being compromised, which illustrates the effectiveness of phishing tactics being employed.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1986736869594513824
🚨 Hack Alert!
Target: Garden Finance
What happened: The tweet reports that the exploiter of @gardenfi transferred 501 BNB and 1910 ETH, which amounts to approximately ~$6.65 million, to @TornadoCash.
Additionally, it mentions that the exploiter's address, 0x98BCc6c34A489CEfdD9DfA8d792CFEFb02Ea2D12, still holds around ~$910,000.
Furthermore, it reminds readers that Garden Finance was exploited for approximately ~$10.8 million on October 31 due to a compromise on a solver.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1986791137370087462
Target: Garden Finance
What happened: The tweet reports that the exploiter of @gardenfi transferred 501 BNB and 1910 ETH, which amounts to approximately ~$6.65 million, to @TornadoCash.
Additionally, it mentions that the exploiter's address, 0x98BCc6c34A489CEfdD9DfA8d792CFEFb02Ea2D12, still holds around ~$910,000.
Furthermore, it reminds readers that Garden Finance was exploited for approximately ~$10.8 million on October 31 due to a compromise on a solver.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1986791137370087462
🚨 Hack Alert!
Target: AIDaUSDT
What happened: A user lost $264K worth of AIDaUSDT after unintentionally signing a phishing "approve" transaction. This incident highlights the risks associated with phishing scams in the Web3 space as real funds were stolen, resulting in financial loss for the victim.
Tweet URL: https://twitter.com/realScamSniffer/status/1987529302427172968
Target: AIDaUSDT
What happened: A user lost $264K worth of AIDaUSDT after unintentionally signing a phishing "approve" transaction. This incident highlights the risks associated with phishing scams in the Web3 space as real funds were stolen, resulting in financial loss for the victim.
Tweet URL: https://twitter.com/realScamSniffer/status/1987529302427172968
🚨 Hack Alert!
Target: Scam Sniffer
What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims reduced by 30%. Despite a general cooling down in phishing activity, "permit" signature scams continue to be prevalent.
The largest single loss was reported from the address 0x8C42…EC47, which lost $439,000 through a permit signature scam.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1987815026175181047
Target: Scam Sniffer
What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims reduced by 30%. Despite a general cooling down in phishing activity, "permit" signature scams continue to be prevalent.
The largest single loss was reported from the address 0x8C42…EC47, which lost $439,000 through a permit signature scam.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1987815026175181047
QuillMonitor : Web3 Hacks and Alerts pinned «🚨 Hack Alert! Target: Scam Sniffer What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims…»
🚨 Hack Alert!
Target: sillytuna
What happened: A PeckShield alert has reported a significant security incident involving a drained address related to @sillytuna. Approximately $24 million worth of $aEthUSDC has been successfully stolen through an address poisoning attack.
Currently, around $20 million in $DAI is held in two staging wallets under the attackers' control:
- 0xdCA9...c9C4 (~$10M)
- 0xd0c2...dd3e (~$10M)
The attacker has commenced bridging small amounts of the funds to Arbitrum.
This incident highlights the ongoing risks in the crypto space and the need for vigilance against such attacks.
Tweet URL: View Tweet
Target: sillytuna
What happened: A PeckShield alert has reported a significant security incident involving a drained address related to @sillytuna. Approximately $24 million worth of $aEthUSDC has been successfully stolen through an address poisoning attack.
Currently, around $20 million in $DAI is held in two staging wallets under the attackers' control:
- 0xdCA9...c9C4 (~$10M)
- 0xd0c2...dd3e (~$10M)
The attacker has commenced bridging small amounts of the funds to Arbitrum.
This incident highlights the ongoing risks in the crypto space and the need for vigilance against such attacks.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: SolvProtocol
What happened: The @SolvProtocol BitcoinReserveOffering contract was exploited, leading to a significant loss of approximately $2.7 million.
The root cause of this incident was identified as a reentrancy issue, which resulted from an unintended interaction between the mint() function and the ERC721 receiver callback.
During the process of redeeming the full value of an ERC-3525 SFT, the contract transferred the SFT using safeTransferFrom, which triggered the onERC721Received callback. This callback promptly minted BRO based on the SFT value. Following the callback's execution, mint() continued, resulting in another minting of BRO for the same value, causing a double-counting effect of the asset.
By cycling the burn and mint processes, the attacker was able to significantly amplify their BRO balance, morphing a small initial amount into a large supply and ultimately exchanging it for SolvBTC to cash in on their gains.
Attack TX: https://t.co/6KbbDGMbZI
Tweet URL: View Tweet
Target: SolvProtocol
What happened: The @SolvProtocol BitcoinReserveOffering contract was exploited, leading to a significant loss of approximately $2.7 million.
The root cause of this incident was identified as a reentrancy issue, which resulted from an unintended interaction between the mint() function and the ERC721 receiver callback.
During the process of redeeming the full value of an ERC-3525 SFT, the contract transferred the SFT using safeTransferFrom, which triggered the onERC721Received callback. This callback promptly minted BRO based on the SFT value. Following the callback's execution, mint() continued, resulting in another minting of BRO for the same value, causing a double-counting effect of the asset.
By cycling the burn and mint processes, the attacker was able to significantly amplify their BRO balance, morphing a small initial amount into a large supply and ultimately exchanging it for SolvBTC to cash in on their gains.
Attack TX: https://t.co/6KbbDGMbZI
Tweet URL: View Tweet
🚨 Hack Alert!
Target: sillytuna
What happened: An attacker has successfully drained approximately $24 million worth of $aEthUSDC from the project @sillytuna.
After the heist, the attacker swapped around $2 million worth of $DAI and $ETH for 6,174.4 $XMR, which is currently held on #Hyperliquid.
In addition to this, they have deposited nearly $6.5 million in $USDC and $USDT into centralized exchanges, including OKX, MEXC, and Bitkan.
Furthermore, the attacker laundered 375 $ETH through #TornadoCash.
Tweet URL: View Tweet
Target: sillytuna
What happened: An attacker has successfully drained approximately $24 million worth of $aEthUSDC from the project @sillytuna.
After the heist, the attacker swapped around $2 million worth of $DAI and $ETH for 6,174.4 $XMR, which is currently held on #Hyperliquid.
In addition to this, they have deposited nearly $6.5 million in $USDC and $USDT into centralized exchanges, including OKX, MEXC, and Bitkan.
Furthermore, the attacker laundered 375 $ETH through #TornadoCash.
Tweet URL: View Tweet
🚨 Hack Alert!
Target:
What happened: A suspicious transaction targeting an unknown contract (the AM/USDT pool) on BSC has resulted in an estimated loss of ~$131K.
The incident was due to a flawed burn mechanism that was exploited to manipulate the pool’s AM reserves. The attacker first adjusted
The attack transaction can be viewed at: https://t.co/9I9xeLwHlg.
Identified by Phalcon Security and analyzed via Phalcon Explorer.
Tweet URL: View Tweet
Target:
What happened: A suspicious transaction targeting an unknown contract (the AM/USDT pool) on BSC has resulted in an estimated loss of ~$131K.
The incident was due to a flawed burn mechanism that was exploited to manipulate the pool’s AM reserves. The attacker first adjusted
toBurnAmount and then executed the burn logic after manipulating the pool’s AM balance. This tactic reduced the AM reserve to an abnormally low level, allowing the attacker to sell AM back into the pool at an artificially inflated price, thus realizing their profit. The attack transaction can be viewed at: https://t.co/9I9xeLwHlg.
Identified by Phalcon Security and analyzed via Phalcon Explorer.
Tweet URL: View Tweet