🚨 Hack Alert!
Target: Stream
What happened: Stream is investigating the loss of approximately $93 million in Stream fund assets.
This loss has been disclosed by an external fund manager, indicating a significant incident that may involve theft or misappropriation of funds.
The investigation by Stream is ongoing to determine the details and circumstances surrounding the loss.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985563962432503974
Target: Stream
What happened: Stream is investigating the loss of approximately $93 million in Stream fund assets.
This loss has been disclosed by an external fund manager, indicating a significant incident that may involve theft or misappropriation of funds.
The investigation by Stream is ongoing to determine the details and circumstances surrounding the loss.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985563962432503974
🚨 Hack Alert!
Target: MoonwellDeFi
What happened: 🚨 Multiple exploit transactions have been detected on the @MoonwellDeFi lending contract.
The exploiter managed to repeatedly borrow over 20 wstETH with only about ~0.02 wrstETH flashloaned and deposited. This was made possible due to a faulty oracle that incorrectly returned the wrst price of approximately $5.8M.
The financial impact of this exploit resulted in a profit of 295 ETH, which is valued at around $1M.
Stay vigilant!
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985620452992253973
Target: MoonwellDeFi
What happened: 🚨 Multiple exploit transactions have been detected on the @MoonwellDeFi lending contract.
The exploiter managed to repeatedly borrow over 20 wstETH with only about ~0.02 wrstETH flashloaned and deposited. This was made possible due to a faulty oracle that incorrectly returned the wrst price of approximately $5.8M.
The financial impact of this exploit resulted in a profit of 295 ETH, which is valued at around $1M.
Stay vigilant!
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1985620452992253973
🚨 Hack Alert!
Target: aBasUSDC
What happened: A victim lost $304,595 worth of $aBasUSDC after signing a malicious "permit" signature.
This incident highlights a specific security breach where funds were successfully stolen through a phishing-style attack.
The total amount lost in this hack is approximately $304,595, underscoring the risks associated with signing malicious transactions.
Tweet URL: https://twitter.com/realScamSniffer/status/1986100818639229193
Target: aBasUSDC
What happened: A victim lost $304,595 worth of $aBasUSDC after signing a malicious "permit" signature.
This incident highlights a specific security breach where funds were successfully stolen through a phishing-style attack.
The total amount lost in this hack is approximately $304,595, underscoring the risks associated with signing malicious transactions.
Tweet URL: https://twitter.com/realScamSniffer/status/1986100818639229193
🚨 Hack Alert!
Target: DIMO Network
What happened: Our alert system has detected suspicious activity relating to DIMO Network.
A Dimo admin wallet was used to upgrade proxy 0x07C64bd1B23b7C9B0ABf80b8613f58e5B00ED5dD and withdraw 30M $DIMO tokens.
These tokens were then sold for approximately $40k.
Tweet URL: https://twitter.com/CertiKAlert/status/1986740107190112715
Target: DIMO Network
What happened: Our alert system has detected suspicious activity relating to DIMO Network.
A Dimo admin wallet was used to upgrade proxy 0x07C64bd1B23b7C9B0ABf80b8613f58e5B00ED5dD and withdraw 30M $DIMO tokens.
These tokens were then sold for approximately $40k.
Tweet URL: https://twitter.com/CertiKAlert/status/1986740107190112715
🚨 Hack Alert!
Target: USDC
What happened: Around 25 minutes ago, a significant incident was reported where someone lost $1.22 million in USDC and aPlaUSDT0 due to signing multiple phishing "permit" signatures. This event highlights the ongoing risks associated with phishing in the Web3 space, where users are tricked into granting unauthorized access to their funds. The specific financial impact of this incident is noteworthy, amounting to a large sum being compromised, which illustrates the effectiveness of phishing tactics being employed.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1986736869594513824
Target: USDC
What happened: Around 25 minutes ago, a significant incident was reported where someone lost $1.22 million in USDC and aPlaUSDT0 due to signing multiple phishing "permit" signatures. This event highlights the ongoing risks associated with phishing in the Web3 space, where users are tricked into granting unauthorized access to their funds. The specific financial impact of this incident is noteworthy, amounting to a large sum being compromised, which illustrates the effectiveness of phishing tactics being employed.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1986736869594513824
🚨 Hack Alert!
Target: Garden Finance
What happened: The tweet reports that the exploiter of @gardenfi transferred 501 BNB and 1910 ETH, which amounts to approximately ~$6.65 million, to @TornadoCash.
Additionally, it mentions that the exploiter's address, 0x98BCc6c34A489CEfdD9DfA8d792CFEFb02Ea2D12, still holds around ~$910,000.
Furthermore, it reminds readers that Garden Finance was exploited for approximately ~$10.8 million on October 31 due to a compromise on a solver.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1986791137370087462
Target: Garden Finance
What happened: The tweet reports that the exploiter of @gardenfi transferred 501 BNB and 1910 ETH, which amounts to approximately ~$6.65 million, to @TornadoCash.
Additionally, it mentions that the exploiter's address, 0x98BCc6c34A489CEfdD9DfA8d792CFEFb02Ea2D12, still holds around ~$910,000.
Furthermore, it reminds readers that Garden Finance was exploited for approximately ~$10.8 million on October 31 due to a compromise on a solver.
🔗Tweet URL: https://twitter.com/CertiKAlert/status/1986791137370087462
🚨 Hack Alert!
Target: AIDaUSDT
What happened: A user lost $264K worth of AIDaUSDT after unintentionally signing a phishing "approve" transaction. This incident highlights the risks associated with phishing scams in the Web3 space as real funds were stolen, resulting in financial loss for the victim.
Tweet URL: https://twitter.com/realScamSniffer/status/1987529302427172968
Target: AIDaUSDT
What happened: A user lost $264K worth of AIDaUSDT after unintentionally signing a phishing "approve" transaction. This incident highlights the risks associated with phishing scams in the Web3 space as real funds were stolen, resulting in financial loss for the victim.
Tweet URL: https://twitter.com/realScamSniffer/status/1987529302427172968
🚨 Hack Alert!
Target: Scam Sniffer
What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims reduced by 30%. Despite a general cooling down in phishing activity, "permit" signature scams continue to be prevalent.
The largest single loss was reported from the address 0x8C42…EC47, which lost $439,000 through a permit signature scam.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1987815026175181047
Target: Scam Sniffer
What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims reduced by 30%. Despite a general cooling down in phishing activity, "permit" signature scams continue to be prevalent.
The largest single loss was reported from the address 0x8C42…EC47, which lost $439,000 through a permit signature scam.
🔗Tweet URL: https://twitter.com/realScamSniffer/status/1987815026175181047
QuillMonitor : Web3 Hacks and Alerts pinned «🚨 Hack Alert! Target: Scam Sniffer What happened: In October 2025, the Scam Sniffer reported total phishing losses amounting to $3.28 million, affecting 10,935 victims. This marks a significant decline compared to September, with losses down by 72% and victims…»
🚨 Hack Alert!
Target: sillytuna
What happened: A PeckShield alert has reported a significant security incident involving a drained address related to @sillytuna. Approximately $24 million worth of $aEthUSDC has been successfully stolen through an address poisoning attack.
Currently, around $20 million in $DAI is held in two staging wallets under the attackers' control:
- 0xdCA9...c9C4 (~$10M)
- 0xd0c2...dd3e (~$10M)
The attacker has commenced bridging small amounts of the funds to Arbitrum.
This incident highlights the ongoing risks in the crypto space and the need for vigilance against such attacks.
Tweet URL: View Tweet
Target: sillytuna
What happened: A PeckShield alert has reported a significant security incident involving a drained address related to @sillytuna. Approximately $24 million worth of $aEthUSDC has been successfully stolen through an address poisoning attack.
Currently, around $20 million in $DAI is held in two staging wallets under the attackers' control:
- 0xdCA9...c9C4 (~$10M)
- 0xd0c2...dd3e (~$10M)
The attacker has commenced bridging small amounts of the funds to Arbitrum.
This incident highlights the ongoing risks in the crypto space and the need for vigilance against such attacks.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: SolvProtocol
What happened: The @SolvProtocol BitcoinReserveOffering contract was exploited, leading to a significant loss of approximately $2.7 million.
The root cause of this incident was identified as a reentrancy issue, which resulted from an unintended interaction between the mint() function and the ERC721 receiver callback.
During the process of redeeming the full value of an ERC-3525 SFT, the contract transferred the SFT using safeTransferFrom, which triggered the onERC721Received callback. This callback promptly minted BRO based on the SFT value. Following the callback's execution, mint() continued, resulting in another minting of BRO for the same value, causing a double-counting effect of the asset.
By cycling the burn and mint processes, the attacker was able to significantly amplify their BRO balance, morphing a small initial amount into a large supply and ultimately exchanging it for SolvBTC to cash in on their gains.
Attack TX: https://t.co/6KbbDGMbZI
Tweet URL: View Tweet
Target: SolvProtocol
What happened: The @SolvProtocol BitcoinReserveOffering contract was exploited, leading to a significant loss of approximately $2.7 million.
The root cause of this incident was identified as a reentrancy issue, which resulted from an unintended interaction between the mint() function and the ERC721 receiver callback.
During the process of redeeming the full value of an ERC-3525 SFT, the contract transferred the SFT using safeTransferFrom, which triggered the onERC721Received callback. This callback promptly minted BRO based on the SFT value. Following the callback's execution, mint() continued, resulting in another minting of BRO for the same value, causing a double-counting effect of the asset.
By cycling the burn and mint processes, the attacker was able to significantly amplify their BRO balance, morphing a small initial amount into a large supply and ultimately exchanging it for SolvBTC to cash in on their gains.
Attack TX: https://t.co/6KbbDGMbZI
Tweet URL: View Tweet
🚨 Hack Alert!
Target: sillytuna
What happened: An attacker has successfully drained approximately $24 million worth of $aEthUSDC from the project @sillytuna.
After the heist, the attacker swapped around $2 million worth of $DAI and $ETH for 6,174.4 $XMR, which is currently held on #Hyperliquid.
In addition to this, they have deposited nearly $6.5 million in $USDC and $USDT into centralized exchanges, including OKX, MEXC, and Bitkan.
Furthermore, the attacker laundered 375 $ETH through #TornadoCash.
Tweet URL: View Tweet
Target: sillytuna
What happened: An attacker has successfully drained approximately $24 million worth of $aEthUSDC from the project @sillytuna.
After the heist, the attacker swapped around $2 million worth of $DAI and $ETH for 6,174.4 $XMR, which is currently held on #Hyperliquid.
In addition to this, they have deposited nearly $6.5 million in $USDC and $USDT into centralized exchanges, including OKX, MEXC, and Bitkan.
Furthermore, the attacker laundered 375 $ETH through #TornadoCash.
Tweet URL: View Tweet
🚨 Hack Alert!
Target:
What happened: A suspicious transaction targeting an unknown contract (the AM/USDT pool) on BSC has resulted in an estimated loss of ~$131K.
The incident was due to a flawed burn mechanism that was exploited to manipulate the pool’s AM reserves. The attacker first adjusted
The attack transaction can be viewed at: https://t.co/9I9xeLwHlg.
Identified by Phalcon Security and analyzed via Phalcon Explorer.
Tweet URL: View Tweet
Target:
What happened: A suspicious transaction targeting an unknown contract (the AM/USDT pool) on BSC has resulted in an estimated loss of ~$131K.
The incident was due to a flawed burn mechanism that was exploited to manipulate the pool’s AM reserves. The attacker first adjusted
toBurnAmount and then executed the burn logic after manipulating the pool’s AM balance. This tactic reduced the AM reserve to an abnormally low level, allowing the attacker to sell AM back into the pool at an artificially inflated price, thus realizing their profit. The attack transaction can be viewed at: https://t.co/9I9xeLwHlg.
Identified by Phalcon Security and analyzed via Phalcon Explorer.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: DBXencrypto
*What happened:* ALERT! There has been a significant security incident involving @DBXencrypto's contract, resulting in an estimated loss of ~$150K.
The root cause of the incident is traced back to an inconsistency in the sender's identity under ERC2771 meta-transactions, which enabled the attacker to exploit the reward accounting logic, leading to the drainage of assets from the contract.
Specifically, within the burnBatch() function, the gasWrapper() modifier updates the state using msgSender() (the actual user), whereas the callback onTokenBurned() uses msg.sender (the forwarder). This inconsistency leads to a situation where accCycleBatchesBurned is correctly noted for the user, but lastActiveCycle is incorrectly updated for the forwarder.
As a result, when updateStats() is executed for the user, the contract wrongly concludes that there are unprocessed burned batches due to the updated statement, causing miscalculations of rewards and fees, ultimately allowing the attacker to withdraw excess funds for profit.
The attack transactions are available at:
1. https://t.co/IZcREEKdS2
2. https://t.co/kJNCZAhpm1
*Tweet URL:* [View Tweet](https://twitter.com/Phalconxyz/status/2031955394025996688)
Target: DBXencrypto
*What happened:* ALERT! There has been a significant security incident involving @DBXencrypto's contract, resulting in an estimated loss of ~$150K.
The root cause of the incident is traced back to an inconsistency in the sender's identity under ERC2771 meta-transactions, which enabled the attacker to exploit the reward accounting logic, leading to the drainage of assets from the contract.
Specifically, within the burnBatch() function, the gasWrapper() modifier updates the state using msgSender() (the actual user), whereas the callback onTokenBurned() uses msg.sender (the forwarder). This inconsistency leads to a situation where accCycleBatchesBurned is correctly noted for the user, but lastActiveCycle is incorrectly updated for the forwarder.
As a result, when updateStats() is executed for the user, the contract wrongly concludes that there are unprocessed burned batches due to the updated statement, causing miscalculations of rewards and fees, ultimately allowing the attacker to withdraw excess funds for profit.
The attack transactions are available at:
1. https://t.co/IZcREEKdS2
2. https://t.co/kJNCZAhpm1
*Tweet URL:* [View Tweet](https://twitter.com/Phalconxyz/status/2031955394025996688)
🚨 Hack Alert!
Target:
What happened: A phishing incident resulted in a loss of $720,108 in valBUSD and valTUSD after victims signed malicious increaseAllowance signatures. These signatures enabled the attackers to drain funds from the affected wallets.
The report highlights the dangers of phishing attacks and the importance of verifying signatures before confirming any transaction, especially those that request allowances.
This incident serves as a critical reminder for users to stay vigilant against phishing attempts in the Web3 space.
Tweet URL: View Tweet
Target:
What happened: A phishing incident resulted in a loss of $720,108 in valBUSD and valTUSD after victims signed malicious increaseAllowance signatures. These signatures enabled the attackers to drain funds from the affected wallets.
The report highlights the dangers of phishing attacks and the importance of verifying signatures before confirming any transaction, especially those that request allowances.
This incident serves as a critical reminder for users to stay vigilant against phishing attempts in the Web3 space.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: VenusProtocol
What happened: 🚨 @VenusProtocol on BSC was exploited for ~$3.7M on March 15.
Root cause: supply cap bypass via direct ERC-20 transfers to a vToken contract, a known Compound V2 design flaw previously flagged in Venus’s own Code4rena audit.
Example tx: https://t.co/qSMEA4RjPc
~50 exploit transactions in total.
Tweet URL: View Tweet
Target: VenusProtocol
What happened: 🚨 @VenusProtocol on BSC was exploited for ~$3.7M on March 15.
Root cause: supply cap bypass via direct ERC-20 transfers to a vToken contract, a known Compound V2 design flaw previously flagged in Venus’s own Code4rena audit.
Example tx: https://t.co/qSMEA4RjPc
~50 exploit transactions in total.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: Ethereum
What happened: A user lost approximately $1.77 million in USDC after falling victim to a phishing scheme involving a gasless approval signature on the Ethereum network. This incident demonstrates the risks associated with signing permissions without proper scrutiny. The phishing attack successfully compromised the user's funds. For more information, refer to the tweet link.
🔗Tweet URL: View Tweethttps://twitter.com/realScamSniffer/status/2033695871448326478
Target: Ethereum
What happened: A user lost approximately $1.77 million in USDC after falling victim to a phishing scheme involving a gasless approval signature on the Ethereum network. This incident demonstrates the risks associated with signing permissions without proper scrutiny. The phishing attack successfully compromised the user's funds. For more information, refer to the tweet link.
🔗Tweet URL: View Tweethttps://twitter.com/realScamSniffer/status/2033695871448326478
🚨 Hack Alert!
Target: Venus
What happened: The market on Venus for the token $THE has experienced a significant exploit, resulting in approximately $2.15 million in bad debt.
The attacker initially withdrew 7,400 $ETH from Tornado Cash, subsequently borrowing $9.9 million to purchase $THE. They manipulated the market by donating 36.1 million $THE directly to the vTHE contract, which enabled them to bypass the supply cap and inflate the exchange rate by 3.81x.
Post-attack, a notable investor, @justinsuntron, who is among the top 5 holders of $XVS, deposited 621,000 $XVS totaling about $1.95 million to HTX Global. Additionally, the attacker, identified as #BNBBridgeExploiter and a top 16 holder of $XVS, retains 135,000 $XVS valued at roughly $421,000.
Tweet URL: View Tweet
Target: Venus
What happened: The market on Venus for the token $THE has experienced a significant exploit, resulting in approximately $2.15 million in bad debt.
The attacker initially withdrew 7,400 $ETH from Tornado Cash, subsequently borrowing $9.9 million to purchase $THE. They manipulated the market by donating 36.1 million $THE directly to the vTHE contract, which enabled them to bypass the supply cap and inflate the exchange rate by 3.81x.
Post-attack, a notable investor, @justinsuntron, who is among the top 5 holders of $XVS, deposited 621,000 $XVS totaling about $1.95 million to HTX Global. Additionally, the attacker, identified as #BNBBridgeExploiter and a top 16 holder of $XVS, retains 135,000 $XVS valued at roughly $421,000.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: Movie Token
What happened: On March 10, Movie Token (MT) was exploited.
The incident resulted in a significant financial loss totaling approximately $242,000.
For a detailed analysis of the exploit and its ramifications, a link is provided for further reading.
Tweet URL: View Tweet
Target: Movie Token
What happened: On March 10, Movie Token (MT) was exploited.
The incident resulted in a significant financial loss totaling approximately $242,000.
For a detailed analysis of the exploit and its ramifications, a link is provided for further reading.
Tweet URL: View Tweet
🚨 Hack Alert!
Target: ResolvLabs
What happened: A significant exploit has been reported involving a stablecoin, resulting in an $80 million loss due to a flaw in the completeSwap() function at @ResolvLabs.
An attacker took advantage of this vulnerability to mint approximately $80 million of unbacked $USR, without draining any collateral. This led to a catastrophic depeg, causing the value of $USR to plummet to around $0.257, a ~74% drop.
The on-chain activity indicates that the attacker’s address is 0x04A288a7789DD6Ade935361a4fB1Ec5db513caEd, and roughly $23.8 million has been swapped into ETH and is currently held at address 0x8ED8cF0C1c531C1b20848E78f1CB32fa5B99b81C.
In response, Resolv has paused all protocol functions to address the issue and work on recovery.
This incident showcases the critical nature of proper backing and validation mechanisms for stablecoins, as failure to maintain backing can lead to drastic consequences for the entire ecosystem.
Tweet URL: View Tweet
Target: ResolvLabs
What happened: A significant exploit has been reported involving a stablecoin, resulting in an $80 million loss due to a flaw in the completeSwap() function at @ResolvLabs.
An attacker took advantage of this vulnerability to mint approximately $80 million of unbacked $USR, without draining any collateral. This led to a catastrophic depeg, causing the value of $USR to plummet to around $0.257, a ~74% drop.
The on-chain activity indicates that the attacker’s address is 0x04A288a7789DD6Ade935361a4fB1Ec5db513caEd, and roughly $23.8 million has been swapped into ETH and is currently held at address 0x8ED8cF0C1c531C1b20848E78f1CB32fa5B99b81C.
In response, Resolv has paused all protocol functions to address the issue and work on recovery.
This incident showcases the critical nature of proper backing and validation mechanisms for stablecoins, as failure to maintain backing can lead to drastic consequences for the entire ecosystem.
Tweet URL: View Tweet
❤2👍2
🚨 Hack Alert!
Target: PancakeSwap
What happened: An alert has been issued regarding a suspicious transaction that targeted a PancakeSwap pool (BCE–USDT) on the Binance Smart Chain (BSC) a few hours ago.
The incident led to a total loss of approximately $679,000. Preliminary analysis indicates that the root cause of the hack was a flawed burn mechanism in the BCE token.
To execute the attack, the hacker deployed two malicious contracts which were designed to bypass buy/sell restrictions, subsequently triggering token burns within the pool.
This manipulation significantly skewed the pool reserves, which enabled the attacker to drain the BCE–USDT pool, resulting in a total profit of around $679,000.
Forensic details include the attack transaction link: https://t.co/1JqoWCpaA2.
🔗Tweet URL: View Tweet
Target: PancakeSwap
What happened: An alert has been issued regarding a suspicious transaction that targeted a PancakeSwap pool (BCE–USDT) on the Binance Smart Chain (BSC) a few hours ago.
The incident led to a total loss of approximately $679,000. Preliminary analysis indicates that the root cause of the hack was a flawed burn mechanism in the BCE token.
To execute the attack, the hacker deployed two malicious contracts which were designed to bypass buy/sell restrictions, subsequently triggering token burns within the pool.
This manipulation significantly skewed the pool reserves, which enabled the attacker to drain the BCE–USDT pool, resulting in a total profit of around $679,000.
Forensic details include the attack transaction link: https://t.co/1JqoWCpaA2.
🔗Tweet URL: View Tweet