Recent hacks radar
LiveDiscover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
Loading radar explorer…
← Back to homeDiscover active investigations, estimated exposure, and whether funds are still moving — then open a full incident page.
| ID | Severity | Live | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| thorchain | THORChain Multichain Vault Exploit — GG20 TSS Weakness (Suspected) | Bitcoin / Ethereum / BSC / Base | Cross-chain vault exploit | Active | $10M+ | $10.8M | 1 | 30% | 6 days ago | |
| tac-protocol… | TAC Protocol Cross-Chain Bridge Exploit — White Hat Resolution | TON | Cross-chain bridge exploit | Resolved | <$10M | $2.8M | 1 | 85% | May 13, 2026 | |
| transit | Transit Finance Deprecated TRON Contract Exploit — $1.88M DAI Drain | Ethereum | Deprecated contract exploit | Resolved | <$10M | $1.9M | 1 | 75% | May 13, 2026 | |
| shapeshift | ShapeShift FOX Colony — MetaTransaction Self-Call Exploit (Plus Copycat) | Arbitrum | MetaTransaction / Self-call exploit | Active | <$1M | $182.7K | 2 | 75% | May 13, 2026 | |
| aurellion | Aurellion Labs — Diamond Proxy Uninitialized Initializer Exploit | Arbitrum | Diamond proxy / Uninitialized contract | Unknown | <$1M | $456K | 3 | 50% | May 12, 2026 | |
| sq-protocol-… | SQ Protocol — Hardcoded Owner Backdoor (First Major EIP-7702 Abuse) | BSC | EIP-7702 abuse / Hardcoded backdoor | Unknown | <$1M | $346.1K | 1 | 55% | May 12, 2026 | |
| goplus | GoPlus Security Aggregate Report — 2 Private Key Compromises ($238K Combined) | Multiple | Private key compromise (aggregate report) | Unknown | <$1M | $238K | 2 | 25% | May 12, 2026 | |
| huma | Huma Finance V1 — Deprecated BaseCreditPool Logic Exploit | Polygon | Deprecated contract / Logic exploit | Resolved | <$1M | $101.4K | >10 | 85% | May 11, 2026 | |
| roaring | Roaring Kitty X Account Hijack — RKC Memecoin Pump & Dump | Solana | Account hijack / Memecoin scam | Active | <$10M | $2.9M | 80 | 60% | May 11, 2026 | |
| ink-finance-… | INK Finance — Whitelist Bypass + Balancer V2 Flash Loan Exploit | Polygon | Whitelist bypass / Flash loan exploit | Unknown | <$1M | $140K | 1 | 70% | May 11, 2026 | |
| unihax0r | Unihax0r — SIGMA Telegram Bot Private Key Compromise | Ethereum / Base / BSC | Private key compromise | Active | <$1M | $200K | 1 | 30% | May 11, 2026 | |
| renegade | Renegade.fi Dark Pool V1 — White Hat Initializer Exploit | Arbitrum | Unprotected initializer / White hat | Resolved | <$1M | $209K | 1 | 95% | May 10, 2026 | |
| trustedvolumes | TrustedVolumes RFQ Swap Proxy — Access Control Exploit (1inch Fusion Resolver) | Ethereum | Access control / Smart contract exploit | Unknown | <$10M | $6.7M | 1 | 65% | May 7, 2026 | |
| ekubo | Ekubo EVM v2 Router — Approval-Based Token Drain Exploit | Ethereum | Approval-based exploit / Router callback | Unknown | <$10M | $1.4M | 5 | 80% | May 5, 2026 | |
| smartcredit | SmartCredit Leveraged Lido Module — Flash Loan Exploit | Ethereum | Flash loan exploit | Resolved | <$100K | $72K | 1 | 80% | May 4, 2026 | |
| bisq | Bisq v1 — Miner Fee Manipulation in Multisig Trading Protocol | Bitcoin | Smart contract exploit | Partially recovered | <$1M | $858K | >10 | 75% | May 1, 2026 | |
| sharwa | Sharwa.Finance — Oracle Price Manipulation (Unconfirmed) | Arbitrum | Oracle manipulation | Unknown | <$100K | $32.9K | 1 | 20% | May 1, 2026 | |
| wasabi | Wasabi Protocol — Deployer Admin Key Compromise / UUPS Proxy Upgrade Drain | Ethereum / Base / Blast / Berachain | Private key leak | Funds moving | <$10M | $5M | 12 | 25% | Apr 30, 2026 | |
| syndicate | Syndicate — Commons Bridge Privileged Upgrade Compromise (SYND Drain) | Base | Bridge exploit | Partially recovered | <$1M | $330K | >10 | 70% | Apr 30, 2026 | |
| zetachain | ZetaChain — Triple-Bug GatewayEVM Cross-Chain Exploit | Ethereum / Arbitrum / Base / BSC | Smart contract exploit | Resolved | <$1M | $333.9K | 3 | 95% | Apr 29, 2026 | |
| quant | Quant — Access Control Smart Contract Exploit | Ethereum | Smart contract exploit | Unknown | <$1M | $138K | >10 | 40% | Apr 28, 2026 | |
| judao | JUDAO — Flash Loan + Deflationary Token Manipulation | BSC | Flash loan | Funds moving | <$1M | $228K | >10 | 60% | Apr 28, 2026 | |
| singularity | Singularity Finance — Invalid Uniswap V3 Fee Tier Oracle Manipulation | Base | Oracle manipulation | Funds moving | <$1M | $413K | >10 | 75% | Apr 27, 2026 | |
| scallop | Scallop Lend — Deprecated V2 Rewards Contract Flash Loan Exploit | Sui | Flash loan | Resolved | <$1M | $142.7K | >10 | 95% | Apr 27, 2026 | |
| volo | Volo Protocol — Admin Private Key Compromise (Sui Vaults) | Sui | Private key leak | Resolved | <$10M | $3.5M | >10 | 95% | Apr 26, 2026 | |
| rhea | Rhea Finance — Fake Token Pool / Margin Trading Exploit (NEAR Protocol) | NEAR Protocol / Ethereum / Zcash | Oracle manipulation | Partially recovered | $10M+ | $18.4M | 8 | 55% | Apr 18, 2026 | |
| silo | Silo Finance V2 — Isolated Leverage Contract Approval Exploit (Oracle Manipulation) | Arbitrum | Oracle manipulation | Resolved | <$1M | $392K | >10 | 80% | Apr 17, 2026 | |
| hyperbridge | Hyperbridge — MMR Proof Verification Flaw / Forged ISMP PostRequest | Ethereum / Base / BNB Chain / Arbitrum | Bridge exploit | Funds moving | <$10M | $2.5M | 8 | 40% | Apr 16, 2026 | |
| hyperbridge | Hyperbridge — MMR Proof Forgery (Phase 2 ETH Cash-Out) | Polkadot / Ethereum | Bridge exploit | Funds moving | <$1M | $237K | 8 | 95% | Apr 16, 2026 | |
| zerion | Zerion — DPRK UNC1069 AI-Enabled Social Engineering Attack | Multi-chain EVM | Phishing | Resolved | <$1M | $100K | >10 | 80% | Apr 15, 2026 | |
| g-love-walle… | G. Love Wallet Drain — Fake Ledger Live App on Apple Mac App Store (Seed-Phrase Phishing) | Bitcoin | Phishing | Funds moving | <$1M | $424.2K | 1 | 70% | Apr 14, 2026 | |
| subquery | SubQuery Network — Settings Contract Missing Access Control | Base | Smart contract exploit | Resolved | <$1M | $134K | 272 | 100% | Apr 13, 2026 | |
| dango | Dango — Insurance Fund Logic Flaw / Negative Donation (White-Hat Recovery) | Cosmos AppChain / Ethereum | Smart contract exploit | Resolved | <$1M | $410.0K | >10 | 85% | Apr 13, 2026 | |
| aethir | Aethir — OFTAdapter Ownership Takeover (BNB Bridge Drain to TRON) | BSC / TRON | Smart contract exploit | Partially recovered | <$1M | $423K | >10 | 90% | Apr 11, 2026 | |
| resolv | Resolv Labs — AWS KMS Private Key Compromise / USR Stablecoin Depeg | Ethereum | Private key leak | Partially recovered | $10M+ | $25M | 15 | 45% | Apr 6, 2026 | |
| drift | Drift Protocol — DPRK 6-Month Social Engineering Admin Takeover | Solana / Ethereum | Social engineering / Private key | Funds moving | $10M+ | $285M | 32 | 20% | Apr 5, 2026 | |
| denaria | Denaria Finance — Unsafe Casting / vAMM Manipulation | Linea | Smart contract exploit | Unknown | <$1M | $165.6K | >10 | 60% | Apr 5, 2026 | |
| kelpdao | KelpDAO — LayerZero Bridge Exploit (Forged DVN Attestation) | Ethereum / Arbitrum / Base / Linea / Mantle / Scroll / Blast / Optimism | Bridge exploit | Funds moving | $10M+ | $292M | 47 | 35% | Apr 1, 2026 | |
| lml-usdt-sta… | LML/USDT Staking Protocol — Spot Price Manipulation (No TWAP) | BSC | Oracle manipulation | Funds moving | <$1M | $950K | >10 | 70% | Mar 31, 2026 | |
| goonfi | GoonFi — Oracle Mispricing Arbitrage | Solana | Oracle manipulation | Unknown | <$1M | $254K | >10 | 50% | Mar 28, 2026 | |
| unknown | Unknown Staking Contract — Oracle Price Manipulation | BSC | Oracle manipulation | Unknown | <$1M | $133K | >10 | 40% | Mar 27, 2026 | |
| pancakeswap | PancakeSwap BCE-USDT — Burn Mechanism Manipulation | BSC | Smart contract exploit | Unknown | <$1M | $679K | >10 | 55% | Mar 23, 2026 | |
| dtrinity | dTRINITY dLEND — Deposit Inflation Attack | Ethereum | Smart contract exploit | Unknown | <$1M | $257K | >10 | 50% | Mar 17, 2026 | |
| am-usdt-pool… | AM/USDT Pool — Burn Mechanism Manipulation | BSC | Oracle manipulation | Unknown | <$1M | $131K | >10 | 50% | Mar 12, 2026 | |
| stake | Stake DAO — Oracle Message Spoofing (Cross-Chain) | Arbitrum / Base | Oracle manipulation | Unknown | <$1M | $176K | >10 | 55% | Mar 12, 2026 | |
| aave | Aave V3 — CAPO Oracle Misconfiguration (System Error) | Ethereum | Oracle manipulation | Resolved | <$1M | $862K | 34 | 95% | Mar 12, 2026 | |
| mt-token-buy… | MT Token — Buy Restriction Bypass / Logic Error | BSC | Smart contract exploit | Unknown | <$1M | $242K | >10 | 65% | Mar 10, 2026 | |
| gondi | Gondi V3 NFT Lending — PurchaseBundler Access Control Flaw | Ethereum | Smart contract exploit | Resolved | <$1M | $230K | >10 | 80% | Mar 9, 2026 | |
| molt | Molt EVM — Access Control Bypass | Base | Smart contract exploit | Unknown | <$1M | $127K | >10 | 60% | Mar 7, 2026 | |
| inverse | Inverse Finance sDOLA — Oracle Manipulation | Ethereum | Oracle manipulation | Resolved | <$1M | $239K | >10 | 80% | Mar 2, 2026 | |
| curve | Curve LlamaLend sDOLA Market — Oracle Manipulation / Donation Attack | Ethereum | Oracle manipulation | Resolved | <$1M | $240K | >10 | 85% | Mar 2, 2026 | |
| zachxbt | ZachXBT Ongoing EVM Wallet Drainer Campaign (Active Since Dec 2025) | Multiple EVM (Ethereum / BSC / Base / Arbitrum / Polygon) | Wallet drainer campaign (root cause unidentified) | Active | <$1M | $107K | 100 | 10% | Jan 15, 2026 | |
| 0xacme | 0xAcme DeFi — pool drain and downstream laundering cluster (full import example) | Ethereum / Arbitrum | Smart contract exploit / liquidity drain | Funds moving — mixer + CEX deposit chain | $10M+ | $197.0M | 842 | 67% | Aug 2, 2024 |