#defihack
defihack
28,105 vues
111 mentions
Populaire
Récents
2026 IS ALREADY THE MOST BRUTAL YEAR FOR DEFI HACKS
April just set a new record:
- Kelp DAO → $293 MILLION wiped out (LayerZero bridge exploit)
- Drift Protocol → $285 MILLION gone (Lazarus Group social engineering)
Just these two projects alone stole $578 MILLION in minutes.
And there’s more:
- Step Finance → $27 MILLION
- Truebit → $26 MILLION
- Resolv → $25 MILLION
Total April losses? $650 MILLION+ from nearly 30 hacks.
Cross-chain bridges, admin keys, and oracles keep getting wrecked.
Stay safe out there self-custody is the only way.
#DeFiHack #CryptoHack #KelpDAO #DriftProtocol
April just set a new record:
- Kelp DAO → $293 MILLION wiped out (LayerZero bridge exploit)
- Drift Protocol → $285 MILLION gone (Lazarus Group social engineering)
Just these two projects alone stole $578 MILLION in minutes.
And there’s more:
- Step Finance → $27 MILLION
- Truebit → $26 MILLION
- Resolv → $25 MILLION
Total April losses? $650 MILLION+ from nearly 30 hacks.
Cross-chain bridges, admin keys, and oracles keep getting wrecked.
Stay safe out there self-custody is the only way.
#DeFiHack #CryptoHack #KelpDAO #DriftProtocol
mmSampaio:
COW também, site foi sequestrado e os swaps foram todos pra conta dos Hackers.
🚨ALERT: Crypto hackers have now stolen over $17 BILLION across 518 separate incidents over the last 10 years, per DefiLlama.
That's an average of ~$33 MILLION per hack and roughly one major exploit every WEEK for a decade.
The majority, at over $3.6B, came from private key compromises, via brute-force attacks.
2025 WAS THE WORST YEAR ON RECORD, with losses exceeding $4.04B.
Just last week, Kelp DAO's rsETH bridge was drained for ~$290 MILLION, marking 2026's largest DeFi hack so far.
#BinanceLaunchesGoldvs.BTCTradingCompetition #StrategyBTCPurchase
#DeFiHack
That's an average of ~$33 MILLION per hack and roughly one major exploit every WEEK for a decade.
The majority, at over $3.6B, came from private key compromises, via brute-force attacks.
2025 WAS THE WORST YEAR ON RECORD, with losses exceeding $4.04B.
Just last week, Kelp DAO's rsETH bridge was drained for ~$290 MILLION, marking 2026's largest DeFi hack so far.
#BinanceLaunchesGoldvs.BTCTradingCompetition #StrategyBTCPurchase
#DeFiHack
#kelpdaoexploitfreeze
🚨 North Korea Stole $292M from KelpDAO — Here's Exactly How They Did It!
The biggest DeFi hack of 2026 has been linked to North Korea's Lazarus Group — and the attack method was unlike anything we've seen before!
What Happened on April 18, 2026:
Hackers exploited KelpDAO's LayerZero cross-chain bridge — but this was NOT a typical smart contract bug. Every single on-chain transaction looked completely valid!
The Attack Method — Step by Step:
1️⃣ Lazarus Group compromised KelpDAO's internal RPC nodes
2️⃣ DDoS'd external nodes to eliminate any second check
3️⃣ Fed false data to a single-point-of-failure verification system
4️⃣ Tricked the Ethereum contract into releasing 116,500 rsETH
5️⃣ Deposited 90,000 stolen rsETH into Aave as collateral
6️⃣ Borrowed $190M+ in real ETH against worthless collateral
7️⃣ Laundered $176M through THORChain into Bitcoin
The Freeze Response:
On April 20, Arbitrum's Security Council executed an emergency action — freezing 30,766 ETH worth ~$71M tied to the exploiter. This was one of the fastest governance responses in DeFi history!
$ETH $AAVE
The root cause? A "1-of-1" single verifier setup — meaning only ONE validator needed to approve cross-chain messages. No second check. No backup. A single point of failure that North Korea's best hackers exploited perfectly.
Not Financial Advice. DYOR 📊
#DeFiHack #NorthKorea #CryptoSecurit
🚨 North Korea Stole $292M from KelpDAO — Here's Exactly How They Did It!
The biggest DeFi hack of 2026 has been linked to North Korea's Lazarus Group — and the attack method was unlike anything we've seen before!
What Happened on April 18, 2026:
Hackers exploited KelpDAO's LayerZero cross-chain bridge — but this was NOT a typical smart contract bug. Every single on-chain transaction looked completely valid!
The Attack Method — Step by Step:
1️⃣ Lazarus Group compromised KelpDAO's internal RPC nodes
2️⃣ DDoS'd external nodes to eliminate any second check
3️⃣ Fed false data to a single-point-of-failure verification system
4️⃣ Tricked the Ethereum contract into releasing 116,500 rsETH
5️⃣ Deposited 90,000 stolen rsETH into Aave as collateral
6️⃣ Borrowed $190M+ in real ETH against worthless collateral
7️⃣ Laundered $176M through THORChain into Bitcoin
The Freeze Response:
On April 20, Arbitrum's Security Council executed an emergency action — freezing 30,766 ETH worth ~$71M tied to the exploiter. This was one of the fastest governance responses in DeFi history!
$ETH $AAVE
The root cause? A "1-of-1" single verifier setup — meaning only ONE validator needed to approve cross-chain messages. No second check. No backup. A single point of failure that North Korea's best hackers exploited perfectly.
Not Financial Advice. DYOR 📊
#DeFiHack #NorthKorea #CryptoSecurit
$292M GONE: THE DEFI CONTAGION 🚨
The KelpDAO exploit is officially the largest DeFi theft of 2026. Hackers are using THORChain to swap stolen $ETH for $BTC , leaving a massive trail of chaos. Arbitrum froze $75M, but the rest is disappearing into the void.
This isn't just one protocol—it’s a systemic failure. Are we witnessing the "Death of Interoperability"? Be careful where you deposit your assets!
#KelpDAO #DeFiHack #Security #Alert #LazarusGroup
The KelpDAO exploit is officially the largest DeFi theft of 2026. Hackers are using THORChain to swap stolen $ETH for $BTC , leaving a massive trail of chaos. Arbitrum froze $75M, but the rest is disappearing into the void.
This isn't just one protocol—it’s a systemic failure. Are we witnessing the "Death of Interoperability"? Be careful where you deposit your assets!
#KelpDAO #DeFiHack #Security #Alert #LazarusGroup
🚨 Lazarus "Bóng Ma Triều Tiên" Tấn Công DeFi – $577 Triệu Bốc Hơi Trong 18 Ngày
Nhóm hacker Lazarus (Bắc Triều Tiên) xác nhận đứng sau cả hai vụ tấn công lớn nhất tháng 4: Drift Protocol mất $285M ngày 1/4 và KelpDAO mất $292M ngày 18/4 – tổng thiệt hại vượt $577M chỉ trong nửa tháng.
Vụ hack KelpDAO khai thác lỗ hổng cầu nối LayerZero bằng cách tấn công DDoS 2 nút RPC, ép hệ thống failover và lừa verifier ký giao dịch cross-chain giả, rút đi 116,500 rsETH (~18% lượng cung lưu hành).
Tháng 4/2026 chính thức trở thành tháng tồi tệ nhất cho DeFi kể từ tháng 2/2025, với tổng thiệt hại năm nay đã lên tới $771.8M – số vụ tấn công tăng gần gấp đôi so với cùng kỳ 2025.
#DeFiHack #Lazarus #KelpDAO
Nhóm hacker Lazarus (Bắc Triều Tiên) xác nhận đứng sau cả hai vụ tấn công lớn nhất tháng 4: Drift Protocol mất $285M ngày 1/4 và KelpDAO mất $292M ngày 18/4 – tổng thiệt hại vượt $577M chỉ trong nửa tháng.
Vụ hack KelpDAO khai thác lỗ hổng cầu nối LayerZero bằng cách tấn công DDoS 2 nút RPC, ép hệ thống failover và lừa verifier ký giao dịch cross-chain giả, rút đi 116,500 rsETH (~18% lượng cung lưu hành).
Tháng 4/2026 chính thức trở thành tháng tồi tệ nhất cho DeFi kể từ tháng 2/2025, với tổng thiệt hại năm nay đã lên tới $771.8M – số vụ tấn công tăng gần gấp đôi so với cùng kỳ 2025.
#DeFiHack #Lazarus #KelpDAO
💥 Exploração de US$ 200 milhões abala o mercado DeFi hoje!
Kelp DAO acusa LayerZero de roubo, enquanto a Aave corre para conter um rombo massivo. Se você tem ativos em L2 (Mantle, Arbitrum, Base) ou usa o rsETH, fique atento às atualizações de governança! 🛡️
"Não é o que nos acontece, mas como reagimos que importa." — Epicteto.
Como você está reagindo a essa notícia?
👍 - Calma, o DeFi vai absorver isso.
🔥 - Hora de tirar tudo das bridges e L2 por precaução.
#BinanceSquare #CryptoAlert #Bitcoin #Ethereum #DeFiHack
Kelp DAO acusa LayerZero de roubo, enquanto a Aave corre para conter um rombo massivo. Se você tem ativos em L2 (Mantle, Arbitrum, Base) ou usa o rsETH, fique atento às atualizações de governança! 🛡️
"Não é o que nos acontece, mas como reagimos que importa." — Epicteto.
Como você está reagindo a essa notícia?
👍 - Calma, o DeFi vai absorver isso.
🔥 - Hora de tirar tudo das bridges e L2 por precaução.
#BinanceSquare #CryptoAlert #Bitcoin #Ethereum #DeFiHack
Kelp DAO Exploit Sends Shockwaves Across DeFi
A major security breach has shaken Kelp DAO after hackers exploited LayerZero RPC infrastructure and a DVN verification flaw to forge cross chain messages. They minted unbacked rsETH and drained 116500 rsETH from the Ethereum bridge in just 46 minutes. The impact is massive. Aave now risks nearly 230 million dollars in bad debt as attackers used fake collateral to borrow real assets. Arbitrum Security Council reacted fast and froze 30766 ETH worth 71 million dollars. Around 75700 ETH is still being moved through THORChain across multiple wallets. The incident raises serious questions about cross chain security today.
$ETH $AAVE $ARB
#KelpDAO #DeFiHack #CryptoNews #Ethereum
A major security breach has shaken Kelp DAO after hackers exploited LayerZero RPC infrastructure and a DVN verification flaw to forge cross chain messages. They minted unbacked rsETH and drained 116500 rsETH from the Ethereum bridge in just 46 minutes. The impact is massive. Aave now risks nearly 230 million dollars in bad debt as attackers used fake collateral to borrow real assets. Arbitrum Security Council reacted fast and froze 30766 ETH worth 71 million dollars. Around 75700 ETH is still being moved through THORChain across multiple wallets. The incident raises serious questions about cross chain security today.
$ETH $AAVE $ARB
#KelpDAO #DeFiHack #CryptoNews #Ethereum
$GMX
🚨 GMX HACKED: $42M EXPLOIT SHAKES ARBITRUM DEFI! 🚨
Binancians, one of DeFi’s heavyweights just took a serious hit — GMX V1 on Arbitrum suffered a $42M security breach via a re-entrancy attack targeting the GLP pool. 😨🔓
📉 Price Action Snapshot:
• Token plunged -20% to $11.11, now stabilizing around $12.48 (-11.49%)
• $9.6M of stolen funds already bridged to Ethereum
• Key support zone: $11.50–$12.00 — eyes on that bounce ⚠️
🔍 What Happened?
A vulnerability in GMX's price calculation logic opened the door for the exploit.
The devs responded fast — trading halted, patch in progress, and…
💰 A $4.2M White Hat Bounty is on the table if the attacker returns the funds within 48 hours — no legal action guaranteed. 🕊️
🔧 What's Next?
• Recovery depends on whether bounty negotiations succeed
• GMX V2 upgrades could restore trust and improve protocol security
• Market watching attacker wallet (0xd426...60f3) for any sudden moves
📊 Binance Traders — Key Takeaways:
• High-risk = high-reward territory for brave swing traders
• Monitor recovery progress, V2 rollouts, and community sentiment
• DeFi security is in the spotlight — risk management is king 👑
🛡️ This is a stress test — not the end.
GMX's future depends on how they respond now. Volatility = opportunity — if you know how to play it.
📍 Trade smart. Watch sharp. Only on Binance.
#DeFiHack #ArbitrumAlert
🚨 GMX HACKED: $42M EXPLOIT SHAKES ARBITRUM DEFI! 🚨
Binancians, one of DeFi’s heavyweights just took a serious hit — GMX V1 on Arbitrum suffered a $42M security breach via a re-entrancy attack targeting the GLP pool. 😨🔓
📉 Price Action Snapshot:
• Token plunged -20% to $11.11, now stabilizing around $12.48 (-11.49%)
• $9.6M of stolen funds already bridged to Ethereum
• Key support zone: $11.50–$12.00 — eyes on that bounce ⚠️
🔍 What Happened?
A vulnerability in GMX's price calculation logic opened the door for the exploit.
The devs responded fast — trading halted, patch in progress, and…
💰 A $4.2M White Hat Bounty is on the table if the attacker returns the funds within 48 hours — no legal action guaranteed. 🕊️
🔧 What's Next?
• Recovery depends on whether bounty negotiations succeed
• GMX V2 upgrades could restore trust and improve protocol security
• Market watching attacker wallet (0xd426...60f3) for any sudden moves
📊 Binance Traders — Key Takeaways:
• High-risk = high-reward territory for brave swing traders
• Monitor recovery progress, V2 rollouts, and community sentiment
• DeFi security is in the spotlight — risk management is king 👑
🛡️ This is a stress test — not the end.
GMX's future depends on how they respond now. Volatility = opportunity — if you know how to play it.
📍 Trade smart. Watch sharp. Only on Binance.
#DeFiHack #ArbitrumAlert
🚨【KiloEx to Hacker: Return Funds, Get 10% Bounty】
On April 15, KiloEx said it has traced key clues with help from law enforcement, CEXs & bridges — and is actively monitoring addresses.
🛑 An offer to the attacker:
⚠️ Return 90% of stolen funds within 72 hours
💰 Keep 10% as a white hat bounty
📢 If agreed, KiloEx will issue a statement of cooperation and drop further action.
The DEX previously lost ~$7.5M in a major exploit.
#KiloEx #DeFiHack #BlockchainSecurity
On April 15, KiloEx said it has traced key clues with help from law enforcement, CEXs & bridges — and is actively monitoring addresses.
🛑 An offer to the attacker:
⚠️ Return 90% of stolen funds within 72 hours
💰 Keep 10% as a white hat bounty
📢 If agreed, KiloEx will issue a statement of cooperation and drop further action.
The DEX previously lost ~$7.5M in a major exploit.
#KiloEx #DeFiHack #BlockchainSecurity
🛡️ $9.6M Gone: Resupply Protocol Suffers Major Hack $BTC
⚠️ Another DeFi security breach!
Resupply DeFi loses $9.6 million in a devastating exploit.
Still think all DeFi is safe?
🔍 Do your protocols pass the audit test? Share your best practices or warn others.
#DeFiHack #CryptoSecurity #Salma6422
⚠️ Another DeFi security breach!
Resupply DeFi loses $9.6 million in a devastating exploit.
Still think all DeFi is safe?
🔍 Do your protocols pass the audit test? Share your best practices or warn others.
#DeFiHack #CryptoSecurity #Salma6422
💥 *BREAKING:* GMX, the on-chain perpetuals exchange, has just suffered a *40 million hack* 🚨😱
🔍 *What happened?*
A vulnerability was reportedly exploited in GMX’s smart contracts or oracle system, allowing a hacker to drain funds from the protocol. The exact attack vector is still under investigation. The exploit likely involved manipulating leveraged positions or price feeds — a common weak point in DeFi perpetuals platforms.
💸 *40,000,000* in user funds were stolen, affecting liquidity providers and open traders.
⚠️ *Immediate Impact:*
- *$GMX token* may face downward pressure 📉
- Trust in GMX and similar perpetual DEXs may take a temporary hit
- On-chain volumes could shift to competitors like *dYdX*, *Kwenta*, or *Hyperliquid*
📈 *Predictions & Analysis:*
- If GMX responds quickly with a solid compensation plan or patch, it may recover mid-term
- Exploits like this *highlight the importance of audit depth*, oracle design, and real-time monitoring
- Look for *increased TVL outflows* from Arbitrum-based protocols short term
🛡️ *How to protect yourself:*
- Withdraw funds from affected protocols immediately
- Avoid high-leverage plays until stability returns
- Use multi-layered DeFi risk management strategies, including insurance where possible
This is a serious moment for DeFi — but not the end. Resilience and transparency will decide who survives and grows stronger from here. 💪🔐
$BTC
$GMX
#GMX #DeFiHack #CryptoSecurity #BTC #ETH
🔍 *What happened?*
A vulnerability was reportedly exploited in GMX’s smart contracts or oracle system, allowing a hacker to drain funds from the protocol. The exact attack vector is still under investigation. The exploit likely involved manipulating leveraged positions or price feeds — a common weak point in DeFi perpetuals platforms.
💸 *40,000,000* in user funds were stolen, affecting liquidity providers and open traders.
⚠️ *Immediate Impact:*
- *$GMX token* may face downward pressure 📉
- Trust in GMX and similar perpetual DEXs may take a temporary hit
- On-chain volumes could shift to competitors like *dYdX*, *Kwenta*, or *Hyperliquid*
📈 *Predictions & Analysis:*
- If GMX responds quickly with a solid compensation plan or patch, it may recover mid-term
- Exploits like this *highlight the importance of audit depth*, oracle design, and real-time monitoring
- Look for *increased TVL outflows* from Arbitrum-based protocols short term
🛡️ *How to protect yourself:*
- Withdraw funds from affected protocols immediately
- Avoid high-leverage plays until stability returns
- Use multi-layered DeFi risk management strategies, including insurance where possible
This is a serious moment for DeFi — but not the end. Resilience and transparency will decide who survives and grows stronger from here. 💪🔐
$BTC
$GMX
#GMX #DeFiHack #CryptoSecurity #BTC #ETH
🚨 اختراق كبير لبروتوكول USPD بأكثر من مليون دولار!
تم استغلال ثغرة خطيرة في بروتوكول $USPDأدّت إلى سرقة تجاوزت قيمتها المليون دولار، والتفاصيل كالتالي:
• قام المهاجم بإيداع حوالي 3,122 $ETH كضمان
• استغل خللاً في آلية السكّ سمح له بسكّ كمية من USPD تعادل عشرة أضعاف قيمة الضمان المودَع في عملية واحدة
• نتج عن ذلك سكّ نحو 98 مليون وحدة من USPD من إيداع واحد فقط!
ثم نفّذ المهاجم الخطوات التالية: 💥 سحب 237 stETH من الضمان الأصلي 💥 تصريف كميات كبيرة من USPD عبر حوض Curve مقابل ما يقارب 300,000 USDC
⚠️ الهجوم يكشف عن عيب جوهري وخطير في نظام محاسبة الضمانات (Collateral Accounting) داخل البروتوكول، مما سمح بتضخيم السيولة بشكل غير مشروع.
الفريق يعمل حالياً على تقييم الأضرار وإيقاف العقود المتضررة مؤقتاً.
#DeFiHack
تم استغلال ثغرة خطيرة في بروتوكول $USPDأدّت إلى سرقة تجاوزت قيمتها المليون دولار، والتفاصيل كالتالي:
• قام المهاجم بإيداع حوالي 3,122 $ETH كضمان
• استغل خللاً في آلية السكّ سمح له بسكّ كمية من USPD تعادل عشرة أضعاف قيمة الضمان المودَع في عملية واحدة
• نتج عن ذلك سكّ نحو 98 مليون وحدة من USPD من إيداع واحد فقط!
ثم نفّذ المهاجم الخطوات التالية: 💥 سحب 237 stETH من الضمان الأصلي 💥 تصريف كميات كبيرة من USPD عبر حوض Curve مقابل ما يقارب 300,000 USDC
⚠️ الهجوم يكشف عن عيب جوهري وخطير في نظام محاسبة الضمانات (Collateral Accounting) داخل البروتوكول، مما سمح بتضخيم السيولة بشكل غير مشروع.
الفريق يعمل حالياً على تقييم الأضرار وإيقاف العقود المتضررة مؤقتاً.
#DeFiHack
🚨 **BREAKING: $292M Kelp DAO Bridge Exploit Rocks DeFi – TVL Crashes $132B in 48 Hours!** 🚨
Just in – April 21, 2026 update:
Attackers exploited a critical vulnerability in **Kelp DAO’s LayerZero bridge**, making off with **116,500 rsETH** valued at a massive **$292 million**.
They didn’t stop there. The stolen assets were immediately used as collateral on **Aave** to borrow **$191 million in real-world assets** – a sophisticated move that’s now sending shockwaves across the entire ecosystem.
### Systemic Contagion in Full Effect
DeFi’s Total Value Locked (TVL) has **plunged $132 billion in just 48 hours**, dropping from **$995B to $863B**.
**Aave** alone saw **$84.5 billion in outflows** as users rushed to exit amid fears of bad debt exposure.
### Attribution Dispute Escalates
- **LayerZero** is pointing the finger at **North Korea’s Lazarus Group**, claiming the attack originated from a compromised RPC node.
- Meanwhile, **Kelp DAO** and **Aave** are locked in heated discussions over responsibility for the **$195M–$230M** in potential bad debt.
This isn’t just another hack — it’s exposing deep cracks in cross-chain bridge security and collateral risk management.
DeFi holders: Are you monitoring your positions? Protocols: Time to double down on audits and transparency?
Drop your thoughts below 👇
Stay safe out there.
#KelpDAO #LayerZero #DeFiHack
#DeFi
#BinanceSquare
Just in – April 21, 2026 update:
Attackers exploited a critical vulnerability in **Kelp DAO’s LayerZero bridge**, making off with **116,500 rsETH** valued at a massive **$292 million**.
They didn’t stop there. The stolen assets were immediately used as collateral on **Aave** to borrow **$191 million in real-world assets** – a sophisticated move that’s now sending shockwaves across the entire ecosystem.
### Systemic Contagion in Full Effect
DeFi’s Total Value Locked (TVL) has **plunged $132 billion in just 48 hours**, dropping from **$995B to $863B**.
**Aave** alone saw **$84.5 billion in outflows** as users rushed to exit amid fears of bad debt exposure.
### Attribution Dispute Escalates
- **LayerZero** is pointing the finger at **North Korea’s Lazarus Group**, claiming the attack originated from a compromised RPC node.
- Meanwhile, **Kelp DAO** and **Aave** are locked in heated discussions over responsibility for the **$195M–$230M** in potential bad debt.
This isn’t just another hack — it’s exposing deep cracks in cross-chain bridge security and collateral risk management.
DeFi holders: Are you monitoring your positions? Protocols: Time to double down on audits and transparency?
Drop your thoughts below 👇
Stay safe out there.
#KelpDAO #LayerZero #DeFiHack
#DeFi
#BinanceSquare
Connectez-vous pour découvrir d’autres contenus