Alex bridge on BNB is drained of $4.3M after suspicious upgrade — Certik
The deployer account changed an Alex contract’s implementation address, and multiple tokens were subsequently drained from its bridge. Go to Source
Exploit
Auto Added by WPeMatico
CertiK discovered $5M security flaw in Wormhole bridge on Aptos
A flaw in the bridge could have allowed an attacker to produce fake token transfers, but it was discovered and patched before anyone could take advantage of it. Go to Source
Rain exchange suffered $14.1M in suspicious outflows 2 weeks ago — ZachXBT
Several wallets reportedly belonging to Rain sent suspicious token transfers to a new address. Go to Source
Bugs in Gains Network fork let traders profit 900% on every trade: Report
An attacker could have placed a limit buy order with an arbitrarily high open price to automatically win every trade, the Zellic security platform discovered. Go to Source
Kronos Research hacker shifts funds to Tornado Cash
Kronos Research was exploited for $25 million in November last year, and one of the six wallets linked to the hacker started moving funds to Tornado Cash on May 7. Go to Source
Gnus.AI Discord hack causes $1.27M in losses
The attacker was able to view team members’ private Discord messages, allowing them to gain access to the team’s wallet address and mint 100 million fake tokens. Go to Source
Weekend Wrap: SOL set for bronze, Bitcoiner fat fingers $100K fee and more
Franklin Templeton thinks Solana could be in the top three largest cryptocurrencies, with the blockchain’s tech in a good place to catch the next crypto wave. Go to Source
Hundred Finance hacker moves stolen assets a year after $7M exploit
The hacker holds about $4.3 million in various crypto assets in their Ethereum wallet. Go to Source
Weekend Wrap: Bitcoin Hilton opens next year, BlackRock ETF 3 days of nil and more
The 80-room Hampton by Hilton hotel in El Salvador — funded with Bitcoin layer-2 tokenized bonds — will be fully operational by mid-2025. Go to Source
How the Ledger Connect hacker tricked users into making malicious approvals
According to Cyvers, the attacker caused malicious code to be inserted into multiple app user interfaces, allowing the exploiter to fool users into confirming transactions. Go to Source
