Blockaid

Optimism

2026-09-07 06:27:28

Cozy DeFi Risk Protocol Hacked on Optimism, $170K Lost

Blockaid monitors detected an attack on Cozy, a DeFi risk management protocol on Optimism, resulting in approximately $170,000 in losses. The incident was reported by ChainCatcher.

1110

Rain

2026-09-04 04:15:03

Rain Hackers Move $1.1M Stolen Funds to Tornado Cash

The attacker behind the Rain card contract exploit has cross-chain transferred approximately $1.1 million in stolen funds to Ethereum and washed them through the Tornado Cash mixer. Blockchain security firm Blockaid tracked the incident, which affected multiple crypto neobanks including Avici and Tria, impacting over 2,300 users. Rain has upgraded all vulnerable contract versions but has not yet released a full technical report explaining why some programs still used outdated contracts.

930

More Markets

2026-08-31 07:44:46

More Markets exploit drains 15.5 million WFLOW on Flow EVM, Blockaid says

Blockchain security firm Blockaid said on Aug. 31 that it detected an exploit affecting More Markets, also referred to as More Labs, on Flow EVM. According to Blockaid, the attacker abused a combination of Ankr’s bonded liquid staking token, or LST, and the protocol’s E-Mode mechanism to empty More Markets’ WFLOW lending reserves. Blockaid’s monitoring found that roughly 15.5 million WFLOW was transferred out of the mFlowWFLOW reserve, with the detected impact valued at about $9.3 million. The security firm also said the related attack transaction cluster included post-exploit fund movements. The exact loss and the destination of the attacker’s funds were still being confirmed at the time of the report.

1090

Blockaid

2026-08-31 07:45:01

Blockaid says More Markets exploit on Flow EVM drained WFLOW lending reserves

Blockchain security firm Blockaid said it detected an exploit affecting More Markets, a product tied to More Labs, on Flow EVM. According to Blockaid, the attacker used Ankr’s bonded liquid staking token, or LST, together with the platform’s E-Mode mechanism to drain More Markets’ WFLOW lending reserves. Blockaid said roughly 15.5 million WFLOW was transferred out of the mFlowWFLOW reserve. The firm estimated the detected impact at about $9.3 million. It also said the related cluster of attack transactions included post-exploit fund transfers. The full extent of losses has not yet been confirmed. The destination of the attacker’s funds is also still being verified, based on the information available in the source report.

1030

Moonwell

2026-08-27 12:58:38

Moonwell loses nearly $9 million on Base as latest exploit becomes its fourth pricing-related incident in under a year

Moonwell, a DeFi lending protocol on Coinbase’s Base network, was hit by an exploit that drained nearly $9 million in user deposits, according to Protos and on-chain security alerts from Blockaid. The attacker manipulated the price of MAMO, a relatively illiquid token accepted as collateral on Moonwell, then borrowed assets from the protocol’s mCBTC market. Blockaid said the attack was first flagged about an hour after it began, initially identifying 50.6 cbBTC, worth more than $4 million, as already drained. Protos reported that the losses later climbed as the attacker borrowed cbBTC, USDC, WETH, and wstETH, then swapped the proceeds into DAI. Of that amount, 8.7 million DAI was reported to be sitting in an Ethereum address funded via Tornado Cash. Moonwell said it responded by cutting all borrow caps, along with MAMO and WELL supply caps, to one wei to block new borrowing and contain any added damage. The incident is the protocol’s fourth pricing-related problem in less than a year, following earlier episodes involving an October 10 market-crash discrepancy, fallout tied to the Balancer hack, and a February contract error involving cbETH valuation.

1100

Base

2026-08-27 10:12:05

Suspicious activity hits Moonwell on Base, with 50.6 cbBTC moved

BlockBeats reported on Aug. 27 that blockchain security firm Blockaid detected suspicious activity involving Moonwell on the Base network. According to Blockaid’s exploit detection system, the attacker manipulated the price of MAMO collateral and then borrowed cbBTC from the mCBTC market. The impact observed so far is the transfer of 50.6 cbBTC, valued at more than $4 million. The report did not provide additional details beyond the amount moved and the method identified by the monitoring system. The incident was described as activity observed on-chain, and the figures cited were limited to what Blockaid had seen at the time of the alert.

1010

Blockaid

2026-08-27 10:13:04

Blockaid flags suspicious activity on Moonwell on Base after cbBTC is borrowed from mCBTC market

Blockaid said its exploit detection system has identified suspicious activity involving Moonwell on Base. According to the monitoring alert, the attacker manipulated the price of MAMO collateral and then borrowed cbBTC from the mCBTC market. The impact observed so far is the transfer of 50.6 cbBTC, which Blockaid said is worth more than $4 million. The alert did not disclose additional details beyond the monitored activity and the amount moved. ChainCatcher reported the notice as a market update.

980

Blockaid

2026-07-29 15:03:20

Blockaid Says Crypto Hacks Reached 212 Cases in H1 2026, the Highest Half-Year Count on Record

Crypto attackers stole more than $1.1 billion across 212 verified exploits in the first six months of 2026, giving the industry its highest incident count ever recorded for a half-year, according to Blockaid’s H1 2026 Onchain Security Report published Tuesday. While total dollar losses were lower than the same period a year earlier, the report says the pattern of risk has shifted rather than improved. Blockaid found that 74% of stolen funds came from operational security failures such as compromised keys, signing infrastructure, and privileged access, not from faulty code. Two of the largest incidents of the period, the $292 million KelpDAO exploit and the $285 million attack on Drift Protocol, were both tied to operational breakdowns. The firm also linked those cases, along with the Humanity Protocol exploit, to North Korea-connected groups, saying that cluster accounted for roughly $609 million, or 55% of all losses in the half. Blockaid added that Ethereum and Solana posted the largest network-level losses, at about $332 million and $326 million, while DefiLlama data showed attacks continued into late July.

870