Defendor

Sign in Subscribe

Vulnerabilities

High-Severity Cross-Chain Vulnerability in Across V3 Bridge Lets Malicious Relayers Steal User Funds

High-Severity Cross-Chain Vulnerability in Across V3 Bridge Lets Malicious Relayers Steal User Funds

Source: Cross Chain Action Vulnerability Disclosure by zachobront on mirror.xyz Mint is an optimistic cross-chain bridge that allows users to move assets between blockchains. It features Cross Chain Actions, letting users execute complex transactions-like depositing into lending protocols-directly on the destination chain. However, a high severity bug discovered on

BetterBank Drained $5M in Basic DeFi Exploit After Ignoring Audit Warnings

BetterBank Drained $5M in Basic DeFi Exploit After Ignoring Audit Warnings

Source: BetterBank Rekt What Happened? After just six weeks of operation, BetterBank’s "revolutionary" DeFi platform was exploited for $5 million due to a glaring design flaw. The attacker took advantage of the bonus minting system originally created to reward traders with a simple but effective method: * Created

RISC Zero zkVM Hit by Critical Missing Constraint Flaw Allowing False Proofs

RISC Zero zkVM Hit by Critical Missing Constraint Flaw Allowing False Proofs

Source: RISC Zero zkVM Missing Constraint Vulnerability - HackenProof Introduction Imagine a scenario where a mathematical fact as basic as "7 % 5" can be “proven” to equal 50,000 - and that this proof passes as cryptographically valid. In zero-knowledge cryptography, where mathematical proofs must be absolute, this

BTC Turk Loses $51.7M Again in Multi-Chain Hack — Same Mistakes, Twice

BTC Turk Loses $51.7M Again in Multi-Chain Hack — Same Mistakes, Twice

Source: REKT.News - BTC Turk REKT BTC Turk, one of Turkey’s leading crypto exchanges, has fallen victim to a staggering $51.7 million hot wallet compromise just 14 months after a similar $55 million breach. This latest attack spread across seven different EVM-compatible blockchains-Ethereum, Avalanche, Arbitrum, Base, Optimism,

Odin.fun’s $7M Bitcoin Heist: Third Hack in 6 Months Exposes Deadly AMM Flaws

Odin.fun’s $7M Bitcoin Heist: Third Hack in 6 Months Exposes Deadly AMM Flaws

Source: Odin.fun Rekt – rekt.news Rapid Bitcoin Drain Shocks Users and Security Experts On August 12th, Odin.fun-marketed by founder Bob Bodily as the world's fastest Bitcoin token trading platform-lost over $7 million in less than two hours. This devastating loss marks the third significant security breach

$4.5M DeFi Heist: Admin Access Turned Into a Money Printer

$4.5M DeFi Heist: Admin Access Turned Into a Money Printer

Source: Credix REKT In a shocking breach, an attacker with compromised admin access exploited bridge privileges to siphon $4.5 million from Credix’s DeFi protocol. Rather than exploiting bugs or breaking code, the attacker leveraged their full administrative control to mint unbacked acUSDC tokens and drain liquidity pools. This

Amazon AI Assistant Hacked to Wipe Data

Amazon AI Assistant Hacked to Wipe Data

Source: fr0gger_ on Twitter A serious security incident has come to light involving an Amazon AI coding assistant. An attacker exploited misconfigured GitHub workflows to sneak in a malicious pull request. This harmful change went unnoticed for six days after being published on the Visual Studio Code (VSC) marketplace. What