Allbridge Core Flash-Loan Pool Manipulation
A flash-loan attack skewed Allbridge Core's stablecoin pool ratio on Solana, letting the attacker withdraw liquidity at manipulated rates for about $1.65 million.
Loss
1.6M
USD
Volume I · The catalog
Since 2009, more than $14.18B has been drained from blockchains and the businesses that touch them. This is the running ledger — citation-first, on-chain verifiable, and updated as we learn more.
Front page · The biggest№ 001
Bybit Heist
Malicious JavaScript injected into Safe{Wallet}'s signing UI drained 401,000 ETH ($1.46B) from a Bybit cold-wallet transfer, the largest crypto theft ever.
Recent filings
All →Across Protocol Solana Bridge Attack
Cross-chain bridge Across Protocol was attacked on its Solana deployment; the team said user funds were safe with only Risk Labs operating funds potentially hit and no loss disclosed.
Loss0USDCascade CLS Vault Exploit
An attacker drained about $1.34 million in USDC from the CLS liquidity vault of Cascade, a pre-launch Polychain-backed perpetuals protocol on Arbitrum, hitting locked pre-deposit user funds.
Loss1.3MUSDDeFiTuna Lending Pool Exploit
An attacker drained about $580,000 in USDC from DeFiTuna's lending pools on Solana by abusing the protocol's lending logic, leaving the USDC pool in deficit.
Loss580.0KUSDOstium OLP Vault Oracle Exploit
An attacker seized Ostium's price-feed infrastructure and fed future-dated oracle prices to open and close trades at will, draining a confirmed $23.75 million from the OLP vault on Arbitrum.
Loss23.8MUSDBonzo Lend Oracle Manipulation Exploit
An attacker exploited a signature-verification flaw in a third-party Supra oracle to manipulate the SAUCE price and drain about $9 million from Bonzo Lend, Hedera's largest lending protocol.
Loss9.1MUSD