Tag: Hacks
On May 29, 2026—one day after Anthropic released its powerful Opus 4.8 model—a security researcher named Taylor Hornby made a discovery that sent shockwaves through the Zcash ecosystem. Hired by Shielded Labs specifically to hunt for protocol weaknesses before malicious actors could, Hornby used the new AI model in a targeted review of the Orchard circuit. What he found was not a minor implementation error. It was a fundamental soundness...
White Hat Hacker Unlocks $2 Million in ETH Trapped for Nine Years in 2016 ICO Smart Contract
Written on .
A pseudonymous white hat developer known as 0xflorent recovered roughly 1,003.62 ETH (about $2 million) locked in a 2016 HongCoin ICO contract.
The funds, belonging to 48 original investors, became trapped due to a bug in the refund mechanism after the project failed to meet its funding goal.
The recovery exploited an integer overflow flaw in an admin function, executed in coordination with the project team.
Investors can now...
Judge Clears Path for Aave to Transfer $71 Million in Frozen ETH Tied to North Korea-Linked Exploit
Written on .
Aave advances recovery: Manhattan federal judge modifies freeze to permit transfer of ~30,766 ETH from Arbitrum to Aave-controlled wallet.
DeFi United initiative: Coordinated response to April Kelp DAO rsETH exploit involving over $290 million in unbacked tokens.
Ongoing legal tension: Terrorism judgment creditors’ claims follow the assets, highlighting risks at the intersection of DeFi, sanctions, and national...
Arbitrum Security Council Freezes $70M ETH from Kelp DAO Exploiter in Emergency Onchain Action
Written on .
Emergency freeze: Arbitrum Security Council transferred 30,766 ETH (~$70 million) from the exploiter’s wallet on Arbitrum One to a protocol-controlled address (0x…0DA0) before the native bridge withdrawal finalized.
Timing: The action followed PeckShield’s alert on the withdrawal initiation and was confirmed by Lookonchain roughly 20 minutes after execution on April 21, 2026.
Context: The move addresses funds traced to the April 18...
Circle Faces Class-Action Lawsuit Over Alleged Failure to Freeze $230M Stolen USDC in Drift Protocol Exploit
Written on .
Lawsuit filed: Class action initiated on April 14, 2026, by Drift investor Joshua McCollum on behalf of over 100 affected users in U.S. District Court for Massachusetts.
Exploit details: On April 1, 2026, attackers drained an estimated $280–285 million from the Solana-based DEX Drift Protocol through trading, lending, and vault deposits.
USDC movement: Approximately $230 million in stolen USDC was transferred from Solana to...






