News linked to this event type.
Odaily, the decentralized cross-chain liquidity protocol THORChain has resumed trading after being down for over five weeks following a May attack. Signing, swapping, liquidity provider operations, and redemptions have all been restored.On May 15, blockchain investigator ZachXBT and security firm PeckShield identified that the protocol had likely been exploited, prompting THORChain to halt trading. The vulnerability resulted in a loss of approximately $10.7 million from one of its six Asgard vaults, while the other five vaults were unaffected.THORChain stated that each vault has now been verified, and every key share has been cross-checked. Native Monero swaps are currently undergoing end-to-end testing and will be launched subsequently. (The Block)
CoinUp has responded to the topic of "CPX price volatility and related personnel identity," stating that Zhu Pan is not a member of the CoinUp platform and has not participated in the platform's core operational management. His identity is merely the project party for a project listed on the CoinUp platform.Regarding the recent sharp short-term fluctuations in the CPX/USDT trading pair, CoinUp stated that its preliminary judgment indicates it was mainly caused by concentrated selling pressure in the market. The platform is further investigating and verifying the specific reasons.CoinUp also emphasized that the platform has not suffered any hacker attacks, data breaches, or exploitation of system vulnerabilities. The wallet system, account system, and asset custody services are all currently in a secure and controllable state.
Odaily Taiko officially posted on X, stating: "We have identified the root cause of the attack and are currently developing a fix patch to restore the blockchain's online operation as soon as possible. Meanwhile, we are working closely with major exchanges and security partners to track and freeze the hacker's assets. The remaining funds in the cross-chain bridge are currently safe, and we will announce the next steps in an upcoming update. To focus on fixing the vulnerability and protecting user assets, we will pause updates for a few hours."Previously, Taiko's cross-chain bridge was attacked, with potential losses reaching up to $1.7 million.
OpenAI announced an upgrade to its Daybreak network defense toolchain, officially launching the full version of the GPT-5.5-Cyber model tailored for cybersecurity defense scenarios.In the CyberGym benchmark test, which evaluates the ability of AI agents to reproduce known vulnerabilities, GPT-5.5-Cyber achieved a single-model score of 85.6%, surpassing GPT-5.5’s 81.8% and Anthropic Mythos 5’s 83.8%.OpenAI stated that as AI significantly enhances the efficiency of vulnerability discovery, the core bottleneck in cybersecurity is shifting from "finding vulnerabilities" to "automatically fixing them." To this end, the company has simultaneously upgraded the Codex Security plugin, enabling developers to automatically analyze vulnerabilities and generate fix patches within the Codex environment. Since the preview release in March this year, Codex Security has scanned over 30 million code commits and autonomously confirmed fixes for 500,000 security defects. The new version also supports CodeQL query integration and SARIF standard file export.Additionally, OpenAI has partnered with organizations such as Trail of Bits and HackerOne to launch the "Patch the Planet" open-source security project. This initiative provides ChatGPT Pro subscriptions and API credits to over 30 major open-source projects, including cURL and Go, with security expert teams manually verifying patch quality. Regarding the Daybreak partner program, security vendors such as Palo Alto Networks and Wiz have already integrated the relevant capabilities.
According to on-chain analyst Onchain Lens (@OnchainLens), the attacker behind the well-known MEV bot Jaredfromsubway laundered 2,000 ETH via Tornado Cash, worth approximately $3.44 million at current prices.
according to DefiLlama data, Q2 2026 has become the most active quarter on record for crypto hacks, with 83 separate attack incidents, setting a new all-time high.Despite the increased frequency of attacks, the total losses for the quarter were approximately $755.3 million, still lower than the $3.56 billion lost in Q4 2020. Of this, the $293 million attack on KelpDAO and the $280 million attack on Drift Protocol accounted for more than three-quarters of the quarter's total losses. Cross-chain bridges were the largest source of losses, with related attacks leading to approximately $351 million being stolen. Earlier this month, Humanity Protocol lost $36 million, Aztec Connect experienced two attacks on passive smart contracts, each losing about $2.1 million, and decentralized exchange Raydium suffered a $1.3 million attack in June. (financefeeds)
Odaily Odaily News: Jiangsu Nanjing police, in collaboration with the Chongzuo Border Management Detachment in Guangxi, successfully solved a major gold theft case involving 27 million yuan. The masterminds, Wang and Tong, driven by massive gambling debts, teamed up with another accomplice to plan and execute a theft targeting a luxury store in Jiangning District, Nanjing. They stole a total of 37 gold items, weighing 27 kilograms.After the crime, the main suspect Tong fled south with part of the gold by ride-hailing car, attempting to cross the border illegally via a small path. He was precisely intercepted and arrested by police from the Chongzuo Aidian Border Police Station just 100 meters from the China-Vietnam border, with 8.75 kilograms of gold seized on the spot. Subsequently, another suspect, Wang, who had already fled to Thailand, was captured in Bangkok and extradited back to China. Currently, all 11 suspects in the case have been apprehended, and the 27 kilograms of stolen gold have been fully recovered. (China News Weekly)
Taiko stated that the related security incident is currently under control. The cross-chain bridge and vault have been paused, and funds cannot be withdrawn further. The cross-chain bridge is currently offline in both directions; users are advised not to perform any cross-chain operations for now. The official announcement noted that pending transactions have been paused—not lost—and further information will be released shortly.
Ethereum Layer 2 blockchain Taiko has stated its chain state verification mechanism has been compromised, and the security assumptions of all bridges deployed on Taiko can no longer be relied upon. It urges users to immediately withdraw funds from the relevant bridges. Taiko says it is coordinating with partners to control the incident and has suspended the affected systems.Crypto security firm Blockaid stated that the root cause appears to be a flaw in the way Taiko's bridge validates source signals. Attackers can submit message proofs on Ethereum that lack legitimate proof from the Taiko chain, thereby registering and withdrawing fraudulent bridge messages. This leads to the unauthorized release of assets from the ERC20 treasury. Blockaid estimates at least $1 million was stolen, while Lookonchain and PeckShield believe the value of stolen assets could be as high as $1.7 million.PeckShield reported that the attacker has transferred approximately 1.99 million TAIKO tokens to MEXC, valued at around $189,000. Data from blockchain intelligence firm Arkham shows that the Taiko attacker's wallet holds approximately $1.5 million in assets, primarily in Ether. (Cointelegraph)
Odaily Odaily reports: Well-known MEV sniper ae13 has posted a white hat bounty on-chain: "Well done. If you return 2,150 ETH to this address within 48 hours, we are willing to pay a 50% white hat bounty; otherwise, we will pursue all available legal and enforcement measures to hold you accountable."According to previous reports, the long-active Ethereum MEV bot Jaredfromsubway.eth (ae13) was attacked by hackers exploiting vulnerabilities in its automated execution system, resulting in losses exceeding $7.5 million.Recommended reading: When the hunter becomes the hunted: the most profitable MEV Bot gets hacked.
According to PeckShieldAlert monitoring, the Taiko attacker has transferred 1.99 million TAIKO tokens to MEXC, worth approximately $189,100.
Taiko stated on its X platform that it has confirmed its chain state verification mechanism has been compromised, and the security assumptions of all cross-chain bridges deployed on Taiko are no longer reliable.Taiko said it is coordinating with its security committee and ecosystem partners to control the situation, suspending affected systems, and taking technical and legal actions. Taiko strongly advises all users to immediately withdraw funds from cross-chain bridges deployed on Taiko.Additionally, Taiko has made an urgent request for all centralized exchanges to suspend TAIKO token deposit services until further official notice. Previously, Taiko's ERC20 Vault was attacked, resulting in losses exceeding $1 million.
Blockaid monitoring reported that Taiko’s ERC-20 treasury on Ethereum was attacked, resulting in losses exceeding $1 million. Preliminary analysis suggests the issue may stem from a vulnerability in Taiko’s cross-chain bridge proof verification, enabling the attacker to forge cross-chain messages and withdraw assets—causing unauthorized release of treasury funds.
According to security firm Blockaid (@blockaid_), its monitoring engine detected a front-end attack targeting the @gitcoin subdomain files[.]gitcoin[.]co, which contains malicious Eleven drainer code. Blockaid advises users to refrain from any interaction with this website while the issue is under investigation and remediation.
According to on-chain analyst PeckShield (@PeckShieldAlert), the well-known MEV bot “JaredFromSubway” has reportedly been attacked, resulting in the theft of approximately $7.5 million worth of crypto assets—including 1,474.58 WETH, 2.87 million USDC, and 2 million USDT. The attacker has exchanged the stolen funds for 4,400 ETH and transferred 1,000 ETH to the mixer Tornado Cash to obfuscate the fund’s trail.
Jaredfromsubway.eth, a well-known MEV bot long active on the Ethereum network, has been attacked by hackers exploiting a vulnerability in its automated execution system, resulting in losses exceeding $7.5 million.Security firm Blockaid stated that the incident was not a traditional phishing attack or smart contract vulnerability, but rather an "anti-MEV honeypot attack" specifically targeting the decision-making logic of the MEV bot. Over several weeks, the attacker deployed 66 fake token contracts and false liquidity pools, masquerading as assets such as WETH, USDC, and USDT, luring the bot into executing seemingly profitable trades and authorizing auxiliary contracts controlled by the attacker.Ultimately, in a single transaction, the attacker invoked all backdoor permissions to transfer the ETH, USDC, and USDT held by the bot's address. Data shows that between November 2024 and October 2025, the Ethereum network experienced approximately 60,000 to 90,000 sandwich attacks per month, with about 70% of them linked to Jaredfromsubway.eth. (Cointelegraph)
According to the “Mousetrap” platform, scammers impersonated Moscow Exchange-authorized brokers on social media and lured users into clicking phishing links under the pretext of a “cryptocurrency test trading channel,” thereby stealing funds and information. The Moscow Exchange emphasized that all official trading must be conducted through licensed brokers and that no exclusive cryptocurrency purchasing channels exist for ordinary users. According to data from Russian IT company “Shard,” Russian users lost approximately 234 million rubles to cryptocurrency phishing attacks in 2025—accounting for 62% of total cryptocurrency-related losses that year.
According to on-chain analyst Blockaid (@blockaid_), the well-known Ethereum MEV bot JaredFromSubway (@jaredsmev) has been attacked, resulting in losses of approximately $7.5 million. The attacker constructed a deceptive MEV arbitrage path to trick the bot into automatically approving token transfers. Leveraging these open approvals—before they were revoked—the attacker drained WETH, USDC, and USDT from the bot’s contract. The stolen funds ultimately flowed to the attacker’s wallet address. Blockaid noted that this attack was not a conventional phishing attempt or smart contract vulnerability, but rather a targeted exploitation of the bot’s automated execution mechanism.
: Cross-chain protocol Axelar Network has issued a statement regarding the recent security incident related to Secret Network, clarifying that there is a misunderstanding within the community. Neither Axelar nor the Inter-Blockchain Communication Protocol (IBC) was attacked or compromised. The affected token smart contract was not developed, deployed, or maintained by Axelar. Furthermore, Axelar's firewall mechanism prevented the impact from spreading to other chains.It is reported that the exploited contract was a fork based on the CW20-ICS20 implementation, but the developers removed two core security checks, leading to an "infinite mint" vulnerability. By deleting the verification mechanisms originally designed to prevent such issues, this fork altered the contract's original trust model and was not subjected to a new security audit.Axelar Network explained that anyone can deploy contracts via IBC for wrapping cross-chain assets, and similar contracts are used to wrap tokens from other chains onto Secret Network. However, the specific fork on the Secret side in this incident contained a vulnerability due to the removal of critical security checks. This incident was not caused by an inherent logic flaw or an issue with the IBC protocol itself, but rather a security risk introduced by modifications made to the third-party contract.
Odaily news, Slow Mist founder Cosine published an analysis stating that the approximately $1.1 million loss incident in the OLPC / LABUBU liquidity pool on BNB Chain is suspicious. The loss occurred due to a severe imbalance in the OLPC/LABUBU trading pair, caused by a "vulnerability" in OLPC being exploited. Under certain conditions in _update, it is possible to burn OLPC tokens amounting to value * decimalsValue. Normally, decimalsValue is 1, but approximately 46 days before the attack, it was changed by the owner to an extremely large value of 7,326,680,472,586,200,649. A few days later, the OLPC owner renounced ownership, setting it to the zero address.Today, the attacker exploited this extremely large decimalsValue to trigger the Pair reserve burn, allowing a small amount of OLPC to extract a large amount of LABUBU. The attacker ultimately swapped 1.115 million USDT at a low cost. The suspicious point lies in the setting of decimalsValue—why did the OLPC owner set such an abnormally large value?