News linked to both this project and an event.
Odaily — According to on-chain analyst Aunt Ai, 30 minutes ago, the Binance hot wallet hacker transferred all 74.56 million ARB to address 0x000...0DA0. Arkham has tagged this address as Kelp DAO Hacker, and these tokens have not yet been moved or sold. Kelp DAO suffered an attack on April 18 this year, losing approximately $292 million in rsETH, and at the time the community speculated that the attacker was the North Korean hacker group Lazarus Group.
Arbitrum officially announced that the Arbitrum Security Council has taken emergency action to transfer 74,559,805 ARB tokens and 8,425 ETH held by addresses associated with the Binance attack incident on Arbitrum One. Following technical assessment and review, the Security Council transferred the funds to an intermediate frozen wallet via a specific technical solution, without impacting other network states, users, or applications on Arbitrum.
Odaily report: According to on-chain detective Specter's monitoring, Arbitrum has frozen $30.5 million worth of ARB, and Paxos has frozen $215,700 worth of USDP, with the total frozen amount reaching $2.829 billion.
According to monitoring by ZachXBT, the Arbitrum Security Council has executed a transaction to freeze approximately $30.5 million in funds from the Binance attack incident.
According to Lookonchain monitoring, the Binance hacker is currently dumping PEPE, UNI, LINK and other tokens on-chain in exchange for ETH. Lookonchain states that the hacker still holds a large amount of altcoins that may face significant selling pressure, including 217.497 million ENA (worth $39.51 million), 7.579 trillion PEPE (worth $34.41 million), 2.575 million LINK (worth $28.07 million), 128,034 AAVE (worth $15.9 million), 74.56 million ARB (worth $11.54 million), 1.938 million UNI (worth $12.62 million), 21.852 million ONDO (worth $8.52 million), 17.318 million WLD (worth $6.73 million), 714.911 million FUN (worth $6.29 million), 87.853 million ZAMA (worth $6.02 million), 3.602 million ZRO (worth $5.69 million), and 3.382 billion RSR (worth $5.02 million).
Odaily reports: On-chain monitoring shows that the total assets flowing out of Binance-labeled wallets amounted to approximately $5.643 billion. The breakdown includes: $3.528 billion on Ethereum, $1.449 billion on Bitcoin, $628 million on Tron, and $38 million combined across Arbitrum, Optimism, and Base networks. The tally excludes change outputs and avoids double-counting subsequent transfers and swaps. Tether and USDC issuer Circle have frozen at least $2.316 billion in stablecoins, including approximately $1.493 billion in USDT and $823 million in USDC.
Odaily reports: Lending protocol Secured Finance has announced that it has completed its recovery and reopened on Ethereum, Arbitrum, and Filecoin. According to the official statement, users did not lose funds, assets have been replenished, and contracts, balances, positions, and order books have all been repaired and verified. Secured Finance's lending market suffered an attack on September 5, with losses of approximately $104,000.
According to on-chain investigator vxdb, the Gamdom platform was targeted in a security attack. Preliminary data indicates that attackers stole approximately $2.2 million worth of assets across EVM-compatible chains, including Ethereum, BSC, Polygon, Arbitrum, and Optimism. Additionally, the Solana network suffered losses of around $965,000, while the TRON and Bitcoin networks each lost approximately $375,000 and $668,000, respectively. The total value stolen across all chains now exceeds $4.2 million.
According to the Arbitrum Security Council report, Arbitrum took emergency action at around 23:30 Beijing Time on October 2 to temporarily halt the activation of new Stylus contracts on Arbitrum One and Nova, in order to mitigate the risk of AI-assisted attacks utilizing custom WebAssembly programs.
Odaily reports: Xie Jiaxin posted on X stating that this Bitget security incident involved multiple non-EVM chains and 10 tokens, and due to the different method of asset theft, different approaches to handling and restoring withdrawals were taken compared to last year's Bybit security incident in order to thoroughly eliminate potential risks.Additionally, Xie Jiaxin stated that he and Bitget CEO Gracy Chen will host a community livestream 30 minutes before withdrawals resume on Monday to discuss this security incident and answer community questions.Bitget announced on X that it will restore withdrawals in phases: Bitcoin network withdrawals will resume on September 28 at 8:00 (UTC); ETH withdrawals on Ethereum, BSC, Arbitrum, Base, and Optimism networks will resume on September 29 at 8:00 (UTC); USDT withdrawals on Ethereum, BSC, Solana, and Tron networks will resume on September 30 at 8:00 (UTC); other tokens, fiat, and P2P withdrawals will resume on October 2 at 8:00 (UTC). Trading and deposit services continue to operate normally, and users do not need to take any action in advance.
Odaily News: Bitget posted on X platform that the vulnerability involved in the September 24 security incident has been identified and fixed. The team is conducting additional verification and security checks on the withdrawal infrastructure, with Mandiant and SlowMist continuing to assist with the investigation. The temporary suspension of withdrawals is a security measure and is unrelated to the availability of user assets; user account balances have not been affected, and the Bitget Protection Fund will cover the financial impact of this platform-wide incident.Bitget plans to resume withdrawals in phases: Bitcoin network withdrawals will resume on September 28 at 8:00 (UTC); ETH withdrawals on the Ethereum, BSC, Arbitrum, Base, and Optimism networks will resume on September 29 at 8:00 (UTC); USDT withdrawals on the Ethereum, BSC, Solana, and Tron networks will resume on September 30 at 8:00 (UTC); other tokens, fiat, and P2P withdrawals will resume on October 2 at 8:00 (UTC). Trading and deposit services continue to operate, and users do not need to take any action in advance.
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Odaily News: DefiLlama data shows that hackers stole $247 million in crypto assets in July, making it the second-highest month since 2026, trailing only April's $644 million; this figure represents a significant increase from June's $75 million and May's $60 million. Galaxy Digital stated that the Coldcard vulnerability was the largest attack event of the month, confirming three rounds of attacks involving 7,300 wallets, with at least $100 million in Bitcoin stolen; the firm also identified a suspected fourth round of attacks, which could bring total losses to approximately $130 million. DefiLlama's hack tracker estimates losses related to this vulnerability at $115 million. Other attacks in July include a $9 million exploit on decentralized finance protocol Bonzo Lend, a $2.6 million theft from Cardano-based wallet SecondFi, a $24 million theft from Arbitrum-based perpetual trading platform AFX, and a $7.5 million theft from the Verus Ethereum Bridge.
According to Cointelegraph, the cross-chain bridging and atomic swap protocol Garden Finance temporarily took its application offline after detecting abnormal activity on July 27. Blockchain security firm Blockaid disclosed that attackers exploited a vulnerability in Garden Finance's Hash Time Locked Contracts (HTLC), stealing a total of approximately $450,000 worth of USDT across four networks: Ethereum, Base, Arbitrum, and BNB Smart Chain.
据 Blockaid 监测，Arbitrum 生态协议 AFX 于北京时间 7月 23日 5:30 遭攻击。此次攻击针对 AFX 运营的跨链桥，迄今已导致协议约 2415 万枚 USDC 被转移。Blockaid 称，正与 Arbitrum 团队协作响应事件，并协助相关协议控制被盗资金风险。
Odaily Odaily News According to MAX monitoring, on July 16, the Cascade CLS treasury suspectedly experienced a security vulnerability, resulting in approximately $1.3 million in user fund losses. The platform has suspended all trading and withdrawals and has invited SEAL 911 and other third-party security teams to investigate and handle the incident. Cascade is a 24/7 multi-asset perpetual contract platform headquartered in New York, targeting the US market. It supports deposits via Arbitrum USDC or bank accounts and is currently still in an invitation-only private testing phase.
Ostium, a decentralized perpetual exchange, suffered an oracle attack on Wednesday, resulting in losses of approximately 18 million USDC. The attacker submitted false price reports for future dates using compromised oracle signing keys, generating fictitious trading profits and receiving payouts from the Ostium liquidity vault. Ostium stated that it has identified the issue with the OLP vault, has suspended all trading, and the team is currently investigating. Deployed on Arbitrum, Ostium offers perpetual futures trading for real-world assets including stocks, commodities, forex markets, and indices. At the time of the attack, the total value locked (TVL) in the Ostium protocol was approximately $63 million. The attack drained nearly one-third of this liquidity. In the first five months of 2026, DeFi protocols have lost over $840 million to exploits, including $292 million from KelpDAO and $285 million from Drift Protocol.
according to on-chain analyst Yujin's monitoring, half an hour ago, an address (0x321...bfd9) with the DeBank username musti_akrep profited 23.75 million USDC by exploiting a vulnerability on Perp DEX Ostium and withdrew it. The 23.75 million USDC was withdrawn to the Arbitrum chain and immediately exchanged for 12,085 ETH at a price of $1,965. Currently, these 12,085 ETH remain on the Arbitrum chain.
Blockaid stated that it detected a vault exploit incident involving Ostium on Arbitrum. The attacker fabricated false trading profits through registered PriceUpKeep Forwarders and authorized oracle reports with future timestamps, triggering a payout of approximately 18 million USDC from the vault.
According to Blockaid monitoring, the Lumi Finance protocol on Arbitrum is under attack, and approximately $270,000 in funds have been transferred out so far.