Defendor — DeFi Security
رفتن به کانال در Telegram
2 359
مشترکین
+224 ساعت
+177 روز
+6530 روز
در حال بارگیری داده...
کانالهای مشابه
هیچ دادهای
مشکلی وجود دارد؟ لطفاً صفحه را تازه کنید یا با مدیر پشتیبانی ما تماس بگیرید.
ابر برچسبها
اشارات ورودی و خروجی
---
---
---
---
---
---
جذب مشترکین
ژوئیه '26
ژوئیه '26
+99
در 3 کانالها
ژوئن '26
+188
در 0 کانالها
Get PRO
مه '26
+170
در 0 کانالها
Get PRO
آوریل '26
+164
در 4 کانالها
Get PRO
مارس '26
+69
در 1 کانالها
Get PRO
فوریه '26
+71
در 0 کانالها
Get PRO
ژانویه '26
+150
در 1 کانالها
Get PRO
دسامبر '25
+302
در 0 کانالها
Get PRO
نوامبر '25
+402
در 4 کانالها
Get PRO
اکتبر '25
+123
در 3 کانالها
Get PRO
سپتامبر '25
+239
در 0 کانالها
Get PRO
اوت '25
+125
در 0 کانالها
Get PRO
ژوئیه '25
+565
در 3 کانالها
| تاریخ | رشد مشترکین | اشارات | کانالها | |
| 25 ژوئیه | +4 | |||
| 24 ژوئیه | +1 | |||
| 23 ژوئیه | +9 | |||
| 22 ژوئیه | +4 | |||
| 21 ژوئیه | +1 | |||
| 20 ژوئیه | +4 | |||
| 19 ژوئیه | +2 | |||
| 18 ژوئیه | +2 | |||
| 17 ژوئیه | +5 | |||
| 16 ژوئیه | +3 | |||
| 15 ژوئیه | +5 | |||
| 14 ژوئیه | 0 | |||
| 13 ژوئیه | +1 | |||
| 12 ژوئیه | +1 | |||
| 11 ژوئیه | 0 | |||
| 10 ژوئیه | +4 | |||
| 09 ژوئیه | +17 | |||
| 08 ژوئیه | +9 | |||
| 07 ژوئیه | +2 | |||
| 06 ژوئیه | +2 | |||
| 05 ژوئیه | 0 | |||
| 04 ژوئیه | 0 | |||
| 03 ژوئیه | +4 | |||
| 02 ژوئیه | +8 | |||
| 01 ژوئیه | +11 |
پستهای کانال
🏦 OpenZeppelin Launches Institutional Security Practice for Onchain Finance
OpenZeppelin is positioning itself as an end-to-end security partner for banks and financial institutions moving tokenization, payments, custody, and settlement into production, backed by $250B+ secured across 900+ audits and zero exploits in fully-remediated code.
Clients include DTCC, Fidelity Digital Assets, WisdomTree, and Coinbase, with coverage spanning architecture through ongoing production monitoring.
🔗 Details
| 2 |  🔢 DeBond Drained for $542K via Duplicate Bond ID Exploit
DeBond's bond group registry allowed duplicate bond IDs, and its exchange logic counted exception matches rather than tracking unique membership, breaking the burn-before-mint assumption and letting an attacker mint unbacked bonds.
The attacker registered output groups with duplicate IDs, triggering skipped burns while minting new bonds, then sold them for 542,144 USDC from liquidity pools.
🔗 Details | 205 |
| 3 |  ⚠️ LayerZero Deprecating Support for Several Chains Across Three Waves
LayerZero is winding down DVN, Executor, and Stargate support across several chains in three waves, with deadlines on July 30, August 28, and September 30.
Users holding Stargate pool or Hydra assets on affected chains must bridge to supported chains like Ethereum, Arbitrum, or Base before their respective deadlines or risk losing access to funds permanently.
🔗 Details | 229 |
| 4 |  🚨 Triple-A Hot Wallets Drained for $9.3M+ Across Four Chains
Triple-A hot wallets on TRON, Ethereum, TON, and Solana are being actively drained, with over $9.3M swapped and bridged to Ethereum for consolidation.
🔗 Details | 266 |
| 5 |  📚 A Curated List of the Best Smart Contracts to Study
awesome-smart-contracts by shafu0x collects production-grade repos from Uniswap, Morpho, MakerDAO, Aave, Curve, EigenLayer, Solady, and more in one place.
If you audit or write Solidity, these are the codebases worth studying for patterns, architecture, and edge-case handling.
🔗 Details | 287 |
| 6 |  🚨 Guru Fund Exploited via Misconfigured Legacy Adapter Contract
A legacy, unverified adapter deployed on March 11 with unexpected permissions was exploited on Ethereum, draining funds across six token funds including BEACHDEGEN, GURUFUND, BOOST, MESSYFUND, MESSYAI, and MESSYDEFI.
The team has paused the protocol and disabled the component, but has confirmed it lacks sufficient reserves to reimburse affected users and is attempting to contact the attacker for recovery.
🔗 Details | 299 |
| 7 |  📦 ERC-7540 Async Vault Standard Now in OpenZeppelin Community Contracts
ERC-7540 extends ERC-4626 to support asynchronous settlement, letting vaults handle real-world assets that require compliance checks or clearing windows before redemption, with requests filled on equal terms rather than first-come-first-served.
Built in collaboration with Tokenized Vault, Centrifuge, and Superform.
🔗 Details | 319 |
| 8 |  🔮 Lien Finance Loses $542K via Crafted Bond Pricing Manipulation
The attacker permissionlessly registered crafted bond groups, minted near-worthless bond tokens, then swapped them against GeneralizedDotc OTC pool liquidity where the pricing logic overvalued the bonds relative to their real collateral.
The result was ~542K USDC drained from LP allowances in exchange for tokens backed by essentially nothing.
🔗 Details | 338 |
| 9 |  🤖 Rekt: Zero Equals Zero, and Nobody Checked
Using the Bonzo Finance exploit as a lens, Rekt argues that blind trust in automated outputs, whether a BLS verifier, an AI denial algorithm, or a license plate reader, shares the same missing step: accepting an answer before verifying whether it deserves belief.
From nH Predict reversals at 90% to 1,400+ AI-fabricated court citations, the pattern repeats across every domain, and the human in the loop keeps moving further from the check that matters most.
🔗 Details | 346 |
| 10 |  🚨 B² Squared Network Reportedly Drained for $3.86M
An attacker drained 8.59M B2 tokens on BNB Chain, swapped them for 5,409 WBNB, bridged the funds to Ethereum, and is currently routing proceeds to Zcash via NEAR Intents.
🔗 Details | 348 |
| 11 |  🌉 Verus Ethereum Bridge Drained Again for $7.54M
A second attacker exploited the same Verus Ethereum bridge import path as the May 2026 incident, triggering unbacked payouts to drain ~$7.54M in ETH, tBTC, USDC, USDT, EURC, MKR, and scrvUSD from bridge reserves.
The same contract, same entry path, and same bug class, suggesting the original vulnerability was never fully patched.
🔗 Details | 367 |
| 12 |  🌉 AFX Bridge Exploited for $24.15M via Compromised Validator Keys
AFX lost ~$24.15M USDC after an attacker submitted signatures satisfying the bridge's 5-of-7 validator quorum with 7,142 of 10,000 total power, exceeding the required >2/3 threshold.
The signature verification logic was not bypassed, suggesting the validator keys themselves were either compromised or misused, though on-chain evidence alone cannot confirm how.
🔗 Details | 353 |
| 13 |  🔑 Critical Flaw in Zilliqa Ledger App Exposes Private Keys From On-Chain Data
A nonce-generation bug in the Zilliqa Ledger app has been present since 2019, causing Schnorr signatures to use predictably biased nonces with the top 64 bits fixed at zero, allowing private key recovery from just 5+ on-chain signatures using lattice reduction.
Affected keys cannot be secured by simply moving funds, as attackers can front-run transfers using the already-derived private key. Users should await official Zilliqa guidance before taking any action.
🔗 Details | 367 |
| 14 |  🔧 Physical Crypto Attacks Up 33% in H1 2026, $124M at Risk
CertiK's H1 2026 Wrench Attack Report recorded 52 verified physical attacks, a 33.3% year-over-year increase, with $124.2M in recorded exposure and home invasions emerging as the dominant vector.
🔗 Details | 353 |
| 15 |  🗓️ Weekly Web3 Security Roundup: $1.35M Lost
Two notable incidents combined for roughly $1.35M in losses across the Web3 ecosystem this week, July 13-19.
A full vulnerability breakdown and in-depth analysis of each case is available in the linked report.
🔗 Details | 361 |
| 16 |  🔮 42DAO Exploited for $900K+ via Single-Signer Oracle Flaw
A MakerDAO Median-style oracle with a signing threshold of bar=1 let an authorized signer push BTCB price to 10²⁰, enabling the attacker to borrow 4.5M BLC against inflated collateral and swap proceeds for ~761K USDT.
A second attacker followed up by manipulating the price downward via the Dog liquidation module, netting an additional ~$122K.
🔗 Details | 396 |
| 17 | ![🛠️ 840+ DeFi Hacks Now Explorable in a Live In-Browser Debugger crypto[.]training/hacks wraps every DeFiHackLabs PoC in root](data:image/jpeg;base64,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){kind=small} 🛠️ 840+ DeFi Hacks Now Explorable in a Live In-Browser Debugger
crypto[.]training/hacks wraps every DeFiHackLabs PoC in root cause analysis, opcode-level EVM replay, and matched victim source, no RPC needed.
The analysis and build pipeline is fully open source on GitHub.
🔗 Details | 391 |
| 18 |  🐛 OpenZeppelin Bug Digest #9: Three Notable Findings
This edition covers a Stellar rule-downgrade attack, a ZK circuit misconstraint that would have frozen all PrivacyBoost withdrawals after tree 16, and the signed-integer exploit behind Aftermath Finance's April hack.
All three share the same root failure: assumptions about what downstream code will enforce that turned out to be wrong.
🔗 Details | 395 |
| 19 |  🔬 Why Certora Built AutoProver Now
Certora CEO Mooly Sagiv says writing specifications has been the decade-long barrier to formal verification scaling, and LLMs now make it possible to automate that step for every developer, not just teams with formal methods expertise.
The timing is deliberate: most new code is being written by LLMs, many 2026 DeFi hacks were carried out with AI assistance, and security tooling needs to match that pace.
🔗 Details | 567 |
| 20 |  🌉 Wanchain Cardano-BNB Bridge Exploited for ~$500K
203M NIGHT tokens were falsely minted on Wanchain's Cardano-BNB bridge, likely via a forged message, then swapped for 2.83M ADA (~$500K) on Cardano.
🔗 Details | 401 |
