CRIME [t3]

⚠️ Pocket Bitcoin discloses August data breach affecting 5,411 customers, exposing names, addresses, bank data, and in some cases identity documents and Bitcoin addresses; no funds or keys compromised. (source)

⚠️ Coldcard hacker swaps stolen Bitcoin for ETH via THORChain (source)

⚠️ Avici, Tria and other crypto neobanks drained of $1.1M via outdated Rain contract exploit (source)

⚠️ GebProxyActions exploited for ~5.94 ETH due to missing caller access control in quitSystem function, allowing attacker to bypass SAFE checks and steal collateral. (source)

⚠️ Injective exploited for $4.9M as block halt triggers emergency patch; Ontology pauses amid suspected attack (source)

⚠️ North Korean hackers move tens of millions through Hyperliquid (source)

⚠️ FloatProtocol exploited for ~$28,000 after attacker manipulated Uniswap V3 spot price via flash loans, draining ETH from Hypervisor contracts lacking TWAP validation. (source)

⚠️ More Markets (More Labs) on Flow EVM exploited for ~$9.3M using Ankr bonded LST and E-mode to drain WFLOW lending reserve (source)

⚠️ Balancer V1 exploited for ~$234K due to rounding flaw in joinswapPoolAmountOut after WBTC reserves drained to dust (source)

⚠️ TectonicFi exploited for ~$74M on Cronos; chain paused, ~$6M bridged to Ethereum (source)

⚠️ Cronos halts after Tectonic exploit; attacker borrows $75M (source)

⚠️ Layer 1 blockchain Fogo halts mainnet after attacker receives 400 million FOGO tokens, 10% of circulating supply (source)

⚠️ AVICI exploited for ~$1.02M; attacker drained 10K $SOL, swapped to USDC, bridged to 418 ETH, deposited into Tornado Cash (source)

⚠️ CashCowCoin exploited for ~$117K via flawed trading router reserve draining (source)

⚠️ The Sandbox pledges 1:1 repayment after $700K bridge exploit (source)

⚠️ MoonwellDeFi exploited for ~$8.7M after attacker manipulated MAMO collateral pricing (source)

⚠️ Moonwell DeFi exploited on Base via MAMO collateral manipulation, 50.6 cbBTC ($4M+) drained (source)

⚠️ FH token drained of ~$20k via flawed deflationary sell-tax logic in PancakeSwap V2 pool (source)

⚠️ Enjin exploited for $162K via storage slot collision in delegate proxy (source)

⚠️ Cosmos Labs urges EVM chains to halt over ongoing security incident (source)