Latest Exploit News and Insights | Yellow

Term Finance, an Ethereum (ETH)-based DeFi lending protocol, lost about $8.5 million after an attacker exploited its governance system to seize control of vault assets on Aug. 23. Key Points: The attacker drained about $8.5 million, including 2,843 ETH and roughly $1.68 million in stablecoins, accor

The Sandbox said it contained a bridge exploit after an attacker reportedly minted 14.9 billion unbacked SAND (SAND) tokens on Base and BNB Smart Chain. Key Points: PeckShield reported 14.9 billion unbacked SAND minted across two wallets, with a nominal value of about $718 million. The Sandbox said

North Korea's BlueNoroff hackers used fake Zoom calls and AI deepfakes to breach a crypto firm and compromise more than 100 Web3 executives worldwide. Key Points BlueNoroff posed as a fintech lawyer, sent a tampered calendar invite, and steered the target into a counterfeit Zoom call. A ClickFix cli

The KelpDAO attacker has converted 75,700 stolen Ether (ETH), worth roughly $175 million, into Bitcoin (BTC) in about 36 hours. KelpDAO Exploiter Moves Funds On-chain analyst EmberCN first flagged the swap sprint in a post on X this week. The attacker routed nearly all of the stolen ETH through THOR

Volo Protocol, a liquid staking platform on Sui, said an attacker drained about $3.5 million from three of its vaults on Wednesday. Inside the Volo Breach The team disclosed the incident on X early Wednesday, noting that the stolen assets included Wrapped Bitcoin (WBTC), gold-backed XAUm, and USD Co