Latest Exploit News and Insights | Yellow

North Korea's BlueNoroff hackers used fake Zoom calls and AI deepfakes to breach a crypto firm and compromise more than 100 Web3 executives worldwide. Key Points BlueNoroff posed as a fintech lawyer, sent a tampered calendar invite, and steered the target into a counterfeit Zoom call. A ClickFix cli

The KelpDAO attacker has converted 75,700 stolen Ether (ETH), worth roughly $175 million, into Bitcoin (BTC) in about 36 hours. KelpDAO Exploiter Moves Funds On-chain analyst EmberCN first flagged the swap sprint in a post on X this week. The attacker routed nearly all of the stolen ETH through THOR

Volo Protocol, a liquid staking platform on Sui, said an attacker drained about $3.5 million from three of its vaults on Wednesday. Inside the Volo Breach The team disclosed the incident on X early Wednesday, noting that the stolen assets included Wrapped Bitcoin (WBTC), gold-backed XAUm, and USD Co

**Rhea Finance, the largest DeFi hub on NEAR Protocol (NEAR), lost at least $7.6 million on Thursday after an attacker manipulated its oracle layer through fake token contracts. Rhea Finance Exploit Blockchain security firm CertiK flagged the breach and confirmed the scale of the losses. The stolen

An attacker exploited an Ethereum (ETH)-based cross-chain bridge contract for Polkadot's (DOT) token, minting 1 billion bridged tokens and crashing the wrapped asset's price from roughly $1.22 to near zero. PeckShield Flags DOT Bridge Takeover On-chain analysts and blockchain security firm PeckShiel