Defendor — DeFi Security

Public

Can't Join? @defendor_eng

2.1k Members

Updated: May 18, 2026 at 4:08 PM

Defendor — DeFi Security

Web3 Security Feed (built by Arsen) Ads: https://t.me/arsen_btnk

@defendor_eng offers specialized information about web3 and built for subscribers interested in Hacking Tools

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 5 Days)

Total: 2.1K

24h growth: +94 5%

Latest Posts

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🔓 ~$1M Lost Yesterday via Malicious Approval to Unverified Contract

A victim lost their Alchemix Yearn yvWETH position after a prior approval to an unverified contract created just 10 days ago — which contained a bug enabling arbitrary call execution.

The attacker exploited that logic to drain the entire position.

🔗 https://x.com/peckshield/status/2049296116177322491

View on X (Twitter)

335

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 $4.5M Drained from Wasabi Protocol Across Base and Ethereum

An attacker funded via Tornado Cash deployed a malicious contract on both chains, draining WETH, PEPE, USDC, cbBTC and several other assets.

Stolen funds were consolidated into ETH, bridged to Ethereum, and split across multiple addresses.

🔗 https://x.com/CyversAlerts/status/2049770383528624267

View on X (Twitter)

343

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 $55K Drained via Flawed EIP-7702 Account Delegation

An EOA managing a QNT reserve pool delegated its code to a BatchExecutor contract via EIP-7702 — which authorized a BatchCall contract with no permission checks on its batch() function.

Any external caller could invoke it, allowing the attacker to drain 1,988 QNT (~$55K) from the reserve pool.

🔗 https://x.com/i/status/2049333031371210854

View on X (Twitter)

383

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 $330K Drained from Syndicate via Commons Bridge Compromise

An attacker acquired ~18.5M SYND tokens through a Commons bridge exploit and immediately sold them for ~$330K, bridging the proceeds to Ethereum.

🔗 https://x.com/i/status/2049378233410613647

View on X (Twitter)

386

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 ~$900K USDC Drained from Aftermath Finance

An exploit on Aftermath Finance has drained ~$900K USDC so far — investigation is still ongoing.

🔗 https://x.com/CertiKAlert/status/2049428250359648528

View on X (Twitter)

395

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 Sweat Economy Exploited on NEAR — 13.71B SWEAT Drained

Multiple Sweat Foundation accounts were emptied in a ~30-second window via a custom drainer contract.

Funds are being routed through Ref Finance and Wormhole bridge as the attacker moves to exit.

🔗 https://x.com/blockaid_/status/2049517380863246777

View on X (Twitter)

356

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🔍 Update: Scallop sSUI Spool Exploit — Official Post-Mortem

Scallop confirmed the ~150K SUI drain was isolated to a deprecated rewards contract with a missing validation in the rewards mechanism.

Core lending markets, deposits, and active products were never at risk.

🔗 https://x.com/Scallop_io/status/2048976878997041499

View on X (Twitter)

332

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🔢 A Bug Fix Introduced a New Bug via Double Rounding

A Solana stake pool fix correctly identified users were overpaying on withdrawal — but the reverse conversion it introduced created two sequential floor operations, slowly leaving unbacked LP tokens in circulation and diluting every depositor.

The real fix: pay rent from the pool's reserve instead, eliminating the second conversion entirely.

🔗 https://x.com/arsen_bt/status/2049104019595923544

View on X (Twitter)

354

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🚨 $398K Drained from Trading Protocol Vault

A missing caller authorization check on the YieldCore vault left a privileged function completely unprotected.

An attacker used it to drain all funds in a single transaction.

🔗 https://x.com/i/status/2049167005148721535

View on X (Twitter)

353

Defendor — DeFi Security

May 3, 2026, 05:50 PM

🥞 $464K Drained from JUDAO via Deflationary Token Exploit

An attacker flash-loaned 2.3M USDT, bought 5.5M JUDAO, then triggered the token's own burn and sync mechanisms to drain reserves directly from the PancakeSwap LP pair.

The skewed reserves let them swap remaining tokens back for far more USDT than originally spent — netting ~$227K in profit.

🔗 https://x.com/DefimonAlerts/status/2049019388947321334

View on X (Twitter)

381

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🔍 $150K Drained from Scallop via 17-Month-Old Deprecated Package

An attacker bypassed the active SDK and called a deprecated V2 package from November 2023 — where last_index was never initialized, crediting them with 17 months of accumulated rewards instantly.

On Sui, packages are immutable and forever callable — every old version stays a live attack surface unless shared objects enforce version checks.

🔗 https://x.com/zacodil/status/2048420308625866805?s=52

View on X (Twitter)

328

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

📷 Photo

🔑 $162.5M Drained from Wintermute After Incomplete Patch

After Profanity's key vulnerability was publicly disclosed on September 15, 2022, Wintermute moved funds from the compromised wallet but forgot to revoke its admin role on the vault.

Five days later, an attacker used that overlooked permission to drain $162.5M across 90 token types.

🔗 https://evmresearch.io/exploit-analyses/the+Wintermute+exploit+demonstrated+that+retaining+compromised+admin+credentials+after+public+key+recovery+vulnerability+disclosure+converts+a+cryptographic+weakness+into+a+full+protocol+drain

332

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

⚙️ $413K Drained from Singularity Finance via Broken Oracle Fee Tier

An admin registered oracle routes with a fee tier of 42 — a value Uniswap V3 doesn't support — causing getPool() to return address(0) and the vault to price all non-USDC reserves at zero.

An attacker flash-loaned 100K USDC, minted 99.99% of vault shares at the broken ratio, then redeemed them to drain the actual underlying balances.

🔗 https://x.com/DefimonAlerts/status/2048698708309705069

View on X (Twitter)

494

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🏦 DeFi Survived the KelpDAO Hack — But Only Because Aave Was the Victim

Over 30,000 ETH was pledged by Aave, its founders, and ecosystem partners to cover the $292M hole — a response only possible because Aave had the treasury, network effects, and gravitational pull to demand it.

The uncomfortable truth: DeFi's resilience isn't decentralization — it's financial depth and concentrated coordination by a few large players willing to act in their own interest.

🔗 https://x.com/OAK_Res/status/2047969649745182939

View on X (Twitter)

304

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

📷 Photo

🧊 Tether Freezes $344M in USDT Tied to Illicit Activity

Following requests from U. S. law enforcement, Tether froze $344M in USDT across two Tron wallets flagged for suspected scam-related activity.

The move comes amid growing pressure on stablecoin issuers to act faster after Circle faced criticism for its slow response to the Drift Protocol hack.

🔗 https://www.coindesk.com/business/2026/04/23/tether-freezes-usd344-million-in-usdt-on-tron-tied-to-illicit-activity

319

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🛡️ SEAL 911 Recovered $450K From a Phishing Attack in a Single Block

A fake Ledger Live app on the App Store tricked a user into triggering an ETH withdrawal — putting $450K at risk as it entered the unstaking queue.

SEAL 911 used a Flashbots script to win the 12-second withdrawal window, recovering every cent for a 5% fee.

🔗 https://x.com/i/status/2047754753757610297

View on X (Twitter)

311

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

⚠️ Litecoin Hit by Zero-Day DoS Attack and 13-Block Reorg

A zero-day bug disrupted major mining pools and allowed invalid MWEB transactions to peg out coins to third-party DEXs on unpatched nodes.

A 13-block reorg reversed the invalid transactions — all legitimate transactions remain intact and the bug is now fully patched.

🔗 https://x.com/i/status/2048135554445832542

View on X (Twitter)

477

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🎣 Old Contacts Being Used in Social Engineering Scam

Scammers are compromising accounts and reaching out to old connections asking to jump on a call — using familiar names to build false trust.

If someone you haven't spoken to in a while suddenly reaches out, verify through a separate channel before responding.

🔗 https://x.com/i/status/2047992259082440933

View on X (Twitter)

301

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🇫🇷 French Tax Official Sold Crypto Investors' Data to Kidnappers

A government insider sold home addresses and financial records of French crypto holders to criminal networks.

41 kidnappings followed — one every 2.5 days since January 2026.

🔗 https://x.com/i/status/2047773069607854512

View on X (Twitter)

614

Defendor — DeFi Security

Apr 30, 2026, 03:46 AM

🏆 Audit Competitions Find Critical Bugs 17x Cheaper Than Bug Bounties

A critical vulnerability costs $6,548 to find in an audit competition vs $114,000 via a bug bounty — and you get hundreds of AI-augmented researchers instead of 2-4 auditors.

Security firms quietly moving away from competitions are optimizing for predictable revenue, not their clients' best outcomes.

🔗 https://x.com/i/status/2047803025540977046

View on X (Twitter)

307

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🛡️ $1M in Audit Subsidies for Ethereum Builders

The Ethereum Security Subsidy Program — backed by the Ethereum Foundation, Nethermind, and Chainlink — is offering subsidized audits across 20+ top-tier providers.

Open to all Ethereum mainnet builders, regardless of project size.

🔗 https://x.com/i/status/2044069666725753144

View on X (Twitter)

209

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🧠 Smart Contract Audits Are Not Enough

QuillAudits reports that most major losses in 2026 came from admin key failures, not code bugs, including incidents like Drift and Bybit.

Focus shifts to OPSEC risks: multisigs, signer behavior, cloud access, and social engineering attacks.

🔗 https://x.com/i/status/2044038742441402817

View on X (Twitter)

251

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🚨 CoW Swap Hit by DNS Hijacking

CoW Swap's frontend was compromised via DNS hijacking — backend and APIs were unaffected but paused as a precaution.

Avoid using the platform until an all-clear is confirmed.

🔗 https://x.com/i/status/2044089359058501893

View on X (Twitter)

236

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🏦 Kraken Faces Extortion After Insider Access Incidents

Two rogue support staff accessed client support data across separate incidents, exposing roughly 2,000 accounts.

Kraken refused extortion demands and is now pursuing those responsible with federal law enforcement.

🔗 https://x.com/i/status/2043720915330969743

View on X (Twitter)

274

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🚨 26 AI Routers Caught Stealing Developer Credentials

Malicious third-party LLM routers were secretly injecting tool calls to steal credentials — putting developers using AI coding agents at risk.

Those working on smart contracts or wallets may have had private keys and seed phrases compromised.

🔗 https://x.com/i/status/2043579960992940485

View on X (Twitter)

261

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

📷 Photo

📱 Fake Ledger Live App Steals $9.5M

A malicious Ledger Live app on the Apple App Store stole $9.5M from 50+ victims across multiple chains including Bitcoin, Ethereum, Tron, Solana, and Ripple.

Funds were laundered through 150+ KuCoin deposit addresses tied to the AudiA6 mixing service.

🔗 https://t.me/investigations

270

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🔍 Hyperbridge Root Cause: Missing Input Validation

The VerifyProof() function never checked that leaf_index < leafCount — letting attackers pass a forged proof that completely bypasses message authentication.

This decoupled the proof from the message, allowing arbitrary cross-chain messages to validate against any historical root.

🔗 https://x.com/i/status/2043601549893738970

View on X (Twitter)

277

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

⚠️ Early Hyperbridge Gateway Breach

Before the later exploits, an attacker first drained 245 ETH (~$537K) from the Hyperbridge TokenGateway contract.

The funds were split across 15 wallets (~16.39 ETH each) and sent through Tornado Cash.

🔗 https://x.com/i/status/2043641769754235076

View on X (Twitter)

269

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🔐 47 Crypto OpSec Failures — One Mistake in Common

Across $3.8B in losses, every single victim treated human approval as a reliable security boundary.

The fix: air-gapped signing, mandatory tx simulation, timelocks, and a dedicated internal security lead who drills response playbooks before disaster strikes.

🔗 https://x.com/i/status/2043406886968455551

View on X (Twitter)

1,730

Defendor — DeFi Security

Apr 17, 2026, 10:58 PM

🚨 $237K Drained from Hyperbridge Gateway Contract

An attacker slipped a forged message through the gateway to hijack the admin of Polkadot's token contract on Ethereum.

They then minted 1B DOT tokens and dumped them for ~$237K.

🔗 https://x.com/i/status/2043557571609731268

View on X (Twitter)

292

Showing 30 of 46 posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Magic Tipster 🧙

970

tapswap community

12.5m0

alpine linux espanol

Loading recommended channels...

Defendor — DeFi Security

Defendor — DeFi Security

Ranking

Participant Growth (Last 5 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

Related Telegram Channels

Magic Tipster 🧙

tapswap community

alpine linux espanol

FreeFont.Pro — Best Free Fonts Daily

EZKROW

Tricks Hub | Latest Tricks

[🛡] MTProxyBoy

clover's corner.𖥔 ݁ ˖𓂃.☘︎ ݁˖

Latest Posts

User Reviews (0)