Web3 Security Weekly Data Report — October 5–11, 2026
The week's number was one incident: a reseller channel that leaked seed phrases for the better part of $86M. Strip it out and the other five events total under $14M — the same…
Articles tagged Data
The week's number was one incident: a reseller channel that leaked seed phrases for the better part of $86M. Strip it out and the other five events total under $14M — the same…
The series snapped back 40x after the Bitget week — and every dollar of it sat in the glue: an allowlist, a Safe module, a hook's shared unlock, a deposit rail. Not one core…
One exchange breach carries 95% of the largest weekly loss this site has recorded — and the same week produced the cheapest large theft yet: a $20K governance vote.
Losses rose 8.8x on five events, three quarters of it running on signing keys — a six-day wallet drain and a bridge minted from a compromised key — while a separate ~$4.3M of…
The smallest dollar week this site has recorded, on a net basis down 91% — but three unbacked-mint failures in six days, and two settlement-layer checks that were never made, make…
The freeze pipeline out-earned the week's entire crime total nearly eight-fold: a $39.27M issuer freeze on TRON against ~$5.1M of realized losses, while Chainflip pledged to make…
The third unbacked-mint failure in six days — and the clearest demonstration that a wrapper's true loss ceiling is its exit liquidity, not its mint logic.
A dual-basis report: the largest single event of the year ($320M gross, ~$272M returned) sits on top of a busy protocol tail (~$11.6M).
Negotiated partial returns become a measurable recovery channel: the Liquid attacker gave back ~85% of a $320M haul, while issuer freezing did its usual quiet work on TRON.
The largest Bitcoin-sidechain incident of the year traces to a performance optimization from 2016 — cache keys built without length prefixes turned a speedup into a minting press.
~$33.8M realized losses across 9 loss events (plus one data breach tracked separately), up 52% week-over-week; price manipulation dominates and a rollback changed what the…
The week's biggest recovery story was a rollback, not a return: consensus-level containment reversed $111.2M of the Tectonic borrow, while a card protocol promised full refunds to…
The month's largest event is a liquidity story dressed as a price story: a thin token, an unadjusted collateral factor, and a chain willing to roll back.
~$22.2M realized losses across 9 events; top-3 concentration 77%; the week's shape is governance and shared infrastructure, not classic key theft.
A quiet enforcement week; the expensive decision was procedural — a known bug reported in April shipped as a silent patch in August and was exploited within 20 hours.