Articles tagged Forensics
A ~$10M freeze met a same-day escape hatch, the DOJ put a nine-figure forfeiture on paper, and a payments firm asked a federal court who actually controls a stablecoin — the week…
The wallets were never hacked — they were shipped compromised. A chip behind the screen read the words as they appeared, and the one precaution that matters in self-custody…
The first complete recovery this column has recorded — identification, publicity and a 48-hour clock — alongside a compensation market that now has its own tradable claim tokens…
Nothing was hacked — a permission list was edited, correctly, by whoever holds the keys. The vault's math was fine; the answer to 'who can change who can borrow' was 'seven people…
The freeze lever caught 0.08% of the year's largest theft, a chain halt caught $2.2M the same week, and the KelpDAO–LayerZero dispute moved from the timeline to a courtroom.
Nothing was hacked. A governance proposal did exactly what governance proposals can do — and that was the vulnerability. The contracts worked as written; the vote was the attack.
Enforcement stayed small and unattributed, the largest loss of the week left 1.44M XRP (~$2.05M) sitting in the operator's own wallets, and the containment ledger shows what…
The wallet's cryptography was never broken. A module the owner had already whitelisted accepted instructions from anyone, moved a $7.7M position, and then lost the proceeds to a…
The freeze pipeline out-earned the week's entire crime total nearly eight-fold: a $39.27M issuer freeze on TRON against ~$5.1M of realized losses, while Chainflip pledged to make…
The third unbacked-mint failure in six days — and the clearest demonstration that a wrapper's true loss ceiling is its exit liquidity, not its mint logic.
The week's theme is trust in computed verdicts: cached proofs, collided identifiers and forged claims all let a protocol accept something it should have checked.
Negotiated partial returns become a measurable recovery channel: the Liquid attacker gave back ~85% of a $320M haul, while issuer freezing did its usual quiet work on TRON.
The largest Bitcoin-sidechain incident of the year traces to a performance optimization from 2016 — cache keys built without length prefixes turned a speedup into a minting press.
Price manipulation is August's method, consensus-level rollback is the new containment tool, and the ecosystem's response to thin-collateral lending has not caught up.
The week's biggest recovery story was a rollback, not a return: consensus-level containment reversed $111.2M of the Tectonic borrow, while a card protocol promised full refunds to…
The month's largest event is a liquidity story dressed as a price story: a thin token, an unadjusted collateral factor, and a chain willing to roll back.
Governance becomes an attack surface, a shared-infrastructure bug spreads across six chains, and a silent patch process turns a known bug into a countdown timer.
A quiet enforcement week; the expensive decision was procedural — a known bug reported in April shipped as a silent patch in August and was exploited within 20 hours.
No code bug, no oracle game, no key leak: six Term Finance vaults were drained through their own governance after an attacker bought a near-empty electorate for roughly 0.5 ETH.