Cryptopolitan Transit Finance Suffers $1.88M Hack, Promises User Refunds
Article Content
- •Transit Finance lost $1.88 million due to a hack exploiting a deprecated smart contract.
- •PeckShield identified the stolen funds in a specific Ethereum address linked to the attack.
- •The incident is part of a larger trend of DeFi security breaches, with 2026 losses nearing $2.3 billion.
Transit Finance experienced a hack that resulted in the theft of approximately $1.88 million from a deprecated smart contract. PeckShield identified the breach and traced the stolen funds to a specific Ethereum address. The attack exploited vulnerabilities in an early-version smart contract on the TRON network, which had been deprecated since 2022. Transit Finance has committed to refunding affected users and has set a 48-hour window for the attacker to respond regarding the return of the stolen assets. The protocol has stated that its current smart contract version remains secure and unaffected. This incident is part of a broader trend of DeFi attacks, with significant losses reported in recent weeks. In April alone, the DeFi sector lost over $609 million to cyberattacks, raising concerns about the security of cross-chain protocols. The total losses in 2026 are projected to reach $2.3 billion due to ongoing vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Lazarus Group and Aurellion Labs in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…