Tornado Cash is a tool tracked across 33 threat clusters and 75 intelligence report mentions on ThreatCluster. First observed November 4, 2025; most recent activity July 13, 2026.
In a span of 24 hours, three significant cryptocurrency-related attacks were reported. Fraudsters impersonated SecondFi, creating fake browser extensions and applications aimed at stealing cryptocurrency from users.…
On April 26, 2026, the Scallop Protocol, a DeFi platform on the Sui Network, suffered an exploit that drained approximately 150,000 SUI tokens from its sSUI rewards pool. The attacker targeted a deprecated V2 contract…
An attacker exploited a vulnerability in the SquidRouterModule, a third-party add-on, to drain approximately $3.2 million from 86 Gnosis Safe wallets across Ethereum and Base in just two hours. The breach was identified…
On July 4, 2026, the decentralized privacy protocol Hinkal confirmed a security breach where attackers extracted approximately 797,000 USDC from its Ethereum contract. The stolen funds were converted into 454 ETH, with…
On May 19, 2026, Echo Protocol, a Bitcoin DeFi platform, suffered a significant exploit on the Monad blockchain, leading to the unauthorized minting of 1,000 eBTC valued at approximately $76 million. The breach was…
In the past six months, attackers have exploited unverified smart contracts, stealing at least $36.7 million from various protocols, including Truebit and Trusted Volumes. The attacks involved decompiling the raw…
On May 18, 2026, the Verus Ethereum Bridge was exploited, resulting in the theft of approximately $11.58 million in assets, including ETH, tBTC, and USDC. The attack was identified by Blockaid, which reported that the…
On July 11, 2026, a suspected exploit on the Hedera network led to the theft of approximately $5.25 million in digital assets. The attacker utilized the LayerZero cross-chain bridge to transfer funds from Hedera to…
On April 18, 2026, Kelp DAO's LayerZero-powered cross-chain bridge was exploited, resulting in the theft of 116,500 rsETH, valued at approximately $293 million. The attacker utilized a forged cross-chain message to…
Jonathan Spalletta, a 36-year-old Maryland man, has been charged with stealing over $53 million from the Uranium Finance crypto exchange through two hacks in April 2021. The first attack exploited a flaw in the…