Key Highlights A critical state-root calculation bug affecting execution clients across Ethereum Layer 2 networks prompted urgent patches for reth, op-reth, and Base node-reth. Blockaid advised node operators, RPC providers, bridges, and protocols to upgrade immediately to eliminate the risk of state-root mismatches and invalid proof generation. DeFi teams and infrastructure providers reacted swiftly: LayerZero ...
Key Highlights A compromised DevOps engineer’s laptop triggered unauthorized hot wallet withdrawals at Binance, leading to approximately $3 billion in frozen funds. Security firm Blockaid detected unusual outflows in under two minutes and traced the attack mechanism to malicious Ethereum EIP-7702 delegations. Blockaid CEO Ido Ben-Natan identified the incident as a hijacking of signing infrastructure ...
Key Highlights Market analysts project Bitcoin’s potential recovery could span the next 6 to 9 months, characterized by gradual price growth rather than rapid, record-breaking rallies. Bitcoin experienced an approximate 4% price drop following the Binance attack, a decline that remains below the historical average 8.3% downturn typically observed within 24 hours of exchange breaches. ...
Key Highlights: Cybersecurity analysts are investigating a breach targeting Binance that resulted in the theft of more than $2.5 billion in cryptocurrency, marking the largest hack in crypto history. Onchain security firm Blockaid identified the exploitation of an EIP-7702 authorization bundle that allowed a malicious sweeper contract to drain funds from a major Binance wallet. ...
Key Highlights An onchain vault was drained of over 1.01 million $USDC using an exploit funded by a flash loan mechanism. Security firm Blockaid identified that flash loan capital was utilized to mint artificially inflated shares, enabling the malicious withdrawal. The victim contract balance dropped to zero $USDC, leaving no remaining funds to process user ...
Key Highlights: A third attacker exploited the same governance mechanism to drain approximately 550,000 X tokens in remaining liquidity from Uniswap V3. Across three separate operations, malicious actors have siphoned roughly 4.85 million USDT alongside 550,000 X tokens. According to cybersecurity firm Blockaid, the exploit remains active, with about 12.2 million X tokens still stored ...
Key Highlights An attacker orchestrated a complex multi-protocol exploit on September 6, leveraging over $1 billion in flash loans and borrowing $788 million across three Aave V3 markets to target Balancer V1. Aave incurred zero direct losses as the attacker returned all borrowed capital within the same transactions, bypassing balance-based detection mechanisms. Blockchain security firm ...