Security

Several blockchain networks recently faced price-manipulation attacks involving tokens such as TONIC, leading to emergency halts and, in one case, a chain rollback. TRM Labs estimated roughly $75 million was improperly borrowed, with about $6 million bridged to Ethereum and around $68.7 million reversed on Cronos. Bitquery reported net outflows of about $8.3 million on Ethereum and the discarding of 10,961 blocks, while project teams said they fully recovered 531,600 bnUSD and 1.366 million SODA and retrieved 82,430 USDC. Officials said user assets were not affected, but the incidents highlighted the limits of network halts once funds move across chains or into custodial venues.

TectonicFi suffered an exploit on the Cronos chain, with losses estimated at about $74 million. The attacker managed to bridge roughly $6 million to Ethereum before the chain was paused, according to PeckShield. About $60 million remains stuck on Cronos.

In August 2026, multiple Solana card programs were hit by a hack tied to a Rain contract vulnerability, with total losses of $1.1 million. Avici was the hardest hit, with 1,685 users losing $500,800. The attacker swapped the stolen stablecoins for SOL, bridged the funds to Ethereum, and routed them through Tornado Cash. Avici said self-custodial wallets were not affected and that all compromised card balances will be fully refunded.

Raincards infrastructure is suspected of being involved in an attack that drained funds from multiple neobanks and their users. The exploiter bridged $1M USDC from Solana to Ethereum via deBridge and laundered the funds using TornadoCash. Affected services include etherfi Cash, Avalanche Card and Solayer Pay, with users also reporting drained balances. The post said Circle had more than two hours to freeze the funds but did not act, and urged users to withdraw funds from impacted neobanks as soon as possible.

Avici confirmed it was hit by an authorization-bypass exploit, with the attacker stealing about $670K. On-chain data show the attacker created a wallet at 13:40 UTC and bridged in $190 of USDC from Ethereum to cover gas. Draining began at 16:49 UTC and has continued, with 8,857 transactions executed by submitting a signature bundle, calling AddCollateralAdmin to gain admin privileges, and then withdrawing. The data indicate a verification flaw in which the second signature check pointed back to instruction 0, and the protocol’s upgrade key has not been used since March 2025.

Cosmos Labs has publicly disclosed an ongoing security vulnerability in its shared EVM module and formally advised related networks to pause operations to prevent potential risks from escalating. The flaw could affect EVM-compatibility components across the Cosmos ecosystem, with potential knock-on effects for associated assets including ATOM and VIRTUAL. Cosmos Labs has not yet detailed the scope of impact or provided a remediation timeline.

Inflows into Bitcoin and Ether exchange-traded funds have climbed to their highest level of 2026. The figures suggest a marked increase in institutional or retail capital entering the crypto market through ETFs. The record pace of inflows indicates stronger investor willingness to allocate to major digital assets. The trend is being watched as a gauge of demand for mainstream crypto assets.

Decentralized lending protocol Moonwell on Base has been hit by an exploit, with about $9MILLION stolen. The attacker manipulated MAMO tokens as collateral to borrow unbacked cbBTC, USDC, wstETH and ETH. Despite the incident, Moonwell’s native token WELL rose 25% over the past hour.

A critical vulnerability has been found in the Ethereum app on Ledger hardware wallets that could let a malicious application change ETH transaction details during signing without the altered information appearing on the device screen. The issue affects users managing ETH and Ethereum-related assets on Ledger and could result in transfers being approved without their knowledge. Ledger said the flaw is fixed in Ethereum app v1.22.2 and urged users to update the app, Ledger Live and device firmware, and to avoid signing transactions until all updates are completed.

BNB Chain has completed the Pasteur hard fork, closing critical validator exploit vectors and boosting testnet throughput 88% to 2,324 TPS. The upgrade shifts block execution off the validator’s critical path. This optimizes block capacity without sacrificing 450ms block times.