#defi
15 posts
Crypto swap guides, coin analysis, and exchange comparisons.
Name.com DNS hijack sends visitors of 12 DeFi sites to a wallet drainer
Overnight into October 31, 2026, attackers redirected DNS records for at least twelve DeFi websites registered with Name.com to copies running Step Drainer; Bitquery counts $202,386 taken from 32 wallets.
Drift hacker moves up to $61M of ETH into Tornado Cash after two quiet months
On October 20, 2026, wallets linked to the April Drift Protocol exploit sent between $32 million and $61.6 million in ETH into Tornado Cash after about two months of silence; roughly 81,500 ETH remain with the attacker.
XRP Ledger overflow bug could have minted XRP from nothing, Oct 2026
On October 9, 2026, XRP Ledger developers disclosed a 2015-era overflow bug that could have created XRP beyond the 100 billion cap; it was quietly patched on September 25 and shows no sign of exploitation.
Base vault loses $6M in wstETH after 3-of-7 multisig whitelist change
On October 4, 2026, an unclaimed Base vault controlled by an anonymous 3-of-7 multisig lost about 1,783 wstETH, over $6M, minutes after two whitelist edits added a new borrower.
NEAR Intents hack: $3.8M returned in full after 48-hour ultimatum
By October 3, 2026, the full $3.8M taken in the October 1 NEAR Intents exploit was returned, NEAR GM Alex Shevchenko said, after the team identified the attacker and set a 48-hour deadline.
Blast layer-2 shuts down: how to withdraw before the October 26 deadline
On October 2, 2026, Ethereum layer-2 Blast said it is shutting down because costs exceed revenue. TVL is ~$32M, down from $2B+; users can withdraw through the interface until October 26.
THORChain Alternatives: The Full Cross-Chain Swap Map (2026)
THORChain, LI.FI, 1inch, SwapZilla: different categories, not competitors. How liquidity protocols, bridge and DEX aggregators, and swap exchanges differ.
Robinhood Chain memecoin rug pull: $18.4M linked to one operation
On September 27, 2026, onchain analyst Wazz alleged that one operation extracted at least $18.43 million from 53 Robinhood Chain memecoin launches between July 10 and September 21 by exploiting launchpad wallet exemptions.
Fetch.ai, NuNet, SingularityNET exploit: unbacked mints, $2.25M profit
On September 19–20, 2026, one attacker drained about 8.7M FET from Fetch.ai’s converter and minted unbacked NuNet, SingularityNET and World Mobile tokens, but realized only about $2.25 million.
NEAR jumps 45% as Confidential Intents pass $70M: how private swaps work
NEAR climbed from $2.34 to $3.45 between September 15 and 18, 2026, about +45%, as funds in NEAR Confidential Intents, its private cross-chain swap mode, passed $70M and triggered the [email protected] reward drop.
CFTC no-action letter: self-custodial wallets and front-ends aren’t brokers
On September 17, 2026, CFTC staff said passive wallets and front-ends routing derivatives orders to registered firms needn’t register as introducing brokers, if they hold no user funds and meet ten conditions.
Symbiosis bridge exploit: $46B in fake syBTC minted, $336K cashed out
On September 11, 2026, a bug in Symbiosis’s BridgeV2 contract let an attacker mint about $46.1 billion in unbacked syBTC. Thin liquidity meant only ~$336,000 was cashed out; the team has recovered about 15 BTC.