HashDit | now with Pro Extension @HashDit

🚨 HashDit Alert! 🚨 We have monitored that PositionManager has been compromised and drained for roughly $40k worth of funds. The issue lies in the deposit() function. Internally, newly minted shares are calculated by valuing the vault’s existing pooled assets using a manipulable AMM spot price, while the incoming deposit is valued using a trusted Chainlink oracle price. As a result, withdraw() returns an incorrectly priced amount. By manipulating the AMM pool price, the attacker was able to repeatedly call deposit() and withdraw() in a loop 24 times, compounding a small profit on each cycle. The attacker ultimately forwarded the remaining profit of approximately 40,341.62 USDT to the sender’s EOA. Funds have been deposited into Tornado Cash. Detected by our Internal HashDit AI Triage Monitor. Stay safe!

🚨 HashDit Alert! 🚨 As if Mid-Autumn Festival wasn’t eventful enough, following Bitget, payy_link, and Duelbits, another exploit has surfaced... We detected an exploit involving $YUNA on #BNBChain, resulting in an estimated $1.2M drain. The issue stemmed from the Pool contract’s claim() function, where staking rewards were priced using the YUNA/USDT pool. By manipulating the pool price, the attacker was able to claim significantly more YUNA than intended, then unwind the position for a large USDT profit. The stolen funds have since been bridged to Ethereum and remain in the attacker’s wallet. Detected by our Internal HashDit AI Triage Monitor. Stay safe!

keyboard_arrow_left Previous keyboard_arrow_right Next

🚨 HashDit Alert! 🚨 @bitget has been reported to be hacked for ~$351.6M! Withdrawals are temporarily paused and the platform has stated that users will be covered by their User Protection Fund. HashDit is following the incident closely. Stay Safe!

Gracy Chen @Bitget @GracyBitget

3 weeks ago

[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026 At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately. What we have

620 661 4K 2.1M 442

🚨 HashDit Alert! 🚨 Trezor's third-party e-mail provider has been compromised! Please be extra wary for any phishing emails even coming from the official trezor[.]io domain. Stay Safe!

Trezor @Trezor

a month ago

Our third-party e-mail provider has been breached. Please be aware that the email named ‘Critical Security Alert: STM32 Entropy Vulnerability’ is not coming from us, and it’s a phishing attempt. Do not click on any link. We have taken down the domain, and we are investigating

978 1K 6K 3.4M 713

Builders on @BNBCHAIN can now book HashDit's security services through the AvengerDAO marketplace. HashDit provides Security APIs, Web2/Web3 audits, monitoring, and incident handling to help teams catch vulnerabilities before launch, scan risky addresses/tokens/websites in real time, and respond faster when threats appear. Find us on the AvengerDAO marketplace 👇 avengerdao.org/marketplace

Shipping on BNB Chain? Security support just got easier to find. The AvengerDAO marketplace brings together 11 security teams covering audits, threat monitoring, risk scanning and incident response: @HashDit @CertiK @zokyo_io @salus_sec @Beosin_com @GoPlusSecurity @BlockSecTeam @pessimistic_io @sherlockdefi @getfailsafe @FirepanHQ Explore the marketplace: avengerdao.org/marketplace Learn how the AvengerDAO marketplace works in our blog 👇 bnbchain.org/en/blog/avenge…

Defimon detected a malicious governance proposal that attempts to drain @autonolas Treasury - $100K at risk Tornado-funded attacker registered ENS name "autonolas-deployer.eth" and submitted a proposal titled "Owner migration: transfer treasury ownership from old timelock to Safe updater". In fact proposal execution would move Treasury ownership away from the legit Autonolas Timelock to the attacker contract, who could then rebalance and withdraw all 40.196 ETH. There is 3 days to defeat the proposal. We have shared the alert in the community chat of the @autonolas project. TX: etherscan.io/tx/0xe435eed3f… Attacker: etherscan.io/address/0xd4f8… Victim: etherscan.io/address/0xa0da…

An ongoing security incident has impacted users of the Cosmos EVM module. Cosmos Labs’ security and engineering teams have been proactively responding to this incident. We have advised the Cosmos EVM chains that are in contact with us to request that validators halt their chains. We thank the teams using Cosmos EVM for their rapid response. An incident report will be shared once the situation is resolved. If you are a team using Cosmos EVM and have questions, please contact [email protected].

‼️ Rust supply chain attack hits three crates, including 245 million-download arrayref. A compromised maintainer account pushed malicious releases that pulled in typosquatted proc-macro1, whose build script fetches and runs a remote payload during compilation. Check your Cargo cache and pinned versions now: thehackernews.com/2026/08/rust-s…

🚨Every Ledger running the Ethereum app is vulnerable to signature substitution A malicious dApp with WebHID access could race an APDU during your transaction review and swap the tx being signed while the device still shows the original Here's what you need to know:

Joining the alliance to help keep BNB Chain’s protocols and users safe 🛡️ Proud to be part of the next chapter of AvengerDAO and contribute to a more secure BNB Chain ecosystem 🤝

BNB Chain @BNBCHAIN

2 months ago

Every builder should have a clear path to strong security. AvengerDAO now brings 11 security firms, an official BNB Chain standard, and bug bounty support for builders, from development through launch and beyond. The goal is to raise the baseline for every project launching on

31 11 121 72K 8

Stay wary! Official @BNBCHAIN members will never promote random CAs or platforms, and will never contact you directly.

Ben @0xbenito_

2 months ago

seems like there was someone that impersonated me and made a github and launched a meme ai agent on BNB i did not do this fyi and do not endorse this.

5 2 21 3K 1

🚨 HashDit Alert! 🚨 Another npm supply-chain attack! keyv (~154M weekly downloads) + related cacheable packages were compromised. Malicious versions contain a preinstall hook that: • Downloads & runs a Bun-based payload • Steals cloud/CI/GitHub/npm/Vault tokens • Self-propagates by publishing trojanized packages • Plants hooks in .claude & .vscode What should you do: → Check your lockfiles NOW → Avoid latest versions → Rotate tokens if you installed recently → Look for .claude and .vscode repo hooks Stay safe!

The Hacker News @TheHackersNews

2 months ago

🔥 ALERT - A massive npm supply-chain attack is unfolding right now. It began with a poisoned Keyv release and spread across hundreds of packages. The worm: → Credential stealer via install scripts → npm, GitHub, cloud and CI secrets targeted → Claude Code and VS Code hooks

14 121 347 69K 99

🚨 HashDit Alert! 🚨 By now, many may have seen reports about @42dao_official being compromised. But 3 hours earlier, the same threat actor had already compromised 29 users on another platform, and there have been so reports yet! The threat actor drained $300k worth of $USDT and $BNB from an unknown exchange contract on BSC by abusing EIP-7702 account delegations. Attacker: 0x7b2e2dE172fd24c9158f6ECB77c05943CE47399D Victim Platform: 0x1Dd2235091c82862BCC7E9c25017ba9C409c0820 Detected by our Internal HashDit AI Triage Monitor. Stay safe!

Onchain Lens @OnchainLens

3 months ago

🚨@42dao_official exploited for ~$912K. The attacker exploited an abnormal BTCB oracle price update, allowing multiple BTCB vault liquidations in a single transaction. Root cause: → Missing oracle price deviation checks → No liquidation delay or minimum price protection

2 10 54 12K 30

🚨 HashDit Alert! 🚨 We have monitored that VES Finance has been compromised and drained for roughly $109k worth of funds. The VECAndETH exposed a getReward() function. Internally, earned() -> calculateUSDTToETH(), which relied on PancakeRouter.getAmountsOut using a PancakeSwap liquidity pair price that had been manipulated via a flash-loan swap. As a result, the attacker’s legitimate reward of 17.14 USDT was mispriced as a payout worth 76.11 BNB, whereas the fair value should have been only about 0.0096 ETH. In total, the contract paid 68.50 ETH to the attacker, with the remainder taken as fees. Funds have been deposited into Tornado Cash. Detected by our Internal HashDit AI Triage Monitor. Stay safe!

keyboard_arrow_left Previous keyboard_arrow_right Next

@corezcat @GameStopfun @trumpaizzz 2 hours after we released this tweet, the scammer decided to finally rug the remaining ~$57k worth of liquidity. Funds are now here: bscscan.com/address/0xb1ea…

@corezcat @GameStopfun 🚨 The next token to be rugged in this scheme is @trumpaizzz 🚨 bscscan.com/token/0xccdF81… If you are still holding on to this token, we strongly recommend you to sell it asap!! Stay safe!

🚨 HashDit Alert! 🚨 We have monitored that @corezcat as well as @GameStopfun have also rugged their community, in similar fashion, for a total of $93k worth of funds. Both Token Contracts likewise override the standard ERC-20 balanceOf() to delegate entirely to an external contract "EIP712" and "_cachedThis" which allowed the hacker to arbitrarily change the balances of the Pool + Hack Contract. Funds are still in the hackers' wallets. Detected by our Internal HashDit AI Triage Monitor. Stay safe!

HashDit | now with Pro Extension @HashDit

4 months ago

🚨 HashDit Alert! 🚨 We have monitored that @xpepetrump project has rugged and drained $38.5k worth of funds from the LP.. Root cause: PEPEToken contract (0xc81688968Bd1E8Da313B8F2936852eC4307Cd17f) overrides the standard ERC-20 balanceOf() to delegate entirely to an external

1 6 22 8K 26

Projects that are using @chainlink Functions or Automations should take note!

Lyvoo @lyvoo

3 months ago

Chainlink functions officially deprecated yesterday. Moving over to CRE for future usecases. Automation scheduled for 30 July deprecation too

keyboard_arrow_left Previous keyboard_arrow_right Next

5 14 163 11K 12

Both Tokens were also previously flagged as High Risk prior to the incident. hashdit.io/token-scanner/… hashdit.io/token-scanner/…

keyboard_arrow_left Previous keyboard_arrow_right Next