A flaw in Nomic’s forwarding logic minted 40.65 unbacked nBTC and left Osmosis allBTC about $3.15 million short. Osmosis froze 22.65 allBTC, but roughly 18 BTC-equivalent had already reached Tornado Cash before the 74-day-delayed discovery.

An actor exploited a range-proof cache-key collision in Elements to mint ~4,000 unbacked L-BTC, draining $320 million from Liquid Network. The actor returned 3,400 BTC and kept roughly 598.5 BTC. Was it a bounty or theft? The dispute continues.

An attacker pumped Tectonic's TONIC token roughly 300x and borrowed $120.4 million against the inflated collateral. Cronos rolled back 10,961 blocks to recover $111.2 million; $9.19 million had already left the chain and remains unrecovered.

An attacker bridged 257.7 million NES, roughly $50 million, from Nesa to Ethereum in an incident consistent with the Cosmos EVM bug chain that hit MANTRA, TAC, and KiiChain. Nesa never published the mechanism; Bubblemaps estimated slippage cut net profit to roughly $60k.

An attacker drained 148.3 million KII, worth roughly $9.7 million at the pre-exploit price, from KiiChain through the Cosmos EVM exploit class that also hit MANTRA and TAC. A halt immobilized 54.4% on-chain, but the rest had already crossed to BNB Chain.

An attacker drained 2.985B TAC (~$7.5M) from its bonded-token pool via the Cosmos EVM underflow bug that hit MANTRA. TAC halted four hours too late, funds already bridged out. Cosmos Labs had the bug since April but apparently misjudged its severity.

An attacker drained 720M MANTRA, worth $3.6 million per Mantra’s postmortem, through a confirmed Cosmos EVM underflow bug. The halt came too late for 94.7% of it, which had already reached an exchange. Three more chains fell to the same flaw days later.

Near-zero voter participation let one wallet seize control of Term Labs’ vaults for minimal cost, bypass the governance delay, and drain approximately $8.5 million. The attack exploited governance, not a core vault-code bug.