Connect with us
DAPA Banner

Crypto World

DeFi exploiter targets lending protocols with oracle tricks

Published

on

DeFi exploiter targets lending protocols with oracle tricks

A serial hacker is targeting DeFi lending protocols, with approximately $3.5 million stolen so far. In the latest incident, they exploited an oracle misconfiguration in lending platform Ploutos Money, leading to a loss of almost $400,000.

Crypto security firm CertiK noted that the project appears to have deleted its website and social media presence.

Read more: YieldBlox lending pool hit by $10M hack on Stellar

According to analysis by blockchain auditor BlockSec, Ploutos Money used Chainlink’s bitcoin (BTC)/USD feed as an oracle for USDC price. “The attacker was able to borrow 187 ether (ETH) by posting only eight USDC as collateral,” the post explains.

Advertisement

BlockSec also points to the timing of the exploit, just one block after the misconfiguration was confirmed. While the firm suggests “the attacker closely monitored and acted on the configuration change,” many of the replies to CertiK and BlockSec’s posts suspect insider involvement.

Pseudonymous blockchain investigator Tanuki42 linked the exploiter to at least four other hacks, including two million-dollar losses for Moonwell.

Last week, Moonwell was left with $1.8 million of bad debt when a misconfigured oracle returned a cbETH price of $1.12 instead of approximately $2,200. The code change which caused the loss had been co-authored by Claude Opus 4.6, alongside a Moonwell contributor.

Read more: DeFi, meet Claude: Moonwell’s ‘vibe-coded’ oracle in $1.8M blowup

Advertisement

The (bad) luck of the draw

Also today, in an apparently unconnected attack, Ethereum-based “private ZK lottery,” FOOM CASH, lost $1.6 million when its “broken ZK verifier” was compromised.

According to blockchain security firm QuillAudits, the project lost $1.3 million on Ethereum and $316,000 on Base. The firm’s analysis explains that the project’s use of its ZK verifier was flawed.

In setting two constants to the same value, “anyone can compute it [the verification equation], no secret needed.”

A similar attack affected Veil.Cash, a privacy protocol on Base, last week. However, losses were small at only 4.5 ETH, of which 2 ETH were recovered by white hats Decurity.

Advertisement

Got a tip? Send us an email securely via Protos Leaks. For more informed news and investigations, follow us on XBluesky, and Google News, or subscribe to our YouTube channel.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Crypto Hack Losses Driven by a Handful of Major Exploits: Immunefi

Published

on

Cryptocurrency Exchange, Scams, Hacks, DeFi

A new security report from Immunefi finds that crypto hacks continue at a steady pace while losses are becoming more concentrated in a small number of massive exploits.

Analyzing 425 publicly known incidents between 2021 and 2025, the report estimates that the average hack now results in about $25 million in stolen funds. In 2024 and 2025 alone, 191 hacks led to $4.67 billion in losses, with just five incidents accounting for 62% of the total.

Despite representing fewer incidents, centralized exchange breaches drove the majority of losses. Twenty exchange hacks accounted for roughly $2.55 billion, or about 55% of the total, reflecting how large pools of user funds are concentrated behind fewer points of failure.

Token markets also appear to be reacting more harshly to breaches. Across 82 hacked tokens tracked in the study, prices fell a median 61% within six months, with 83.9% remaining below their hack-day price over that period.

Advertisement

“The market has become less forgiving because expectations have changed,” Immunefi CEO Mitchell Amador told Cointelegraph, adding that breaches are now seen as signals of deeper issues in engineering, governance and operational resilience.

Amador said the long-term impact of exploits often extends well beyond the initial loss:

The stolen funds are only the first layer of damage. What follows is often more destructive: sustained token price suppression, reduced treasury capacity, leadership disruption, lost development time, and erosion of user trust.

The report also highlighted how interconnected DeFi systems can amplify the fallout from a single incident, with failures cascading across lending, collateral and liquidity networks.

Advertisement

One example involved the collapse of Elixir’s deUSD stablecoin in November 2025. Elixir had parked roughly 65% of deUSD’s collateral with Stream Finance, which disclosed a $93 million loss from an external fund manager. As Stream’s stablecoin xUSD fell 77%, deUSD’s backing deteriorated, redemptions halted and panic selling hit Curve pools, ultimately pushing deUSD down more than 97%.

Cryptocurrency Exchange, Scams, Hacks, DeFi
Source: Immunefi report

Related: South Korea sells $21.5M in recovered Bitcoin after custody breach

Recent exploits highlight ongoing security risks in crypto

While crypto-related hack losses fell to $26.5 million in February, the lowest monthly total in nearly a year, according to PeckShield, several security incidents have already surfaced in March.

Researchers at Google reported a new exploit kit targeting Apple iPhone users that is designed to steal cryptocurrency wallet seed phrases. The toolkit, known as Coruna, contains multiple exploit chains capable of targeting devices running various versions of Apple’s iOS and has been linked to phishing websites posing as crypto platforms.