Blockaid

Trusted by Coinbase, MetaMask, Stellar, and more to detect, understand, and protect against fraud, scams, and exploits in real time.

[Blockaid @blockaid_]

Blockaid has partnered with @LayerZero_Core to bring real-time threat intelligence verification to its cross-chain messaging.

Bridge Sentinel is a Blockaid-operated DVN available to issuers on LayerZero.

It screens every message against Blockaid's fraud detection engine for forged source events, malicious counterparties, and stolen funds before the DVN signs and assets move cross-chain.

Learn more: https://t.co/eY8WeiKiLH

[Blockaid @blockaid_]

@idobn 🔒

[Blockaid @blockaid_]

Get the full report here: https://t.co/kaM44aFRca

[Blockaid @blockaid_]

In 2026 so far, $1.18B has been stolen across 60 major onchain exploits. Less than 1% of the funds (just $9.8M) has made it back to those who lost it.

Since our H1 report, Blockaid has followed that money to see where it ended up and how much of it could have been frozen.

Today we’re publishing Blockaid’s 2026 Fund Recovery Threat Landscape, tracing each stolen asset to where it sits today, covering attacker speed, exit routes, freeze channels, and fund recovery mechanisms.

[Blockaid @blockaid_]

The findings that stood out most:

- Stolen funds typically moved within 17 minutes of the exploit
- In 68% of incidents, funds were moving within the first hour
- Every recovery relied on a freeze mechanism already in place
- Issuer blacklists and exchange freezes returned $0
- Only 5 of 60 incidents saw any funds recovered or frozen

[Blockaid @blockaid_]

Attackers moved over $1 billion in flash loans through one of the largest lending protocols to manipulate Balancer and extract $250K.

Illicit funds moving through the same markets expose traditional institutions to AML and sanctions risk.

Blockaid’s Risk Exposure gives compliance teams operating onchain real-time visibility into illicit fund flows and the understanding they need to stay compliant.

Read more: https://t.co/unuInGGH6G

[Blockaid @blockaid_]

Attack flow: 09:06 https://t.co/kjBN9r6mH8 created → 09:46 WAXUSDC withdraw −52,986.50 → 09:47 same on USDT/DAI/WETH/WBTC → 10:00 Solana pays 52,986.50 USDC → 10:05 Ethereum releases. ~$1,522 leftover is inventory vs WAX books. Code unchanged; still live.

[Blockaid @blockaid_]

🚨Blockaid detected an ongoing exploit on @WAX_io Multi-Chain Bridge on WAX, Solana, and Ethereum.
An attacker withdrew mapped tokens without paying on WAX; Solana and Ethereum released them.
~52,986 USDC, 21,558 USDT, 840 DAI, 2.55 WETH, 0.11 WBTC across 5 txs. 🧵

[Blockaid @blockaid_]

Root cause: eth.token::withdraw never requires max_fee ≥ 0 and debits quantity + max_fee. max_fee = −quantity charges 0; the bridge still logs a full withdrawal. The fee check is skipped when fee is 0; the safety check is an identity. Solana/Ethereum releases were honest.

[Blockaid @blockaid_]

@chizhao @FireblocksHQ @coinbase 🔒

[Blockaid @blockaid_]

We are all in on @money2020 Las Vegas!

New financial rails are here. Stablecoins. Tokenized assets. Agentic payments. The time to secure them is now.

Blockaid: The Money Security Company.

Visit us at Booth 21077

[Blockaid @blockaid_]

@laurashin 🔒

[Blockaid @blockaid_]

Ethereum (~$242k)
Main drain (~$86k): https://t.co/mB4paXJU5m
Free Speech (𝕏) drain (~$152k): https://t.co/JwQxKoXaz3
ZC copycats: https://t.co/NGuAblUy9R https://t.co/HZIYt7H8RE

BSC (~$969k)
Setup: https://t.co/uhFOkTRHeu https://t.co/f5MHaBccjy https://t.co/WtvmeW8hpG https://t.co/6Z5us81nv4 https://t.co/aDaG6KcdLO
Drain: https://t.co/L8xnFBywAD
Dump to USDT: https://t.co/0MDTI0mLp9

Robinhood Chain (~$169k)
CASHCAT drain (~$91k): https://t.co/lOBFXB50wn
RKST drain (~$78k): https://t.co/hzUWZUiCb3
RKST sold: https://t.co/cr1ABIkitU

Base (~$114k)
Attack contract deployed, never used by its deployer: https://t.co/8KjO3hEzGO
Same attack run by another address 3 blocks later (~$114k): https://t.co/Kp5d7bNu2x
Copycats: https://t.co/QAL3Eypdwi https://t.co/endmHsx9Lx https://t.co/TCMomfXzUJ

[Blockaid @blockaid_]

🚨 Update: The Unicrypt Vesting V2 (@UNCX_token) exploit has now hit 4 chains.

Total stolen: ~$1.49M

• BSC: ~$969k
• Ethereum: ~$242k
• Robinhood Chain: ~$169k
• Base: ~$114k

11 drain txs, including copycats and MEV bots. Full list 👇

[Blockaid @blockaid_]

🚨 Blockaid detected an ongoing exploit on @UNCX_token on ethereum.

~$86k drained from the shared vesting pool so far across 1 drain tx. Attack still ongoing. 🧵

[Blockaid @blockaid_]

Blockaid is attending @money2020.

Adoption of stablecoins, tokenized assets, and agentic payments is accelerating, driven by blockchain-powered financial rails.

This infrastructure needs a new security layer, and that’s what Blockaid is delivering.

Find us at Booth 21077.

[Blockaid @blockaid_]

The attacker created vesting positions in the shared token pool, released a large one, donated tokens in, then cancelled a topped-up vest so a tiny leftover vest could withdraw other users' locked tokens.

Exploiter addresses: https://t.co/uLUavAe6mM https://t.co/gtJD6gpnD8 https://t.co/m93LzOUZ8Y

Example exploit tx: https://t.co/byGL0xW1Y6

Victim / abused token: https://t.co/h0ZIh8yyQX

[Blockaid @blockaid_]

🚨 Blockaid detected an ongoing exploit on @UNCX_token on ethereum.

~$86k drained from the shared vesting pool so far across 1 drain tx. Attack still ongoing. 🧵

[Blockaid @blockaid_]

@tars96184 @token2049 @idobn Thank you for reaching out.

Please submit a report here: https://t.co/0xgIFU2aDc

[Blockaid @blockaid_]

Blockaid takes the stage at @token2049.

At Agentic Finance, our Co-Founder and CEO @idobn will speak on agentic wallets: key management, custody and security when the account holder is an AI agent.

📅 October 8, 2026
⏰ 3:30 - 4:00 PM SGT
RSVP Here: https://t.co/BLHpTr3tTK

[Concrete @ConcreteXYZ]

1/ Security isn’t a feature. It’s infrastructure.

We’re excited to announce our partnership with @blockaid_.

Bringing industry-leading security infrastructure to Concrete Vaults and the depositors who use them.

[Blockaid @blockaid_]

@ConcreteXYZ 🔒