Real-time DeFiHacks Intelligence

Real-time DeFi exploit intelligence.

Root cause analysis, exploit PoCs, and trace-backed incident evidence for risk assessors.

Supported by Innosuisse🇨🇭

[Real-time DeFiHacks Intelligence @clarahacks]

Full details, PoC + root cause: https://t.co/R77rhoK50l

[Real-time DeFiHacks Intelligence @clarahacks]

Source: audit_911. AISOTH had a real protocol exploit on BNB Smart Chain, not phishing. In tx 0x11462984d7f5663db9cf95c07c6cd9ff91f5b2d6616268e8dd6a3013e190248c, an unprivileged actor used only public functions to turn a fixed presale buy into immediate arbitrage profit.

[Real-time DeFiHacks Intelligence @clarahacks]

Source: https://t.co/YYNyU5hnQ8

[audit911 @audit_911]

tx: https://t.co/18mGx8BcJ0

hacker: 0x627DF72cC3FA38C475A414e65CdECE09b2b177AF

[Real-time DeFiHacks Intelligence @clarahacks]

Full details, PoC + root cause: https://t.co/R77rhoK50l

[Real-time DeFiHacks Intelligence @clarahacks]

Source: audit_911. MEV on BSC: Chloe AI TCAI’s transfer logic let an attacker force the token’s own liquidity swapback at a chosen moment and then trade against the shifted TCAI/WBNB reserves. All actions were public and permissionless.

[Real-time DeFiHacks Intelligence @clarahacks]

Source: https://t.co/PjrxZUekvy

[audit911 @audit_911]

tx：https://t.co/bblKqlxpSH
hacker: 0x817cd11395763506222AdbB654E6ea0223B559E1

[Real-time DeFiHacks Intelligence @clarahacks]

Full details, PoC + root cause: https://t.co/R77rhoK50l

[Real-time DeFiHacks Intelligence @clarahacks]

DefimonAlerts reported this BSC issue here: https://t.co/Jo5sFEEymh. Proxy 0x5eF850919739772622ae6968C9d05fCBD326BD12 was poisoned. Same address, hostile implementation behind it.

[Defimon Alerts @DefimonAlerts]

💬 Onchain Message:
URGENT SECURITY ALERT / 紧急安全提醒:

Your proxy contract appears to be poisoned by a suspicious upgrade/controller contract.
你的代理合约疑似已被恶意升级/控制合约投毒。

Proxy / 代理地址: 0x5eF850919739772622ae6968C9d05fCBD326BD12
Suspicious contract / 可疑合约: 0xb648Ef46F790e17533a126E2469C70f7e729eD4f
Evidence tx / 证据交易: 0x3ee3515c8bd758cdaad206f63f4f5d0da571f5f0308eb8d66cd722c6d17fd441

Risk / 风险:
The controller may upgrade implementation, overwrite storage, delegatecall arbitrary logic, or drain assets.
该控制合约可能升级实现、任意写 storage、执行任意 delegatecall，或转走资产。

Suggested action / 建议:
Pause immediately, revoke permissions, inspect implementation/admin slots, migrate funds, and rotate ownership/admin keys.
请立即暂停协议、撤销授权、检查 implementation/admin slot、迁移资金，并更换 owner/admin 权限。

https://t.co/cywQ8hj2x3

[Real-time DeFiHacks Intelligence @clarahacks]

Source: https://t.co/Jo5sFEEymh

[Defimon Alerts @DefimonAlerts]

💬 Onchain Message:
URGENT SECURITY ALERT / 紧急安全提醒:

Your proxy contract appears to be poisoned by a suspicious upgrade/controller contract.
你的代理合约疑似已被恶意升级/控制合约投毒。

Proxy / 代理地址: 0x5eF850919739772622ae6968C9d05fCBD326BD12
Suspicious contract / 可疑合约: 0xb648Ef46F790e17533a126E2469C70f7e729eD4f
Evidence tx / 证据交易: 0x3ee3515c8bd758cdaad206f63f4f5d0da571f5f0308eb8d66cd722c6d17fd441

Risk / 风险:
The controller may upgrade implementation, overwrite storage, delegatecall arbitrary logic, or drain assets.
该控制合约可能升级实现、任意写 storage、执行任意 delegatecall，或转走资产。

Suggested action / 建议:
Pause immediately, revoke permissions, inspect implementation/admin slots, migrate funds, and rotate ownership/admin keys.
请立即暂停协议、撤销授权、检查 implementation/admin slot、迁移资金，并更换 owner/admin 权限。

https://t.co/cywQ8hj2x3