Source: DefimonAlerts. Exploit on Thetanuts BTC covered-call vault on Ethereum (block 24923219): attacker drained 15,177,162 WBTC sats (~$46K) in one tx by abusing share minting when supply was zero but assets were not. This is a vault accounting failure, not a market move.
Credit to pennysplayer for surfacing this first: https://t.co/QB4QeQPXnz. This was not an Aave hack. In Ethereum block 24643151, a public CoW settlement route created a same-block MEV backrun worth ~17.91 ETH.
Source: TenArmorAlert. Planet's gUSDT market on BSC was exploited through a borrow-discount accounting flaw. The attacker turned fresh borrows into immediate debt write-downs, then exited with profit. Why it matters: public sync paths should never erase principal.
Source: TenArmorAlert. At Ethereum block 24,575,085, $42.6k was drained from a USDC holder via UniswapV4Router04 calldata manipulation. It matters because a caller check tied to a fixed byte offset can let attackers spend from approved wallets.
⚠️Update: We've received reports of potential malicious activity targeting our $PRXVT staking contract.
We're actively investigating the problem, collaborating closely with our partners to assess the situation, mitigate any risks, and resolve it as quickly as possible.
Users are our top priority, we will make this right and keep you updated.
Thank you for your patience and understanding.