🚨HEDERA EXPLOIT: SAUCE PROTOCOL HIT BY ORACLE MANIPULATION, OVER $5M STOLEN! Attacker deposited collateral, manipulated oracle prices, borrowed ~6.6M $USDC + 35M $HBAR, swapped on SaucerSwap, and bridged funds to Ethereum. Stolen assets, now ~2.36K $ETH + 15.58 $WBTC, tracked on specific Ethereum wallets. Initial funding traced to Tornado Cash.

🚨 Exploit Analysis | ShapeShift FOX Colony Authorization Trust Chain Flaw SlowMist analyzed the recent ShapeShift FOX Colony exploit on Arbitrum, where attackers abused a semantic conflict between meta-transactions and DSAuth self-call authorization to hijack the resolver and drain all ERC20 assets via malicious delegatecall. 🔍 Key Takeaways: • Arbitrary self-call in executeMetaTransaction() • DSAuth auto-trust for address(this) • Resolver hijacking through meta-tx • Full asset drain via delegatecall 🌟This incident shows how individually “reasonable” designs can combine into a complete privilege bypass chain. Developers should strictly restrict sensitive selectors in meta-transaction systems and avoid unconditional self-call authorization patterns. Full analysis👇

Following the Coldcard firmware exploit, the number of active Bitcoin addresses surged to 0.98M/day, the highest since December 2024. This is fear-driven on-chain activity. Holders migrating seeds and moving funds to alternative custody reflects an operational security response, not a change in market conviction. 📉

The Drift Protocol exploiter who stole $285M has deposited 23,095 $ETH ($44.4M) into #TornadoCash# today. The exploiter still holds 107,165 $ETH ($201M).

It appears @BSquaredNetwork was exploited, with 8.59M $B2 ($3.86M) stolen. The exploiter sold all 8.59M $B2 for 5,409 $BNB ($3.01M). The funds were then bridged to #Ethereum#, swapped for $ETH and $USDT, and deposited into NEAR Intents and HOT Protocol.