.
@UNCX_token lost ~$86k to a share accounting bug in VestingManager ๐จ
cancel() didnโt check that retained shares covered shares already released, letting the attacker over-reduce global shares and claim excess tokens from the shared pool.
Forta Firewall flagged it.
Show more
Private key compromise ๐จ
A wallet dormant since Feb 2025 just sent its full $3.48M balance in USDT and ETH to a fresh address.
Forta Firewall flagged it.
Ask a simple question: โWhat happens if this asset fails?โ
The Forta Risk Graph MCP can trace the dependencies, identify whatโs exposed and quantify the potential impact in USD.
Live onchain risk intelligence, directly from your AI assistant.
Show more
~$3.55M in unclaimed bridge funds was claimed via EIP-7702 delegations from a Tornado Cash-funded address ๐จ
Forta Firewall detected it.
Diversification can hide shared dependencies.
Assets that appear unrelated may rely on the same protocols, oracles, collateral or admins.
Forta Risk maps indirect exposures to reveal concentration risks that holdings alone miss.
Show more
Ask your AI assistant:
"If this stablecoin depegs, what gets hit and by how much?"
"Who can upgrade this contract?"
"What dependencies do my positions share?"
The Forta Risk Graph MCP brings live onchain risk data into your assistant.
Show more
What you hold is only part of what youโre exposed to.
Every onchain position depends on contracts, admins, oracles, collateral, bridges and other protocols, often several layers deep.
Forta Risk maps those dependencies, quantifies them in USD and monitors them in real time.
Explore Forta Risk
Show more
Seven addresses added to the OFAC list today, one per member of a Tren de Aragua crew that jackpotted US ATMs for ~$40M.
Their alleged ringleader is on the FBI's Ten Most Wanted list.
On chains running Firewall, those addresses can't transact.
Show more
No flash loan, no oracle, no exploit primitive ๐จ
MUSystem credited its welcome bonus in two places and let you withdraw without checking you were taking out less than you put in.
Sixteen fresh wallets just used the product as written, sixteen times.
Forta Firewall flagged it.
Show more
$351 million walked out of Bitget. Almost none of it was frozen by the asset issuers.
Our August piece on why issuers need to automate that decision is becoming increasingly relevant.
๐
Show more
Bad look for Circle.
The Bitget hacker stole $350M today, and a part of these funds was in USDC.
Circle had the possibility to freeze these funds as USDC is centralized, but it chose to do nothing.
That says a lot about how much Circle cares about saving user funds.
Show more
$RWC drained for ~$109K on BSC ๐จ
Attacks this size never make the headlines, which is exactly why they keep working. Nobody builds monitoring for the $100K case, and the $100K case runs every week.
Forta flagged it.
๐
Show more
Congratulations to the
@OpenZeppelin team.
Over the past 11 years, OZ has played a fundamental role in making crypto safer, more resilient, and ready for adoption by the global financial system.
Excited to see what this talented team will do next, now with the scale and reach of S&P Global behind them.
๐
Show more
Today we are announcing that S&P Global has entered an agreement to acquire OpenZeppelin.
Onchain finance is growing from an emerging market into core financial infrastructure, and the standards and rails our team and community built are becoming the rails of global finance. OpenZeppelin smart contracts facilitated over $37 trillion in value transferred, with the vast majority of the largest DeFi protocols, blockchain networks, stablecoins and tokenized funds relying on them.
With S&P Global, we expect to accelerate the impact of onchain finance, backed by more than a century of trust in global markets, benchmarks, and risk frameworks.
To our clients and to all the users of OpenZeppelin open source tools:
โข OpenZeppelin Contracts and all our open source applications and tools remain open source, free, and publicly maintained on GitHub. Building open source standards stays a core priority.
โข Audits, engineering work, and ecosystem programs continue with the same team, brand, quality, and customer experience, with what will be the added benefit of S&P Global's research capacity, market data, and institutional reach.
For the last decade, OpenZeppelin has set the security standard for onchain finance. Today begins a new chapter for that mission, together with one of the most trusted names in global markets.
Read the full announcement:
Show more
๐ธ ~$346K taken from
@flamincome ๐จ
The vault counted tokens anyone could send it as its own, then priced them with Curve's virtual price, which assumes a balanced pool. It wasn't. Share price inflated, redeemed against real aUSDT.
Forta flagged it.
๐
Show more
~65 people lost ~$47K yesterday to an approval they forgot they'd granted ๐จ
The BonfireSwap router let anyone move tokens out of any address that had approved it. $BONFIRE, BNB Chain.
Approvals don't expire. Forta flagged it. Go revoke what you're not using.
๐
Show more
Who actually bears the loss when an asset fails?
If USDe went to zero, USDT depositors on Aave v3 could lose up to 20% despite having zero direct USDe exposure.
This is what DeFi contagion looks like, mapped and quantified by Forta in real time.
๐
Show more
In onchain finance, direct exposure is only part of the risk.
If USDe were compromised, USDT suppliers on Aave v3 with zero USDe direct exposure could still face losses of up to 20%.
Forta maps and quantifies how contagion travels through DeFi in real-time.
๐
Show more
In onchain finance, direct exposure is only part of the risk.
If USDe were compromised, USDT suppliers on Aave v3 with zero USDe direct exposure could still face losses of up to 20%.
Forta maps and quantifies how contagion travels through DeFi in real-time.
๐
Show more
OFAC just designated Xinbi Guarantee, a scam-center marketplace that moved $24B+ since 2022.
52 TRON addresses added to the SDN list.
All 52 are now in Forta Firewall. Chains running Firewall reject transactions touching them before execution.
Show more
Tokenization 1.0, 2.0, 3.0. Everyone is somewhere on that curve, and almost nobody is standing still.
Laeeq Shabir, Partner at
@htdgtl, closing out the roundtable on where institutions actually are today.
Show more
Defending with AI is increasingly indispensable.
And Forta Firewall is already doing it.
๐
Cyber is having a moment
Across 21 major software companies, including Apple, AWS, Microsoft, and Google:
- Reported critical vulnerabilities never cleared 100 per month in four years
- Since spring they've jumped to over 600 per month
Charts of the Week:
Show more
A permissionlessly registered vault let the same stETH back two tokens at once ๐จ
@reddio_com exploited for ~9.25 ETH. Forta flagged it.