The Onchain Security Roundup tracked 6 major incidents last week, with over $28.3M in reported losses As smart contract security improves, attackers are going after the underlying economic assumptions (oracles, liquidity depth, mark prices) rather than the contracts themselves Ostium: 23.75M USDC drained from its LP vault after offchain price-feed infrastructure was compromised. @blockaid_ reported that a registered PriceUpKeep forwarder and future-dated authorized oracle reports were used to create artificial trading profits to extract funds from the OLP vault. Trading remains paused, with investigation and LP recovery details pending Allbridge Core: $1.65M lost from a flash-loan-assisted manipulation of Allbridge's StableSwap-style automated market maker, where the attacker exploited the same-asset swap accounting divergence. The protocol paused and asked LPs in affected pools to withdraw while the investigation continues Cascade CLS Vault: $1.3M lost after thin-liquidity markets and manipulated mark prices triggered liquidations against the CLS vault. Trading and withdrawals remain paused BarnBridge SMART Yield cUSDC: $776K drained from a dormant protocol after a governance takeover allowed the attacker to use legacy USDC approvals DeFiTuna: $570K lost from a Solana lending-pool issue involving a highly illiquid TUNA/USDC pool, Jupiter routing, and a rounding/solvency-check flaw. DeFiTuna said the vector was identified and mitigated, with investigation and recovery ongoing Lumi Finance / Sodium Smart Accounts: approximately $270K drained after a design flaw in smart-account validation logic allowed an attacker to gain unintended token approvals These are the exact sorts of risk that Nexus Mutual can cover: oracle failures, oracle manipulation, governance takeovers, and smart contract exploits Whether you’re a protocol, investor, or fund looking for protection against the changing risks in DeFi, Nexus Mutual is there to help