Skip to content
THREATWIRE

DeFi Security

Sources and provenance

Every record lists its sources, primary first, with the date we retrieved them. Links go only to pages that help verify a claim: official posts, independent analyses, explorers and the pinned dataset file.

MethodologySourcesCorrections

Reference dataset

Public test and reproduction metadata comes from the DeFiHackLabs repository (SunWeb3Sec/DeFiHackLabs, Apache-2.0). We pin every import to a commit: the latest run used 7363f76db51f0fea97f8e659b20ee8bdc5fbca25, read it only with git commands, and never execute anything. Everything shown on this site is stored in this site's own repository, so it keeps working without that source. Attribution is in the NOTICE file.

What we store

78 sources, 18 with a link

Some older sources are recorded by publisher and title only, because we had not captured a verified URL for them. Those are being filled in as records are re-reviewed, and we do not link to pages we have not opened.

Official post-mortems · 10

Official statements · 5

On-chain lookups by ThreatWire · 1

  • ThreatWire: Read-only lookups of the exploit transaction, receipt, balances, Flipper record, proxy implementation slot and Vat delegationRetrieved 2026-10-19 · MakerDAO flip keeper

Independent analyses · 39

Media reports · 22

Dataset entries · 1