Index
Search
Search the public record. Drafts and scheduled notes are not included.
defi
DeFi hacks, September 2026: the worst month of the year, read through the post-mortems
PeckShield counted 55 major incidents and $766.5M stolen in September 2026; CertiK counted 97 and $768.4M. Two events, Bitget and Liquid, make up most of it. This recap covers eleven incidents ThreatWire has written up, with figures taken from the projects' own accounts and named security firms.
Published 3h ago
defi
The $20,000 problem: when a protocol's input is cheaper than what it controls
A $20,199 stake purchase passed a vote over contracts worth millions on Neutron. A thin NSTR pool fooled Nostra's collateral price. A wrong conversion halved prices on Vesu. Three September incidents, one design flaw: a value the attacker could cheaply influence decided where large sums went.
Published 3h ago
defi
Unbacked mints: five 2026 incidents, one question the code forgot to ask
Liquid, NEAR Intents, Meter, Symbiosis and Payy failed in different ways this autumn. In each, the system created a claim on real money without checking that real money stood behind it. A look at the common pattern, drawn from the projects' own accounts, and the controls that would have limited it.
Published 3h ago