Follow crypto hack news, exploits, bridge attacks, protocol breaches, and security lessons from major incidents across Web3.
Cardano’s governance model depends on ordinary ADA holders participating, and the SecondFi exploit shows how much that model depends on secure wallet UX.
Gino Matos 5 min read 
The malicious proposal shows how token-weighted votes can become a treasury access path when DAO review controls are too thin.
Blockaid estimated about $6 million drained as Summer.fi paused Lazy Summer vaults and investigated the cause.
Edel’s exploit was small, but it hit the next frontier for tokenized equities: credit markets, where 1:1 backing is not enough if wrappers, vaults and exchange rates can be gamed.
DeFiLlama data shows $780.3 million in Q2 known losses as bridges, keys and protocol logic turn security into a live cost of participation.
The incident forced users to confront the part of rollup security that usually stays invisible: whether they can still withdraw when the bridge layer breaks.
Microsoft says the CryptoBandits malware uses USB shortcuts, clipboard monitoring, and Tor to target wallet workflows before funds move.
The FCC’s robocall proposal could turn phone accounts into richer targets for SIM swaps, recovery abuse, and crypto theft.
Attackers used fake markets to turn Jaredfromsubway.eth’s trading approvals into a $7.5 million allowance drain.
