Across security incidents

  • High

    DeFi hack attack: Three exploits snatch $11M in a single day

    Three DeFi projects, Payy Network, Duelbits, and Meter.io, were exploited on September 24, 2026, resulting in a total loss of over $11 million. Payy Network's bridge was drained of $1.8 million, Duelbits suffered a suspected private key compromise resulting in a $7 million loss, and Meter.io experienced a bridge attack where unbacked tokens worth $2.3 million were minted and dumped. All affected protocols have paused operations.

  • High

    GHO and sGHO as Eligible Backing Assets for USDe

    A report by Kairos Research examines GHO and sGHO as potential backing assets for USDe, noting that while GHO's peg has held and Aave is overcollateralized, there are concerns about exit liquidity. The report highlights an asymmetry between minting and redemption capacities in Aave's stability modules, with exit capacity being significantly lower than minting capacity, particularly on the Ethereum chain.

  • Medium

    Robinhood engineers charged over fraudulent Hyperliquid trades

    Two Robinhood engineers have been charged with wire fraud and commodities fraud for allegedly using confidential information about upcoming crypto listings to conduct insider trading on the decentralized derivatives exchange Hyperliquid. The alleged trades occurred across 2025 and 2026, with each engineer making over $50,000.

  • High

    Across — Spoofed Event Log

    Across, a cross-chain bridge protocol, was attacked on its Solana deployment via a spoofed event log, resulting in $4,500,000 in losses.