On 2025-02-21, Beefy Finance suffered a access control missing incident resulting in approximately $7,955,642 in losses. The exploit targeted the protocol layer. Attribution: mev_searcher. This is a demonstration entry — not a real incident.
On 2025-02-19, Beefy Finance suffered a supply chain npm incident resulting in approximately $176,154 in losses. The exploit targeted the infrastructure layer. Attribution: whitehat. This is a demonstration entry — not a real incident.
Matches the phishing drainer predicate
Matches the frontend dns hijack predicate
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the regulatory seizure predicate
Matches the mpc ceremony compromise predicate
kms_provider = fireblocks_mpcfrontend_host = netlifysubsector_tags = consumer_app, infra_tooling, general_defioracle_providers = Chainlinkkms_provider = fireblocks_mpcfrontend_host = netlifyoracle_providers = Chainlinkmethod_b_root_causes = supply_chain_npmsubsector_tags = consumer_app, general_defi, infra_toolingoracle_providers = Chainlinkmethod_b_root_causes = phishing_drainerstablecoin_dependencies = USDC, USDTkms_provider = fireblocks_mpcsubsector_tags = consumer_app, general_defi, infra_toolingmethod_b_root_causes = phishing_drainerstablecoin_dependencies = USDC, USDTkms_provider = fireblocks_mpcsubsector_tags = consumer_app, infra_toolingoracle_providers = Chainlinkmethod_b_root_causes = mpc_ceremony_compromisefrontend_host = netlifysubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = phishing_drainerfrontend_host = netlifysubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = frontend_dns_hijacksubsector_tags = general_defi, consumer_appmethod_b_root_causes = frontend_dns_hijack, supply_chain_npmsubsector_tags = consumer_app, general_defi, infra_toolingoracle_providers = Chainlinkmethod_b_root_causes = supply_chain_npmstablecoin_dependencies = USDC, USDTkms_provider = fireblocks_mpcsubsector_tags = infra_tooling, general_defi, consumer_apporacle_providers = Chainlinkmethod_b_root_causes = phishing_drainer