On 2023-11-16, Bridge Mutual suffered a access control missing incident resulting in approximately $2,471,762 in losses. The exploit targeted the protocol layer. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.
On 2020-11-10, Singapore Global CBDC Challenge (Ethereum tracks) suffered a validator quorum compromise incident resulting in approximately $66,649,319 in losses. The exploit targeted the protocol layer. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.
Matches the phishing drainer predicate
Matches the flash loan governance predicate
Matches the ice phishing approval predicate
Matches the frontend dns hijack predicate
Matches the supply chain npm predicate
Matches the dvn collapse predicate
Matches the signature malleability predicate
Matches the governance proposal malicious predicate
kms_provider = unknownsubsector_tags = consumer_app, general_defi, infra_toolingchain_deployments = Ethereum, Polygonmethod_b_root_causes = signature_malleability, ice_phishing_approvalfrontend_host = vercelsubsector_tags = infra_tooling, general_defimethod_b_root_causes = flash_loan_governance, phishing_drainerkms_provider = unknownsubsector_tags = consumer_app, general_defi, infra_toolingchain_deployments = Ethereummethod_b_root_causes = signature_malleabilitykms_provider = unknownfrontend_host = vercelsubsector_tags = general_defi, consumer_app, infra_toolingchain_deployments = Ethereumkms_provider = unknownfrontend_host = vercelsubsector_tags = infra_tooling, consumer_app, general_defimethod_b_root_causes = dvn_collapsekms_provider = unknownfrontend_host = vercelsubsector_tags = infra_tooling, general_defi, consumer_appmethod_b_root_causes = dvn_collapsekms_provider = unknownfrontend_host = vercelsubsector_tags = general_defi, consumer_app, infra_toolingmethod_b_root_causes = dvn_collapsesubsector_tags = general_defi, consumer_app, infra_toolingchain_deployments = Binance, Ethereum, Polygonmethod_b_root_causes = supply_chain_npm, ice_phishing_approvalfrontend_host = vercelsubsector_tags = general_defi, consumer_appmethod_b_root_causes = flash_loan_governancekms_provider = unknownfrontend_host = vercelsubsector_tags = consumer_app, infra_tooling, general_defichain_deployments = Binance, Ethereum