A security startup says it disclosed a fund-draining vulnerability to the cross-chain protocol weeks before a $10.7M exploit hit a near-identical flaw. Now it plans to publish exploit code for more.
On-chain traces show the DPRK-linked attacker behind April's $292 million bridge exploit has pushed the unfrozen ~$220 million through THORChain, Wasabi, Tornado Cash, and Umbra, leaving roughly $1.7 million still sitting in the original wallet.
The post Crypto Hack Losses Drop 90% in May After Brutal April appeared on BitcoinEthereumNews.com.
The largest incidents involved Verus Protocol and THORChain, which lost $11.5 million and $10.1 million, respectively. Code vulnerabilities accounted for roughly two-thirds of all losses, while compromised wallets and private keys were the second-largest cause. Cross-chain bridges were the most targeted sector, responsible for 42% of total losses. Crypto Exploit Losses Drop Losses from crypto-related exploits and security breaches dropped quite a bit in May 2026. According to blockchain security firm CertiK, total losses from crypto platform exploits reached approximately $68.3 million during the month, which was an almost 90% drop compared to the $650 million that was lost in April. The sharp decrease makes May the third month of 2026 in which crypto-related losses stayed below the $100 million mark. CertiK also reported that around $9.4 million of the stolen funds were eventually recov
The post Crypto hack losses drop 90% to $68.3M in May, CertiK says appeared on BitcoinEthereumNews.com.
CertiK has reported that crypto losses from hacks and exploits have fallen to $68.3 million in May, nearly 90% lower than the roughly $650 million stolen in April. Summary Crypto losses fell to $68.3 million in May, nearly 90% lower than the roughly $650 million recorded in April, according to CertiK. Verus Protocol and THORChain suffered the two largest exploits of the month, with combined losses exceeding $21 million. CertiK reported a rise in AI-assisted malware activity as attackers targeted code repositories and AI coding tools. According to blockchain security firm CertiK, May became the third month of 2026 to record less than $100 million in crypto-related losses after attackers stole $68.3 million through exploits, scams, and security breaches. #CertiKStatsAlert 🚨 Combining all the incidents in May we’ve confirmed ~$68.3M lost to exploits with~$2.6M of the total attributed t
CertiK has reported that crypto losses from hacks and exploits have fallen to $68.3 million in May, nearly 90% lower than the roughly $650 million stolen in April. According to blockchain security firm CertiK, May became the third month of…
The post Gravity Bridge Halts After $5.4M Exploit Hits Cross-Chain Protocol appeared on BitcoinEthereumNews.com.
Caroline Bishop
May 31, 2026 09:05
Gravity Bridge, a Cosmos-Ethereum link, paused operations after a $5.4M breach. Analysts flagged security concerns as stolen funds moved through major platforms.
Gravity Bridge, a decentralized protocol connecting Ethereum and Cosmos, has halted operations after a reported $5.4 million exploit. The breach was flagged by onchain analysts and cybersecurity firm PeckShield on Saturday, May 30, 2026, prompting validators to suspend the bridge for investigation. According to PeckShield, the stolen assets include roughly $4.3 million in USDC, 274 Wrapped Ether (worth approximately $553,000), $434,000 in USDT, and 14.164 PAX Gold tokens valued at $64,000. Analysts noted that some of these funds have already been laundered through platforms such as ChangeNow and Binance. At the time of reporting, the attacker’s wallet still held a
The post Cross-Chain Protocol Gravity Bridge Suffers $5.4 Million Attack — Details appeared on BitcoinEthereumNews.com.
Gravity Bridge, a Cosmos-native cross-chain protocol, was the target of a compromised-key attack, which led to the theft of roughly $5.4 million over the weekend. This latest security breach joins the growing list of exploits suffered in the decentralized finance (DeFi) space so far in 2026. Gravity Bridge Hack Traced To Signing Key Compromise: Investigator On Saturday, May 31st, blockchain sleuth Specter highlighted that Gravity Bridge might have been exploited through what he described as a signing key compromise. For context, a signing key compromise refers to the unauthorized disclosure or theft of a cryptographic key, allowing an attacker to then use it to decrypt sensitive information, forge digital signatures, or gain unauthorized access to systems and, as in this case, funds. The analyst disclosed that the loot included crypto assets worth about $5..4 million,
Gravity Bridge, a Cosmos-native cross-chain protocol, was the target of a compromised-key attack, which led to the theft of roughly $5.4 million over the weekend. This latest security breach joins the growing list of exploits suffered in the decentralized finance (DeFi) space so far in 2026. Gravity Bridge Hack Traced To Signing Key Compromise: Investigator On Saturday, May 31st, blockchain sleuth Specter highlighted that Gravity Bridge might have been exploited through what he described as a signing key compromise. For context, a signing key compromise refers to the unauthorized disclosure or theft of a cryptographic key, allowing an attacker to then use it to decrypt sensitive information, forge digital signatures, or gain unauthorized access to systems and, as in this case, funds. Related Reading: AAVE Price Plummets By 26%: $9 Billion Net Outflows Traced To Kelp DAO Hack The analyst disclosed that the loot included crypto assets worth about $5..4 million, including $4.3 million in
The post XRP Ledger’s Architecture Makes Flash Loan Exploits Impossible as DeFi Bleeds Millions appeared on BitcoinEthereumNews.com.
Key Takeaways XRP Ledger’s newly drafted amendment confirms flash loan exploits cannot occur due to its atomic transaction architecture Recent flash loan attacks hit Thorchain, Drift Protocol, and KelpDAO, resulting in losses exceeding hundreds of millions Unlike Ethereum’s composable contracts, XRPL transactions prevent chaining multiple operations within a single block Real-world asset tokenization on XRPL has surpassed $3 billion, featuring partnerships with Ripple, JPMorgan, Mastercard, and Ondo Finance An extensive $200,000 bug bounty initiative in late 2025 uncovered zero vulnerabilities related to flash loans or oracle attacks While decentralized finance protocols continue bleeding funds through flash loan exploits, the XRP Ledger maintains these attacks cannot penetrate its fundamental architecture. NEW: XRP Ledger Eliminates Flash Loan Vulnerabil