@onchain0xplained

A leaked Google Cloud key let an attacker forge withdrawals from five Initia rollups and move $3.27M without breaking a single smart contract. Halting the chain froze about $2.16M of it. #initia #ibc #cosmos #bridgehack #crypto

A brand-new account on Arcus shuffled funds between its own subaccounts and withdrew 2.23M USDG it never deposited. A boring rate limit stopped $3M more. #arcus #robinhoodchain #usdg #perpdex #defi

Some Ethereum L2 withdrawals take a week and others take hours. It depends on who checks the math, and even then, bugs and security councils still matter. #rollups #arbitrum #zkrollup #ethereum

About $6M left 44,000+ Keplr Google and Apple login wallets after a Web3Auth flaw leaked private keys, and Web3Auth now says many of those transfers were its own rescue. #keplr #web3auth #cosmos #atom #crypto

Brazil's biggest crypto exchange lost around $46M with no smart contract broken, and per Bitquery, customer deposit addresses kept emptying after it said the attack was contained. #mercadobitcoin #bitmart #hotwallet #tether #crypto

Your exchange balance is a promise, not coins. Here's where your deposit really goes, and why the power to sign matters more than the coins. #binance #mercadobitcoin #proofofreserves #coldwallet #crypto

Over $100M left crypto exchange accounts in 21 hours, and no victim has confirmed it. Here's what the chain shows, and what it can't. #zachxbt #monero #usdc #uniswapx #crypto

About 4,000 BTC left Liquid's reserve in 36 minutes and no key was stolen. A node-software bug accepted tokens that nothing backed. #liquidnetwork #bitcoin #sidechain #bitvm #crypto

Since May 2025, one signature can make your Ethereum wallet run someone else's code. That's great for batching and free gas, and drainers love it too. #eip7702 #ethereum #pectra #smartaccount #crypto

A script that only measured page speed was swapped for a drainer and emptied 700+ Polymarket accounts in an hour, with no keys stolen and every signature valid. #polymarket #debugbear #supplychainattack #polygon #crypto

Two Security Council members signed Solana transactions days in advance. On April 1 those signatures handed Drift's admin powers to attackers and $285M walked out in 12 minutes. #drift #solana #durablenonce #lazarus #crypto

How attackers got Bitget's own signer to approve ~$387.5M in withdrawals on Sept 24, 2026. Full breakdown on the channel. Sources: https://www.bitget.com/academy/bitget-security-incident-what-happened-timeline-impact-response…

After the largest crypto hack ever, Elon Musk trolled Binance and CZ asked him to stop. Full hack breakdown on the channel. Sources: https://finance.yahoo.com/markets/crypto/articles/elon-musk-trolling-binance-hack-102655034.html…

Binance just lost $6.3B in 20 minutes 🤯 Here’s how they did it #binance #crypto #hack #cryptonews #ethereum