{
 "generated": "2026-10-12",
 "method": "55 write-ups from RealSpap/onchain-postmortems read by automated readers, the 7 in-scope ones re-read by hand against the text; pre-incident configuration taken from the write-up only (stated, inferred or not stated); no historical on-chain state was re-read.",
 "incidents": [
  {
   "slug": "liquid-rangeproof-cache",
   "date": "2026-09-06",
   "loss_usd": 320000000,
   "chain": "Bitcoin, Liquid",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "drift-protocol-durable-nonce-admin-hijack",
   "date": "2026-04-01",
   "loss_usd": 295706374.93,
   "chain": "Solana",
   "category": "authority_key_or_signer",
   "in_scope": true
  },
  {
   "slug": "kelpdao-rseth-layerzero-rpc-spoofing",
   "date": "2026-04-18",
   "loss_usd": 273377225,
   "chain": "Ethereum",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "bitget-hot-wallet-spoofed-withdrawals",
   "date": "2026-09-24",
   "loss_usd": 126417066,
   "chain": "Ethereum (leg of multi-chain incident; total $387.5M)",
   "category": "authority_key_or_signer",
   "in_scope": false
  },
  {
   "slug": "coldcard-rng-seed-theft",
   "date": "2026-07-30",
   "loss_usd": 37996965.32,
   "chain": "Bitcoin",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "afx-bridge-validator-key-compromise",
   "date": "2026-07-22",
   "loss_usd": 24150000,
   "chain": "Arbitrum",
   "category": "authority_key_or_signer",
   "in_scope": true
  },
  {
   "slug": "ostium-oracle-forwarder-compromise",
   "date": "2026-07-15",
   "loss_usd": 23752641.68,
   "chain": "Arbitrum",
   "category": "authority_key_or_signer",
   "in_scope": true
  },
  {
   "slug": "verus-ethereum-bridge-forged-proof",
   "date": "2026-05-17",
   "loss_usd": 11775898.1,
   "chain": "Ethereum",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "tectonic-cronos",
   "date": "2026-08-30",
   "loss_usd": 9190000,
   "chain": "Cronos",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "moonwell-mamo-oracle",
   "date": "2026-08-27",
   "loss_usd": 8700000,
   "chain": "Base",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "termfinance-metavault-governance",
   "date": "2026-08-23",
   "loss_usd": 8500000,
   "chain": "Ethereum",
   "category": "authority_governance_or_controller",
   "in_scope": true
  },
  {
   "slug": "coinsbuy-wallet-drain",
   "date": "2026-08-09",
   "loss_usd": 7900000,
   "chain": "Ethereum, Tron",
   "category": "other",
   "in_scope": false
  },
  {
   "slug": "lazy-summer-stale-ark-donation",
   "date": "2026-07-06",
   "loss_usd": 6040000,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "cosmos-evm-vesting-underflow",
   "date": "2026-08-20",
   "loss_usd": 5720000,
   "chain": "Cosmos EVM chains (MANTRA, TAC, KiiChain and others)",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "gravity-bridge-denom-poisoning",
   "date": "2026-05-30",
   "loss_usd": 5400000,
   "chain": "Ethereum + Osmosis + Gravity Chain",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "across-solana-event-spoofing",
   "date": "2026-07-17",
   "loss_usd": 4500000,
   "chain": "Solana + Ethereum",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "nomic-nbtc-ibc-selfmint",
   "date": "2026-06-25",
   "loss_usd": 3150000,
   "chain": "Nomic, Osmosis",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "duelbits-hot-wallet-drain",
   "date": "2026-09-24",
   "loss_usd": 3020666,
   "chain": "Ethereum",
   "category": "authority_key_or_signer",
   "in_scope": false
  },
  {
   "slug": "aquifer-sweeper-arbitrary-call",
   "date": "2026-08-31",
   "loss_usd": 2418164,
   "chain": "Solana+Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "fetchai-nunet-dual-key-compromise",
   "date": "2026-09-19",
   "loss_usd": 1992730,
   "chain": "Ethereum",
   "category": "authority_key_or_signer",
   "in_scope": true
  },
  {
   "slug": "barnbridge-dormant-dao-controller-swap",
   "date": "2026-07-15",
   "loss_usd": 1931365.22,
   "chain": "Ethereum",
   "category": "authority_governance_or_controller",
   "in_scope": true
  },
  {
   "slug": "payy-rollup-zero-hash-burn",
   "date": "2026-09-24",
   "loss_usd": 1918792.2,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "notional-v1-escrow",
   "date": "2026-09-03",
   "loss_usd": 1730000,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "limit-break-payment-processor-forwarder-spoof",
   "date": "2026-09-25",
   "loss_usd": 1462114,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "mayachain-cacao-slash-drain",
   "date": "2026-08-18",
   "loss_usd": 1343181.04,
   "chain": "Mayachain",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "radix-hyperlane-vault-access-drain",
   "date": "2026-08-31",
   "loss_usd": 1249946,
   "chain": "Radix",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "oraichain-ics20-precompile-selfmint",
   "date": "2026-08-08",
   "loss_usd": 1000000,
   "chain": "Oraichain",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "virtue-iota-switchboard-oracle",
   "date": "2026-08-28",
   "loss_usd": 848190,
   "chain": "IOTA",
   "category": "authority_key_or_signer",
   "in_scope": true
  },
  {
   "slug": "ajna-liquidation",
   "date": "2026-08-28",
   "loss_usd": 775400,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "chainflip-tron-fetch-memo-double-payout",
   "date": "2026-09-12",
   "loss_usd": 736442.17,
   "chain": "Tron",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "sandbox-oft-delegate-hijack",
   "date": "2026-08-21",
   "loss_usd": 675000,
   "chain": "Ethereum, Base, BSC",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "flamincome-vaultyusdt-share-inflation",
   "date": "2026-09-16",
   "loss_usd": 595787.54,
   "chain": "Ethereum",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "avici-rain-collateral-withdraw",
   "date": "2026-08-28",
   "loss_usd": 500859.22,
   "chain": "Solana",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "xrph-wallet-key-compromise",
   "date": "2026-09-03",
   "loss_usd": 452000,
   "chain": "XRP Ledger, Ethereum",
   "category": "other",
   "in_scope": false
  },
  {
   "slug": "more-markets-ankrflow-emode",
   "date": "2026-08-31",
   "loss_usd": 415398,
   "chain": "Flow EVM",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "symbiosis-sybtc-mpc-signed-mint",
   "date": "2026-09-11",
   "loss_usd": 336000,
   "chain": "Ethereum, BNB Chain, Rootstock",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "flashloopadapter-safe-module-caller-spoof",
   "date": "2026-10-01",
   "loss_usd": 310029,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "balancer-v1-rounding",
   "date": "2026-08-30",
   "loss_usd": 234000,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "safe-uniswapv4-module-unauthenticated-executor",
   "date": "2026-09-15",
   "loss_usd": 225762,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "coreum-xrpl-bridge-deposit-forgery",
   "date": "2026-08-09",
   "loss_usd": 200000,
   "chain": "XRP Ledger / Coreum",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "allbridge-cctp-forged-message",
   "date": "2026-08-19",
   "loss_usd": 190155.98,
   "chain": "Base",
   "category": "bridge_or_message_verification",
   "in_scope": false
  },
  {
   "slug": "skydao-burn-from-pair-premature-sync",
   "date": "2026-09-30",
   "loss_usd": 183482.88,
   "chain": "BNB Chain",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "cozy-v2-optimism",
   "date": "2026-09-07",
   "loss_usd": 174311.01,
   "chain": "Optimism",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "zentra-finance-atoken-burn-clamp",
   "date": "2026-09-09",
   "loss_usd": 140030,
   "chain": "Citrea",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "fullsail-switchboard-vault-drain",
   "date": "2026-08-29",
   "loss_usd": 91000,
   "chain": "Sui",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "beatswap-vesting-slot0-reserve-drain",
   "date": "2026-09-09",
   "loss_usd": 77512,
   "chain": "BNB Chain",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "dreamhealthchain-award-two-wei-reclaim",
   "date": "2026-09-05",
   "loss_usd": 71851.02,
   "chain": "BNB Chain",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "weft-finance-hug-collateral-manipulation",
   "date": "2026-08-30",
   "loss_usd": 61592.84,
   "chain": "Radix",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "nimiq-gsn-forwarder-unsigned-execute",
   "date": "2026-09-16",
   "loss_usd": 50463,
   "chain": "Polygon",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "securedfinance-jpyc-tokenvault-selflend",
   "date": "2026-09-05",
   "loss_usd": 45444.97,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "etherfi-atomicqueue-eip7702-solver-drain",
   "date": "2026-09-11",
   "loss_usd": 38151,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "float-protocol-hypervisor-spot-manipulation",
   "date": "2026-08-31",
   "loss_usd": 28000,
   "chain": "Ethereum",
   "category": "oracle_or_price",
   "in_scope": false
  },
  {
   "slug": "wealthmanagementv2-selfowned-proxy-drain",
   "date": "2026-09-08",
   "loss_usd": 26414,
   "chain": "BNB Smart Chain",
   "category": "other",
   "in_scope": false
  },
  {
   "slug": "redsonic-vault-share-registration",
   "date": "2026-09-05",
   "loss_usd": 22747.69,
   "chain": "Ethereum",
   "category": "code_bug",
   "in_scope": false
  },
  {
   "slug": "internet-token-liquidityunifier-fake-pool-mint",
   "date": "2026-09-21",
   "loss_usd": 16380,
   "chain": "Base",
   "category": "code_bug",
   "in_scope": false
  }
 ],
 "in_scope": [
  {
   "slug": "drift-protocol-durable-nonce-admin-hijack",
   "loss_usd": 295706374.93,
   "date": "2026-04-01",
   "name": "Drift Protocol",
   "config": "Squads multisig, 2 of 5 signers sufficient, no timelock (read from the incident write-up, not from the chain before the attack)",
   "flagged": "yes",
   "why": "Fails the published requirement \"at least a 3-of-5 multisig\" and the requirement \"a confirmed delay before changes apply\"."
  },
  {
   "slug": "fetchai-nunet-dual-key-compromise",
   "loss_usd": 1992730,
   "date": "2026-09-19",
   "name": "Fetch.ai / NuNet",
   "config": "A single key: one EOA signature authorises a conversion, one key holds the minter role",
   "flagged": "yes",
   "why": "Fails the requirement \"admin power is not a bare key\"."
  },
  {
   "slug": "afx-bridge-validator-key-compromise",
   "loss_usd": 24150000,
   "date": "2026-07-22",
   "name": "AFX Bridge",
   "config": "7 bridge validators, 5 of them signed; the required threshold is not stated in the write-up",
   "flagged": "no",
   "why": "5 of 7 would pass the \"at least 3-of-5\" requirement. The failure was the keys of the signers, which a threshold does not show."
  },
  {
   "slug": "termfinance-metavault-governance",
   "loss_usd": 8500000,
   "date": "2026-08-23",
   "name": "Term Finance",
   "config": "Governance with a delay of 6 days 1 hour between proposal and execution, no veto",
   "flagged": "no",
   "why": "A confirmed delay existed. What failed was who held the voting power."
  },
  {
   "slug": "barnbridge-dormant-dao-controller-swap",
   "loss_usd": 1931365.22,
   "date": "2026-07-15",
   "name": "BarnBridge",
   "config": "A dormant DAO taken over by a governance proposal; the setup before the takeover is not described",
   "flagged": "not measurable",
   "why": "The write-up does not give the configuration before the takeover."
  },
  {
   "slug": "virtue-iota-switchboard-oracle",
   "loss_usd": 848190,
   "date": "2026-08-28",
   "name": "Virtue (IOTA)",
   "config": "14 price-oracle signing keys, all compromised",
   "flagged": "not measurable",
   "why": "The keys belong to an oracle provider, not to a contract admin the oracle scores."
  },
  {
   "slug": "ostium-oracle-forwarder-compromise",
   "loss_usd": 23752641.68,
   "date": "2026-07-15",
   "name": "Ostium",
   "config": "A price-oracle signer credential; the signer type is not described",
   "flagged": "not measurable",
   "why": "The write-up does not say whether the signer was a plain key or a multisig."
  }
 ]
}