Loading prices…
Security

Hacks

Exchange, bridge, and protocol breaches where funds were stolen — incident reports and post-mortems.

Crypto hacks turn technical failures into immediate financial losses. This beat covers breaches of exchanges, bridges and onchain protocols in which attackers steal or redirect user and treasury funds. The failure may begin with a compromised hot wallet, leaked private key, faulty access control, manipulated oracle, flash-loan transaction or bridge validation flaw. For crypto readers, the important questions extend beyond the headline loss: which assets and networks are affected, whether deposits or withdrawals have stopped, who controls the stolen funds, and whether users face a shortfall. Incidents involving ETH, BTC, SOL and stablecoins such as USDT and USDC can also create liquidity pressure across multiple venues.

Zipp follows incidents from the first credible alert through the post-mortem. Day-to-day coverage examines onchain transfers, attacker swaps and bridging activity; statements from project teams, exchanges and security researchers; contract pauses and withdrawal restrictions; recovery negotiations; and proposals to reimburse users. Recent reporting has tracked drained AscendEX hot wallets and subsequent withdrawal concerns, Ostium funds converted from USDC into ETH, a flash-loan exploit affecting Summer Finance, and the bridge breach that prompted Taiko to halt its Ethereum L2. We distinguish confirmed theft from suspicious outflows or operational disruption, update loss estimates as wallets are traced, and scrutinize whether audits, multisignature controls and incident-response procedures worked as intended.

Related tokens

Frequently asked questions

  1. What is a crypto protocol hack?

    A crypto protocol hack is an unauthorized theft or diversion of digital assets caused by compromised credentials, flawed smart-contract logic, broken access controls or another security weakness. Not every outage or suspicious transfer is a confirmed hack.

  2. How can I track stolen crypto funds onchain?

    Start with wallet addresses confirmed by the affected project or reputable security researchers, then use a block explorer to follow transfers, swaps and bridge deposits. Labels are useful but can be incomplete, so an address association should not automatically be treated as proof of identity.

  3. Why do hackers swap stolen USDC or USDT for ETH?

    Attackers may swap stablecoins because issuers can freeze certain tokens or because ETH provides deeper onchain liquidity and is needed for network fees. A swap does not make the funds untraceable; subsequent transactions remain visible on public blockchains.

  4. Does a smart-contract audit prevent crypto hacks?

    An audit can identify known coding and design risks, but it cannot guarantee that a protocol is secure. Private-key theft, faulty upgrades, governance abuse, configuration errors and newly discovered attack paths can still lead to losses.