Blockaid

3 articles

THORChain Lost $10.7 Million to a GG20 TSS Exploit on May 15 — Three Days Later Verus's Bridge Was Drained for $11.58 Million the Same Way Wormhole Was

THORChain confirmed on May 15 that one of its six Asgard vaults was compromised for roughly $10.7 million via a GG20 threshold-signature key-leak; on May 18, Blockaid flagged an $11.58 million drain on the Verus-Ethereum bridge caused by the same class of source-destination value-binding gap that broke Wormhole and Nomad in 2022.

19 May 2026·Tom Chen

Markets

A 1inch Liquidity Provider Lost $6.7 Million Because Its Allowlist Function Had No Access Control — and the Attacker Is the Same One That Drained $5 Million in 2025

TrustedVolumes, a market maker resolving orders for 1inch Fusion, was drained across 85 transactions on May 7 after an attacker added themselves to the contract's signer allowlist — a function any wallet could call.

13 May 2026·James Gray

Tech

CoW Swap Halts Trading After DNS Hijack Redirects Users to a Fake Front End

A domain name hijack on CoW Swap's website redirected users to a malicious interface that drained wallets through fake approval prompts, in the latest front-end attack to hit a major DeFi protocol.

15 Apr 2026·James Gray