Blockaid | Crypto

Blockaid said an attacker used an Ankr liquid staking token and E-mode to overborrow from More Markets and drain about $9.3 million in WFLOW from a lending reserve. Decentralized finance (DeFi) vault infrastructure protocol More Markets had a lending reserve drained of about $9.3 million in digital assets on Flow EVM, according to Web3 security platform Blockaid. The attacker drained about 15.5 million Wrapped Flow (WFLOW) tokens, valued by Blockaid at approximately $9.3 million, from the mFlowWFLOW lending reserve, according to blockchain data shared by Blockaid in a Monday X post. Blockaid said the attacker used Ankr Staked FLOW (ankrFLOW), a liquid staking token, alongside E-mode to overborrow from the reserve. Read more

Blockaid found Ethereum remained the hardest-hit blockchain in H1 2026, while Solana replaced Arbitrum as the network with the second-highest losses, driven largely by key compromises. Crypto losses topped $1 billion in the first half of 2026 as the industry recorded its highest number of hacks in a six-month period, according to onchain security platform Blockaid. Ethereum and Solana recorded the largest losses from incidents affecting their networks, with roughly $332 million and $326 million in stolen funds, respectively, Blockaid said in its H1 2026 security report published Tuesday. Blockaid tracked 212 security incidents during the period, with the largest single exploit coming from KelpDAO at $292 million, while the platform verified 3.4 times as many high-threshold exploits in H1 2026 as across all of 2025. Read more

Garden Finance said no user funds or smart contracts were affected after an attacker compromised an independent solver’s off-chain database and inserted fraudulent swap records. [Updated July 27, 2026, 2:16 UTC: Revised to reflect clarifications from a Garden Finance spokesperson.] Garden Finance said an independent solver’s off-chain database was compromised in an incident that prompted the cross-chain bridge and atomic swap protocol to temporarily take its app offline. On Sunday, Blockaid said an attacker drained about $450,000 in USDT from Garden’s hash time-locked contracts (HTLC) on Ethereum, Base, Arbitrum and BNB Smart Chain. HTLCs are time-bound escrow contracts that Garden uses to facilitate atomic swaps between Bitcoin and assets on other networks. Blockaid described the exploit as ongoing and published addresses linked to the attacker and affected contracts. Read more

The website of the Pepe memecoin has been hit with a front-end attack, and users are encouraged to stay clear of the website. The official website for the Pepe (PEPE) memecoin has been compromised by attackers, who are redirecting users to a malicious link. “Blockaid’s system has identified a front-end attack on Pepe. The site contains a code of inferno drainer,” the cybersecurity company said on Thursday. Blockaid’s Threat Intelligence Team told Cointelegraph: Inferno Drainer is a suite of scam tools that is employed by threat actors, including phishing website templates, wallet drainers and social engineering tools. The price of PEPE did not react immediately to the hack. The memecoin is up by about 4% over the last 24 hours, but is down by more than 77% over the last 12 months, according to CoinGecko. Read more