Other

A validation flaw in Pirate Chain's Ironwood upgrade let an attacker mint roughly 39.8 million ARRR — about 20% of supply — and hide it in the shielded pool.

An attacker chained six bugs in MAYAChain's trade-account and outbound logic to fabricate a CACAO subsidy and drain about $1.7 million in Bitcoin and other assets from Maya Protocol.

An attacker exploited a flaw in Harmony's block-production logic to mint roughly 4 billion unauthorized ONE tokens, worth about $3.2 million, and dumped most of them onto exchanges.

A counter-MEV honeypot tricked Ethereum's most active sandwich bot, jaredfromsubway.eth, into approving 66 fake-token contracts, draining about $7.5M in WETH, USDC and USDT.

An attacker drained roughly $480K from AFI Protocol's afiUSD vault on Ethereum, swapping DAI to ETH and routing about 150 ETH through Tornado Cash; the root cause was not immediately disclosed.