Rhea Finance Two-Day Margin Drain
Rhea Finance on NEAR lost $18.4M after a two-day setup of fake tokens, 423 wallets and 8 Ref pools exploited a slippage-summing flaw in margin trading.
Loss
18.4M
USD
Year × Attack dossier
Smart Contract Bug attacks in 2026
Total losses
$55.9M
5 incidents
Solv BRO Double-Mint Exploit
Solv Protocol's BRO vault lost $2.73M when an ERC-3525 double-mint bug let the attacker turn 135 BRO into ~567M BRO over 22 deposits, then swap for 38 SolvBTC.
Loss2.7MUSDSagaEVM Ethermint Mint Bypass
SagaEVM lost $7M in 11 minutes when an Ethermint bug let crafted messages bypass validation, minting Saga Dollar (D) without collateral and bridging to ETH.
Loss7.0MUSDTMXTribe Reward Exploit
TMXTribe, a staking/rewards protocol, lost ~$1.4M when a distribution accounting flaw let an attacker repeatedly over-claim, draining the reward reserve.
Loss1.4MUSDTruebit Integer Overflow
Truebit lost $26.4M when an integer overflow in TRU's five-year-old bonding-curve contract let the attacker mint TRU near-free and sell back for 8,500 ETH.
Loss26.4MUSD