Troves xWBTC Vault Stale-Permission Exploit
A legacy rebalancing contract that still held permissions on Troves' Starknet xWBTC vault was abused to drain roughly 8.6 BTC, about $0.7 million.
Loss
710.0K
USD
Year × Chain dossier
Starknet hacks in 2026
Total losses
$4.5M
3 incidents
Nostra Finance NSTR Oracle Manipulation
An attacker wash-traded NSTR through a fake pool to pump its price roughly 8,000x, then borrowed about $3.5 million against the inflated collateral on Nostra's Starknet money market.
Loss3.5MUSDmySwap Fake-Token Pool Accounting Exploit
An attacker minted a worthless EVIL token to distort mySwap's concentrated-liquidity pool accounting on Starknet and drained about $305K of residual LP funds.
Loss305.0KUSD