Stellar hacks in 2026

Attackers hijacked the push-notification provider behind Ngrave's LIQUID app and sent fake alerts that phished recovery phrases, draining about 70 wallets for roughly $2.56 million.

Attackers used compromised recovery phrases to sweep roughly 11.7 million XRP — about $18 million — from over 6,600 D'CENT App Wallet accounts across five chains.

YieldBlox's Stellar lending pool lost $10.2M after a single USTRY-for-USDC sell at 501x market rate defined the Reflector oracle price in a quiet 15-min window.