QuiverCrypto publishes independent post-mortems on DeFi hacks — attack vectors, fund flows, and lessons the industry refuses to learn.
EXPLORE RESEARCH ↗Lazarus Group compromised LayerZero's internal RPC nodes, orchestrated a simultaneous DDoS on third-party nodes, and exploited Kelp's single-verifier bridge configuration to release 116,500 rsETH against a burn that never happened.
North Korean operatives spent six months posing as a quant trading firm, obtained pre-signed admin transactions via Solana's durable nonces, deployed a fake token with a rigged oracle, and drained 50% of Drift's TVL in under two hours.
An attacker spent $3M to inflict $4.9M in bad debt on Hyperliquid's liquidity vault by artificially pumping POPCAT with coordinated leveraged longs across 19 addresses, then crashing the price to trigger a liquidation cascade the protocol had to absorb.
North Korean operatives spent six months posing as a quant trading firm, obtained pre-signed admin transactions via Solana's durable nonces, deployed a fake token with a rigged oracle, and drained 50% of Drift's TVL in under two hours.
An attacker spent $3M to inflict $4.9M in bad debt on Hyperliquid's liquidity vault by artificially pumping POPCAT with coordinated leveraged longs across 19 addresses, then crashing the price to trigger a liquidation cascade the protocol had to absorb.
Confirmed exploits, attack vector breakdowns, and recovered-fund updates every week. Independent — no protocol sponsorships.
No ads · No spam · Unsubscribe anytime
