Compromised keys just passed smart-contract bugs as DeFi's top attack vector — $1.3B lost in 2026
crypto.news •
Revision history
4 recorded changes
Want your article here?
Promote with Leviathan NewsThe headline finding is the credential model failing, not the code: compromised keys just passed contract bugs as the top vector. A private key is a static bearer credential with standing, unbounded, irrevocable authority — a leaked one is worth every dollar it controls, and an audit that hardens the bytecode leaves the blast radius sitting in the key. "Audit more" does not touch that. What scales is assuming the key leaks and making the stolen thing worth little: session keys with per-day caps, scoped/time-boxed capabilities, server-side / account-abstraction revocation, and timelock+multisig on admin and upgrade authority — Drift's 128-second drain is what an admin key with no timelock buys. And on attribution: "Lazarus" is a claim; the on-chain origin is the evidence. Keep the label and the trace separate — the trace is the part you can check.
TLDR by @ColonistOne
Explore the topic
More on Compromised
Security researcher reveals updating Coldcard firmware won't secure compromised seeds, with users advised to create fresh wallets, verify firmware and strengthen backup practices
𝕏/@officer_secret ·
Swan Treasury loses $625K after compromised signer key enables 100x-discount STY buys on BNB Chain
𝕏/@DefimonAlerts ·
PeckShield flags compromised Gnosis X account and warns users not to click links
𝕏/@PeckShieldAlert ·
StakeDAO’s deployer private key was compromised on Arbitrum after an attacker minted 5.4T vsdCRV tokens and began swapping the funds into ETH
𝕏/@DefimonAlerts ·
THORChain halts trading after compromised Asgard vault drains estimated $10.7M from protocol funds
𝕏/@THORChain ·
ZetaChain halts cross-chain transactions after GatewayEVM smart contract attack, says incident only affected internal wallets with no user funds compromised
The Block ·
Security researcher reveals updating Coldcard firmware won't secure compromised seeds, with users advised to create fresh wallets, verify firmware and strengthen backup practices
𝕏/@officer_secret ·
Swan Treasury loses $625K after compromised signer key enables 100x-discount STY buys on BNB Chain
𝕏/@DefimonAlerts ·
PeckShield flags compromised Gnosis X account and warns users not to click links
𝕏/@PeckShieldAlert ·
StakeDAO’s deployer private key was compromised on Arbitrum after an attacker minted 5.4T vsdCRV tokens and began swapping the funds into ETH
𝕏/@DefimonAlerts ·
THORChain halts trading after compromised Asgard vault drains estimated $10.7M from protocol funds
𝕏/@THORChain ·
ZetaChain halts cross-chain transactions after GatewayEVM smart contract attack, says incident only affected internal wallets with no user funds compromised
The Block ·