Smart contract vulnerabilities stories

Jul 25, 2026

Across Reveals Sub-$4 Million Net Loss From Solana Relayer Exploit

An attacker exploited a missing eight-byte check in Across Protocol's offchain code to fabricate $41.7 million in Solana deposit events, draining approximately $4 million from a Risk Labs-operated relayer on July 17, 2026. The attack was part of a broader wave of cross-chain bridge exploits that drained over $35 million across multiple protocols within hours.

Jul 25, 2026·3 sources

Jul 22, 2026

Balance Coin Stablecoin Collapses 99% Following $1 Million Exploit of Bitcoin Reserves

Balance Coin, an algorithmic stablecoin, suffered a catastrophic 99% price collapse after hackers exploited vulnerabilities to drain approximately $1 million from its bitcoin-backed vaults.

Jul 22, 2026·1 source

May 30, 2026

BY Token Loses $88.4K in BSC Exploit Amid Surge in DeFi Hacks

The BY token project suffered an $88,400 loss through a Binance Smart Chain exploit targeting vulnerable contract logic, occurring during what security firm CertiK identified as the worst month for DeFi exploits in four years with attacks on 27 out of 30 days in April 2026.

May 30, 2026·2 sources

Top claims

▪The Risk Labs relayer filled 581 of the fraudulent requests, advancing approximately $4.5 million of its own capital before Across suspended Solana operations.
▪The vulnerability was caused by a missing verification of the 8-byte Anchor event discriminator in the SvmCpiEventsClient component of the Risk Labs off-chain relayer code.
▪The Across Protocol exploit did not compromise the Solana network, the protocol's smart contracts, or user funds.