SAP NetWeaver Zero-Day CVE-2025-31324: Unauthenticated Webshell Upload Threatens Enterprise Infrastructure
A critical zero-day vulnerability in SAP NetWeaver Visual Composer has been actively exploited in the wild since mid-April 2025, prompting […]
ZKsync Airdrop Exploit Ends With $5M Returned as Hacker Accepts 10% Bounty
The ZKsync airdrop contract exploit that sent shockwaves through the Ethereum Layer 2 ecosystem on April 15, 2025, has reached
ACB Token Airdrop Exploit on BNB Chain Exposes Access Control Weaknesses
The cryptocurrency security landscape faced yet another reminder of how seemingly minor vulnerabilities can lead to real losses. On April
Loopscale Loses $5.8 Million in Composability Flaw on Solana
The decentralized lending protocol Loopscale fell victim to a sophisticated exploit on April 22, 2025, losing approximately $5.8 million in
XRP Library xrpl.js Compromised in Supply Chain Attack Targeting Private Keys
A critical supply chain attack on the xrpl.js JavaScript library—the recommended package for interacting with the XRP Ledger—has exposed the
Bitget VOXEL Incident Exposes Market Maker Bot Vulnerability on Perpetual Futures
On April 20, 2025, cryptocurrency exchange Bitget detected abnormal trading activity on its VOXEL/USDT perpetual futures contract, triggering one of
The KiloEx Oracle Exploit: How a $7.5 Million Price Manipulation Attack Exposed DEX Vulnerabilities
The decentralized exchange landscape faced another wake-up call on April 19, 2025, as Binance Labs-backed KiloEx confirmed a devastating $7.5
From Heist to Handshake: How KiloEx Recovered $7.5 Million Using a Public Ultimatum
On April 18, 2025, the decentralized exchange KiloEx achieved something rare in the cryptocurrency space: full recovery of $7.5 million
Inside the UPCX $70 Million Exploit: How a Compromised Admin Wallet Drained 18.4 Million Tokens
The cryptocurrency payments platform UPCX suffered a devastating security breach that resulted in the theft of approximately 18.4 million UPC
How a Compromised Admin Key Drained ZKsync Airdrop Contracts: A Technical Breakdown
On April 16, 2025, Ethereum Layer 2 protocol ZKsync confirmed a security breach that resulted in the unauthorized minting of