DeFi Security Best Practices After M in May 2025 Losses: A Practical Guide
May 2025 has been a brutal month for DeFi security. With approximately $275.9 million lost across eight incidents — including
Security
Cork Protocol Loses 3,762 wstETH (M) in Smart Contract Exploit Targeting Cross-Market Validation
On May 28, 2025, decentralized insurance platform Cork Protocol fell victim to a sophisticated smart contract exploit that resulted in
How the Craft CMS Cryptominer Attack Reveals Hidden Vulnerabilities in Web Infrastructure
On May 27, 2025, cybersecurity researchers disclosed a widespread campaign exploiting a critical remote code execution vulnerability in Craft CMS,
Cetus Protocol Unveils Full Compensation Plan After $223 Million Hack Shakes Sui Ecosystem
On May 27, 2025, Cetus Protocol — the largest decentralized exchange on the Sui blockchain — announced a comprehensive compensation
Over 70 Malicious npm Packages Target Crypto Developers in Coordinated Supply Chain Attack
On May 26, 2025, security researchers uncovered a sprawling campaign of over 70 malicious packages targeting the npm registry and
Dexodus Finance Loses 291K in Stale Oracle Exploit on Base Network
On May 26, 2025, Dexodus Finance — a perpetual derivatives protocol operating on the Base Network — fell victim to
DeFi Security Best Practices After the Cetus Exploit: A Practitioner’s Guide to Protocol Risk Assessment
The $223 million exploit of Cetus Protocol on the Sui blockchain in May 2025 has reignited urgent conversations about security
Inside the Cetus Protocol Vulnerability: How a u256 Overflow Check Bypass Drained $223 Million
The decentralized finance ecosystem suffered one of its most technically sophisticated exploits on May 22, 2025, when Cetus Protocol —
Shared Library Vulnerabilities in DeFi: Why the Code You Trust May Be Your Weakest Link
The May 2025 Cetus Protocol exploit, which resulted in a $223 million loss, was not caused by a flaw in
Lazarus Group Strikes Individual Crypto Trader for $5.2 Million in Targeted Malware Attack
On May 24, 2025, the cryptocurrency community was reminded that state-sponsored threat actors do not only target exchanges and protocols