Decentralized finance — DEXs, lending, perps, yield, stablecoins. The protocols building open financial infrastructure and the engineers building them.
Summer.fi's LazyVault protocol was drained of $6 million in DAI after an attacker exploited a share-accounting flaw — using a $65.4M flash loan to execute the entire heist in a single transaction.
A governance attack on BonkDAO drained $20M in BONK tokens from the Solana DAO's treasury using the project's own voting system. No smart contract hack required.
Blockchain data shows 67% of TRUMP token buyers are underwater with $3.81B in combined losses — while insiders who bought early sit on $4B in gains and the president banked over $636M in royalties.
Security firm Hexens found a type-confusion bug in Aptos's Move VM that let a $3,000 server break a core safety guarantee with 90%+ success rate — putting $70B at systemic risk. The patch dropped within hours. No funds lost. But the close call exposed a fault line under every Move-based chain.
The GENIUS Act clock is ticking. Six federal agencies must finalize stablecoin regulations by July 18 — reshaping Circle, Tether, and every bank that wants a piece of the $320B stablecoin market.
Hinkal, an on-chain privacy protocol, was completely drained of $820K in USDC today via a 'proofless deposit' exploit. The attacker laundered the funds through sanctioned mixer Tornado Cash. The irony is staggering.
Robinhood Chain mainnet went live today on Arbitrum, bringing 24/7 tokenized stock trading to 120 countries, a 7% DeFi lending product, and AI agent accounts that execute trades autonomously. HOOD stock jumped 8%.
Open USD (OUSD) launched June 30 with 140+ backers — Visa, Mastercard, Stripe, BlackRock, Coinbase, Google — and a model that gives 100% of reserve yield to partners instead of the issuer. Circle's stock crashed 17% overnight.
Goliath Ventures CEO Christopher Delgado pleads guilty to a $400M crypto Ponzi scheme, admitting $250M in investor losses. The 'liquidity pools' were fake. The Lamborghinis were real.
A supply chain attack on a third-party frontend vendor drained $3.1 million in PUSD from 11 Polymarket wallets. Users never touched a phishing link. They just visited the site. Now the CFTC has opened an investigation into the company for deceptive marketing.
The Ethereum Foundation eliminated 54 positions (20% of staff), shut down PSE — its ZK and privacy research lab — and slashed its operating budget by 40%. Former EF researchers are warning of a structural funding gap that could hit Ethereum's client teams within months.
82 Catholic bishops and four of the nation's largest law enforcement organizations sent letters to Senate leadership this week opposing Section 604 of the CLARITY Act — the DeFi developer safe harbor that could decide the future of permissionless finance in America.
Resupply, a stablecoin lending protocol backed by Convex and Yearn Finance, was drained of $9.5 million via a donation attack on a freshly deployed vault. The attacker started with a $4,000 flash loan and used 1 wei as collateral to borrow 10 million stablecoins.
Theodore Gillibrand, 22, raised $30 million at a $300M valuation for APEC — a CFTC-licensed perps exchange — days after graduating Stanford. His mother is Senator Kirsten Gillibrand, who co-wrote the Genius Act. The crypto industry is very online about it.
World leaders at the Évian G7 summit officially classified DPRK crypto heists as a weapons-financing threat. Seven nations. $6.75 billion stolen. Zero arrests.
CZ praised Hyperliquid's no-KYC trading model and said he'd 'never' run a platform like it. Then OKX's founder revealed CZ has been quietly backing Aster DEX — a Hyperliquid clone built without KYC.
Toncoin officially rebranded to Gram on June 15, restoring the name Telegram's SEC-killed 2018 token. Now Telegram is the network's largest validator — completing one of the wildest second acts in crypto history.
SpaceX holds 18,712 Bitcoin; EU & Russia escalate crypto tensions. Japan's tax cut awakens a giant.
NFTfi, the original NFT lending protocol, is calling it quits. After six years and $737 million in peer-to-peer loans, the NFT market has collapsed so hard that even running the servers stopped making sense.
A mystery wallet opened a 20x leveraged $14.56M ETH long on Hyperliquid right before the White House hosts law enforcement to decide the fate of the CLARITY Act — and Polymarket just cut the bill's odds in half.
A Reuters investigation tracked four Trump crypto ventures — WLFI, $TRUMP memecoin, ALT5 Sigma, and American Bitcoin — and found a near-perfect transfer of wealth: $2.3 billion to the Trump family, $2.25 billion in losses for retail investors.
Worldcoin rival Humanity Protocol lost $32M after a private key compromise tanked $H by 90%. On-chain investigator ZachXBT says the evidence looks like an inside job.
Morpho closes a $175M round at a $2B valuation backed by the three heaviest hitters in crypto VC — during one of the worst Bitcoin weeks of the year. Here's what they see that the market doesn't.
Crypto sees a $4.4B Bitcoin ETF exit while Arthur Hayes faces dumping accusations. Jobs in DeFi surge.
World Liberty Financial froze HTX's on-chain USD1 addresses without warning, citing UK sanctions. Now Justin Sun's exchange is retaliating by delisting the Trump family's stablecoin and threatening legal action — exposing a hidden blacklist backdoor baked into WLFI's smart contract.
8 senior Ethereum Foundation researchers quit in 2026 — including Tim Beiko, who ran All Core Devs for years, and Carl Beek, who helped build the Beacon Chain. ETH ETFs just hit 17 straight days of outflows. A former EF researcher now wants a $1B rival org to actually fight for ETH's price.
Three weeks after the UK FCA warned users to avoid Hyperliquid, ICE CEO Jeffrey Sprecher told Wall Street insiders his company is studying Hyperliquid's perps model — and talking to regulators about copying it.
JPMorgan, Citi, Bank of America, and Wells Fargo are teaming up on a tokenized deposit network launching in 2027 — a direct shot at Circle, Tether, and every crypto-native payments player.
A 4-year-old bug in Zcash's Orchard privacy pool let anyone mint unlimited counterfeit ZEC undetected. Claude Opus 4.8 found it. An emergency hard fork fixed it. But due to Zcash's own privacy guarantees, it's cryptographically impossible to prove it was never exploited.
Alexander Browder, the teenage son of Putin's most famous enemy, published a report exposing Russia's A7A5 ruble stablecoin — a $90B-per-year sanctions-evasion machine partly owned by a Russian state bank. Moscow's response: put him on the list.
Coinbase Ventures bought ENA tokens on the open market and named itself Ethena's primary custodian, wallet provider, and perpetuals venue — controlling $5B+ in assets. A savings product for all 100 million Coinbase users drops next week.
Gravity Bridge, the cross-chain protocol linking Ethereum to Cosmos, was drained of $5.4 million in a suspected signing key compromise. May 2026 is now the worst month for bridge exploits on record, with $328M stolen.
Sui mainnet stalled for the second time in 2026, halting transactions for nearly an hour and sending SUI tumbling 8%. Three crashes in under three years is a pattern, not bad luck.
Hyperliquid's HIP-4 launches macro prediction markets — CPI bets, Fed decisions — with zero fees, validator-settled outcomes, and shared margin with your perps. HYPE is up 134% this year and just hit $63.70.
StablR, a MiCA-regulated European stablecoin issuer, was drained by an attacker who exploited a single compromised key to mint 13.5 million in unbacked USDR and EURR tokens. Both stablecoins are now frozen.
Two Ethereum treasury stocks — BitMine (BMNR) and SharpLink (SBET) — are joining the Russell 3000. $12.2 trillion in benchmarked assets will be forced to hold ETH exposure starting June 29. MicroStrategy's Bitcoin playbook is officially running on Ethereum.
Nine Polymarket accounts made $2.4 million betting on covert U.S. military operations against Iran before any news broke. Now Rep. James Comer is demanding answers from Kalshi and Polymarket CEOs — and the DEATH BETS Act wants to ban war contracts entirely.
Eight senior Ethereum Foundation researchers quit in 2026, five in May alone. The trigger? A Milady-themed 'Mandate' document staff were told to sign or be fired. Now a former EF dev wants $1 billion to replace the whole organization.
Intercontinental Exchange, owner of the NYSE, is bringing Brent and WTI perpetual oil futures to OKX's 120 million users. Wall Street's energy benchmarks, 24/7, no expiration, no physical delivery. TradFi just moved in.
ZachXBT flagged suspicious drains from Polymarket's UMA CTF Adapter on Polygon. The culprit: a forgotten six-year-old private key still tied to live operations.
Binance just launched Pre-IPO Perpetual Contracts, letting anyone on earth speculate on SpaceX's valuation before it goes public. Wall Street just got disintermediated.
The US Senate passed the GENIUS Act 68-30, creating America's first federal stablecoin regulatory framework. 68 senators just decided the future of USDC, Tether, and every dollar-pegged token in crypto.
Trump's new executive order directs the Federal Reserve to evaluate giving crypto firms direct access to Fedwire — the same payment rails that process trillions in bank transfers daily. Ripple, Anchorage, and Coinbase are next in line.
Echo Protocol on Monad was exploited via a compromised admin key — minting 1,000 fake eBTC worth $76.7M. The attacker could only cash out $816K before the team burned the rest. Here's what actually happened.
CME Group and ICE — the corporate parents of the world's biggest futures and stock exchanges — just told the CFTC to regulate Hyperliquid out of existence. HYPE dropped 9%. Arthur Hayes said to get bent.
THORChain was drained across Bitcoin, Ethereum, BNB Chain, and Base simultaneously on May 15. RUNE dropped 12%, all trading and signing was halted, and the team still hasn't explained the attack vector.
Less than a year after launching USDH, Hyperliquid is sunsetting its native stablecoin and making Coinbase the official treasury deployer for $5 billion in USDC. The hottest DeFi exchange just went full centralized on its settlement layer.
The most comprehensive crypto regulation in US history goes to a Senate committee vote Thursday. Republicans left out the one clause that would stop senior government officials from personally profiting off the industry they're regulating. Democrats say no ethics, no votes.
The Ethereum Foundation, Ledger, MetaMask, Trezor, Fireblocks and WalletConnect just launched Clear Signing — an open standard that replaces the hex garbage users blindly approve with human-readable transaction descriptions. Bybit's $1.5B hack started with a blind signing. So did most of yours.
The world's largest asset manager quietly filed SEC paperwork for two tokenized money-market funds specifically designed to let stablecoin holders earn Treasury yield — the same yield that Congress just voted to ban stablecoins from paying. The loophole is elegant. The implications are massive.
In 30 days, Tether silently blacklisted 371 wallets and froze $515 million in USDT across Tron and Ethereum — no court order required. That's 40% of everything they froze in all of 2025, done in a single month. Here's how the kill switch works, who's using it, and what it means for crypto.
A single obfuscated tweet tricked xAI's Grok into executing a $175K on-chain transfer — no private keys stolen, no smart contract exploit. Just a chatbot doing what it was told.
Telegram is replacing the TON Foundation, becoming the blockchain's largest validator, and slashing fees sixfold. TON surged 36%. Decentralization theater is officially dead — and the market loves it.
Bullish, the Peter Thiel-backed crypto exchange, is acquiring Equiniti — the transfer agent behind 20 million shareholders and $500 billion in annual payments — in one of the largest crypto deals ever. Wall Street's plumbing is going on-chain.
Kraken's parent Payward just sued its former custodian Etana for misappropriating $25 million in client funds in what it calls a 'Ponzi-like' scheme. Etana allegedly stalled withdrawals with fake reconciliation issues while plugging holes with new deposits.
ZKsync Lite shut down permanently today, May 4, 2026. The original ZK-rollup that helped prove the technology works is gone. $33.9 million in user funds are still bridged to a dead network — and this is only the beginning of L2 consolidation.
A coordinated attacker swept over 500 long-dormant Ethereum addresses, stealing ~$800K and routing funds through ThorChain. The compromise vector is still unknown — and your old wallets may not be safe.
April 2026 was the worst month in crypto hack history: 30 attacks, $625M drained, North Korea behind 76% of it. Now a developer is claiming DPRK trained an AI to autonomously exploit DeFi — and the Wasabi Protocol's $5M multi-chain drain may be its latest hit.
MegaETH's $MEGA token went live April 30, 2026. Backed by Vitalik Buterin and Joe Lubin with $470M in funding, claiming 100,000 TPS — and airdropping to 500,000 wallets on day one. Here's the full breakdown.
Shinhan Card — South Korea's largest card issuer with $145B in annual transaction volume — signed an MOU with the Solana Foundation to build a stablecoin payment stack. They already completed six proof-of-concept projects alongside Visa, Mastercard, and Fireblocks.
Pump.fun burned 36% of PUMP's entire circulating supply overnight — $370M vaporized in two transactions. Then came the twist: those tokens were supposed to be airdrops. Now Solana's biggest meme coin launchpad is at war with its own community.
DeFi United drops its technical rescue blueprint today, with Consensys, Aave, Compound, the Solana Foundation and 14 other protocols pledging $300M+ in ETH to re-collateralize rsETH after the $292M Lazarus-linked KelpDAO exploit. This is the most coordinated cross-protocol rescue in DeFi history.
Kalshi launched CFTC-regulated Bitcoin perpetual futures on April 27 — and Polymarket panicked and launched theirs first to beat them. The race to own America's $100B crypto derivatives market is on.
DeFi hacks hit $606M in 18 days, while Kalshi and Polymarket battle for the U.S. crypto derivatives market.
A zero-day exploit in Litecoin's MimbleWimble privacy layer triggered a 13-block chain reorg, wiping three hours of transactions. Litecoin denied it was a zero-day. GitHub commits say otherwise.
Coinbase's x402 protocol just launched an app store where AI agents autonomously buy Bloomberg data, AWS compute, and trading APIs with USDC — no human approval required. 165 million transactions have already settled.
U.S. Army Master Sergeant Gannon Van Dyke is the first person charged with using classified military intelligence to insider-trade on a crypto prediction market. The DOJ and CFTC both came for him.
Wisconsin's AG filed two separate lawsuits on April 23 targeting Kalshi, Coinbase, Robinhood, Polymarket, and Crypto.com — using the platforms' own marketing copy against them in a case that could reach the Supreme Court.
April 2026 is already the worst month for crypto hacks since February 2025. $606 million gone in 18 days. 3.7x the entire first quarter. Today, Congress is holding hearings. Here's what broke.
Hackers breached Vercel — the hosting backbone for thousands of DeFi apps — by exploiting a compromised third-party AI platform. API keys, tokens, and source code are on sale for $2M on BreachForums.
Kevin Warsh — Trump's pick to replace Jerome Powell as Fed Chair — heads into his Senate confirmation hearing tomorrow with 30+ crypto investments in his portfolio. Here's what it means for rates, regulation, and the entire industry.
Mint Blockchain shut down April 17. Myria is pulling the plug on its L2 with an April 27 asset-bridging deadline. They're not alone — 20+ crypto projects went dark in Q1 2026. The NFT-era infrastructure bubble is officially over.
Kelp DAO's rsETH bridge was drained in minutes after an attacker forged LayerZero cross-chain messages. Bad debt cascaded across Aave, Compound, and Euler. It's 2026's biggest DeFi hack — so far.
Operation Atlantic, a joint US-UK-Canada law enforcement strike, froze $12M and traced $45M in crypto approval phishing fraud across 30+ countries. Here's what that means for the industry.
Grinex — the sanctions-dodging successor to Russia's notorious Garantex — shut down after a $13M hack and blamed 'Western special services.' The irony is too rich.
Tether is bailing out Drift Protocol with $148M after North Korea's $285M heist — but the real play is quietly replacing Circle's USDC as Solana DeFi's settlement currency.
A forged cross-chain proof let an attacker mint 1,000,000,000 fake DOT tokens on Ethereum in a single transaction. Thin liquidity saved Polkadot. Twelve days earlier, Hyperbridge had posted an April Fools' joke about exactly this.
The TRUMP token snapshot deadline is today. Whales have pumped $2.7M in 48 hours to buy their way into a presidential dinner. The Senate wants answers. And buried in the fine print: Trump 'may not be able to attend.'
SpaceX filed for the largest IPO in history at a $1.75 trillion valuation. Bitget just launched preSPAX, a tokenized synthetic token giving retail crypto investors exposure before the NYSE opens its doors.
Bitwise dropped the Form 8-A for its Hyperliquid ETF (ticker: BHYP) today. Bloomberg's Eric Balchunas says that's the last filing before launch. HYPE is up 103% from January lows. Cantor Fitzgerald just called $200B market cap. Here's what it means.
World Liberty Financial used nearly 5 billion WLFI tokens as collateral to borrow $75M from Dolomite, a platform co-founded by WLFI's own CTO. The token is now at an all-time low, down 82% from peak.
A whale built a $15M leveraged Fartcoin position across four wallets, then intentionally imploded it — weaponizing Hyperliquid's auto-deleveraging system to dump losses onto the exchange's own vault.
Chaos Labs is walking away from Aave after 3 years and 'zero material bad debt.' They're the third core contributor to quit since March. No one knows who's watching the money.
You can't swap USDT for USDC at face value without slippage. A former a16z partner just raised $10M to build the clearinghouse that makes stablecoins actually fungible — and Stripe, MetaMask, and Phantom are already signed up.
Australia's parliament passed the Digital Assets Framework Bill, the country's first comprehensive crypto licensing law. Exchanges and custodians must now get licensed like brokers. Here's what it means for jobs.
Drift Protocol confirmed today that the April 1 exploit wasn't opportunistic — DPRK-linked hackers spent six months attending crypto conferences, building real relationships, and depositing real money before draining $270M.
ZachXBT just published a damning thread showing Circle had the power to freeze $232M in stolen Drift Protocol funds — during business hours, over 6 hours — and chose not to. It's part of a pattern spanning $420M across 15 cases since 2022.
Franklin Templeton launched 'Franklin Crypto' and acquired 250 Digital — paying part of the deal in BENJI tokens from its own tokenized money fund. TradFi just ate its own dogfood.
Drift Protocol, Solana's leading perpetuals DEX, was drained of up to $285M in a still-unconfirmed exploit on April 1 — and the attacker is still moving funds right now.
Choosing between DeFi and CeFi for your crypto career? We break down the real differences in compensation, culture, and long-term prospects.
A practical guide to landing a Web3 or crypto job in 2026 — what skills companies are actually hiring for, how to stand out, and where to apply.