KoinlyticsDEFI-SECURITY news
Four DeFi breaches in one week, four different layers, one uncomfortable pattern
AFX bridge lost $24.15M to oracle abuse. Zilliqa's Ledger app leaked nonces. SecondFi's Cardano wallet exposed signing keys, draining $2.4M. Lien Finance's permissionless bond registration burned $542K. Four incidents, four layers, one blind spot in standard audits.
Lien Finance Let Anyone Register A Bond Group. One Malicious Payoff Drained $542K
Lien Finance lost 542,144 USDC on July 24 after an attacker registered a bond group with a rigged payoff. The pricing helper overvalued the crafted bonds and let the attacker mint and swap them for real USDC. No governance check gated the registration path.
3 Bridges Lost $35M Yesterday Without A Single Solidity Bug. The 2026 DeFi Threat Model Stopped Fitting The Audit Report Months Ago
In May 2026, compromised keys overtook smart contract exploits as the leading DeFi attack vector by incident count. The July 22-23 bridge losses of $35.55M confirm it. What audits certify is no longer what protects LP capital, and $840M is already gone this year.
Follow every move that matters to your bag.
Track your portfolio, LP positions and impermanent loss live. Join Koinlytics and see what moves the market before it shows on Twitter.
Join Koinlytics