KoinlyticsPERMISSIONLESS-REGISTRATION news
Curated crypto headlines with the on-chain context most tools skip. Written by the team behind Koinlytics.
Alldefi-securitypermissionless-registrationethusdccross-chain-bridgesignature-nonceed25519schnorrwallet-securityprotocol-auditattack-surfacesecurity-analysisadazil
Four DeFi breaches in one week, four different layers, one uncomfortable pattern
AFX bridge lost $24.15M to oracle abuse. Zilliqa's Ledger app leaked nonces. SecondFi's Cardano wallet exposed signing keys, draining $2.4M. Lien Finance's permissionless bond registration burned $542K. Four incidents, four layers, one blind spot in standard audits.
Lien Finance Let Anyone Register A Bond Group. One Malicious Payoff Drained $542K
Lien Finance lost 542,144 USDC on July 24 after an attacker registered a bond group with a rigged payoff. The pricing helper overvalued the crafted bonds and let the attacker mint and swap them for real USDC. No governance check gated the registration path.
Follow every move that matters to your bag.
Track your portfolio, LP positions and impermanent loss live. Join Koinlytics and see what moves the market before it shows on Twitter.
Join Koinlytics