#CertiKInsight Insights, crypto hacks, crypto scams, flashloans. Turn on notifications for automatic alerts 🕵🏼 @CertiK 🤝 @CertiKCommunity

Web3
Joined February 2022
#CertiKStatsAlert 🚨 Combining all the incidents in September we’ve confirmed ~$766.4M lost to exploits and phishing. September has seen the highest recorded losses as well as the most incidents in 2026. More details below 👇
9
15
4
53
42,187
#CertiKInsight 🚨 We have seen a ~$820K exploit. bscscan.com/tx/0xfb093c96c00… $NEM 'pendingLpSellRecycle' created when tokens enter pool, remained after they left, allowing existing NEM reserve be burned and manipulated. CertiK Report Security Dashboard 👇 certik.com/certik-report/das…
16
4
1
48
6,132
#CertiKInsight 🚨 We have detected Tornado.Cash deposit of 1255.8 ETH (~$3M) from Aztec rollup exploiter in June. CertiK Report Security Dashboard 👇 certik.com/certik-report/das… Stay Vigilant!
6
3
2
26
4,817
1/ A verification soundness flaw in Aztec 2.0’s escape-hatch circuit let the attacker withdraw real assets from the Ethereum contract without ever depositing or owning those funds. aztec-labs.com/blog/aztec-2-…
2
1
2
3
1,942
1/ The unusual part was the failure chain: Intents credited the attacker → an oversized refund log failed the resolver → HOT returned the backing while the credit survived. Our report traces the preparation, receipts and cash-outs, with source-code citations.
2
1
3
9,400
1/ 79AU Official Announcement 👇 xitter.cf/79thVault/status/21082… Find all our stats on CertiK Security Report Dashboard 👇 certik.com/certik-report/das…
79AU Official Announcement Statement and Update on the Security Incident To 79AU token holders, community partners, and the public: On 7 October 2026, 79AU was hit by a malicious attack stemming from weaknesses in account permission management. The attacker obtained an operator’s private key and used the associated privileges to withdraw tokens from the contract. This drove an abnormal short-term surge in the AU price. The attacker then converted the stolen assets on-chain into USDT and further into BNB, causing asset losses and market disruption. The core team immediately activated its emergency response and began risk control, investigation, and asset recovery. Progress to date: 1. Vulnerability response The relevant security issues have been addressed with emergency fixes and risk controls. Permissions on the affected accounts and related contract operations have been reviewed to reduce the chance of a repeat incident. 2. Address tracking and recovery The attack addresses have been identified, and on-chain movement of the stolen assets is being tracked. A white-hat settlement offer under a bug-bounty framework has been made. The other party has replied, and discussions are ongoing. 3. Coordinated recovery efforts The team is working with relevant exchanges, blockchain security firms, and other parties to pursue lawful and practical recovery of the stolen assets and to protect the interests of the project and community. 4. Continued operations Despite the severity of the incident, the team remains committed to the project. Resources will stay focused on normal operations, stronger security controls, and the long-term health of the 79AU ecosystem. We apologize for the concern and impact this has caused. Investigation, recovery, and follow-up will continue, with material updates issued through official channels. This setback does not change our commitment. We will keep working to address the issue, protect community interests, and restore market confidence. We thank everyone who has shown concern and support, and especially our community partners for their understanding and trust at this difficult time. 79AU Core Team 8 October 2026
1
3
10,127
#CertiKInsight 🚨 We have seen suspicious fund movement on Base. A newly deployed proxy was used to borrow ~1,783 aBaswstETH from vault basescan.org/address/0xD1895…, later redeemed via Aave for ~1,783 wstETH (~$6M) now at basescan.org/address/0x0B512… Stay Vigilant!
12
14
4
62
22,368
#CertiKInsight 🚨 1/4 According to our data, September 2026 recorded ~$772.4M in losses. Full dashboard & stats 👇 certik.com/certik-report/das… Here are the key takeaways you need to know 🧵
4
10
34
16,338
3/4 Both losses and number of incidents increased in Q3: • Total Losses: ~$1.27B (+54.4% vs Q2 2026) • Incidents: 249 (+13.7%) • Adjusted Losses: ~$873.6M (+10.5%)
1
1
544
4/4 2026 Year-To-Date total losses have reached ~$2.69B surpassing the total losses recorded in 2023 (~$2.26B). The current trajectory 2026 would surpass the ~$3.4B lost in 2025.
1
2
526