
#CertiKInsight Insights, crypto hacks, crypto scams, flashloans. Turn on notifications for automatic alerts 🕵🏼 @CertiK 🤝 @CertiKCommunity
Web3
Joined February 2022
- Tweets6.2K
- Following6
- Followers67.9K
- Likes219
Pinned Tweet
#CertiKStatsAlert 🚨
Combining all the incidents in September we’ve confirmed ~$766.4M lost to exploits and phishing.
September has seen the highest recorded losses as well as the most incidents in 2026.
More details below 👇
#CertiKInsight 🚨
@x100global attacker is currently sending funds to Tornado Cash: etherscan.io/address/0x82967…
300 ETH ($690k) has already been sent so far.
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
#CertiKInsight 🚨
We have seen a ~$820K exploit.
bscscan.com/tx/0xfb093c96c00…
$NEM 'pendingLpSellRecycle' created when tokens enter pool, remained after they left, allowing existing NEM reserve be burned and manipulated.
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
#CertiKInsight 🚨
On 11 Oct, PaperTrade reported manipulation attempts on the Hyperliquid BBO.
Read our full analysis here👇 certik.com/blog/papertrade-b…
CertiK Report Security Dashboard 👇 certik.com/certik-report/das…
#CertiKInsight 🚨
We have detected Tornado.Cash deposit of 1255.8 ETH (~$3M) from Aztec rollup exploiter in June.
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
Stay Vigilant!
1/ A verification soundness flaw in Aztec 2.0’s escape-hatch circuit let the attacker withdraw real assets from the Ethereum contract without ever depositing or owning those funds.
aztec-labs.com/blog/aztec-2-…
#CertiKInsight 🚨
On 30 Sept, HOT Omni Bridge on NEAR was exploited resulting in five observed BSC treasury payouts totaling $3.86M, which was later returned.
Read our full analysis here👇
certik.com/blog/hot-bridge-n…
CertiK Report Security Dashboard 👇
certik.com/certik-report/das…
🚨 #CertiKInsights
We have seen suspicious movement from @79thVault .
2.01M 79AU were sold via a privileged function, moving 16.2k BNB (~$12.5M) to attacker: bscscan.com/tx/0xee0e4416751…
~90% held at: bscscan.com/address/0xa9537B… to which a 10% bounty was offered.
Stay Vigilant!
2/ Attacker has returned 15K BNB (~$11M) to the team.
bscscan.com/tx/0xf345a03f15b…
1/
79AU Official Announcement 👇
xitter.cf/79thVault/status/21082…
Find all our stats on CertiK Security Report Dashboard 👇
certik.com/certik-report/das…
79AU Official Announcement
Statement and Update on the Security Incident
To 79AU token holders, community partners, and the public:
On 7 October 2026, 79AU was hit by a malicious attack stemming from weaknesses in account permission management. The attacker obtained an operator’s private key and used the associated privileges to withdraw tokens from the contract. This drove an abnormal short-term surge in the AU price. The attacker then converted the stolen assets on-chain into USDT and further into BNB, causing asset losses and market disruption.
The core team immediately activated its emergency response and began risk control, investigation, and asset recovery.
Progress to date:
1. Vulnerability response
The relevant security issues have been addressed with emergency fixes and risk controls. Permissions on the affected accounts and related contract operations have been reviewed to reduce the chance of a repeat incident.
2. Address tracking and recovery
The attack addresses have been identified, and on-chain movement of the stolen assets is being tracked. A white-hat settlement offer under a bug-bounty framework has been made. The other party has replied, and discussions are ongoing.
3. Coordinated recovery efforts
The team is working with relevant exchanges, blockchain security firms, and other parties to pursue lawful and practical recovery of the stolen assets and to protect the interests of the project and community.
4. Continued operations
Despite the severity of the incident, the team remains committed to the project. Resources will stay focused on normal operations, stronger security controls, and the long-term health of the 79AU ecosystem.
We apologize for the concern and impact this has caused. Investigation, recovery, and follow-up will continue, with material updates issued through official channels.
This setback does not change our commitment. We will keep working to address the issue, protect community interests, and restore market confidence.
We thank everyone who has shown concern and support, and especially our community partners for their understanding and trust at this difficult time.
79AU Core Team
8 October 2026
#CertiKInsight 🚨
On 6 Oct, a MakerDAO liquidation keeper bot was exploited resulting in a loss of 200 ETH (~$542k).
Read our full analysis here👇
certik.com/blog/makerdao-leg…
Find all our stats on our CertiK Security Report Dashboard 👇
certik.com/certik-report/das…
#CertiKInsight 🚨
We have seen suspicious fund movement on Base.
A newly deployed proxy was used to borrow ~1,783 aBaswstETH from vault
basescan.org/address/0xD1895…,
later redeemed via Aave for ~1,783 wstETH (~$6M) now at
basescan.org/address/0x0B512…
Stay Vigilant!
#CertiKInsight 🚨
1/4
According to our data, September 2026 recorded ~$772.4M in losses.
Full dashboard & stats 👇
certik.com/certik-report/das…
Here are the key takeaways you need to know 🧵
3/4
Both losses and number of incidents increased in Q3:
• Total Losses: ~$1.27B (+54.4% vs Q2 2026)
• Incidents: 249 (+13.7%)
• Adjusted Losses: ~$873.6M (+10.5%)










