Incidents by month
Crypto hacks and exploits in September 2024
9 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (9)
- Onyx Protocol empty-market rounding exploit — Ethereum — 2024-09-26 — 2024-09-26 · loss $3.8M · OAK-T7.001 Mixer-Routed Hop
- BingX hot-wallet drain (Sep 2024): $44–52M — 2024-09-20 · loss $44–52M · OAK-T11
- Banana Gun oracle-messenger information leak — Ethereum — 2024-09-19 — 2024-09-19 · loss $3M · OAK-T9.004 Access-Control Misconfiguration
- DeltaPrime admin-key compromise + malicious upgrade — Arbitrum + Avalanche — 2024-09-16/17 — 2024-09-16 · loss $5.98M · OAK-T11.014 Operator Privileged-Key Compromise
- Indodax hot-wallet drain (Sep 2024): $22M — 2024-09-11 · loss $22M · OAK-T11
- Penpie Finance reward-claim exploit (Sep 2024): $27M — 2024-09-03 · loss $27M · OAK-T7.001 Mixer-Routed Hop
- WalletConnect-impersonating Google Play mobile drainer — Android/multi-chain — 2024-03 to 2024-09 — loss $70,000 · OAK-T4.004 Allowance / Approve-Pattern Drainer
- Polymarket account takeover via third-party auth — Polygon — 2024-09 — OAK-T11.008 Embedded-Wallet Identity-Provider Compromise
- ENS DAO delegation-concentration governance dynamics — delegate voting-weight accumulation and proposal-outcome influence — Ethereum — 2023–2024 — OAK-T16.003 Delegation-Cluster Vote Takeover