Incidents by month

Crypto hacks and exploits in September 2025

Name: OAK — OnChain Attack Knowledge Dataset
License: https://creativecommons.org/licenses/by-sa/4.0/
Keywords: on-chain attacks, smart contract exploits, crypto laundering, threat actors, taxonomy

6 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.

Incidents (6)

SBI Crypto mining-pool drain (Sep 2025): $21M — 2025-09-24 · loss $21M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
UXLINK multisig delegate-call hijack hack (Sep 2025): $44M — 2025-09-22 · loss $44M · OAK-T11.002 Wallet-Software Distribution Compromise
Shibarium bridge validator-key + flash-loan-amplified PoS-bridge exploit — Ethereum ↔ Shibarium — 2025-09-12 — 2025-09-12 · loss $2.3M · OAK-T10.001 Validator / Signer Key Compromise
SSV Network correlated mass-slashing event — Ethereum Beacon Chain — 2025-09-10 — 2025-09-10 · loss $50,000 · OAK-T14.001 Slashing-Condition Exploit
SwissBorg SOL-Earn third-party-API supply-chain compromise — Solana — 2025-09-08 — 2025-09-08 · loss $41M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
ERC-4337 EntryPoint griefing-vector responsible disclosure (TrustSec / HackenProof / Ethereum Foundation) — coordinated disclosure 2025-09 → patched in v0.9 — 2025 — loss $0 · OAK-T13.001 Paymaster Compromise