Incidents by month
Crypto hacks and exploits in August 2026
15 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.
Incidents (15)
- Tectonic (Aug 2026): $120.4M — 2026-08-30 · loss $120.4M · OAK-T7.003 Cross-Chain Bridge Laundering
- OAK field-collects a live fake-recruiter lure to check its own T15.001 page against a real specimen — and finds the page wrong on two points: the trigger is npm prepare, and the repository carries no payload at all — OnChainAttack, first-party collection — 2026-08-27 — 2026-08-27 · OAK-T11.009 Trader-Tooling Supply-Chain Compromise targeting `.env` Private Keys
- Moonwell exploit (Aug 2026): $8.7M — 2026-08-27 · loss $8.7M · OAK-T9.001 Oracle Price Manipulation
- Term Finance exploit (Aug 2026): $8.5M — 2026-08-23 · loss $8.5M · OAK-T16.001 Vote Takeover via Flash-Loan
- TAC (Aug 2026) — 2026-08-22 · OAK-T7.003 Cross-Chain Bridge Laundering
- The Sandbox exploit (Aug 2026): $675K — 2026-08-22 · loss $675K · OAK-T10.006 Cross-Chain Governance Relay Attack
- BounceBit exploit (Aug 2026): $3.3M — 2026-08-19 · loss $3.3M · OAK-T9.004 Access-Control Misconfiguration
- Allbridge exploit (Aug 2026): $190K — 2026-08-19 · loss $190K · OAK-T10.002 Message-Verification Bypass
- Maya Protocol exploit (Aug 2026): $1.7M — 2026-08-18 · loss $1.7M · OAK-T10.002 Message-Verification Bypass
- Repeat-victim whale hack (Aug 2026): $25.6M — 2026-08-12 · loss $25.6M · OAK-T4.001 Permit2 Signature-Based Authority Misuse
- Harmony exploit (Aug 2026) — 2026-08-12 · OAK-T10.001 Validator / Signer Key Compromise
- USM exploit (Aug 2026): $136K — 2026-08-10 · loss $136K · OAK-T9.001 Oracle Price Manipulation
- Oraichain exploit (Aug 2026) — 2026-08-09 · OAK-T10.002 Message-Verification Bypass
- Coreum–XRPL bridge exploit (Aug 2026): $200K — 2026-08-09 · loss $200K · OAK-T10.001 Validator / Signer Key Compromise
- Coinsbuy hack (Aug 2026): $7.9M — 2026-08-09 · loss $7.9M · OAK-T11.011 Multi-chain Key-store Co-location