Dren Hima

In most of the largest oracle exploits, the oracle reported its market accurately after the attacker had moved that market. A lending protocol stays safe only while the cheapest way to create and hold a harmful price costs more than the value that price can unlock. The 2020 bZx exploit would have paid the same […]...

Smart contract exploits cost $905.4 million across 122 protocols during 2025. Cetus lost $223 million and Balancer roughly $128 million, and in both cases the broken code sat outside the scope of the audits covering those protocols. Automation is fast and partial, and the best three-tool combination in a 2025 evaluation caught 76.78% of annotated […]...

MEV didn’t disappear, it migrated. Every public-mempool cleanup pushed extraction into private order flow, builder markets, or spam, so the rent just changed hands. Private routing helps and isn’t a fix. A Dec 2025 study found 3,126 privately-routed victims sandwiched in two months for $409k, and ~40-54% of victims then migrate to private routing anyway. […]...

Solstice’s fundamentals are real: USX is overcollateralized with on-chain proof-of-solvency, eUSX claims a three-year positive-return record, contracts cleared three Halborn audits, and Anchorage Digital plus 20-plus institutions are allocated, yet its December 2025 token sale failed to clear a $4M soft cap. The Season 1 SLX claim is what detonated: a 0.075 SOL ($7) fee […]...

The biggest losses of 2023-2026 broke no cryptography. Bybit’s $1.5bn drain ran through a sound multisig and clean contracts; the attacker only changed what the signers saw. Four mechanisms recur and braid together: poisoned software supply chains, tampered signing interfaces, laundered authority via approvals and off-chain signatures, and privileged paths hidden in contracts, proxies and [&...

The permissioned coordination ledger (WFP’s Building Blocks) scaled into the hundreds of millions, and its strongest payoff is preventing duplicate assistance, while the public-chain stablecoin rail that got the headlines (UNHCR on Stellar) has moved $4.6m since 2022 and remains a pilot. Stablecoins earn their place narrowly, in corridors where banking is absent, illegal, dangerous, [&hellip...

Web3 changes the plumbing of space financing (ticket size, settlement, incentive distribution) without touching the economics. Space stays capital-intensive and dependent on spectrum, launch access, and government customers. The scale gap is structural. PIF managing north of $900bn and negotiating a ~$5bn SpaceX anchor sits against MoonDAO’s $184,000 deployed across all of 2025, roughly five...

Prediction markets are increasingly regulated, but the law is still unsettled, and the Van Dyke case made insider-trading-style enforcement a real risk....

Any unsolicited token in your wallet should be treated as hostile until proven otherwise. A dedicated burner wallet plus a hardware device is the baseline setup for airdrop farming, not a luxury. The most expensive mistake in airdrops is approving unlimited spending on a contract you didn’t read. Real airdrops never ask for your seed […]...