‘Median hack size’ declines despite 3 DeFi exploits in 24 hours – Here’s why!

Given how far more subtle the exploits have turn into, 2026 can undoubtedly be known as a 12 months of exploits. Practically 5 completely different exploits have attracted consideration within the final day alone, a few of that are talked about under. 

Platforms and tokens compromised

Web3 safety agency TenArmor first reported an incident affecting FCOW, a token deployed on BNB Good Chain (BSC).

An attacker allegedly exploited a vulnerability, inflicting an estimated lack of $61,300. TenArmor recognized the suspicious on-chain transaction, permitting researchers to hint the stolen funds.

Although the particular exploit methodology has not but been made public, the incident underscores the continued dangers going through decentralized finance (DeFi) initiatives on BSC. 

Moreover, DefiTuna revealed that an attacker had taken benefit of its lending swimming pools. The assault precipitated an estimated $580,000 loss and left its USDC pool with the same deficit.

The investigation remained ongoing. Nonetheless, the staff mentioned it had recognized the assault vector and launched safeguards in opposition to additional exploitation.

Then, according to PeckShield, a blockchain safety firm, Cascade was exploited, which affected its CLS vault, permitting person funds price about 1.34 million USDC to be stolen.

The warning claims that the attacker swiftly transferred the stolen property between a number of blockchains. This was carried out by bridging the funds from Arbitrum to Solana [SOL] earlier than transferring them to Ethereum [ETH] through Relay Protocol and reworking them into DAI within the course of.

Funds laundering

This isn’t all, although, as blockchain safety researchers have found that the attacker answerable for the Resolv Labs exploit, who stole about $25.9 million in March, has resumed their actions. The exploiter has moved 580 ETH ($1.09 million) in the previous couple of hours and is actively utilizing cryptocurrency mixing providers to channel the cash. 

Lastly, the pockets that lawfully bought 4.426 trillion BONK, or roughly $21.2 million, from the BONK treasury has began promoting off its holdings.

The handle has despatched 1.19 trillion BONK ($4.11 million) to Binance [BNB], suggesting a attainable sale. The pockets at present accommodates about 3.2 trillion BONK ($10.85 million), regardless of the transfers.

Naturally, this has raised issues that extra gross sales and deposits could quickly enhance promoting stress on the token.

2026 vs. 2025

Curiously, though the frequency of assaults elevated, DeFiLlama reported that general losses fell sharply to $1 billion as of July 2026. That is lower than half of the $2.135 billion that was stolen in the identical timeframe in 2025. 

Actually, Haseeb Qureshi, Managing Accomplice at Dragonfly, additionally believes that safety issues have truly been downplayed when he mentioned, 

Median hack measurement by 12 months can also be declining, displaying that we’re shifting extra towards smaller hacks of smaller protocols.

Remaining Abstract

• $61,300, $580,000, and 1.34 million USDC have been misplaced from the above three exploits within the simply previous 24 hours.
• Regardless of the rise in assaults in 2026, 2025 nonetheless stays the 12 months with most exploits.