How They Broke In: Attack Types

Stolen keys, flash-loan governance takeovers, and oracle manipulation each drained nine figures.

The top 3

  1. Validator Key Theft: Ronin lost $624M after signer keys were phished via a fake job offer sent to an engineer.
  2. Flash-Loan Governance Attack: Beanstalk lost $182M in April 2022 when a borrowed super-majority passed a self-dealing vote in seconds.
  3. Oracle Price Manipulation: Mango Markets bled $117M after a trader pumped MNGO to borrow against inflated collateral.

Sources

Open the full topic