Skip to content
~/drains.watch_
Soon
← Tags·Other

Malware

2 incidents, 0 live. 136 days since the last new one.

1 drains in the last 12 months

1 drains in the last 12 months

NovDecJanFebMarAprMayJunJulAugSepOct
MonWedFri
Critical 4 · High 3 · Med 2 · Low 1 · Update ½ Less More

Follow this tag

Past

June 2026 1

  • Critical◐Partly contained

    Humanity Protocol loses $36M after malware on one developer machine exposes hot-wallet and Safe keys

    On 8 June 2026 an attacker used private keys taken from a single malware-infected developer machine to seize Humanity Protocol's admin hot wallet and its Safe multisigs on Ethereum (three of six keys) and BNB Chain (three of five). They drained about 141M H tokens, used malicious bridge upgrades to mint hundreds of millions more and sold them, a loss of more than $36M; H fell about 89% from its high. The team halted bridge deposits and withdrawals and told users not to touch the bridge or liquidity pools.

    Humanity Protocol (H token) bridges and treasury·Ethereum, BNB Chain·$36M stolen·Since Jun 8, 2026·

May 2025 1

  • Medium✕Still activeAI · AI lure

    Deepfake Zoom calls of Polygon's co-founder push malware to startup founders from a hijacked Telegram account

    On 13 May 2025 Polygon co-founder Sandeep Nailwal warned that attackers had taken over the Telegram account of the head of Polygon Ventures and were messaging startup founders in its network. Targets were invited to Zoom calls showing AI-generated video of Nailwal and other team members with no audio, and were urged to install an 'SDK' to fix the sound, which would infect their computers. No losses were reported. Do not install software during a call, even when the people on screen look like contacts you know.

    Startup founders in Polygon's investment network·Multiple EVM chains·Since May 13, 2025·

Brief for your AI


Get notified about new drains

Follow every new drain and update in your feed reader, Slack, Discord or Telegram RSS bot:

Only follow a chain or a method you care about: every tag has its own feed at /t/<tag>/feed.xml.

Copied