Hederaネットワーク上の分散型レンディングプロトコルであるBonzo Lendが、サードパーティのSupraオラクルコントラクトの脆弱性を突かれ、約905万ドルを喪失した。
攻撃者は価値の低いSAUCEトークンを250個預け入れ、操作された価格更新を送信することでその価値を不正に吊り上げた。これにより、攻撃者は663万USDCと3452万wrapped HBAR（HBAR価格0.06998ドル換算で約905万ドル相当）を借り入れることに成功した。
事件発生時には別のウォレットでも約100万ドル相当の資産が借り入れられた。このウォレットの所有者はその後Discordを通じてBonzo側に連絡を取り、自身をホワイトハッカーであると名乗り、資金を返還する意向を示している。
この影響でHederaのネットワーク全体における預かり資産残高（TVL）は24時間で約40％減少し、2570万ドルまで落ち込んだ。Bonzo Lend単体のTVLは、同期間で77％減少した。
AIによるレポート AIによって生成された画像
Allbridge Core has paused its cross-chain stablecoin protocol after losing roughly 1.65 million dollars in a flash loan attack on its Solana liquidity pools. The attacker used a 1.12 million dollar flash loan from Kamino to manipulate pool ratios before withdrawing assets and bridging them to Ethereum.
The Bonk DAO wallet on Solana was drained of roughly 20 million dollars worth of tokens in a malicious governance attack. The price of BONK fell about 7 percent following the incident.
AIによるレポート
Decentralized finance recorded far fewer losses in recent years, according to new industry data. Total incidents dropped from $2.62 billion in 2022 to $534 million in 2024. A single November 2025 exploit across six networks illustrated the remaining threat.
Jaredfromsubway.eth, a prominent Ethereum MEV bot, lost more than $7.5 million after approving attacker-controlled contracts that enabled an allowance drain. The incident occurred through a series of fake trading routes set up over several weeks. Security firm Blockaid identified the exploit as targeting the bot's automated approval logic rather than private keys or protocol flaws.
AIによるレポート
SecondFi, the Cardano wallet formerly known as Yoroi, confirmed losses of 16 million ADA worth about 2.4 million dollars from 374 user wallets in three attacks. The firm secured an additional 129 million ADA before further drains occurred. A flaw in its proprietary wallet generation software caused the breach.
Taiko, an Ethereum layer-2 network, halted block production after an attacker exploited its bridge to steal about $1.7 million. The team urged users to withdraw funds from all bridges on the network.
AIによるレポート
Thorchain suspended trading for about 12 hours after blockchain researcher ZachXBT flagged a suspected $10 million exploit across multiple networks. The liquidity protocol took the action following the alert on a potential breach. Its native RUNE token fell by double digits in response.