In the previous 24 hours alone, three completely different sorts of exploits shook the crypto group.
Initially, Pirate Chain (ARRR), a personal, zero-information cryptocurrency whose clear layer had been exploited. Of this, the Ironwood turnstile used for provide accounting grew to become the primary goal.
This part seems to be accountable for monitoring token provide as funds transfer between completely different layers of the community. And now the vulnerability might have compromised the accuracy of those accounting data, prompting builders to roll again the blockchain to the way it was on the 14th of October.
As a step of security measure, the staff famous on X,
All exchanges have been notified and are quickly suspending deposits and withdrawals.
Users have additionally been suggested to keep away from sending or receiving $ARRR and chorus from utilizing their wallets till additional discover.
The Gamdom multidollar hack
Next, the Gamdom exploit resulted in roughly $4.3 million in reported losses throughout a number of blockchain networks.
In this, round $2.2 million was stolen throughout EVM-suitable networks, together with Ethereum [ETH], BNB Chain [BNB], Polygon, Arbitrum, and Optimism, whereas one other $965,000 was taken on Solana [SOL]. The attacker additionally reportedly extracted $375,000 from TRON and $668,000 in Bitcoin [BTC].
Here, the transaction path exhibits funds being moved by means of attacker-managed wallets, swapped between tokens, bridged throughout chains, and routed by means of companies equivalent to THORChain and (*24*).
That mentioned, Gamdom initially reported detecting a possible disk failure on a server earlier than discovering an unauthorized connection to an automation server, prompting additional investigation. However, the actual assault methodology and last losses stay topic to affirmation.
What led Demex to close down utterly?
Lastly, Demex, a decentralized layer-2 cross-chain derivatives alternate and buying and selling protocol, revealed its everlasting shutdown. This adopted the 25 September 2026 bridge exploit, which triggered roughly $192,000 in losses.
Though the staff will cowl the shortfall, it’s going to now not function the decentralized alternate safely amid cyberattacks and inadequate traction.
In reality, by the finish of October, Demex plans to launch a withdrawal web page the place customers can overview their last balances, calculated utilizing costs at the time the blockchain halted. For this, customers could have 30 days to dispute settlement calculations, adopted by a 90-day withdrawal window.
The rip-off pandemic is spreading
This comes as the complete worth hacked in 2026 has thus far crossed $1.195 billion, in accordance with DeFiLlama knowledge.
(*3*)Meanwhile, TRM Labs additionally reported a document 207 crypto hacks in H1 2026, greater than double the 85 incidents recorded in H1 2025, with 126 assaults occurring in Q2.
Of this, the sensible contract exploits accounted for 125 incidents, whereas compromised keys, custody techniques, and signing infrastructure drove most stolen-worth losses. All this occurred amidst North Korea-linked hacking group Kimsuky’s reportedly integrating AI instruments into its cyber operations.
Final Summary
- Pirate Chain (ARRR), Gamdom, and Demex all bought exploited in the previous day.
- 2026 has already misplaced a complete of $1.195 billion in worth to hacks and scams.
