In the previous 24 hours alone, three totally different sorts of exploits shook the crypto group.
Initially, Pirate Chain (ARRR), a personal, zero-information cryptocurrency whose clear layer had been exploited. Of this, the Ironwood turnstile used for provide accounting turned the predominant goal.
This element seems to be chargeable for monitoring token provide as funds transfer between totally different layers of the community. And now the vulnerability could have compromised the accuracy of those accounting data, prompting builders to roll again the blockchain to the way it was on the 14th of October.
As a step of security measure, the team noted on X,
All exchanges have been notified and are briefly suspending deposits and withdrawals.
Users have additionally been suggested to keep away from sending or receiving $ARRR and chorus from utilizing their wallets till additional discover.
The Gamdom multidollar hack
Next, the Gamdom exploit resulted in roughly $4.3 million in reported losses throughout a number of blockchain networks.
In this, round $2.2 million was stolen throughout EVM-appropriate networks, together with Ethereum [ETH], BNB Chain [BNB], Polygon, Arbitrum, and Optimism, whereas one other $965,000 was taken on Solana [SOL]. The attacker additionally reportedly extracted $375,000 from TRON and $668,000 in Bitcoin [BTC].
Here, the transaction path exhibits funds being moved via attacker-managed wallets, swapped between tokens, bridged throughout chains, and routed via providers resembling THORChain and Hyperliquid.
That mentioned, Gamdom initially reported detecting a possible disk failure on a server earlier than discovering an unauthorized connection to an automation server, prompting additional investigation. However, the precise assault methodology and remaining losses stay topic to affirmation.
What led Demex to close down utterly?
Lastly, Demex, a decentralized layer-2 cross-chain derivatives trade and buying and selling protocol, revealed its permanent shutdown. This adopted the 25 September 2026 bridge exploit, which induced roughly $192,000 in losses.
Though the group will cowl the shortfall, it should not function the decentralized trade safely amid cyberattacks and inadequate traction.
In truth, by the finish of October, Demex plans to launch a withdrawal web page the place customers can assessment their remaining balances, calculated utilizing costs at the time the blockchain halted. For this, customers can have 30 days to dispute settlement calculations, adopted by a 90-day withdrawal window.
The rip-off pandemic is spreading
This comes as the complete worth hacked in 2026 has to date crossed $1.195 billion, in keeping with DeFiLlama knowledge.
Meanwhile, TRM Labs additionally reported a document 207 crypto hacks in H1 2026, greater than double the 85 incidents recorded in H1 2025, with 126 assaults occurring in Q2.
Of this, the good contract exploits accounted for 125 incidents, whereas compromised keys, custody techniques, and signing infrastructure drove most stolen-worth losses. All this occurred amidst North Korea-linked hacking group Kimsuky’s reportedly integrating AI tools into its cyber operations.
Final Summary
- Pirate Chain (ARRR), Gamdom, and Demex all bought exploited in the previous day.
- 2026 has already misplaced a complete of $1.195 billion in worth to hacks and scams.
