ChainBleed — live web3 threat intelligence

ChainBleedv0.1 · open intel

▰ BLEED MAP · LIVE NEURAL FEED

Each node is a chain. Edges connect chains by adjacency of attack surface. Travelling pulses represent fresh attack signals propagating across the network. Hot nodes (red) bled in the last 7 days. Hover any node to isolate its links.

Chains tracked

24

Bleeding (7d)

0

Σ incidents

1,144

Σ losses

$25.66B

24H

$0

0 hits

7D

$0

0 hits

30D

$22.72M

15 hits · top MULTI

SYNC · 2026-05-16 04:19:39 UTC

NODE = CHAIN · EDGE = ADJACENCY · TRAVELING DOT = LIVE ATTACK SIGNAL · HOVER TO ISOLATE dormant warm bleeding

WINDOW

CHAIN

ALLETH359BSC295MULTI83ARB75BITCOI74SOL71BASE43POLY36AVAX25SUI16

BUG CLASS

ALLLOGIC515PRIVATE-KEY452RUG341FLASHLOAN197ORACLE168PHISHING129INFRASTRUCTURE113ACCESS-CONTROL96REENTRANCY77SOCIAL-ENGINEERING29

TAGS

BYTECODE-CATCHABLE1499AI-SCANNABLE1498

▰ FILTER ACTIVEBugs a modern AI-driven scanner — decompiler + symbolic execution + LLM semantic analysis + RPC state introspection — could realistically flag. Superset of BYTECODE-CATCHABLE; also covers on-chain configuration issues (oracle wiring, role assignments, admin parameters) invisible to pure bytecode pattern matching.

Showing 1–100 of 1,498 incidents · page 1/15 · window ALL · tag ai-scannable

All-time in DB: 2,764 · bytecode-catchable all-time: 1,499

Date

Chain

Target / Technique

Bug Class

$ Loss

Verdict

Cross-Chain Router Exploit (multi-chain drain)

BSC token contract exploit (vector undisclosed)

ShapeShift FOX Colony (Colony Network)

executeMetaTransaction → resolver-repoint via setTarget → delegatecall drain

AUDIT-CATCHABLE

Transit Finance

Contract Vulnerability

TAC Cross-Chain Layer (TON Side)

Contract Vulnerability

Transit Finance

Deprecated Smart Contract Exploit

Uniswap V4 hook-contract logic exploit

Contract Vulnerability

Contract Vulnerability

Acces Control Exploit

Uninitialized Proxy Exploit

Huma Finance V1 (deprecated)

refreshAccount() unconditional GoodStanding state flip → unauthorized drawdown

AUDIT-CATCHABLE

Contract Vulnerability

Contract Vulnerability

Whitelisted Address Impersonation

Contract Vulnerability

Unprotected Initializer Exploit

Rug pull / exit scam (X account deleted, site offline)

Contract Vulnerability

Forged RFQ Orders

AUDIT-CATCHABLE

Contract Vulnerability

Improper Access Control Exploit

Flash Loan Exploit

Flashloan Exploit

BSC token contract exploit (vector undisclosed)

BSC token contract exploit (likely LBP bonding-curve manipulation)

Business Logic Vulnerability

Fake Bisq V1 Client Hack

Oracle Price Manipulation

Aftermath Perps

Aftermath Finance

Contract Vulnerability

Commons Bridge Exploit

Sweat Foundation

Refund_first & Refund_second Logic Exploit

Aftermath Perps

Fee-Accounting Logic Flaw

Reentrancy — classic call-before-state-update

Price Manipulation

Contract Vulnerability

Flashloan Exploit

Access Control Exploit

Singularity Finance

Singularity Finance

Contract Vulnerability

Contract Vulnerability

GatewayEVM Contracts Exploit

Singularity Finance

Oracle Misconfiguration Exploit

Contract Vulnerability

Zero-Day Bug & DDoS Exploit

Deprecated V2 Rewards Contract

Access Control Vulnerability

Fake Bridge Address

Contract Vulnerability

Incomplete EIP-712 Signature Coverage

Contract Vulnerability

Flawed Quoting Logic

Contract Vulnerability

Thetanuts Finance

Contract Vulnerability

borrowFrom Spoof Attack

Thetanuts Finance

First Depositor Attack

Custom Aave Rebalancer

Contract Vulnerability

LayerZero OFT bridge exploit

Contract Vulnerability

Slippage Protection Logic Flaw

Fake Collateral Exploit

Contract Vulnerability

Deferred LP Burn Exploit

Forged Cross-Chain State Proof

Donate Negative Amounts Hack

BurnAddress Accounting Exploit

Fake State Proof

SubQuery Network

Acces Control Exploit

Contract Vulnerability

Acces Control Exploit

Contract Vulnerability

Flash Loan Reserve Manipulation

Reserve Manipulation Attack

EIP-7702 Victim

Contract Vulnerability

Price Manipulation

LML/USDT staking protocol

Contract Vulnerability

Social Engineering + Governance Exploit

LML/USDT staking protocol

Price Manipulation Attack

Mispricing arbitrage

unknown contract (Stake) on BSC

Oracle Manipulation

Governance Attack

Contract Vulnerability

Flashloan Pool Shares Exploit

Deposit Inflation Attack

Business Logic Vulnerability

Share Accounting Flaw

Leveraging flash loans for reserve manipulation

Logic Vulnerability

Oracle Message Spoofing

CAPO Oracle Misconfiguration

Contract Vulnerability

PurchaseBundler Exploit

onlySpawnerToken Modifier Hack

ChainBleed — live web3 threat intelligence