ChainBleed — live web3 threat intelligence

ChainBleedv0.1 · open intel

▰ BLEED MAP · LIVE NEURAL FEED

Each node is a chain. Edges connect chains by adjacency of attack surface. Travelling pulses represent fresh attack signals propagating across the network. Hot nodes (red) bled in the last 7 days. Hover any node to isolate its links.

Chains tracked

24

Bleeding (7d)

0

Σ incidents

1,144

Σ losses

$25.66B

24H

$0

0 hits

7D

$0

0 hits

30D

$28.83M

20 hits · top MULTI

SYNC · 2026-05-16 04:19:39 UTC

NODE = CHAIN · EDGE = ADJACENCY · TRAVELING DOT = LIVE ATTACK SIGNAL · HOVER TO ISOLATE dormant warm bleeding

Showing 1–100 of 2,764 incidents · page 1/28 · window ALL

All-time in DB: 2,764 · bytecode-catchable all-time: 1,499

Date

Chain

Target / Technique

Bug Class

$ Loss

Verdict

Bridge-Minter Fake-Mint Exploit (wADS)

Cross-Chain Router Exploit (multi-chain drain)

BSC token contract exploit (vector undisclosed)

ShapeShift FOX Colony (Colony Network)

executeMetaTransaction → resolver-repoint via setTarget → delegatecall drain

AUDIT-CATCHABLE

Transit Finance

Contract Vulnerability

TAC Cross-Chain Layer (TON Side)

Contract Vulnerability

TAC Cross-Chain Layer

TON-side bridge vulnerability in native Jetton bridging path

Transit Finance

Deprecated Smart Contract Exploit

BSC token contract exploit (vector undisclosed)

Uniswap V4 hook-contract logic exploit

Contract Vulnerability

Contract Vulnerability

Acces Control Exploit

Uninitialized Proxy Exploit

Huma Finance V1 (deprecated)

refreshAccount() unconditional GoodStanding state flip → unauthorized drawdown

AUDIT-CATCHABLE

Roaring Kitty X Account

Contract Vulnerability

Contract Vulnerability

Roaring Kitty X Account → $RKC memecoin pump-dump

X account takeover → coordinated memecoin pump-and-dump on Pump.fun

social-engineering

Whitelisted Address Impersonation

Contract Vulnerability

Unprotected Initializer Exploit

Rug pull / exit scam (X account deleted, site offline)

Contract Vulnerability

Forged RFQ Orders

AUDIT-CATCHABLE

Contract Vulnerability

Improper Access Control Exploit

Flash Loan Exploit

Flashloan Exploit

BSC token contract exploit (vector undisclosed)

BSC token contract exploit (likely LBP bonding-curve manipulation)

Business Logic Vulnerability

Fake Bisq V1 Client Hack

Oracle Price Manipulation

Wasabi Protocol

Wasabi Protocol

Private Key Leakage

Admin Key Compromised

Aftermath Perps

Sweat Foundation

Aftermath Finance

Contract Vulnerability

Sweat Foundation

Contract Vulnerability

Private Key Leakage

Commons Bridge Exploit

Sweat Foundation

Refund_first & Refund_second Logic Exploit

Aftermath Perps

Fee-Accounting Logic Flaw

Multicall yvETH Approval Abuse (victim 0x9828)

Approval-drainer via multicall aggregator (phishing pattern)

Reentrancy — classic call-before-state-update

Price Manipulation

Contract Vulnerability

Flashloan Exploit

Access Control Exploit

Unverified Contract 0x2990A16D

Stale approval drain on unverified contract

Singularity Finance

Singularity Finance

Contract Vulnerability

Contract Vulnerability

GatewayEVM Contracts Exploit

Singularity Finance

Oracle Misconfiguration Exploit

Contract Vulnerability

Zero-Day Bug & DDoS Exploit

Deprecated V2 Rewards Contract

Access Control Vulnerability

Fake Bridge Address

Contract Vulnerability

Incomplete EIP-712 Signature Coverage

Contract Vulnerability

Flawed Quoting Logic

Private Key Leakage

Admin Key Compromised

Thetanuts Finance

Contract Vulnerability

Thetanuts Finance

Contract Vulnerability

borrowFrom Spoof Attack

Thetanuts Finance

First Depositor Attack

Custom Aave Rebalancer

Contract Vulnerability

Supply Chain Attack

DNS registrar for eth.limo

Infrastructure-level attack

LayerZero OFT bridge exploit

Kelp DAO rsETH Bridge

Contract Vulnerability

Hot Wallet Compromise

Slippage Protection Logic Flaw

Fake Collateral Exploit

Hot wallet hack

Contract Vulnerability

Deferred LP Burn Exploit

Supply-chain attack

ChainBleed — live web3 threat intelligence