Wave of Exploits Drains Millions Across Networks

The digital asset market faced a severe security stress test as a rapid succession of exploits targeted various protocols, exchanges, and vesting contracts within a 24-hour window. The incidents ranged from compromised supply accounting mechanisms to smart contract arithmetic flaws.

Multi-Chain Vulnerabilities

The most financially damaging of the recent breaches struck Gamdom, resulting in reported losses of approximately $4.3 million. The attacker extracted roughly $2.2 million across EVM-compatible blockchains, including Ethereum, BNB Chain, Polygon, Arbitrum, and Optimism. Additional assets were siphoned from Solana, TRON, and Bitcoin. The stolen funds were subsequently bridged and swapped through services like Hyperliquid and THORChain. While Gamdom initially suspected a server disk failure, investigators later identified an unauthorized connection to an automation server.

Meanwhile, the privacy-focused cryptocurrency Pirate Chain suffered an exploit targeting its Ironwood turnstile, a component responsible for tracking token supply across network layers. The breach compromised the accuracy of the protocol's accounting records. In response, developers rolled the blockchain back to its October 14 state and requested that exchanges temporarily suspend deposits and withdrawals.

Accounting Flaws and Protocol Closures

A separate attack drained $86,000 from UNCX Network, a platform utilized by developers to lock tokens and manage vesting schedules. Security researchers at Exvul traced the October 14 breach to an accounting flaw in the protocol's shared VestingManager contract.

According to blockchain security firm Blockaid, “The attacker created vesting positions in the shared token pool, released a large one, donated tokens in, then cancelled a topped-up vest so a tiny leftover vest could withdraw other users’ locked tokens.” The flawed arithmetic allowed the attacker to claim assets belonging to other users without requiring stolen private keys.

While the theft impacted ten tokens on networks including Ethereum, Base, BNB Chain, and Robinhood Chain, Blockaid noted that approximately $3.25 million was still sitting inside the affected smart contract when the attack was identified. UNCX responded by blocking new vesting positions in the impacted contract and raising creation fees above 1,000 ETH to halt ordinary activity while investigating alongside law enforcement and SEAL 911.

The recent string of vulnerabilities also claimed a permanent casualty. Demex, a decentralized cross-chain derivatives exchange, announced it will permanently shut down following a September 25, 2026, bridge exploit that cost the platform $192,000. Citing insufficient traction and ongoing cyberattacks, the team plans to launch a withdrawal page by the end of October. Users will have a 30-day window to dispute settlement calculations and 90 days to withdraw funds, which will be calculated based on prices when the blockchain halted.

The concentrated wave of attacks underscores a broader escalation in blockchain security breaches. According to data from DeFiLlama, the total value hacked in 2026 has already surpassed $1.195 billion. TRM Labs reported a record 207 crypto hacks during the first half of 2026, more than double the 85 incidents recorded in the same period of 2025. Smart contract exploits accounted for 125 of those incidents, with TRM Labs noting that the North Korea-linked hacking group Kimsuky is reportedly integrating artificial intelligence tools into its cyber operations.