defi
Arbitrum's Security Council used privileged powers to transfer 30,766 ETH out of the Kelp DAO exploiter's wallet. The move recovered funds — and revived an old question: how decentralized is Layer 2 really?
defi
3F — built on Morpho lending rails — closes a $4M angel round backed by DeFi insiders to ship one-click leveraged exposure to tokenized real-world assets.
defi
After the Kelp DAO exploit triggered a $6.6B withdrawal in 24 hours, Aave's USDT, USDC and WETH markets are fully utilized. TVL has fallen from $25B to $17.5B.
Funding
Codenamed 'Timeless,' Kalshi's new product uses the CFTC margin-trading license it recently won. Launch event April 27 in New York; first contracts tied to Bitcoin and other major tokens.
defi
Polymarket's V2 exchange launches today with one hour of scheduled downtime at 11:00 UTC. The upgrade introduces pUSD — a new 1:1 USDC-backed collateral — retires USDC.e, cancels all open V1 limit orders, and ships behind a $5M bug bounty and audits from Cantina and Quantstamp.
defi
Two incidents — Drift on April 1 and Kelp on April 19 — account for most of it, but a dozen smaller exploits filled the gaps.
defi
A bridge misconfiguration dragged $13.2B out of DeFi in 48 hours. Now the two parties are blaming each other over who chose the single verifier.
Web3 Security
An explicit 1-of-1 DVN configuration turned a sophisticated RPC infrastructure attack into a $292M systemic asset release event. Full on-chain forensics and root cause analysis.
Web3 Security
The Kelp DAO exploit didn't stop at Kelp. It left Aave with $196M in bad debt and wiped $6B from its TVL — exposing how liquid restaking tokens can trigger cascading failures across DeFi's most critical lending markets.
Web3 Security
A compromised third-party AI tool gave attackers access to Vercel's internal systems and customer environment variables — sending Web3 teams scrambling to rotate API keys and exposing a new class of supply chain risk hiding in plain sight.
Funding
Nava raised $8.3M in seed funding led by Polychain and Archetype to build a blockchain verification layer for AI-powered financial agents — addressing $2.1B in unauthorized AI transactions in 2025.
defi
Kelp DAO lost $292M in 2026's biggest DeFi hack after an attacker manipulated LayerZero's cross-chain bridge. Aave, Lido, and Ethena all froze related markets within hours as contagion spread across 20+ chains.